bugGNU Wget - Bugs: bug #20421, wget: missing a check for Subject...


bug #20421: wget: missing a check for Subject Alternative Name (TLS cert.)

Submitted by:  Noël Köthe <nok>
Submitted on:  Mon 09 Jul 2007 09:44:51 PM UTC  
Category:  Protocol Issue Severity:  3 - Normal
Priority:  9 - Immediate Status:  Fixed
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Closed
Release:  1.10.2 Operating System:  GNU/Linux
Reproducibility:  Every Time Fixed Release:  1.12.1
Planned Release:  1.12.x Regression:  None
Work Required:  None Patch Included:  Yes

Add a New Comment (Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


( Jump to the original submission)

Sat 24 Oct 2009 11:08:50 PM UTC, comment #8: 

Fixed in 38a0105c05ea.

Micah Cowan <micahcowan>
Sat 12 Sep 2009 08:42:39 AM UTC, comment #7: 

papers on file

Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:45:06 PM UTC, comment #6: 

Petr's patch looks good, just waiting on disclaimer stuff.

Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:21:19 PM UTC, comment #5: 
Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:15:17 PM UTC, comment #4: 

On closer inspection, it doesn't look like that patch has to do with this bug. Filing a separate issue, bug 26786.

Micah Cowan <micahcowan>
Wed 01 Apr 2009 03:34:33 AM UTC, comment #3: 
Micah Cowan <micahcowan>
Tue 31 Mar 2009 08:34:20 PM UTC, comment #2: 
Micah Cowan <micahcowan>
Fri 25 Jul 2008 04:21:28 PM UTC, comment #1: 
Micah Cowan <micahcowan>
Mon 09 Jul 2007 09:44:51 PM UTC, original submission:  


a forwarded bug from http://bugs.debian.org/409938

"When accessing an https server, wget does not appear to check the
Subject Alternative Name field of the server certificate and in cases where wget is connecting to a name listed in that field, wget
declines to connect to the server without the --no-check-certificate option, which should not be necessary in this case.

A similar problem has been fixed in fetchmail, and Debian bug report #201113 may contain useful information."

You can access the mentioned bug via http://bugs.debian.org/201113


-email is unavailable-

Noël Köthe <nok>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by micahcowan (Wrote patches)
  • -email is unavailable- added by sascha_silbe (wget user)
  • -email is unavailable- added by jima (interested third party)
  • -email is unavailable- added by micahcowan (Updated the item)
  • -email is unavailable- added by nok (Submitted the item)



    Follow 19 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2009-10-24 micahcowan Fixed ReleaseNone => 1.12.1
    2009-10-24 micahcowan Open/ClosedOpen => Closed
    2009-10-24 micahcowan StatusReady for Merge => Fixed
    2009-09-23 micahcowan StatusInspected => Ready for Merge
    2009-09-12 micahcowan Planned Release1.14 => 1.12.x
    2009-06-11 micahcowan StatusAwaiting Approval => Inspected
        Planned Release1.12 => 1.14
    2009-03-31 micahcowan Carbon-Copy- => Added petrp
    2009-03-31 micahcowan Priority6 => 9 - Immediate
        StatusNone => Awaiting Approval
        Work Required0 - Hours => None
        Patch IncludedNo => Yes
    2009-03-11 sascha_silbe Carbon-Copy- => Added sascha_silbe
    2009-01-13 jima Carbon-Copy- => Added jima
    2008-11-04 micahcowan Priority5 - Normal => 6
    2008-07-25 micahcowan Work Required1 - Days => 0 - Hours
    2007-07-20 micahcowan Planned ReleaseNone => 1.12
    2007-07-09 micahcowan CategoryUser Interface => Protocol Issue
        Work RequiredNone => 1 - Days

    Back to the top

    Powered by Savane 3.7