Fix comment.

Clients need not accept CertificateRequest. We don't, have no intention
to, and post-handshake auth now requires an extension.

Change-Id: I2160c89e4a6988a7d743052b588d8aa2598ffabf
Reviewed-on: https://boringssl-review.googlesource.com/21305
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>
Reviewed-by: Steven Valdez <svaldez@google.com>
diff --git a/ssl/handshake.cc b/ssl/handshake.cc
index b54a0bb..d599aec 100644
--- a/ssl/handshake.cc
+++ b/ssl/handshake.cc
@@ -206,8 +206,7 @@
     return 1;
   }
 
-  // Clients must accept NewSessionTicket and CertificateRequest, so allow the
-  // default size.
+  // Clients must accept NewSessionTicket, so allow the default size.
   return kMaxMessageLen;
 }