reopen 750601
retitle 750601 wget: Unable to connect with HTTPS using a client certificate
found 750601 1.16-1
tags 750601 - moreinfo
thanks
Hello,
I'm afraid the problem remains that wget cannot download anything with
HTTPS when a client certificate is required. Tested on current unstable
and jessie (I double checked that connecting to the same address with
the same client cert does work with Firefox).
I retitled the bug since the error message has changed... The exact same
command as before does fail (i.e., from the initial bug report). I
simplified it here a little bit by omitting '-rc', which is not
necessary to reproduce the bug.
On unstable:
% wget --certificate=**** --private-key=**** -nH -np -vvv \
--ca-cert=**** https://<server-name>:<port>/<path>
--2015-08-28 17:58:48-- https://<server-name>:<port>/<path>
Loaded CA certificate '****'
Resolving <server-name> (<server-name>)... <server-ip>
Connecting to <server-name> (<server-name>)|<server-ip>|:<port>... connected.
GnuTLS: A TLS fatal alert has been received.
GnuTLS: received alert [40]: Handshake failed
Unable to establish SSL connection.
%
On jessie, omitting the '--ca-cert=****' option, which is probably not
necessary since the corresponding cert is system-installed on the client
box (in /etc/ssl/certs):
% wget --certificate=**** --private-key=**** -nH -np -vvv \
https://<server-name>:<port>/<path>
--2015-08-28 18:08:22-- https://<server-name>:<port>/<path>
Resolving <server-name> (<server-name>)... <server-ip>
Connecting to <server-name> (<server-name>)|<server-ip>|:<port>... connected.
GnuTLS: A TLS fatal alert has been received.
GnuTLS: received alert [40]: Handshake failed
Unable to establish SSL connection.
%
> I'm marking this as fixed for 1.16 because there were no other bug
> reports like this.
Do you know any user who could successfully use client certs with wget?
I am including below the usual reportbug package/etc. info for the
unstable box used to run the first test from this mail.
Regards
--
Florent
-- System Information:
Debian Release: stretch/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.1.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)
Versions of packages wget depends on:
ii libc6 2.19-19
ii libgnutls-deb0-28 3.3.17-1
ii libidn11 1.32-1
ii libnettle6 3.1.1-4
ii libpcre3 2:8.35-7.1
ii libpsl0 0.8.0-1
ii libuuid1 2.26.2-9
ii zlib1g 1:1.2.8.dfsg-2+b1
Versions of packages wget recommends:
ii ca-certificates 20150426
wget suggests no packages.
-- no debconf information
