URL: <https://savannah.gnu.org/bugs/?58097>
Summary: Wget doesn't download intermediate certificates when not supplied in the response Project: GNU Wget Submitted by: None Submitted on: Wed 01 Apr 2020 11:48:34 PM UTC Category: Feature Request Severity: 3 - Normal Priority: 5 - Normal Status: None Privacy: Public Assigned to: None Originator Name: Michael Clark Originator Email: clark.michael.c+wgetb...@gmail.com Open/Closed: Open Release: 1.20 Discussion Lock: Any Operating System: GNU/Linux Reproducibility: Every Time Fixed Release: None Planned Release: None Regression: No Work Required: None Patch Included: No _______________________________________________________ Details: When using `wget` to connect to an Apache server which I believe lacks the `SSLCertificateChainFire` directive (www.xocolatl.com; I've contacted the server administrator to request a fix, so might not work indefinitely) using a Let's Encrypt certificate, `wget` reports (from running `wget https://www.xocolatl.com/`): > ERROR: The certificate of ‘www.xocolatl.com’ is not trusted. > ERROR: The certificate of ‘www.xocolatl.com’ doesn't have a known issuer. The site works fine in Chrome on Linux, and other sites using Let's Encrypt certificates work fine on my machine using `wget`. https://www.ssllabs.com/ssltest/analyze.html?d=www.xocolatl.com&s=116.202.171.177 shows that the intermediate certificate requires an extra download, and https://discussions.qualys.com/thread/12098 reports essentially the same issue. What I expected: `wget` would connect to the server and get the page as usual, as works in my browser. Can we make `wget` do the same as browsers, and fetch intermediate certificates? How difficult would that be? _______________________________________________________ File Attachments: ------------------------------------------------------- Date: Wed 01 Apr 2020 11:48:34 PM UTC Name: wget-d-xocolatl.com.txt Size: 776B By: None Debug output <http://savannah.gnu.org/bugs/download.php?file_id=48730> _______________________________________________________ Reply to this item at: <https://savannah.gnu.org/bugs/?58097> _______________________________________________ Message sent via Savannah https://savannah.gnu.org/