From a9ed19285a8c0b980a6bea8446787ae27a99c1c9 Mon Sep 17 00:00:00 2001
From: Marc Hartmayer <marc@linux.ibm.com>
Date: Fri, 3 Jul 2026 14:36:13 +0200
Subject: [PATCH] pv: download_first_crl_from_x509: Fix comment
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The comment mentions certificate but it's a certificate revocation
list (CRL). In addition, use 1200 bytes as vector capacity as the
comment says 1200.

Signed-off-by: Marc Hartmayer <marc@linux.ibm.com>
Reviewed-by: Steffen Eiden <seiden@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
---
 rust/pv/src/verify/helper.rs | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rust/pv/src/verify/helper.rs b/rust/pv/src/verify/helper.rs
index 12f3aca3..feb42791 100644
--- a/rust/pv/src/verify/helper.rs
+++ b/rust/pv/src/verify/helper.rs
@@ -323,8 +323,8 @@ pub fn download_first_crl_from_x509(cert: &X509Ref) -> Result<Option<Vec<openssl
     }
 
     for dist_point in x509_dist_points(cert) {
-        // A typical certificate is about 1200 bytes long
-        let mut handle = Easy2::new(Buf(Vec::with_capacity(1500)));
+        // A typical CRL is about 1200 bytes long
+        let mut handle = Easy2::new(Buf(Vec::with_capacity(1200)));
         handle.url(&dist_point)?;
         handle.get(true)?;
         handle.follow_location(true)?;