bugGNU Wget - Bugs: bug #20421, wget: missing a check for Subject...

 
 

bug #20421: wget: missing a check for Subject Alternative Name (TLS cert.)

Submitter:  Noël Köthe <nok>
Submitted:  Mon 09 Jul 2007 09:44:51 PM UTC
   
 
Category:  Protocol Issue Severity:  3 - Normal
Priority:  9 - Immediate Status:  Fixed
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Closed
Release:  1.10.2 Operating System:  GNU/Linux
Reproducibility:  Every Time Fixed Release:  1.12.1
Planned Release:  1.12.x Regression:  None
Work Required:  None Patch Included:  Yes
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Sat 24 Oct 2009 11:08:50 PM UTC, comment #8: 

Fixed in 38a0105c05ea.

Micah Cowan <micahcowan>
Sat 12 Sep 2009 08:42:39 AM UTC, comment #7: 

papers on file

Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:45:06 PM UTC, comment #6: 

Petr's patch looks good, just waiting on disclaimer stuff.

Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:21:19 PM UTC, comment #5: 
Micah Cowan <micahcowan>
Thu 11 Jun 2009 10:15:17 PM UTC, comment #4: 

On closer inspection, it doesn't look like that patch has to do with this bug. Filing a separate issue, bug 26786.

Micah Cowan <micahcowan>
Wed 01 Apr 2009 03:34:33 AM UTC, comment #3: 
Micah Cowan <micahcowan>
Tue 31 Mar 2009 08:34:20 PM UTC, comment #2: 
Micah Cowan <micahcowan>
Fri 25 Jul 2008 04:21:28 PM UTC, comment #1: 
Micah Cowan <micahcowan>
Mon 09 Jul 2007 09:44:51 PM UTC, original submission:  

Hello,

a forwarded bug from http://bugs.debian.org/409938

"When accessing an https server, wget does not appear to check the
Subject Alternative Name field of the server certificate and in cases where wget is connecting to a name listed in that field, wget
declines to connect to the server without the --no-check-certificate option, which should not be necessary in this case.

A similar problem has been fixed in fetchmail, and Debian bug report #201113 may contain useful information."

You can access the mentioned bug via http://bugs.debian.org/201113

thx.

-email is unavailable-

Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by micahcowan (Wrote patches)
  • -email is unavailable- added by sascha_silbe (wget user)
  • -email is unavailable- added by jima (interested third party)
  • -email is unavailable- added by micahcowan (Updated the item)
  • -email is unavailable- added by nok (Submitted the item)
  •  

    Follow 19 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2009-10-24 micahcowan Fixed ReleaseNone 1.12.1
    2009-10-24 micahcowan Open/ClosedOpen Closed
    2009-10-24 micahcowan StatusReady for Merge Fixed
    2009-09-23 micahcowan StatusInspected Ready for Merge
    2009-09-12 micahcowan Planned Release1.14 1.12.x
    2009-06-11 micahcowan StatusAwaiting Approval Inspected
        Planned Release1.12 1.14
    2009-03-31 micahcowan Carbon-Copy- Added petrp
    2009-03-31 micahcowan Priority6 9 - Immediate
        StatusNone Awaiting Approval
        Work Required0 - Hours None
        Patch IncludedNo Yes
    2009-03-11 sascha_silbe Carbon-Copy- Added sascha_silbe
    2009-01-13 jima Carbon-Copy- Added jima
    2008-11-04 micahcowan Priority5 - Normal 6
    2008-07-25 micahcowan Work Required1 - Days 0 - Hours
    2007-07-20 micahcowan Planned ReleaseNone 1.12
    2007-07-09 micahcowan CategoryUser Interface Protocol Issue
        Work RequiredNone 1 - Days

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code