From c2b124aa2c36b5fc792239391e614df7f6f1fb24 Mon Sep 17 00:00:00 2001
From: Alex Gaynor <alex.gaynor@gmail.com>
Date: Sat, 17 Feb 2024 10:46:28 -0500
Subject: [PATCH] Be explicit that aliases are not part of X.509 certificates

---
 openssl/src/x509/mod.rs | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/openssl/src/x509/mod.rs b/openssl/src/x509/mod.rs
index 0d1a500f0..a64524cbe 100644
--- a/openssl/src/x509/mod.rs
+++ b/openssl/src/x509/mod.rs
@@ -651,7 +651,9 @@ impl X509Ref {
 
     /// Returns this certificate's "alias". This field is populated by
     /// OpenSSL in some situations -- specifically OpenSSL will store a
-    /// PKCS#12 `friendlyName` in this field.
+    /// PKCS#12 `friendlyName` in this field. This is not a part of the X.509
+    /// certificate itself, OpenSSL merely attaches it to this structure in
+    /// memory.
     #[corresponds(X509_alias_get0)]
     pub fn alias(&self) -> Option<&[u8]> {
         unsafe {