bugGNU Wget - Bugs: bug #53021, Ability to provide password...

 
 

bug #53021: Ability to provide password per-instance

Submitter:  Noël Köthe <nok>
Submitted:  Tue 30 Jan 2018 06:28:37 PM UTC
   
 
Category:  Feature Request Severity:  3 - Normal
Priority:  5 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Open/Closed:  Open
Release:  None Operating System:  GNU/Linux
Reproducibility:  None Fixed Release:  None
Planned Release:  None Regression:  None
Work Required:  None Patch Included:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Wed 31 Jan 2018 09:03:24 AM UTC, comment #1: 

Having an option for a different .netrc file is a good request and I wonder why nobody ever asked for it before.

We already have it in wget2 (--netrc-file=<file>). Latest sources from git at https://git.savannah.gnu.org/git/wget/wget2.git, collaboration at https://gitlab.com/gnuwget/wget2.

And that's where we add new features. Wget 1.x is still maintained - that mean we fix bugs and accept contributions. But that's it.

Tim Ruehsen <rockdaboot>
Group administrator
Tue 30 Jan 2018 06:28:37 PM UTC, original submission:  

Hello,

a feature request from a Debian user:
https://bugs.debian.org/887384

As far as I can tell, Wget only provides the following methods to
provide a HTTP password:

  1. as part of the URL
  2. with --http-password / --password
  3. using ~/.netrc
  4. using --use-askpass
  5. using --ask-password

The problem is that 1 & 2 expose the password in the process table, while ~/.netrc is a centralised resource that may not be editable by a script. 4 & 5 are interactive, and while I could provide an ad-hoc askpass script, this is a gross hack.

It'd be awesome if Wget could provide one or more of the following methods to provide the password:

  1. read it from $WGET_PASSWORD
  2. read it from a specific file
  3. read it from a netrc-style file that is not ~/.netrc
  4. let --use-askpass specify parameters to the script/binary to invoke

Ftr, my current hack involves creating an executable temporary file with content like this:

  #!/bin/sh
  echo username:password

and then invoking wget like so:

  wget -c --use-askpass=tempfile …

and that works, but it's a hack that I think could be rendered
obsolete by Wget functionality. Lftp and cURL both provide ways to either read from the environment, or to override the netrc filename.
Lftp furthermore can be scripted itself, which solves the problem
in its own way.

Thank you.

Noël Köthe <nok>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rockdaboot (Posted a comment)
  • -email is unavailable- added by nok (Submitted the item)
  • -email is unavailable- added by nok
  •  

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2018-01-30 nok Carbon-Copy- Added -email is unavailable-

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code