bugGNU Wget - Bugs: bug #61416, Manpage on --secure-protocol could...

 
 

bug #61416: Manpage on --secure-protocol could be improved

Submitter:  Michal Ruprich <formaiko>
Submitted:  Tue 02 Nov 2021 02:07:26 PM UTC
   
 
Category:  Documentation Severity:  3 - Normal
Priority:  5 - Normal Status:  Confirmed
Privacy:  Public Assigned to:  None
Originator Name:  Michal Ruprich Open/Closed:  Open
Release:  None Operating System:  GNU/Linux
Reproducibility:  None Fixed Release:  None
Planned Release:  None Regression:  No
Work Required:  None Patch Included:  Yes
* Mandatory Fields

Add a New Comment Rich Markup
   

Sat 06 Nov 2021 04:52:57 PM UTC, comment #1: 

You are right, the exact behavior needs to be clarified in the docs.

> is there a way to force wget to use just the one requested protocol?


There is no way with wget that I know of.

In wget2 you can specify a gnutls priority string, see https://gnutls.org/manual/html_node/Priority-Strings.html.

Be aware this is for experts only :-)
But it allows you to control most aspects of the TLS protocol, including the version(s).

Tim Ruehsen <rockdaboot>
Group administrator
Tue 02 Nov 2021 02:07:26 PM UTC, original submission:  

Hi,

the manpage for --secure-protocol option states this:

"Specifying SSLv2, SSLv3, TLSv1, TLSv1_1, TLSv1_2 or TLSv1_3 forces the use of the corresponding protocol."

In reality, when you specify let's say --secure-protocol=TLSv1_2, wget sends a request to use this protocol AND all higher versions. So in the negotiation packet, we can see TLSv1_2 and TLSv1_3. In the gnutls.c in set_prio_default, this is exactly as described, though the description is confusing then. Maybe it should state that it will force the use of corresponding protocol and any higher version or something like that.

On related note - is there a way to force wget to use just the one requested protocol? TLSv1_2 for instance? In case there is a broken support for TLSv1_3 for some reason?

Thanks and regards,
Michal Ruprich

 Michal Ruprich <formaiko>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

Attached Files
file #52182:  man.patch added by formaiko (948B - text/x-patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rockdaboot (Posted a comment)
  • -email is unavailable- added by formaiko (Submitted the item)

    •  

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2021-11-06 rockdaboot StatusNone Confirmed
    2021-11-02 formaiko Attached File- Added man.patch, #52182

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.14-3b9d.
    Corresponding source code