bugGNU Wget - Bugs: bug #32697, Multiple hostnames in certificates...

 
 

bug #32697: Multiple hostnames in certificates not checked

Submitted by:  None
Submitted on:  Mon 07 Mar 2011 04:22:09 AM UTC  
 
Category: Protocol IssueSeverity: 3 - Normal
Priority: 5 - NormalStatus: Fixed
Privacy: PublicAssigned to: Giuseppe Scrivano <gscrivano>
Originator Name: nibblerOriginator Email: -unavailable-
Open/Closed: ClosedRelease: 1.12
Operating System: GNU/LinuxReproducibility: Every Time
Fixed Release: NonePlanned Release: None
Regression: NoneWork Required: None
Patch Included: None

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Sun 13 Mar 2011 05:39:59 PM UTC, comment #1:

this bug is already fixed in the development version.

Please reopen this bug report if the development version still doesn't work for you.

Giuseppe Scrivano <gscrivano>
Project AdministratorIn charge of this item.
Mon 07 Mar 2011 04:22:09 AM UTC, original submission:

If wget e.g. https://nibbler.de/attic/index.html i get a cert error because the first hostname in the cert is http://www.nibbler.de however nibbler.de is an additional hostname contained in the cert. Every browser I tried honors that entry with a closed lock and no warning is displayed. Unfortunately wget gives me an error:

nibbler@x200s:~$ wget nibbler.de/attic/index.html
--2011-03-07 05:15:09-- http://nibbler.de/attic/index.html
Resolving nibbler.de... 194.150.168.96
Connecting to nibbler.de|194.150.168.96|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://nibbler.de/attic/index.html [following]
--2011-03-07 05:15:10-- https://nibbler.de/attic/index.html
Connecting to nibbler.de|194.150.168.96|:443... connected.
ERROR: certificate common name `www.nibbler.de' doesn't match requested host name `nibbler.de'.
To connect to nibbler.de insecurely, use `--no-check-certificate'.

nibbler@x200s:~$ wget -v
wget: missing URL
Usage: wget [OPTION]... [URL]...

Try `wget --help' for more options.
nibbler@x200s:~$ wget --version
GNU Wget 1.12 built on linux-gnu.

+digest +ipv6 +nls +ntlm +opie +md5/openssl +https -gnutls +openssl
-iri

Wgetrc:
/etc/wgetrc (system)
Locale: /usr/share/locale
Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
-DLOCALEDIR="/usr/share/locale" -I. -I../lib -g -O2
-D_FILE_OFFSET_BITS=64 -O2 -g -Wall
Link: gcc -g -O2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall -Wl,-Bsymbolic-functions
/usr/lib/libssl.so /usr/lib/libcrypto.so -ldl -lrt ftp-opie.o
openssl.o http-ntlm.o gen-md5.o ../lib/libgnu.a

nibbler@x200s:~$ apt-cache show wget
(...)
Original-Maintainer: Noèl Köthe <noel@debian.org>
Version: 1.12-1.1ubuntu2.1
(...)
Filename: pool/main/w/wget/wget_1.12-1.1ubuntu2_amd64.deb
(...)

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by gscrivano (Posted a comment)
  • -unavailable- added by None (Submitted the item)
  •  

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 3 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Sun 13 Mar 2011 05:39:59 PM UTCgscrivanoStatusNone=>Fixed
      Assigned toNone=>gscrivano
      Open/ClosedOpen=>Closed

    Back to the top


    Powered by Savane 3.1-cleanup1