bugGNU Wget - Bugs: bug #52897, certificate warnings not seen in...

 
 

bug #52897: certificate warnings not seen in chromium

Submitter:  jidanni
Submitted:  Mon 15 Jan 2018 12:24:34 PM UTC
   
 
Category:  Protocol Issue Severity:  3 - Normal
Priority:  5 - Normal Status:  Fixed
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Closed
Release:  None Operating System:  GNU/Linux
Reproducibility:  None Fixed Release:  None
Planned Release:  None Regression:  None
Work Required:  None Patch Included:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 15 Jan 2018 03:17:51 PM UTC, comment #2: 

You can download the root certs here:
https://www.entrustdatacard.com/pages/root-certificates-download

Take the L1K root cert (entrust_l1k.cer).

On Debian, you rename it to /usr/local/share/ca-certificates/entrust_l1k.crt and call update-ca-certificates as root or via sudo.

Now wget knows about it and you can go on.

Tim Ruehsen <rockdaboot>
Group administrator
Mon 15 Jan 2018 01:26:47 PM UTC, comment #1: 

Wget uses the certificate store provided by the system. Take a look at the output of `wget -d` to see which certificates being loaded.

Probably the certificate store being used by Wget (provided by distro) is out of date. Both Chromium and Firefox ship with their own cert stores.

Darshit Shah <darnir>
Group administrator
Mon 15 Jan 2018 12:24:34 PM UTC, original submission:  

$ wget https://bsaefiling1.fincen.treas.gov/lc/content/xfaforms/profiles/htmldefault.html
--2018-01-15 20:18:59--  https://bsaefiling1.fincen.treas.gov/lc/content/xfaforms/profiles/htmldefault.html
Resolving bsaefiling1.fincen.treas.gov (bsaefiling1.fincen.treas.gov)... 166.123.218.110
Connecting to bsaefiling1.fincen.treas.gov (bsaefiling1.fincen.treas.gov)|166.123.218.110|:443... connected.
WARNING: The certificate of ‘bsaefiling1.fincen.treas.gov’ is not trusted.
WARNING: The certificate of ‘bsaefiling1.fincen.treas.gov’ hasn't got a known issuer.
WARNING: The certificate of ‘bsaefiling1.fincen.treas.gov’ was signed using an insecure algorithm.

But chromium says all is fine with that site.

jidanni

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rockdaboot (Posted a comment)
  • -email is unavailable- added by darnir (Posted a comment)
  •  

    Follow 3 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-01-15 rockdaboot StatusNone Fixed
        Open/ClosedOpen Closed
        Release1.19.2 None

    Back to the top

    Powered by Savane 3.13-3230.
    Corresponding source code