bugGNU Wget - Bugs: bug #40318, option to accept certificate even...

 
 

bug #40318: option to accept certificate even if hostname does not match

Submitter:  Elmar Stellnberger <estellnb>
Submitted:  Sun 20 Oct 2013 07:36:33 PM UTC
   
 
Category:  Feature Request Severity:  3 - Normal
Priority:  5 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Open
Release:  trunk Operating System:  GNU/Linux
Reproducibility:  Every Time Fixed Release:  None
Planned Release:  None Regression:  No
Work Required:  None Patch Included:  No
* Mandatory Fields

Add a New Comment Rich Markup
   

Sun 20 Oct 2013 07:36:33 PM UTC, original submission:  

GNU wget should have an option to accept a certificate even if the hostname from the download server does not match the hostname of the certificate. This is a minor error. It can happen very often that a web page will become available under different domain names; download should still be possible with old certificate if a special option to wget is given. It is really ridiculous if downloading fails because of a test like this. As long as you do not have a trusted and signed DNS server it virtually provides no additional security to check for the hostname. Sometimes it is not possible to fake the hostname via /etc/hosts for the acceptance of an already installed certificate because the server may use CNAMEs. Simply not to check for the existance of any certificate via --no-check-certificate is not an option since it provides NO adequate security. There needs to be a --no-check-hostname option or even a --accept-host-as certificatehost fakedhost.

Elmar Stellnberger <estellnb>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by estellnb (Submitted the item)
  • -email is unavailable- added by estellnb
  •  

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2013-10-20 estellnb Carbon-Copy- Added -email is unavailable-

    Back to the top

    Powered by Savane 3.13-cf05.
    Corresponding source code