bugGNU Wget - Bugs: bug #34642, wget --secure-protocol=SSLv3 fails...

 
 

bug #34642: wget --secure-protocol=SSLv3 fails with "GnuTLS: GnuTLS internal error."

Submitted by:  Noël Köthe <nok>
Submitted on:  Tue 25 Oct 2011 10:05:50 AM UTC  
 
Category: Crash/Freeze/InfloopSeverity: 3 - Normal
Priority: 5 - NormalStatus: None
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Open
Release: 1.13.4Operating System: GNU/Linux
Reproducibility: Every TimeFixed Release: None
Planned Release: NoneRegression: None
Work Required: NonePatch Included: No

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 08 Nov 2013 01:24:58 PM UTC, comment #2:

sorry. It is fixed with the 1.15 alpha.

Here are the both tests (SSLv3+TLSv1):

1.14-4 Debian testing/unstable:
$ LC_ALL=C wget --debug --secure-protocol=SSLv3 https://encrypted.google.comSetting --secure-protocol (secureprotocol) to SSLv3
DEBUG output created by Wget 1.14 on linux-gnu.

URI encoding = 'ANSI_X3.4-1968'
--2013-11-08 14:19:37-- https://encrypted.google.com/
Resolving encrypted.google.com (encrypted.google.com)... 173.194.112.165, 173.194.112.166, 173.194.112.167, ...
Caching encrypted.google.com => 173.194.112.165 173.194.112.166 173.194.112.167 173.194.112.168 173.194.112.169 173.194.112.174 173.194.112.160 173.194.112.161 173.194.112.162 173.194.112.163 173.194.112.164 2a00:1450:4001:805::1005
Connecting to encrypted.google.com (encrypted.google.com)|173.194.112.165|:443... connected.
Created socket 5.
Releasing 0x0000000001603fc0 (new refcount 1).
GnuTLS: No or insufficient priorities were set.
Closed fd 5
Unable to establish SSL connection.

$ LC_ALL=C wget --debug --secure-protocol=TLSv1 https://encrypted.google.comSetting --secure-protocol (secureprotocol) to TLSv1
DEBUG output created by Wget 1.14 on linux-gnu.

URI encoding = 'ANSI_X3.4-1968'
--2013-11-08 14:21:08-- https://encrypted.google.com/
Resolving encrypted.google.com (encrypted.google.com)... 173.194.112.163, 173.194.112.164, 173.194.112.165, ...
Caching encrypted.google.com => 173.194.112.163 173.194.112.164 173.194.112.165 173.194.112.166 173.194.112.167 173.194.112.168 173.194.112.169 173.194.112.174 173.194.112.160 173.194.112.161 173.194.112.162 2a00:1450:4001:805::1005
Connecting to encrypted.google.com (encrypted.google.com)|173.194.112.163|:443... connected.
Created socket 5.
Releasing 0x0000000003215fa0 (new refcount 1).

---request begin---
GET / HTTP/1.1
User-Agent: Wget/1.14 (linux-gnu)
Accept: /
Host: encrypted.google.com
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 200 OK
Date: Fri, 08 Nov 2013 13:21:08 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
Set-Cookie: PREF=ID=b24e56ecb2ecdefd:FF=0:TM=1383916868:LM=1383916868:S=JwSHoFlTL8eDDBxC; expires=Sun, 08-Nov-2015 13:21:08 GMT; path=/; domain=.google.com
Set-Cookie: NID=67=nrWl0Px9C82sKTzkb40qagwXauVS8EMjNO2olgb7mC0d1H8-KjoYx8Q869oMuIDJAXotNdOmtI9yWk2vgnFVV1P35KmPMHlkrpJyxvl88Es2_OlPS88O0C3TioZALRtz; expires=Sat, 10-May-2014 13:21:08 GMT; path=/; domain=.google.com; HttpOnly
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Server: gws
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alternate-Protocol: 443:quic
Transfer-Encoding: chunked

---response end---
200 OK
cdm: 1 2 3 4 5 6 7 8
Stored cookie google.com -1 (ANY) / <permanent> <insecure> [expiry 2015-11-08 14:21:08] PREF ID=b24e56ecb2ecdefd:FF=0:TM=1383916868:LM=1383916868:S=JwSHoFlTL8eDDBxC
cdm: 1 2 3 4 5 6 7 8
Stored cookie google.com -1 (ANY) / <permanent> <insecure> [expiry 2014-05-10 15:21:08] NID 67=nrWl0Px9C82sKTzkb40qagwXauVS8EMjNO2olgb7mC0d1H8-KjoYx8Q869oMuIDJAXotNdOmtI9yWk2vgnFVV1P35KmPMHlkrpJyxvl88Es2_OlPS88O0C3TioZALRtz
Registered socket 5 for persistent reuse.
URI content encoding = 'ISO-8859-1'
Length: unspecified [text/html]
Saving to: 'index.html'

[ <=> ] 18,267 --.-K/s in 0.01s

2013-11-08 14:21:08 (1.16 MB/s) - 'index.html' saved [18267]

and with 1.15 alpha (in Debian experimental):

$ LC_ALL=C wget --debug --secure-protocol=SSLv3 https://encrypted.google.comSetting --secure-protocol (secureprotocol) to SSLv3
DEBUG output created by Wget 1.14.96-38327 on linux-gnu.

