> On December 5, 2016 at 9:55 PM Joseph Tam <jtam.h...@gmail.com> wrote: > > > > Timo announced: > > > https://dovecot.org/releases/2.2/dovecot-2.2.27.tar.gz > > https://dovecot.org/releases/2.2/dovecot-2.2.27.tar.gz.sig > > > > Note that the download URLs are now https with a certificate from Let's > > Encrypt. > > wget complained about > > ERROR: certificate common name `wiki.dovecot.org' doesn't match > requested host name `dovecot.org'. > > and indeed, the certificate CN and download URL is mismatched. The nice thing > about Let's Encrypt is that it's easy to (re)generate the certitcate with SANs > to get rid of this mismatch. > > Browser didn't complain though. > > Joseph Tam <jtam.h...@gmail.com>
Despite what wget says the cert does have subject alternate name correctly specified. Try adding cacert dir or file option. I recall wget being "helpful" and reporting this for all cert errors if primary CN and requested name disagree. Aki
