One comment was in the wrong line ... some others are new.

Submitted by:
Reviewed by:
PR:

ssl/ssl.h

@@ -242,6 +242,7 @@ typedef struct ssl_session_st
 
 	/* The cert is the certificate used to establish this connection */
 	struct cert_st /* CERT */ *cert;
+	/* XXX should be struct sess_cert_st *sess_cert */
 
 	/* This is the cert for the other end.  On servers, it will be
 	 * the same as cert->x509 */
@@ -562,7 +563,6 @@ struct ssl_st
 	/* client cert? */
 	/* This is used to hold the server certificate used */
 	struct cert_st /* CERT */ *cert;
-	/* XXX should be struct sess_cert_st *sess_cert */
 
 	/* the session_id_context is used to ensure sessions are only reused
 	 * in the appropriate context */

ssl/ssl_locl.h

@@ -275,7 +275,7 @@ typedef struct cert_st
 
 	STACK_OF(X509) *cert_chain; /* XXX should only exist in sess_cert_st */
 
-	int references;
+	int references; /* XXX should only exist in sess_cert_st */
 	} CERT;