Add comments on OpenSSL patches

diff --git a/openssl/openssl-0.9.8e-ciscodtls.patch b/openssl/openssl-0.9.8e-ciscodtls.patch
index f3da29a..3e186f2 100644 (file)
--- a/openssl/openssl-0.9.8e-ciscodtls.patch
+++ b/openssl/openssl-0.9.8e-ciscodtls.patch
@@ -1,3 +1,9 @@
+OpenSSL 0.9.8e was the last version of OpenSSL before the final standard 
+(RFC4347). Cisco's version includes a couple of later fixes 
+(modifications to the protocol), but not everything that changed before 
+the final release. This patch contains the changes that Cisco seem to 
+have included.
+
 Index: ssl/d1_clnt.c
 ===================================================================
 RCS file: /home/dwmw2/openssl-cvs/openssl/ssl/d1_clnt.c,v

diff --git a/openssl/openssl-stable-dtls.patch b/openssl/openssl-stable-dtls.patch
index bcaae55..cfb5661 100644 (file)
--- a/openssl/openssl-stable-dtls.patch
+++ b/openssl/openssl-stable-dtls.patch
@@ -1,3 +1,7 @@
+This patch, against OpenSSL 0.9.8h, enables client compatibility with 
+the old version of DTLS which is used by Cisco. You must set the 
+SSL_OP_CISCO_ANYCONNECT option to obtain this behaviour.
+
 Index: ssl/d1_clnt.c
 ===================================================================
 RCS file: /home/dwmw2/openssl-cvs/openssl/ssl/d1_clnt.c,v