Re: Problem with wget 1.11. Please help

2008-04-04 Thread Micah Cowan
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Amit Patel wrote:
 Ya. I have checked it properly. It checks certificates. If i don't
 specify /etc/ca-bundle.crt with my working version of 1.10.2, it
 provides Self-signed certificate encountered error and fails.

Er, I'm not sure, but I think I would expect that to be a problem,
regardless of whether /etc/ca-bundle.crt.

Could you please verify whether a stock wget-1.10.2, configured and
installed from our source tarballs (not RedHat's), available at
ftp.gnu.org/gnu/wget/wget-1.10.2.tar.gz ?

- --
Micah J. Cowan
Programmer, musician, typesetting enthusiast, gamer,
and GNU Wget Project Maintainer.
http://micah.cowan.name/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFH9isf7M8hyUobTrERApgfAJ4801HnL9/5W4QdcLMF87KNnutHJgCeP2bm
8rU8dsRxa4s76i/a3pnaeZ4=
=MLQZ
-END PGP SIGNATURE-


Problem with wget 1.11. Please help

2008-04-03 Thread Amit Patel

Hi  Hrvoje Niksic / Micah Cowan

I am having strange problem with wget 1.11 version. While accessing a 
webserver which is running on Verisign issued Trial certificates, wget 
1.11 gives following error even though that certificate is valid.


[EMAIL PROTECTED]:/root $ wget --ca-certificate=/etc/ca-bundle.crt 
https://rw01246.einfochips.com*


--2008-04-04 21:22:57--  https://rw01246.einfochips.com/
Resolving rw01246.einfochips.com... 10.101.1.246
Connecting to rw01246.einfochips.com|10.101.1.246|:443... connected.
ERROR: cannot verify rw01246.einfochips.com's certificate, issued by 
`/C=US/O=VeriSign, Inc./OU=For Test Purposes Only.  No 
assurances./OU=Terms of use at https://www.verisign.com/cps/testca 
(c)05/CN=VeriSign Trial Secure Server Test CA':

/*  certificate signature failure*/
To connect to rw01246.einfochips.com insecurely, use 
`--no-check-certificate'.

Unable to establish SSL connection.


However , if i try same with wget version 1.10.2  which is on another 
redhat machine, it is working perfect. I am not able to understand where 
the problem is. If you can spare some time and  help  help me to solve 
the issue , that would be great.


Following is the output of ldd command on both the machines. This may 
help you in debugging the issue.


*For wget version 1.11 (This version is having problem.)*

   libdl.so.2 = /lib/libdl.so.2 (0x40019000) [actual file - 
libdl-2.2.4.so ]
   librt.so.1 = /lib/librt.so.1 (0x4001d000) [actual file - 
librt-2.2.4.so ]
   libssl.so.0 = /usr/lib/libssl.so.0 (0x4003) [actual file - 
libssl.so.0.9.5a ]
   libcrypto.so.0 = /usr/lib/libcrypto.so.0 (0x4005e000) [actual 
file - libcrypto.so.0.9.5a ]
   libc.so.6 = /lib/libc.so.6 (0x4011a000) [actual file - 
libc-2.2.4.so ]
   libpthread.so.0 = /lib/libpthread.so.0 (0x40233000) [actual 
file -  libpthread-0.9.so ]
   /lib/ld-linux.so.2 = /lib/ld-linux.so.2 (0x4000) [actual 
file - ld-2.2.4.so ]


