From 820bbf1d46f5d3fd30d306e955d2b4d1487c3484 Mon Sep 17 00:00:00 2001 From: Jerome Forissier Date: Tue, 17 Jun 2025 14:10:58 +0200 Subject: [PATCH] doc: cmd: wget: remove erroneous note The note about U-Boot not being able to verify server certificates is false now that WGET_CACERT and WGET_BUILTIN_CACERT have been added. Remove it. Signed-off-by: Jerome Forissier Reviewed-by: Heinrich Schuchardt --- doc/usage/cmd/wget.rst | 7 ------- 1 file changed, 7 deletions(-) diff --git a/doc/usage/cmd/wget.rst b/doc/usage/cmd/wget.rst index 44033aaff39..06df2842549 100644 --- a/doc/usage/cmd/wget.rst +++ b/doc/usage/cmd/wget.rst @@ -185,13 +185,6 @@ TCP Selective Acknowledgments in the legacy network stack can be enabled via CONFIG_PROT_TCP_SACK=y. This will improve the download speed. Selective Acknowledgments are enabled by default with lwIP. -.. note:: - - U-Boot currently has no way to verify certificates for HTTPS. - A place to store the root CA certificates is needed, and then MBed TLS would - need to walk the entire chain. Therefore, man-in-the middle attacks are - possible and HTTPS should not be relied upon for payload authentication. - Return value ------------ -- 2.39.5