bugGNU Wget - Bugs: bug #20421, wget: missing a check for Subject...

 
 

bug #20421: wget: missing a check for Subject Alternative Name (TLS cert.)

Submitted by:  Noël Köthe <nok>
Submitted on:  Mon 09 Jul 2007 09:44:51 PM UTC  
 
Category: Protocol IssueSeverity: 3 - Normal
Priority: 9 - ImmediateStatus: Fixed
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Closed
Release: 1.10.2Operating System: GNU/Linux
Reproducibility: Every TimeFixed Release: 1.12.1
Planned Release: 1.12.xRegression: None
Work Required: NonePatch Included: Yes

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

(Jump to the original submission Jump to the original submission)

Sat 24 Oct 2009 11:08:50 PM UTC, comment #8:

Fixed in 38a0105c05ea.

Micah Cowan <micahcowan>
Project Administrator
Sat 12 Sep 2009 08:42:39 AM UTC, comment #7:

papers on file

Micah Cowan <micahcowan>
Project Administrator
Thu 11 Jun 2009 10:45:06 PM UTC, comment #6:

Petr's patch looks good, just waiting on disclaimer stuff.

Micah Cowan <micahcowan>
Project Administrator
Thu 11 Jun 2009 10:21:19 PM UTC, comment #5:

Another example site to test with: https://www.me.etsglobal.org/
(from http://article.gmane.org/gmane.comp.web.wget.general/8727)

Micah Cowan <micahcowan>
Project Administrator
Thu 11 Jun 2009 10:15:17 PM UTC, comment #4:

On closer inspection, it doesn't look like that patch has to do with this bug. Filing a separate issue, bug 26786.

Micah Cowan <micahcowan>
Project Administrator
Wed 01 Apr 2009 03:34:33 AM UTC, comment #3:

Alternate patch at http://lists.gnu.org/archive/html/bug-wget/2009-03/msg00033.html

Micah Cowan <micahcowan>
Project Administrator
Tue 31 Mar 2009 08:34:20 PM UTC, comment #2:

Patches at https://savannah.gnu.org/bugs/?23934

Micah Cowan <micahcowan>
Project Administrator
Fri 25 Jul 2008 04:21:28 PM UTC, comment #1:

Duplicate: https://savannah.gnu.org/bugs/?23934

Micah Cowan <micahcowan>
Project Administrator
Mon 09 Jul 2007 09:44:51 PM UTC, original submission:

Hello,

a forwarded bug from http://bugs.debian.org/409938

"When accessing an https server, wget does not appear to check the
Subject Alternative Name field of the server certificate and in cases where wget is connecting to a name listed in that field, wget
declines to connect to the server without the --no-check-certificate option, which should not be necessary in this case.

A similar problem has been fixed in fetchmail, and Debian bug report #201113 may contain useful information."

You can access the mentioned bug via http://bugs.debian.org/201113

thx.

-unavailable-

Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by micahcowan (Wrote patches)
  • -unavailable- added by sascha_silbe (wget user)
  • -unavailable- added by jima (interested third party)
  • -unavailable- added by micahcowan (Updated the item)
  • -unavailable- added by nok (Submitted the item)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 19 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sat 24 Oct 2009 11:09:48 PM UTCmicahcowanFixed ReleaseNone=>1.12.1
    Sat 24 Oct 2009 11:08:50 PM UTCmicahcowanOpen/ClosedOpen=>Closed
    Sat 24 Oct 2009 11:08:49 PM UTCmicahcowanStatusReady for Merge=>Fixed
    Wed 23 Sep 2009 11:54:52 PM UTCmicahcowanStatusInspected=>Ready for Merge
    Sat 12 Sep 2009 08:42:39 AM UTCmicahcowanPlanned Release1.14=>1.12.x
    Thu 11 Jun 2009 10:45:06 PM UTCmicahcowanStatusAwaiting Approval=>Inspected
      Planned Release1.12=>1.14
    Tue 31 Mar 2009 08:35:11 PM UTCmicahcowanCarbon-Copy-=>Added petrp
    Tue 31 Mar 2009 08:34:20 PM UTCmicahcowanPriority6=>9 - Immediate
      StatusNone=>Awaiting Approval
      Work Required0 - Hours=>None
      Patch IncludedNo=>Yes
    Wed 11 Mar 2009 01:51:22 PM UTCsascha_silbeCarbon-Copy-=>Added sascha_silbe
    Tue 13 Jan 2009 03:43:56 PM UTCjimaCarbon-Copy-=>Added jima
    Tue 04 Nov 2008 01:52:58 AM UTCmicahcowanPriority5 - Normal=>6
    Fri 25 Jul 2008 04:22:00 PM UTCmicahcowanWork Required1 - Days=>0 - Hours
    Fri 20 Jul 2007 06:43:08 AM UTCmicahcowanPlanned ReleaseNone=>1.12
    Mon 09 Jul 2007 10:10:35 PM UTCmicahcowanCategoryUser Interface=>Protocol Issue
      Work RequiredNone=>1 - Days

    Back to the top


    Powered by Savane 3.1-cleanup