On 19/03/2014 09:15, Stefan Baur wrote:
Am 19.03.2014 10:09, schrieb Stefan Baur:
Hi List,
is there a particular reason why wgetting http://pfsense.org/ip.php
gives a blank result? Works just fine when using a regular GUI browser
like Firefox, but not on the command line with wget.
Oh. I just noticed it's redirecting to https, and wget throws this error:
ERROR: The certificate of `www.pfsense.org' is not trusted.
What do I have to install to make it work?
Depends what platform you are running wget on. On OSX, "wget
https://pfsense.org/ip.php"; works fine for me. That's with wget 1.15.
"openssl s_client -connect pfsense.org:443" will show you what
certificate it has (it's GlobalSign)
If you are using an Ubuntu/Debian flavour of Linux, then check you have
the ca-certificates package installed, and that /etc/ssl/certs contains
a bunch of symlinks. Then, check if
wget https://dropbox.com/
is accepted but
wget https://pfsense.org/
is not.
That's a problem I can replicate with Debian Wheezy. I find that
openssl s_client -CApath /etc/ssl/certs -connect pfsense.org:443
is happy, so my guess it's a problem with wget 1.13.4 - maybe it doesn't
do SNI. In that case, the solution is to change to a less broken client.
Try:
apt-get install curl
curl https://pfsense.org/ >index.html
which works for me.
By the way: pfsense.org has a AAAA record but refuses connections on
port 443 on IPv6.
$ telnet pfsense.org 443
Trying 2610:160:11:11::69...
telnet: connect to address 2610:160:11:11::69: Connection refused
Trying 208.123.73.69...
Connected to pfsense.org.
Regards,
Brian.
_______________________________________________
List mailing list
[email protected]
https://lists.pfsense.org/mailman/listinfo/list
