1 files changed, 2 insertions, 2 deletions

diff --git a/src/lib/libssl/ssl_clnt.c b/src/lib/libssl/ssl_clnt.c
index 4803e35dd2..69221332f5 100644
--- a/src/lib/libssl/ssl_clnt.c
+++ b/src/lib/libssl/ssl_clnt.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_clnt.c,v 1.175 2026/07/15 15:00:17 jsing Exp $ */
+/* $OpenBSD: ssl_clnt.c,v 1.176 2026/08/21 17:15:22 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -893,7 +893,7 @@ ssl3_get_server_hello(SSL *s)
         if (s->s3->hs.our_max_tls_version >= TLS1_2_VERSION &&
             s->s3->hs.negotiated_tls_version < s->s3->hs.our_max_tls_version) {
                 /*
-                 * RFC 8446 section 4.1.3. We must not downgrade if the server
+                 * RFC 9846 section 4.2.3. We must not downgrade if the server
                  * random value contains the TLS 1.2 or TLS 1.1 magical value.
                  */
                 if (!CBS_skip(&server_random,