i think i found the problem

problem exist in 1.14 version but not 1.13
http://ftp.de.debian.org/debian/pool/main/w/wget/wget_1.14.orig.tar.gz
in this source the file "gnutls.c"
there is following

  /* We set the server name but only if it's not an IP address. */
  if (! is_valid_ip_address (hostname))
    {
      gnutls_server_name_set (session, GNUTLS_NAME_DNS, hostname,
                              strlen (hostname));
    }

exactly speaking not the certificate issue. however affects only if using dns 
name (not ip number) and ssl connection.
in my knowledge certificate check shouldn't check "servernames" (being 
different from certificate's hostname) 

my recommendation is to remove lines above.
other solution might be to have some kind of ignore option either part of --no-
check-certificate or additional option.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to