bugGNU Wget - Bugs: bug #20448, HTTPS testing needed

 
 

bug #20448: HTTPS testing needed

Submitter:  Micah Cowan <micahcowan>
Submitted:  Wed 11 Jul 2007 08:21:39 PM UTC
   
 
Category:  Testing Severity:  4 - Important
Priority:  5 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Open
Release:  None Operating System:  None
Reproducibility:  None Fixed Release:  None
Planned Release:  1.14 Regression:  None
Work Required:  2 - Weeks Patch Included:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Wed 11 Jul 2007 08:26:48 PM UTC, comment #1: 

Does Wget support server-requested upgrades to TLS from plaintext connections? If not, it should (and a bug should be filed for it).

Micah Cowan <micahcowan>
Wed 11 Jul 2007 08:21:39 PM UTC, original submission:  

We need to have automated tests verifying some of the HTTPS-related security, both with OpenSSL and with GNUTLS. These tests should verify:

 - What happens when a domain fails to match its certificate (see RFC 2459)
 - What happens when a certificate authority is not recognized
 - What happens when an "incomplete closure" (see RFC 2818, ยง2.2) is encountered.
 - What happens when 40-bit encryption is used, or the connection is downgraded to a lesser encryption.

Micah Cowan <micahcowan>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by micahcowan (Submitted the item)
  •  

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2008-08-21 micahcowan Planned Release1.12 1.14

    Back to the top

    Powered by Savane 3.14-f13d.
    Corresponding source code