*For wget version 1.10.2 (This works fine.)*  


   linux-gate.so.1 =  (0x0064c000)
   libssl.so.6 = /lib/libssl.so.6 (0x0045b000) [actual file - 
libssl.so.0.9.8b]
   libcrypto.so.6 = /lib/libcrypto.so.6 (0x001dd000) [actual file 
- libcrypto.so.0.9.8b]
   libdl.so.2 = /lib/libdl.so.2 (0x00c4) [actual file - 
libdl-2.5.so]
   libz.so.1 = /usr/lib/libz.so.1 (0x00c88000) [actual file - 
libz.so.1.2.3]
   librt.so.1 = /lib/i686/nosegneg/librt.so.1 (0x060f9000) [actual 
file - librt-2.5.so]
   libc.so.6 = /lib/i686/nosegneg/libc.so.6 (0x00afd000) [actual 
file - libc-2.5.so]
   libgssapi_krb5.so.2 = /usr/lib/libgssapi_krb5.so.2 (0x00373000) 
[actual file - libgssapi_krb5.so.2.2]
   libkrb5.so.3 = /usr/lib/libkrb5.so.3 (0x003a) [actual file 
- libkrb5.so.3.2]
   libcom_err.so.2 = /lib/libcom_err.so.2 (0x0033b000) [actual 
file - libcom_err.so.2.1]
   libk5crypto.so.3 = /usr/lib/libk5crypto.so.3 (0x00433000) 
[actual file - libk5crypto.so.3.0]
   libresolv.so.2 = /lib/libresolv.so.2 (0x00326000) [actual file 
- libresolv-2.5.so]

   /lib/ld-linux.so.2 (0x0012e000)
   libpthread.so.0 = /lib/i686/nosegneg/libpthread.so.0 
(0x00c6f000) [actual file - libpthread-2.5.so]
   libkrb5support.so.0 = /usr/lib/libkrb5support.so.0 (0x00429000) 
[actual file - libkrb5support.so.0.1]



Waiting for positive response.

Thanks in advance,
Amit Patel
--
_
Disclaimer: This e-mail message and all attachments transmitted with it
are intended solely for the use of the addressee and may contain legally
privileged and confidential information. If the reader of this message
is not the intended recipient, or an employee or agent responsible for
delivering this message to the intended recipient, you are hereby
notified that any dissemination, distribution, copying, or other use of
this message or its attachments is strictly prohibited. If you have
received this message in error, please notify the sender immediately by
replying to this message and please delete it from your computer. Any
views expressed in this message are those of the individual sender
unless otherwise stated.Company has taken enough precautions to prevent
the spread of viruses. However the company accepts no liability for any
damage caused by any virus transmitted by this email.
__



Re: Problem with wget 1.11. Please help

2008-04-03 Thread Micah Cowan
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Amit Patel wrote:
 Hi  Hrvoje Niksic / Micah Cowan
 
 I am having strange problem with wget 1.11 version. While accessing a
 webserver which is running on Verisign issued Trial certificates, wget
 1.11 gives following error even though that certificate is valid.
 
 [EMAIL PROTECTED]:/root $ wget --ca-certificate=/etc/ca-bundle.crt
 https://rw01246.einfochips.com*

snip

 However , if i try same with wget version 1.10.2  which is on another
 redhat machine, it is working perfect. I am not able to understand where
 the problem is. If you can spare some time and  help  help me to solve
 the issue , that would be great.

RedHat has been known to modify Wget fairly heavily. Recent versions of
RedHat's Wget 1.10.2 differ very substantially from ours. It would be
more useful to see how a wget-1.10.2 that was built straight from our
source packages would compare.

Is /etc/ca-bundle.crt exactly the same on both systems?

And: are you sure the working version doesn't have check_certificate
= off in either the /etc/wgetrc or ~/.wgetrc?

...If you can verify all of that, then I'm not sure how to go forward:
we'd need access to try that server, I guess (which doesn't resolve, for
me).

Also: Hrvoje and I are both subscribed to this list; no need to Cc us.

It's recommended, when posting to lists, that you choose a subject
header that describes the problem you're having, rather than just
describing that you have a problem. Valid SSL certificate not accepted
would have been a reasonable subject.

- --
Micah J. Cowan
Programmer, musician, typesetting enthusiast, gamer,
and GNU Wget Project Maintainer.
http://micah.cowan.name/
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFH9RET7M8hyUobTrERArgYAJ9MwEOct/mhd0ic9/HzMTvuLXV74ACeJpvK
Ub3NwgJB5fLe4Z11agbCOWk=
=J4Pg
-END PGP SIGNATURE-