wget error with certificates

graysky · 2021-02-23 11:30:42

Anyone else getting errors relating to trust? Seems to be affecting wget as curl seems fine.

% wget https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.100-rc1.xz
--2021-02-23 06:29:23--  https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.4.100-rc1.xz
Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
Resolving mirrors.edge.kernel.org (mirrors.edge.kernel.org)... 147.75.197.195, 2604:1380:1:3600::1
Connecting to mirrors.edge.kernel.org (mirrors.edge.kernel.org)|147.75.197.195|:443... connected.
ERROR: The certificate of ‘mirrors.edge.kernel.org’ is not trusted.
ERROR: The certificate of ‘mirrors.edge.kernel.org’ doesn't have a known issuer.

Last edited by graysky (2021-02-23 11:42:02)

progandy · 2021-02-23 12:29:22

I have it too. I remember a bug report about duplicate certificates in the chain causing problems and Let's Encrypt now automatically embedding intermediate certificates. If you still append the intermediate cert manually, then you have it twice.

Edit: I seem to remember that it was about openssl or p11-kit? Since curl/openssl works fine that may have been fixed, but a similar bug exists in gnutls? It was gnutls

Last edited by progandy (2021-02-23 13:31:39)

graysky · 2021-02-23 12:40:25

I searched for open reports against our packages (wget, ca-cer*) but found nothing. Is the report you're remembering in our system or upstream?

seth · 2021-02-23 13:12:57

https://bugs.archlinux.org/task/69003

Arch Linux

#1 2021-02-23 11:30:42

wget error with certificates

#2 2021-02-23 12:29:22

Re: wget error with certificates

#3 2021-02-23 12:40:25

Re: wget error with certificates

#4 2021-02-23 13:12:57

Re: wget error with certificates

Board footer