Re: [Bug-wget] [PATCH] GnuTLS support in 1.12

[Ludovic Courtès]

Hi,

Micah Cowan <address@hidden> writes:

> Thanks for the patch; in the future, a one-line patch would do better as
> an attachment, or even inlined, to save me the trouble of fetching it
> from a website.

Sure.

> This patch may allow "GnuTLS-supporting" builds, but I doubt that it
> truly supports GnuTLS: I'm not terribly familiar with that area of the
> code, but I was originally informed that the GnuTLS support still lacks
> a very important component: certificate-checking. That is, it may happy
> allow you to connect to illegitimate sites.
>
> GnuTLS is still not officially supported (arguably, we should've removed
> the relevant configure-script options from releases, which appeared
> first in 1.11 I think).

Indeed, it’s unfortunate that the option appears in ‘configure’ without
a sign of warning.

Now, when using OpenSSL, certificates are checked against what?

Thanks,
Ludo’.