bugGNU Wget - Bugs: bug #38004, wget should have a way to fall...

 
 

bug #38004: wget should have a way to fall back to the system installed certificates when using --ca-directory

Submitter:  Noël Köthe <nok>
Submitted:  Mon 31 Dec 2012 09:45:46 AM UTC
   
 
Category:  Feature Request Severity:  3 - Normal
Priority:  5 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Open
Release:  1.13.4 Operating System:  GNU/Linux
Reproducibility:  Every Time Fixed Release:  None
Planned Release:  None Regression:  None
Work Required:  None Patch Included:  No
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 31 Dec 2012 09:45:46 AM UTC, original submission:  

Hello,

a forwarded bug http://bugs.debian.org/646413

--8<--
The system installed certificates directory is not complete, so that
one may need to have additional certificates in one's own directory
and use the --ca-directory (either as a command-line option or via
the .wgetrc file). But if such an option is used, the system installed
certificates are no longer used, as documented in the wget man page,
meaning that wget will start to fail on various sites. For instance:

xvii:~> wget --ca-directory=$HOME/wd/config/cacert https://twitter.com/
--2011-10-24 02:29:31--  https://twitter.com/
Resolving twitter.com (twitter.com)... 199.59.148.10, 199.59.149.198, 199.59.149.230
Connecting to twitter.com (twitter.com)|199.59.148.10|:443... connected.
ERROR: The certificate of `twitter.com' is not trusted.
ERROR: The certificate of `twitter.com' hasn't got a known issuer.
zsh: exit 5     wget --ca-directory=$HOME/wd/config/cacert https://twitter.com/

xvii:~> wget https://twitter.com/
--2011-10-24 02:34:20--  https://twitter.com/
Resolving twitter.com (twitter.com)... 199.59.148.10, 199.59.149.198, 199.59.149.230
Connecting to twitter.com (twitter.com)|199.59.148.10|:443... connected.
HTTP request sent, awaiting response... 200 OK
[...]

There should be a way to fallback to the system installed certificates
directory. For instance, --ca-directory could contain a list of
directories (like $PATH-like environment variables), and if the
path ends with a ":", the default directories are appended.
--8<--

Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by nok (Submitted the item)
  • -email is unavailable- added by nok
  •  

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2012-12-31 nok Carbon-Copy- Added -email is unavailable-

    Back to the top

    Powered by Savane 3.13-cf05.
    Corresponding source code