bugGNU Wget - Bugs: bug #40318, option to accept certificate even...

 
 

bug #40318: option to accept certificate even if hostname does not match

Submitted by:  Elmar Stellnberger <estellnb>
Submitted on:  Sun 20 Oct 2013 07:36:33 PM UTC  
 
Category: Feature RequestSeverity: 3 - Normal
Priority: 5 - NormalStatus: None
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Open
Release: trunkOperating System: GNU/Linux
Reproducibility: Every TimeFixed Release: None
Planned Release: NoneRegression: No
Work Required: NonePatch Included: No

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun 20 Oct 2013 07:36:33 PM UTC, original submission:

GNU wget should have an option to accept a certificate even if the hostname from the download server does not match the hostname of the certificate. This is a minor error. It can happen very often that a web page will become available under different domain names; download should still be possible with old certificate if a special option to wget is given. It is really ridiculous if downloading fails because of a test like this. As long as you do not have a trusted and signed DNS server it virtually provides no additional security to check for the hostname. Sometimes it is not possible to fake the hostname via /etc/hosts for the acceptance of an already installed certificate because the server may use CNAMEs. Simply not to check for the existance of any certificate via --no-check-certificate is not an option since it provides NO adequate security. There needs to be a --no-check-hostname option or even a --accept-host-as certificatehost fakedhost.

Elmar Stellnberger <estellnb>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by estellnb (Submitted the item)
  • -unavailable- added by estellnb
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 20 Oct 2013 07:36:33 PM UTCestellnbCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup