[Bug-wget] no post-handshake auth under gnutls

[Nikos Mavrogiannopoulos]

Hi,
 It seems that wget does not enable/use post-handshake authentication
with gnutls when running under TLS1.3.

The enabling of TLS1.3 although transparent for all uses cases, is not
for the use case where the server allows a client to connect without
certificate but requests authentication later after the location of
access is known. Under TLS1.2 this was working via a re-handshake, but
under TLS1.3 a client must enable and perform post-handshake
authentication instead.

A quick and dirty patch to demonstrate how to enable it, is attached.
If you wait until gnutls 3.6.5, there may be a simpler way to enable
it:
https://gitlab.com/gnutls/gnutls/merge_requests/766


More info at:
https://nikmav.blogspot.com/2018/05/gnutls-and-tls-13.html

regards,
Nikos

0001-Enable-post-handshake-auth-under-gnutls-on-TLS1.3.patch
Description: Text Data