<div dir="ltr">Upgraded to GNU Wget 1.15 built on solaris2.10<div><br></div><div>getting same errors.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Mar 23, 2015 at 10:41 AM, Jan Holzhueter <span dir="ltr"><<a href="mailto:jh@baltic-online.de" target="_blank">jh@baltic-online.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
Am 23.03.15 um 14:55 schrieb Martin Paul:<br>
<span class="">> Am 23.03.2015 um 14:27 schrieb Ken Herold:<br>
>> I get for example:<br>
>><br>
>> Resolving aru-akam-secure.oracle.com... 104.64.51.207<br>
>> Connecting to <a href="http://aru-akam-secure.oracle.com" target="_blank">aru-akam-secure.oracle.com</a>|104.64.51.207|:443... connected.<br>
>> ERROR: cannot verify <a href="http://aru-akam-secure.oracle.com" target="_blank">aru-akam-secure.oracle.com</a>'s certificate, issued by<br>
>> `/C=US/O=GeoTrust, Inc./CN=GeoTrust SSL CA':<br>
>> Unable to locally verify the issuer's authority.<br>
><br>
> Thanks!<br>
><br>
>> ERROR: certificate common name `<a href="http://download-secure.oracle.com" target="_blank">download-secure.oracle.com</a>' doesn't match<br>
>> requested host name `<a href="http://aru-akam-secure.oracle.com" target="_blank">aru-akam-secure.oracle.com</a>'.<br>
><br>
> I'm not sure whether this a problem with the certificate itself or with<br>
> wget. Anybody?<br>
<br>
</span>the cert looks ok it does have a Common name and a few Alternatives<br>
Names: (SAN)<br>
<br>
Common names <a href="http://download-secure.oracle.com" target="_blank">download-secure.oracle.com</a><br>
Alternative names <a href="http://epd-akam-intl-secure.oracle.com" target="_blank">epd-akam-intl-secure.oracle.com</a><br>
<a href="http://epd-akam-us-secure.oracle.com" target="_blank">epd-akam-us-secure.oracle.com</a> <a href="http://dev-epd-akam-intl-secure.oracle.com" target="_blank">dev-epd-akam-intl-secure.oracle.com</a><br>
<a href="http://dev-epd-akam-us-secure.oracle.com" target="_blank">dev-epd-akam-us-secure.oracle.com</a> <a href="http://aru-akam-secure.oracle.com" target="_blank">aru-akam-secure.oracle.com</a><br>
<a href="http://failover-aru-akam-secure.oracle.com" target="_blank">failover-aru-akam-secure.oracle.com</a> <a href="http://dev-aru-akam-secure.oracle.com" target="_blank">dev-aru-akam-secure.oracle.com</a><br>
<a href="http://failover-dev-aru-akam-secure.oracle.com" target="_blank">failover-dev-aru-akam-secure.oracle.com</a> <a href="http://download-secure.oracle.com" target="_blank">download-secure.oracle.com</a><br>
<br>
<a href="https://www.ssllabs.com/ssltest/analyze.html?d=aru-akam-secure.oracle.com" target="_blank">https://www.ssllabs.com/ssltest/analyze.html?d=aru-akam-secure.oracle.com</a><br>
<br>
Checking here: <a href="https://bugzilla.redhat.com/show_bug.cgi?id=674186" target="_blank">https://bugzilla.redhat.com/show_bug.cgi?id=674186</a><br>
<br>
Looks like older wget dosn't work with SAN certificates.<br>
<br>
so either update wget or use --no-check-certificate (which of cause is<br>
not nice)<br>
<br>
Greetings<br>
<span class="HOEnZb"><font color="#888888">Jan<br>
<br>
<br>
<br>
<br>
<br>
<br>
--<br>
Jan Holzhüter Baltic Online Computer GmbH<br>
Firmensitz: Koppelberg 4-6, 24159 Kiel<br>
<a href="http://www.baltic-online.de" target="_blank">http://www.baltic-online.de</a> Tel.: <a href="tel:%2B49%20%280%29431%2054003-0" value="+49431540030">+49 (0)431 54003-0</a><br>
Geschäftsführer: Erik Cickovskis, Amtsgericht Kiel, HRB 3756<br>
<br>
</font></span></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Ken Herold<br>Director, Library Information Systems<br>Hamilton College<br>198 College Hill Road<br>Clinton, NY 13323<br>315-859-4487<br><a href="mailto:kherold@hamilton.edu" target="_blank">kherold@hamilton.edu</a></div>
</div>