Is there any interest in finishing the GnuTLS support in Wget?  The
support currently available in the repository can be tested using
`./configure --with-ssl=gnutls'.  It should enable you to download
from SSL servers using --no-check-certificate, but it is not yet
finished.  Specifically, and in decreasing order of importance:

* Certificate validation appears to be broken.  At least I don't know
  how to make GnuTLS use the certificates installed on my system.  As
  a workaround, you can use --no-check-certificate, but this would
  have to be fixed in order to advocate "GnuTLS support".

* Wget's SSL/TLS-related options have not been implemented, except for
  --no-check-certificate.  Those options were designed for OpenSSL, so
  they don't map to GnuTLS functionality as cleanly, but they should be
  managable -- Wget is not the only program ported from OpenSSL to
  GnuTLS.

* http-ntlm.c uses OpenSSL functions for DES and MD4.  Both should be
  available in libgcrypt, which GnuTLS itself uses.

In other words, the hard part, hooking GnuTLS into Wget, has already
been done.  What remains is one afternoon of work for someone who
understands the GnuTLS API.

Reply via email to