From 3512bd4d1ca5946cda44854bf0d526c6c288ad4c Mon Sep 17 00:00:00 2001
From: Ludovic Courtès <ludo@gnu.org>
Date: Sat, 8 Jul 2017 16:39:45 +0200
Subject: gnu: wget: Update comment about test failures.

* gnu/packages/wget.scm (wget)[arguments]: Update comment.
---
 gnu/packages/wget.scm | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

(limited to 'gnu/packages/wget.scm')

diff --git a/gnu/packages/wget.scm b/gnu/packages/wget.scm
index 58a1a4b885..3673ad5cc4 100644
--- a/gnu/packages/wget.scm
+++ b/gnu/packages/wget.scm
@@ -52,9 +52,13 @@
                   (add-before 'check 'disable-https-tests
                     (lambda _
                       ;; XXX: Skip TLS tests, which fail with "The
-                      ;; certificate's owner does not match hostname" for
-                      ;; obscure reasons reported at:
-                      ;; <https://lists.gnu.org/archive/html/bug-wget/2017-06/msg00009.html>.
+                      ;; certificate's owner does not match hostname" as
+                      ;; reported at:
+                      ;; <https://lists.gnu.org/archive/html/bug-wget/2017-07/msg00012.html>.
+                      ;; The problem appears to be due to a change in GnuTLS
+                      ;; 3.5.12, whereby 'gnutls_x509_crt_check_hostname2' no
+                      ;; longer matches IP address against the 'CN' or
+                      ;; 'DNSname' fields of certificates.
                       (substitute* "testenv/Makefile"
                         (("SSL_TESTS=1") ""))
                       #t)))))
-- 
cgit v1.2.3