Here's an improved version of this patch that uses GnuTLS instead of OpenSSL. Note that even when GnuTLS is configured to support a system trust store, lynx never uses it. Instead, you must set the SSL_CERT_FILE environment variable (even though GnuTLS itself doesn't look at that variable, but OpenSSL does). I'm still open to the idea of merging some or all the web clients (e.g. wget, curl, w3m, icecat) into a single file, but I guess that should be done in a separate commit. Mark