Note missing functionality from current GnuTLS support.

diff --git a/ChangeLog b/ChangeLog
index 1832ba82c765be3d34a6813e856f040f9ec41d8c..22fe74bab7c32c36535f7576c81c11c980d8dc0c 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,7 @@
+2007-10-03  Micah Cowan  <micah@cowan.name>
+
+       * NEWS: Note missing functionality from GnuTLS support.
+
 2007-09-25  Micah Cowan  <micah@cowan.name>
 
        * configure.in: Remove unnecessary heuristic to generate exeext

diff --git a/NEWS b/NEWS
index 3393be2c54ffd6fafc6bf0245f123ff3400a10cb..ae96c0ea49c836c776fc971968b3332b7fd08273 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -38,10 +38,14 @@ being, Content-Disposition is not used by default, to avoid the extra
 round-trips incurred (must specify "-e contentdisposition=yes"); this
 may change in a future version.
 
-** The GnuTLS library is now also supported for https downloads.
-This is still work-in-progress.  OpenSSL is still used by default; use
---with-ssl=gnutls to build with GnuTLS.  OpenSSL is still required for
-NTLM authorization to work, but this should eventually change.
+** The GnuTLS library is now also experimentally supported for https
+downloads.  This is still work-in-progress.  OpenSSL is still used by
+default; use --with-ssl=gnutls to build with GnuTLS.  OpenSSL is still
+required for NTLM authorization to work, but this should eventually
+change. NOTE: Certificate verification is _not_ currently supported:
+this means that you can currently only use GnuTLS to encrypt
+connections, but _not_ to verify that a host is who it claims to be. Use
+of OpenSSL is suggested until this missing feature is implemented.
 
 ** The new option `--ignore-case' makes Wget ignore case when
 matching files, directories, and wildcards.  This affects the -X, -I,