bugGNU Wget - Bugs: bug #20421, wget: missing a check for Subject...


bug #20421: wget: missing a check for Subject Alternative Name (TLS cert.)

Submitted by:  Noël Köthe <nok>
Submitted on:  Mon Jul 9 21:44:51 2007  
Category: Protocol IssueSeverity: 3 - Normal
Priority: 9 - ImmediateStatus: Fixed
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Closed
Release: 1.10.2Operating System: GNU/Linux
Reproducibility: Every TimeFixed Release: 1.12.1
Planned Release: 1.12.xRegression: None
Work Required: NonePatch Included: Yes

Add a New Comment (Rich MarkupRich Markup):

You are not logged in

Please log in, so followups can be emailed to you.


(Jump to the original submission Jump to the original submission)

Sat Oct 24 23:08:50 2009, comment #8:

Fixed in 38a0105c05ea.

Micah Cowan <micahcowan>
Project Administrator
Sat Sep 12 08:42:39 2009, comment #7:

papers on file

Micah Cowan <micahcowan>
Project Administrator
Thu Jun 11 22:45:06 2009, comment #6:

Petr's patch looks good, just waiting on disclaimer stuff.

Micah Cowan <micahcowan>
Project Administrator
Thu Jun 11 22:21:19 2009, comment #5:

Another example site to test with: https://www.me.etsglobal.org/
(from http://article.gmane.org/gmane.comp.web.wget.general/8727)

Micah Cowan <micahcowan>
Project Administrator
Thu Jun 11 22:15:17 2009, comment #4:

On closer inspection, it doesn't look like that patch has to do with this bug. Filing a separate issue, bug 26786.

Micah Cowan <micahcowan>
Project Administrator
Wed Apr 1 03:34:33 2009, comment #3:

Alternate patch at http://lists.gnu.org/archive/html/bug-wget/2009-03/msg00033.html

Micah Cowan <micahcowan>
Project Administrator
Tue Mar 31 20:34:20 2009, comment #2:

Patches at https://savannah.gnu.org/bugs/?23934

Micah Cowan <micahcowan>
Project Administrator
Fri Jul 25 16:21:28 2008, comment #1:

Duplicate: https://savannah.gnu.org/bugs/?23934

Micah Cowan <micahcowan>
Project Administrator
Mon Jul 9 21:44:51 2007, original submission:


a forwarded bug from http://bugs.debian.org/409938

"When accessing an https server, wget does not appear to check the
Subject Alternative Name field of the server certificate and in cases where wget is connecting to a name listed in that field, wget
declines to connect to the server without the --no-check-certificate option, which should not be necessary in this case.

A similar problem has been fixed in fetchmail, and Debian bug report #201113 may contain useful information."

You can access the mentioned bug via http://bugs.debian.org/201113



Noël Köthe <nok>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by micahcowan (Wrote patches)
  • -unavailable- added by sascha_silbe (wget user)
  • -unavailable- added by jima (interested third party)
  • -unavailable- added by micahcowan (Updated the item)
  • -unavailable- added by nok (Submitted the item)

    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follow 19 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat Oct 24 23:09:48 2009micahcowanFixed ReleaseNone=>1.12.1
    Sat Oct 24 23:08:50 2009micahcowanOpen/ClosedOpen=>Closed
    Sat Oct 24 23:08:49 2009micahcowanStatusReady for Merge=>Fixed
    Wed Sep 23 23:54:52 2009micahcowanStatusInspected=>Ready for Merge
    Sat Sep 12 08:42:39 2009micahcowanPlanned Release1.14=>1.12.x
    Thu Jun 11 22:45:06 2009micahcowanStatusAwaiting Approval=>Inspected
      Planned Release1.12=>1.14
    Tue Mar 31 20:35:11 2009micahcowanCarbon-Copy-=>Added petrp
    Tue Mar 31 20:34:20 2009micahcowanPriority6=>9 - Immediate
      StatusNone=>Awaiting Approval
      Work Required0 - Hours=>None
      Patch IncludedNo=>Yes
    Wed Mar 11 13:51:22 2009sascha_silbeCarbon-Copy-=>Added sascha_silbe
    Tue Jan 13 15:43:56 2009jimaCarbon-Copy-=>Added jima
    Tue Nov 4 01:52:58 2008micahcowanPriority5 - Normal=>6
    Fri Jul 25 16:22:00 2008micahcowanWork Required1 - Days=>0 - Hours
    Fri Jul 20 06:43:08 2007micahcowanPlanned ReleaseNone=>1.12
    Mon Jul 9 22:10:35 2007micahcowanCategoryUser Interface=>Protocol Issue
      Work RequiredNone=>1 - Days

    Back to the top

    Powered by Savane 3.1-cleanup1