package: wget
version: 1.13.4-2
version: 1.13.4-3
arch: i386 amd64

Issuing a wget to an https scheme that has a bad cert(both expired,
and hostname != cert_host), then setting a timeout to 0, causes wget
to segfault.

==
10:53:19 -0600 adam@zoot:~(zoot)$ wget -T 0 --no-check-certificate
"https://demo-stable.ofbiz.apache.org:8443/ecommerce/control/main";
--2013-01-29 10:53:53--
https://demo-stable.ofbiz.apache.org:8443/ecommerce/control/main
Resolving demo-stable.ofbiz.apache.org
(demo-stable.ofbiz.apache.org)... 140.211.11.50
Connecting to demo-stable.ofbiz.apache.org
(demo-stable.ofbiz.apache.org)|140.211.11.50|:8443... connected.
WARNING: The certificate of `demo-stable.ofbiz.apache.org' is not trusted.
WARNING: The certificate of `demo-stable.ofbiz.apache.org' hasn't got
a known issuer.
The certificate has expired
The certificate's owner does not match hostname
`demo-stable.ofbiz.apache.org'
HTTP request sent, awaiting response... Segmentation fault
==


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to