Your message dated Tue, 18 Aug 2015 11:29:26 +0200
with message-id <[email protected]>
and subject line #743290 wget/gnutls fails to validate Subject Alternative Names
has caused the Debian Bug report #743290,
regarding wget/gnutls fails to validate Subject Alternative Names
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
743290: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=743290
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: wget
Version: 1.13.4-3+deb7u1
Severity: important

Hi!

Doing a wget from raw.githubusercontent.com will cause a TLS warning:

robe@tokamak ~/tmp % openssl x509 -in <(openssl s_client -connect 
raw.githubusercontent.com:443 -prexit 2>/dev/null) -text | grep -B 1 
githubusercontent
            X509v3 Subject Alternative Name: 
                DNS:www.github.com, DNS:*.github.com, DNS:*.github.io, 
DNS:*.githubusercontent.com
robe@tokamak ~/tmp % wget https://raw.githubusercontent.com/
--2014-04-01 15:30:42--  https://raw.githubusercontent.com/
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 185.31.17.133
Connecting to raw.githubusercontent.com 
(raw.githubusercontent.com)|185.31.17.133|:443... connected.
GnuTLS: A TLS warning alert has been received.
Unable to establish SSL connection.
4 robe@tokamak ~/tmp %

The same is true for raw.github.io, raw.github.com works (all served from 
fastly CDN).

best,
Michael

-- System Information:
Debian Release: 7.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 2.6.32-openvz-042stab081.3-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages wget depends on:
ii  dpkg           1.16.12
ii  install-info   4.13a.dfsg.1-10
ii  libc6          2.13-38+deb7u1
ii  libgcrypt11    1.5.0-5+deb7u1
ii  libgnutls26    2.12.20-8+deb7u1
ii  libgpg-error0  1.10-3.1
ii  libidn11       1.25-2
ii  zlib1g         1:1.2.7.dfsg-13

wget recommends no packages.

wget suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
tags 743290 - upstream wheezy
tags 743290 + squeeze
notfound 743290 1.15-1
thanks

Hello,

marking the bug as squeeze bug (wget 1.13..). wget 1.16 in jessie and
later works fine.

Regards

        Noël

-- 
Noël Köthe <noel debian.org>
Debian GNU/Linux, www.debian.org

Attachment: signature.asc
Description: This is a digitally signed message part


--- End Message ---

Reply via email to