bugGNU Wget - Bugs: bug #38004, wget should have a way to fall...

 
 

bug #38004: wget should have a way to fall back to the system installed certificates when using --ca-directory

Submitted by:  Noël Köthe <nok>
Submitted on:  Mon 31 Dec 2012 09:45:46 AM UTC  
 
Category: Feature RequestSeverity: 3 - Normal
Priority: 5 - NormalStatus: None
Privacy: PublicAssigned to: None
Originator Name: Open/Closed: Open
Release: 1.13.4Operating System: GNU/Linux
Reproducibility: Every TimeFixed Release: None
Planned Release: NoneRegression: None
Work Required: NonePatch Included: No

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Mon 31 Dec 2012 09:45:46 AM UTC, original submission:

Hello,

a forwarded bug http://bugs.debian.org/646413

--8<--
The system installed certificates directory is not complete, so that
one may need to have additional certificates in one's own directory
and use the --ca-directory (either as a command-line option or via
the .wgetrc file). But if such an option is used, the system installed
certificates are no longer used, as documented in the wget man page,
meaning that wget will start to fail on various sites. For instance:

xvii:~> wget --ca-directory=$HOME/wd/config/cacert https://twitter.com/
--2011-10-24 02:29:31-- https://twitter.com/
Resolving twitter.com (twitter.com)... 199.59.148.10, 199.59.149.198, 199.59.149.230
Connecting to twitter.com (twitter.com)|199.59.148.10|:443... connected.
ERROR: The certificate of `twitter.com' is not trusted.
ERROR: The certificate of `twitter.com' hasn't got a known issuer.
zsh: exit 5 wget --ca-directory=$HOME/wd/config/cacert https://twitter.com/

xvii:~> wget https://twitter.com/
--2011-10-24 02:34:20-- https://twitter.com/
Resolving twitter.com (twitter.com)... 199.59.148.10, 199.59.149.198, 199.59.149.230
Connecting to twitter.com (twitter.com)|199.59.148.10|:443... connected.
HTTP request sent, awaiting response... 200 OK
[...]

There should be a way to fallback to the system installed certificates
directory. For instance, --ca-directory could contain a list of
directories (like $PATH-like environment variables), and if the
path ends with a ":", the default directories are appended.
--8<--

Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by nok (Submitted the item)
  • -unavailable- added by nok
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Mon 31 Dec 2012 09:45:46 AM UTCnokCarbon-Copy-=>Added -unavailable-

    Back to the top


    Powered by Savane 3.1-cleanup