bugGNU Wget - Bugs: bug #38004, wget should have a way to fall...


bug #38004: wget should have a way to fall back to the system installed certificates when using --ca-directory

Submitted by:  Noël Köthe <nok>
Submitted on:  Mon Dec 31 09:45:46 2012  
Category: Feature RequestSeverity: 3 - Normal
Priority: 5 - NormalStatus: None
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Open
Release: 1.13.4Operating System: GNU/Linux
Reproducibility: Every TimeFixed Release: None
Planned Release: NoneRegression: None
Work Required: NonePatch Included: No

Add a New Comment (Rich MarkupRich Markup):

You are not logged in

Please log in, so followups can be emailed to you.


Mon Dec 31 09:45:46 2012, original submission:


a forwarded bug http://bugs.debian.org/646413

The system installed certificates directory is not complete, so that
one may need to have additional certificates in one's own directory
and use the --ca-directory (either as a command-line option or via
the .wgetrc file). But if such an option is used, the system installed
certificates are no longer used, as documented in the wget man page,
meaning that wget will start to fail on various sites. For instance:

xvii:~> wget --ca-directory=$HOME/wd/config/cacert https://twitter.com/
--2011-10-24 02:29:31-- https://twitter.com/
Resolving twitter.com (twitter.com)...,,
Connecting to twitter.com (twitter.com)||:443... connected.
ERROR: The certificate of `twitter.com' is not trusted.
ERROR: The certificate of `twitter.com' hasn't got a known issuer.
zsh: exit 5 wget --ca-directory=$HOME/wd/config/cacert https://twitter.com/

xvii:~> wget https://twitter.com/
--2011-10-24 02:34:20-- https://twitter.com/
Resolving twitter.com (twitter.com)...,,
Connecting to twitter.com (twitter.com)||:443... connected.
HTTP request sent, awaiting response... 200 OK

There should be a way to fallback to the system installed certificates
directory. For instance, --ca-directory could contain a list of
directories (like $PATH-like environment variables), and if the
path ends with a ":", the default directories are appended.

Noël Köthe <nok>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -unavailable- added by nok (Submitted the item)
  • -unavailable- added by nok

    Please enter the title of George Orwell's famous dystopian book (it's a date):



    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon Dec 31 09:45:46 2012nokCarbon-Copy-=>Added -unavailable-

    Back to the top

    Powered by Savane 3.1-cleanup1