From fcc903ee8faa79f7dedb22f05008724ea327bdba Mon Sep 17 00:00:00 2001
From: tb <>
Date: Fri, 21 Aug 2026 17:15:22 +0000
Subject: Change RFC references from 8446 to 9846 and adjust section numbers

with/ok kenjiro
---
 src/lib/libssl/ssl_clnt.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'src/lib/libssl/ssl_clnt.c')

diff --git a/src/lib/libssl/ssl_clnt.c b/src/lib/libssl/ssl_clnt.c
index 4803e35dd2..69221332f5 100644
--- a/src/lib/libssl/ssl_clnt.c
+++ b/src/lib/libssl/ssl_clnt.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssl_clnt.c,v 1.175 2026/07/15 15:00:17 jsing Exp $ */
+/* $OpenBSD: ssl_clnt.c,v 1.176 2026/08/21 17:15:22 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -893,7 +893,7 @@ ssl3_get_server_hello(SSL *s)
 	if (s->s3->hs.our_max_tls_version >= TLS1_2_VERSION &&
 	    s->s3->hs.negotiated_tls_version < s->s3->hs.our_max_tls_version) {
 		/*
-		 * RFC 8446 section 4.1.3. We must not downgrade if the server
+		 * RFC 9846 section 4.2.3. We must not downgrade if the server
 		 * random value contains the TLS 1.2 or TLS 1.1 magical value.
 		 */
 		if (!CBS_skip(&server_random,
-- 
cgit v1.2.3-55-g6feb