[PATCH] doc: cmd: wget: remove erroneous note
Jerome Forissier
jerome.forissier at linaro.org
Tue Jun 17 14:12:26 CEST 2025
Hi Heinrich,
On 6/17/25 14:03, Heinrich Schuchardt wrote:
> On 17.06.25 13:33, Jerome Forissier wrote:
>> The note about U-Boot not being able to verify server certificates is
>> false now that WGET_CACERT and WGET_CACERT_BUILTIN have been added.
>> Remove it.
>
> Thank you for the patch.
>
> I can't find the string WGET_CACERT_BUILTIN in origin/next. Do you mean CONFIG_WGET_BUILTIN_CACERT?
Oops, yes. Fixed in v2.
>
> Otherwise
>
> Reviewed-by: Heinrich Schuchardt <xypron.glpk at gmx.de>
Thanks,
--
Jerome
>
>>
>> Signed-off-by: Jerome Forissier <jerome.forissier at linaro.org>
>> ---
>>
>> doc/usage/cmd/wget.rst | 7 -------
>> 1 file changed, 7 deletions(-)
>>
>> diff --git a/doc/usage/cmd/wget.rst b/doc/usage/cmd/wget.rst
>> index 44033aaff39..06df2842549 100644
>> --- a/doc/usage/cmd/wget.rst
>> +++ b/doc/usage/cmd/wget.rst
>> @@ -185,13 +185,6 @@ TCP Selective Acknowledgments in the legacy network stack can be enabled via
>> CONFIG_PROT_TCP_SACK=y. This will improve the download speed. Selective
>> Acknowledgments are enabled by default with lwIP.
>> -.. note::
>> -
>> - U-Boot currently has no way to verify certificates for HTTPS.
>> - A place to store the root CA certificates is needed, and then MBed TLS would
>> - need to walk the entire chain. Therefore, man-in-the middle attacks are
>> - possible and HTTPS should not be relied upon for payload authentication.
>> -
>> Return value
>> ------------
>>
>
More information about the U-Boot
mailing list