This is fixed at least in 12.04. When I use it against gnutls-serv:
$ elinks -dump -eval 'set connection.ssl.cert_verify = 0'
https://localhost:4443/
This is [1]GnuTLS
...
$ elinks -dump -eval 'set connection.ssl.cert_verify = 1'
https://localhost:4443/
ELinks:
Also tested with apache:
$ elinks -dump -eval 'set connection.ssl.cert_verify = 0'
https://sec-precise-amd64/
It works!
This is the default web page for this server.
The web server software is running but no content has been added,
yet.
$ elinks -dump
** Changed in: elinks (Ubuntu)
Assignee: (unassigned) = 杨敏 (mandy9337)
** Visibility changed to: Private
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to elinks in Ubuntu.
https://bugs.launchpad.net/bugs/769354
Title:
elinks
** Changed in: elinks (Ubuntu)
Assignee: 杨敏 (mandy9337) = (unassigned)
** Visibility changed to: Public
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to elinks in Ubuntu.
https://bugs.launchpad.net/bugs/769354
Title:
elinks
** This bug has been flagged as a security vulnerability
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to elinks in Ubuntu.
https://bugs.launchpad.net/bugs/769354
Title:
elinks accepts self-signed ssl certificates without warning
To
Confirmed in Natty.
** Changed in: elinks (Ubuntu)
Status: New = Confirmed
** Changed in: elinks (Ubuntu)
Importance: Undecided = Medium
** Changed in: elinks (Ubuntu)
Importance: Medium = High
--
You received this bug notification because you are a member of Ubuntu
Server Team,
** Tags added: security
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to elinks in Ubuntu.
https://bugs.launchpad.net/bugs/769354
Title:
elinks accepts self-signed ssl certificates without warning
--
Ubuntu-server-bugs mailing list
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to elinks in Ubuntu.
https://bugs.launchpad.net/bugs/769354
Title:
elinks accepts self-signed ssl certificates without warning
--
Ubuntu-server-bugs mailing list