Re: [bug #65009] wget refuses to use legitimate self signed CAs provided with the --ca-certificate flag

2024-01-25 Thread Jeffrey Walton
On Mon, Dec 11, 2023 at 2:32 PM Jeffrey Walton wrote: > > On Mon, Dec 11, 2023 at 9:54 AM anonymous wrote: > > > > URL: > > <https://savannah.gnu.org/bugs/?65009> > > > > Summary: wget refuses to use legitimate self signed CAs &

Re: [bug #65009] wget refuses to use legitimate self signed CAs provided with the --ca-certificate flag

2023-12-11 Thread Jeffrey Walton
On Mon, Dec 11, 2023 at 9:54 AM anonymous wrote: > > URL: > <https://savannah.gnu.org/bugs/?65009> > > Summary: wget refuses to use legitimate self signed CAs > provided with the --ca-certificate flag >Group: GNU Wget >

[bug #65009] wget refuses to use legitimate self signed CAs provided with the --ca-certificate flag

2023-12-11 Thread anonymous
URL: <https://savannah.gnu.org/bugs/?65009> Summary: wget refuses to use legitimate self signed CAs provided with the --ca-certificate flag Group: GNU Wget Submitter: None Submitted: Mon 11 Dec 2023 02:53:19

Re: wget refuses to use legitimate self signed CAs provided with the --ca-certificate flag

2023-12-09 Thread Jeffrey Walton
On Sat, Dec 9, 2023 at 2:38 AM David Hadas wrote: > > Using mTLS with self signed certificates with various tools, it seems wget > misbehaves and does not add a legitimate self signed CA provided with the > --ca-certificate flag to the ca pool used internally. > (I expect that the same issue

Re: wget refuses to use legitimate self signed CAs provided with the --ca-certificate flag

2023-12-09 Thread Tim Rühsen
Hi, yeah, I'd expect --ca-certificate should work. It would be interesting to see whether --ca-directory works for you. Which TLS library is your wget binary linked with? (use "wget --version" and there is either openssl or gnutls listed) Regards, Tim On 12/9/23 08:11, David Hadas wrote:

wget refuses to use legitimate self signed CAs provided with the --ca-certificate flag

2023-12-08 Thread David Hadas
Hi, Using mTLS with self signed certificates with various tools, it seems wget misbehaves and does not add a legitimate self signed CA provided with the --ca-certificate flag to the ca pool used internally. (I expect that the same issue exists with TLS). The CA pem is legitimate and well