bugGNU Wget - Bugs: bug #20421, wget: missing a check for Subject...


bug #20421: wget: missing a check for Subject Alternative Name (TLS cert.)

Submitted by:  Noël Köthe <nok>
Submitted on:  Mon 09 Jul 2007 09:44:51 PM UTC  
Category: Protocol IssueSeverity: 3 - Normal
Priority: 9 - ImmediateStatus: Fixed
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Closed
Release: 1.10.2Operating System: GNU/Linux
Reproducibility: Every TimeFixed Release: 1.12.1
Planned Release: 1.12.xRegression: None
Work Required: NonePatch Included: Yes

Add a New Comment(Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


(Jump to the original submission Jump to the original submission)

Sat 24 Oct 2009 11:08:50 PM UTC, comment #8:

Fixed in 38a0105c05ea.

Micah Cowan <micahcowan>
Sat 12 Sep 2009 08:42:39 AM UTC, comment #7:

papers on file

Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:45:06 PM UTC, comment #6:

Petr's patch looks good, just waiting on disclaimer stuff.

Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:21:19 PM UTC, comment #5:

Another example site to test with: https://www.me.etsglobal.org/
(from http://article.gmane.org/gmane.comp.web.wget.general/8727)

Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:15:17 PM UTC, comment #4:

On closer inspection, it doesn't look like that patch has to do with this bug. Filing a separate issue, bug 26786.

Micah Cowan <micahcowan>
Wed 01 Apr 2009 03:34:33 AM UTC, comment #3:

Alternate patch at http://lists.gnu.org/archive/html/bug-wget/2009-03/msg00033.html

Micah Cowan <micahcowan>
Tue 31 Mar 2009 08:34:20 PM UTC, comment #2:

Patches at https://savannah.gnu.org/bugs/?23934

Micah Cowan <micahcowan>
Fri 25 Jul 2008 04:21:28 PM UTC, comment #1:

Duplicate: https://savannah.gnu.org/bugs/?23934

Micah Cowan <micahcowan>
Mon 09 Jul 2007 09:44:51 PM UTC, original submission:


a forwarded bug from http://bugs.debian.org/409938

"When accessing an https server, wget does not appear to check the
Subject Alternative Name field of the server certificate and in cases where wget is connecting to a name listed in that field, wget
declines to connect to the server without the --no-check-certificate option, which should not be necessary in this case.

A similar problem has been fixed in fetchmail, and Debian bug report #201113 may contain useful information."

You can access the mentioned bug via http://bugs.debian.org/201113



Noël Köthe <nok>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by micahcowan (Wrote patches)
  • -unavailable- added by sascha_silbe (wget user)
  • -unavailable- added by jima (interested third party)
  • -unavailable- added by micahcowan (Updated the item)
  • -unavailable- added by nok (Submitted the item)

    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follow 19 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat 24 Oct 2009 11:09:48 PM UTCmicahcowanFixed ReleaseNone=>1.12.1
    Sat 24 Oct 2009 11:08:50 PM UTCmicahcowanOpen/ClosedOpen=>Closed
    Sat 24 Oct 2009 11:08:49 PM UTCmicahcowanStatusReady for Merge=>Fixed
    Wed 23 Sep 2009 11:54:52 PM UTCmicahcowanStatusInspected=>Ready for Merge
    Sat 12 Sep 2009 08:42:39 AM UTCmicahcowanPlanned Release1.14=>1.12.x
    Thu 11 Jun 2009 10:45:06 PM UTCmicahcowanStatusAwaiting Approval=>Inspected
      Planned Release1.12=>1.14
    Tue 31 Mar 2009 08:35:11 PM UTCmicahcowanCarbon-Copy-=>Added petrp
    Tue 31 Mar 2009 08:34:20 PM UTCmicahcowanPriority6=>9 - Immediate
      StatusNone=>Awaiting Approval
      Work Required0 - Hours=>None
      Patch IncludedNo=>Yes
    Wed 11 Mar 2009 01:51:22 PM UTCsascha_silbeCarbon-Copy-=>Added sascha_silbe
    Tue 13 Jan 2009 03:43:56 PM UTCjimaCarbon-Copy-=>Added jima
    Tue 04 Nov 2008 01:52:58 AM UTCmicahcowanPriority5 - Normal=>6
    Fri 25 Jul 2008 04:22:00 PM UTCmicahcowanWork Required1 - Days=>0 - Hours
    Fri 20 Jul 2007 06:43:08 AM UTCmicahcowanPlanned ReleaseNone=>1.12
    Mon 09 Jul 2007 10:10:35 PM UTCmicahcowanCategoryUser Interface=>Protocol Issue
      Work RequiredNone=>1 - Days

    Back to the top

    Powered by Savane 3.1-cleanup1