![wget doesn't accept google's certificate [closed]](https://track.liberty.io/uploads/wget-doesn-039-t-accept-google-039-s-certificate-closed_720.jpg)
I use wget in a cron job to download my google calendar. I know it was still working last week. Today I noticed it doesn't anymore. wget won't accept google's certificate:
$ wget --debug > DEBUG output created by Wget 1.12 on linux-gnu. --2013-07-26 12:36:31-- Resolving 109.105.109.234, 109.105.109.223, 109.105.109.208, ... Caching => 109.105.109.234 109.105.109.223 109.105.109.208 109.105.109.249 109.105.109.229 109.105.109.219 109.105.109.245 109.105.109.227 109.105.109.240 109.105.109.230 109.105.109.241 109.105.109.212 109.105.109.251 109.105.109.216 109.105.109.238 109.105.109.218 2a00:1450:400f:803::1012 Connecting to connected. Created socket 3. Releasing 0x09046cf8 (new refcount 1). Initiating SSL handshake. Handshake successful; connected socket 3 to SSL handle 0x09047090 certificate: subject: /C=US/ST=California/O=Google Inc/CN=google.com issuer: /C=US/O=Google Inc/CN=Google Internet Authority ERROR: certificate common name `google.com' doesn't match requested host name ` To connect to insecurely, use `--no-check-certificate'. Closed 3/SSL 0x09047090 So wget doesn't want to match google.com with Which is weird. The certificates seem to be fine. curl is working:
curl -v * About to connect() to port 443 (#0) * Trying 109.105.109.219... connected * Connected to (109.105.109.219) port 443 (#0) * successfully set certificate verify locations: * CAfile: none CApath: /etc/ssl/certs * SSLv3, TLS handshake, Client hello (1): * SSLv3, TLS handshake, Server hello (2): * SSLv3, TLS handshake, CERT (11): * SSLv3, TLS handshake, Server key exchange (12): * SSLv3, TLS handshake, Server finished (14): * SSLv3, TLS handshake, Client key exchange (16): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSLv3, TLS change cipher, Client hello (1): * SSLv3, TLS handshake, Finished (20): * SSL connection using ECDHE-RSA-RC4-SHA * Server certificate: * subject: C=US; ST=California; L=Mountain View; O=Google Inc; CN= * start date: 2013-07-12 08:56:36 GMT * expire date: 2013-10-31 23:59:59 GMT * subjectAltName: matched * issuer: C=US; O=Google Inc; CN=Google Internet Authority * SSL certificate verify ok. > GET /calendar/ical/<private-id>/basic.ics HTTP/1.1 > User-Agent: curl/7.21.6 (i686-pc-linux-gnu) libcurl/7.21.6 OpenSSL/1.0.0e zlib/1.2.3.4 libidn/1.22 librtmp/2.3 > Host: > Accept: */* > < HTTP/1.1 200 OK < Expires: Fri, 01 Jan 1990 00:00:00 GMT < Date: Fri, 26 Jul 2013 10:42:18 GMT < Content-Type: text/calendar; charset=UTF-8 < Cache-Control: no-cache, no-store, max-age=0, must-revalidate < Pragma: no-cache < X-Content-Type-Options: nosniff < X-Frame-Options: SAMEORIGIN < X-XSS-Protection: 1; mode=block < Server: GSE < Transfer-Encoding: chunked < ... It's not terrible, I can just use curl instead. But still - why isn't it working?
My system is:
$ wget --version > GNU Wget 1.12 built on linux-gnu. +digest +ipv6 +nls +ntlm +opie +md5/openssl +https -gnutls +openssl -iri Wgetrc: /etc/wgetrc (system) Locale: /usr/share/locale Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc" -DLOCALEDIR="/usr/share/locale" -I. -I../lib -g -O2 -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall Link: gcc -g -O2 -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall -Wl,-Bsymbolic-functions /usr/lib/libssl.so /usr/lib/libcrypto.so -ldl -lrt ftp-opie.o openssl.o http-ntlm.o gen-md5.o ../lib/libgnu.a Copyright (C) 2009 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later < This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Originally written by Hrvoje Niksic <>. Currently maintained by Micah Cowan <>. Please send bug reports and questions to <>. $ uname -a > Linux andrEee 3.0.0-32-generic #51-Ubuntu SMP Thu Mar 21 15:51:26 UTC 2013 i686 i686 i386 GNU/Linux $ lsb_release -a > No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 11.10 Release: 11.10 Codename: oneiric 1 Answer
This is a known bug in wget 1.12.
As you are running an unsupported version of ubuntu the best course of action would be to upgrade to a supported version . wget 1.14 is the latest version in ubuntu and has fixed this bug.
