<div dir="ltr"><div><div><div><div>Thanks Martin,<br></div>    i don't understand why with wget 1.18 the SSL Handshake failed and with 1.16 work fine...<br></div><div>When try to connect with the wget 1.18 client version, the apache 2 (httpd) process core...<br><br><b>WGET 1.16</b><br><br><span style="font-family:monospace,monospace"># wget -S -O /dev/null --no-check-certificate --debug <a href="https://pdpcasrv1">https://pdpcasrv1</a><br>DEBUG output created by Wget 1.16 on solaris2.10.<br><br>--2017-02-17 10:47:16--  <a href="https://pdpcasrv1/">https://pdpcasrv1/</a><br>Resolving pdpcasrv1... 10.41.152.75<br>Caching pdpcasrv1 => 10.41.152.75<br>Connecting to pdpcasrv1|10.41.152.75|:443... connected.<br>Created socket 5.<br>Releasing 0x0009ce70 (new refcount 1).<br>Initiating SSL handshake.<br>Handshake successful; connected socket 5 to SSL handle 0x000a19b0<br>certificate:<br>  subject: /C=IT/L=Location</span><span style="font-family:monospace,monospace">/O=Organization/OU=Organization Unit/CN=pdpcasrv1/emailAddress=<a href="mailto:myemail@company.com">myemail@company.com</a><br>  issuer:  /C=IT/L=</span><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace">Location</span>/O=</span><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace">Organization</span>/OU=</span><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace">Organization Unit</span>/CN=pdpcasrv1/emailAddress=</span><br><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace"><a href="mailto:myemail@company.com">myemail@company.com</a><br></span>WARNING: cannot verify pdpcasrv1's certificate, issued by '/C=IT/L=</span><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace">Location</span>/O=</span><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace">Organization</span></span>/OU=</span><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace">Organization Unit</span>/CN=pdpcasrv1/emailAddress=</span><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace"><span style="font-family:monospace,monospace"><a href="mailto:myemail@company.com">myemail@company.com</a></span></span>':<br>  Self-signed certificate encountered.<br><br>---request begin---<br>GET / HTTP/1.1<br>User-Agent: Wget/1.16 (solaris2.10)<br>Accept: */*<br>Host: pdpcasrv1<br>Connection: Keep-Alive<br><br>---request end---<br>HTTP request sent, awaiting response... <br>---response begin---<br>HTTP/1.1 200 OK<br>Date: Fri, 17 Feb 2017 09:47:16 GMT<br>Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/1.0.1u DAV/2<br>Last-Modified: Fri, 17 Feb 2017 09:15:17 GMT<br>ETag: "3766-51fb8-5a225340"<br>Accept-Ranges: bytes<br>Content-Length: 335800<br>Keep-Alive: timeout=15, max=100<br>Connection: Keep-Alive<br>Content-Type: text/html<br><br>---response end---<br><br>  HTTP/1.1 200 OK<br>  Date: Fri, 17 Feb 2017 09:47:16 GMT<br>  Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/1.0.1u DAV/2<br>  Last-Modified: Fri, 17 Feb 2017 09:15:17 GMT<br>  ETag: "3766-51fb8-5a225340"<br>  Accept-Ranges: bytes<br>  Content-Length: 335800<br>  Keep-Alive: timeout=15, max=100<br>  Connection: Keep-Alive<br>  Content-Type: text/html<br>Registered socket 5 for persistent reuse.<br>Length: 335800 (328K) [text/html]<br>Saving to: '/dev/null'<br><br>/dev/null                              100%[=============================================================================>] 327.93K  --.-KB/s   in 0.03s  <br><br>2017-02-17 10:47:16 (11.5 MB/s) - '/dev/null' saved [335800/335800]<br># <br><br><br>WGET 1.18<br><br><br># wget -S -O /dev/null --no-check-certificate --debug <a href="https://pdpcasrv1">https://pdpcasrv1</a><br>DEBUG output created by Wget 1.18 on solaris2.10.<br><br>Reading HSTS entries from //.wget-hsts<br>--2017-02-17 10:46:42--  <a href="https://pdpcasrv1/">https://pdpcasrv1/</a><br>Resolving pdpcasrv1... 10.41.152.75<br>Caching pdpcasrv1 => 10.41.152.75<br>Connecting to pdpcasrv1|10.41.152.75|:443... connected.<br>Created socket 5.<br>Releasing 0x000ae3a0 (new refcount 1).<br>Initiating SSL handshake.<br>SSL handshake failed.<br>Closed fd 5<br>Unable to establish SSL connection.<br># </span><br><br></div>Any idea?<br></div>Many thanks in advance<br></div>Michele<br><div><div><div><br></div></div></div></div><div class="gmail_extra"><br><div class="gmail_quote">2017-02-16 9:32 GMT+01:00 Martin Paul <span dir="ltr"><<a href="mailto:martin.paul@univie.ac.at" target="_blank">martin.paul@univie.ac.at</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<span class=""><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
   i have a problem with wget ver.1.18 (125215-07). No problem with a previous<br>
revision, wget 1.16 (125215-06). My PCA proxy (pdpcasrv1) have a Self  Signed<br>
Certificate (https).<br>
</blockquote>
<br></span>
Just to be sure, I tried wget 1.18 with Oracle's patch download server - this still works fine.<br>
<br>
To find out why wget 1.18 doesn't like to talk HTTPS to your local PCA proxy, I guess you'll need to collect wget debug information (put --debug in PCA's "wgetopt"-option or in a wgetrc or the like, or try wget outside of PCA) or check the log files of your PCA proxy web server.<span class="HOEnZb"><font color="#888888"><br>
<br>
Martin.<br>
<br>
</font></span></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">--<br>Michele Vecchiato<br>Fax +39 06 9186 7019 | Mob.+39 335 633 6950<br>e-mail: <a href="mailto:michele.vecchiato@gmail.com" target="_blank">michele.vecchiato@gmail.com</a><br>LinkedIn  pub profile <a href="http://www.linkedin.com/in/michelevecchiato" target="_blank">http://www.linkedin.com/in/michelevecchiato</a><br><br>*** Per favore considerate l' ambiente prima di stampare questa e-mail. Grazie ***</div>
</div>