URI encoding = 'ANSI_X3.4-1968'
--2013-11-08 14:22:07-- https://encrypted.google.com/
Certificates loaded: 166
Resolving encrypted.google.com (encrypted.google.com)... 173.194.112.160, 173.194.112.161, 173.194.112.162, ...
Caching encrypted.google.com => 173.194.112.160 173.194.112.161 173.194.112.162 173.194.112.163 173.194.112.164 173.194.112.165 173.194.112.166 173.194.112.167 173.194.112.168 173.194.112.169 173.194.112.174 2a00:1450:4001:805::1005
Connecting to encrypted.google.com (encrypted.google.com)|173.194.112.160|:443... connected.
Created socket 5.
Releasing 0x00000000011d03f0 (new refcount 1).

---request begin---
GET / HTTP/1.1
User-Agent: Wget/1.14.96-38327 (linux-gnu)
Accept: /
Host: encrypted.google.com
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 200 OK
Date: Fri, 08 Nov 2013 13:22:07 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
Set-Cookie: PREF=ID=8488821683f21123:FF=0:TM=1383916927:LM=1383916927:S=EoRepPFYw2ruFAmH; expires=Sun, 08-Nov-2015 13:22:07 GMT; path=/; domain=.google.com
Set-Cookie: NID=67=ttrOrKXHIQJ0XHCzQYgzyC9wpYV0C2HWJGcb8Lyie_6UBWNYX1jFRV0fIKqG0Y_KnfxB3yPmrTZ7CLAiL0qQhL6gEJ17LmtZNqCvfuD5QN8EhVIvkzYrs9rq8HnRFerh; expires=Sat, 10-May-2014 13:22:07 GMT; path=/; domain=.google.com; HttpOnly
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Server: gws
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alternate-Protocol: 443:quic
Transfer-Encoding: chunked

---response end---
200 OK
cdm: 1 2 3 4 5 6 7 8
Stored cookie google.com -1 (ANY) / <permanent> <insecure> [expiry 2015-11-08 14:22:07] PREF ID=8488821683f21123:FF=0:TM=1383916927:LM=1383916927:S=EoRepPFYw2ruFAmH
cdm: 1 2 3 4 5 6 7 8
Stored cookie google.com -1 (ANY) / <permanent> <insecure> [expiry 2014-05-10 15:22:07] NID 67=ttrOrKXHIQJ0XHCzQYgzyC9wpYV0C2HWJGcb8Lyie_6UBWNYX1jFRV0fIKqG0Y_KnfxB3yPmrTZ7CLAiL0qQhL6gEJ17LmtZNqCvfuD5QN8EhVIvkzYrs9rq8HnRFerh
Registered socket 5 for persistent reuse.
URI content encoding = 'ISO-8859-1'
Length: unspecified [text/html]
Saving to: 'index.html'

[ <=> ] 18,219 --.-K/s in 0.01s

2013-11-08 14:22:07 (1.18 MB/s) - 'index.html' saved [18219]

Noël Köthe <nok>
Fri 08 Nov 2013 01:15:50 PM UTC, comment #1:

I tested the problem with wget 1.14 with libgnutls28 and it is fixed.

You can close this bug report

Noël Köthe <nok>
Tue 25 Oct 2011 10:05:50 AM UTC, original submission:

Hello,

with wget 1.13 and 1.13.4 (versions before used openssl) the following error occurs:

$ LC_ALL=C wget --debug --secure-protocol=SSLv3 https://encrypted.google.com
Setting --secure-protocol (secureprotocol) to SSLv3
DEBUG output created by Wget 1.13.4 on linux-gnu.

URI encoding = `ANSI_X3.4-1968'
--2011-10-25 11:51:11-- https://encrypted.google.com/
Resolving encrypted.google.com (encrypted.google.com)... 74.125.39.100, 74.125.39.101, 74.125.39.102, ...
Caching encrypted.google.com => 74.125.39.100 74.125.39.101 74.125.39.102 74.125.39.113 74.125.39.138 74.125.39.139
Connecting to encrypted.google.com (encrypted.google.com)|74.125.39.100|:443... connected.
Created socket 4.
Releasing 0x00000000017eca80 (new refcount 1).
GnuTLS: GnuTLS internal error.
Closed fd 4
Unable to establish SSL connection.

This is wget on Debian GNU/Linux with gnutls 2.12.12

$ LC_ALL=C wget -V
GNU Wget 1.13.4 built on linux-gnu.

+digest +https +ipv6 +iri +large-file +nls -ntlm +opie +ssl/gnutls

Wgetrc:
/etc/wgetrc (system)
Locale: /usr/share/locale
Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
-DLOCALEDIR="/usr/share/locale" -I. -I../lib -I../lib -Iyes/include
-DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall
Link: gcc -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall -Lyes/lib -lgnutls
-lgcrypt -lgpg-error -lz -lidn -lrt ftp-opie.o gnutls.o
../lib/libgnu.a

Copyright (C) 2009 Free Software Foundation, Inc.
...

This is a forwarded bug report from http://bugs.debian.org/642051

Thanks for your work.

Regards

Noël

Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by nok (Submitted the item)
  • -unavailable- added by nok
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 25 Oct 2011 10:05:50 AM UTCnokCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup