bugGNU Wget - Bugs: bug #34642, wget --secure-protocol=SSLv3 fails...

 
 

bug #34642: wget --secure-protocol=SSLv3 fails with "GnuTLS: GnuTLS internal error."

Submitter:  Noël Köthe <nok>
Submitted:  Tue 25 Oct 2011 10:05:50 AM UTC
   
 
Category:  Crash/Freeze/Infloop Severity:  3 - Normal
Priority:  5 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Open
Release:  1.13.4 Operating System:  GNU/Linux
Reproducibility:  Every Time Fixed Release:  None
Planned Release:  None Regression:  None
Work Required:  None Patch Included:  No
* Mandatory Fields

Add a New Comment Rich Markup
   

Fri 08 Nov 2013 01:24:58 PM UTC, comment #2: 

sorry. It is fixed with the 1.15 alpha.

Here are the both tests (SSLv3+TLSv1):

1.14-4 Debian testing/unstable:
$ LC_ALL=C wget --debug --secure-protocol=SSLv3 https://encrypted.google.comSetting --secure-protocol (secureprotocol) to SSLv3
DEBUG output created by Wget 1.14 on linux-gnu.

URI encoding = 'ANSI_X3.4-1968'
--2013-11-08 14:19:37--  https://encrypted.google.com/
Resolving encrypted.google.com (encrypted.google.com)... 173.194.112.165, 173.194.112.166, 173.194.112.167, ...
Caching encrypted.google.com => 173.194.112.165 173.194.112.166 173.194.112.167 173.194.112.168 173.194.112.169 173.194.112.174 173.194.112.160 173.194.112.161 173.194.112.162 173.194.112.163 173.194.112.164 2a00:1450:4001:805::1005
Connecting to encrypted.google.com (encrypted.google.com)|173.194.112.165|:443... connected.
Created socket 5.
Releasing 0x0000000001603fc0 (new refcount 1).
GnuTLS: No or insufficient priorities were set.
Closed fd 5
Unable to establish SSL connection.

$ LC_ALL=C wget --debug --secure-protocol=TLSv1 https://encrypted.google.comSetting --secure-protocol (secureprotocol) to TLSv1
DEBUG output created by Wget 1.14 on linux-gnu.

URI encoding = 'ANSI_X3.4-1968'
--2013-11-08 14:21:08--  https://encrypted.google.com/
Resolving encrypted.google.com (encrypted.google.com)... 173.194.112.163, 173.194.112.164, 173.194.112.165, ...
Caching encrypted.google.com => 173.194.112.163 173.194.112.164 173.194.112.165 173.194.112.166 173.194.112.167 173.194.112.168 173.194.112.169 173.194.112.174 173.194.112.160 173.194.112.161 173.194.112.162 2a00:1450:4001:805::1005
Connecting to encrypted.google.com (encrypted.google.com)|173.194.112.163|:443... connected.
Created socket 5.
Releasing 0x0000000003215fa0 (new refcount 1).

---request begin---
GET / HTTP/1.1
User-Agent: Wget/1.14 (linux-gnu)
Accept: /
Host: encrypted.google.com
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 200 OK
Date: Fri, 08 Nov 2013 13:21:08 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
Set-Cookie: PREF=ID=b24e56ecb2ecdefd:FF=0:TM=1383916868:LM=1383916868:S=JwSHoFlTL8eDDBxC; expires=Sun, 08-Nov-2015 13:21:08 GMT; path=/; domain=.google.com
Set-Cookie: NID=67=nrWl0Px9C82sKTzkb40qagwXauVS8EMjNO2olgb7mC0d1H8-KjoYx8Q869oMuIDJAXotNdOmtI9yWk2vgnFVV1P35KmPMHlkrpJyxvl88Es2_OlPS88O0C3TioZALRtz; expires=Sat, 10-May-2014 13:21:08 GMT; path=/; domain=.google.com; HttpOnly
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Server: gws
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alternate-Protocol: 443:quic
Transfer-Encoding: chunked

---response end---
200 OK
cdm: 1 2 3 4 5 6 7 8
Stored cookie google.com -1 (ANY) / <permanent> <insecure> [expiry 2015-11-08 14:21:08] PREF ID=b24e56ecb2ecdefd:FF=0:TM=1383916868:LM=1383916868:S=JwSHoFlTL8eDDBxC
cdm: 1 2 3 4 5 6 7 8
Stored cookie google.com -1 (ANY) / <permanent> <insecure> [expiry 2014-05-10 15:21:08] NID 67=nrWl0Px9C82sKTzkb40qagwXauVS8EMjNO2olgb7mC0d1H8-KjoYx8Q869oMuIDJAXotNdOmtI9yWk2vgnFVV1P35KmPMHlkrpJyxvl88Es2_OlPS88O0C3TioZALRtz
Registered socket 5 for persistent reuse.
URI content encoding = 'ISO-8859-1'
Length: unspecified [text/html]
Saving to: 'index.html'

    [ <=>                                          ] 18,267      --.-K/s   in 0.01s  

2013-11-08 14:21:08 (1.16 MB/s) - 'index.html' saved [18267]


and with 1.15 alpha (in Debian experimental):

$ LC_ALL=C wget --debug --secure-protocol=SSLv3 https://encrypted.google.comSetting --secure-protocol (secureprotocol) to SSLv3
DEBUG output created by Wget 1.14.96-38327 on linux-gnu.

URI encoding = 'ANSI_X3.4-1968'
--2013-11-08 14:22:07--  https://encrypted.google.com/
Certificates loaded: 166
Resolving encrypted.google.com (encrypted.google.com)... 173.194.112.160, 173.194.112.161, 173.194.112.162, ...
Caching encrypted.google.com => 173.194.112.160 173.194.112.161 173.194.112.162 173.194.112.163 173.194.112.164 173.194.112.165 173.194.112.166 173.194.112.167 173.194.112.168 173.194.112.169 173.194.112.174 2a00:1450:4001:805::1005
Connecting to encrypted.google.com (encrypted.google.com)|173.194.112.160|:443... connected.
Created socket 5.
Releasing 0x00000000011d03f0 (new refcount 1).

---request begin---
GET / HTTP/1.1
User-Agent: Wget/1.14.96-38327 (linux-gnu)
Accept: /
Host: encrypted.google.com
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 200 OK
Date: Fri, 08 Nov 2013 13:22:07 GMT
Expires: -1
Cache-Control: private, max-age=0
Content-Type: text/html; charset=ISO-8859-1
Set-Cookie: PREF=ID=8488821683f21123:FF=0:TM=1383916927:LM=1383916927:S=EoRepPFYw2ruFAmH; expires=Sun, 08-Nov-2015 13:22:07 GMT; path=/; domain=.google.com
Set-Cookie: NID=67=ttrOrKXHIQJ0XHCzQYgzyC9wpYV0C2HWJGcb8Lyie_6UBWNYX1jFRV0fIKqG0Y_KnfxB3yPmrTZ7CLAiL0qQhL6gEJ17LmtZNqCvfuD5QN8EhVIvkzYrs9rq8HnRFerh; expires=Sat, 10-May-2014 13:22:07 GMT; path=/; domain=.google.com; HttpOnly
P3P: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Server: gws
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alternate-Protocol: 443:quic
Transfer-Encoding: chunked

---response end---
200 OK
cdm: 1 2 3 4 5 6 7 8
Stored cookie google.com -1 (ANY) / <permanent> <insecure> [expiry 2015-11-08 14:22:07] PREF ID=8488821683f21123:FF=0:TM=1383916927:LM=1383916927:S=EoRepPFYw2ruFAmH
cdm: 1 2 3 4 5 6 7 8
Stored cookie google.com -1 (ANY) / <permanent> <insecure> [expiry 2014-05-10 15:22:07] NID 67=ttrOrKXHIQJ0XHCzQYgzyC9wpYV0C2HWJGcb8Lyie_6UBWNYX1jFRV0fIKqG0Y_KnfxB3yPmrTZ7CLAiL0qQhL6gEJ17LmtZNqCvfuD5QN8EhVIvkzYrs9rq8HnRFerh
Registered socket 5 for persistent reuse.
URI content encoding = 'ISO-8859-1'
Length: unspecified [text/html]
Saving to: 'index.html'

    [ <=>                                          ] 18,219      --.-K/s   in 0.01s  

2013-11-08 14:22:07 (1.18 MB/s) - 'index.html' saved [18219]

 Noël Köthe <nok>
Fri 08 Nov 2013 01:15:50 PM UTC, comment #1: 

I tested the problem with wget 1.14 with libgnutls28 and it is fixed.

You can close this bug report

 Noël Köthe <nok>
Tue 25 Oct 2011 10:05:50 AM UTC, original submission:  

Hello,

with wget 1.13 and 1.13.4 (versions before used openssl) the following error occurs:

$ LC_ALL=C wget --debug --secure-protocol=SSLv3 https://encrypted.google.com
Setting --secure-protocol (secureprotocol) to SSLv3
DEBUG output created by Wget 1.13.4 on linux-gnu.

URI encoding = `ANSI_X3.4-1968'
--2011-10-25 11:51:11--  https://encrypted.google.com/
Resolving encrypted.google.com (encrypted.google.com)... 74.125.39.100, 74.125.39.101, 74.125.39.102, ...
Caching encrypted.google.com => 74.125.39.100 74.125.39.101 74.125.39.102 74.125.39.113 74.125.39.138 74.125.39.139
Connecting to encrypted.google.com (encrypted.google.com)|74.125.39.100|:443... connected.
Created socket 4.
Releasing 0x00000000017eca80 (new refcount 1).
GnuTLS: GnuTLS internal error.
Closed fd 4
Unable to establish SSL connection.


This is wget on Debian GNU/Linux with gnutls 2.12.12

$ LC_ALL=C wget -V
GNU Wget 1.13.4 built on linux-gnu.

+digest +https +ipv6 +iri +large-file +nls -ntlm +opie +ssl/gnutls

Wgetrc:
    /etc/wgetrc (system)
Locale: /usr/share/locale
Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
    -DLOCALEDIR="/usr/share/locale" -I. -I../lib -I../lib -Iyes/include
    -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall
Link: gcc -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall -Lyes/lib -lgnutls
    -lgcrypt -lgpg-error -lz -lidn -lrt ftp-opie.o gnutls.o
    ../lib/libgnu.a

Copyright (C) 2009 Free Software Foundation, Inc.
...

This is a forwarded bug report from http://bugs.debian.org/642051

Thanks for your work.

Regards

Noël

 Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by nok (Submitted the item)
  • -email is unavailable- added by nok

    •  

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2011-10-25 nok Carbon-Copy- Added -email is unavailable-

    Back to the top

    Copyright © 2024 Free Software Foundation, Inc.
    Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
    The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
    Page source code

    Powered by Savane 3.13-7a7b.
    Corresponding source code