[Bug 1580700] Re: Add Let's Encrypt Authority to Package

[Marc Deslauriers]

I've uploaded a fixed wget package to precise-proposed for processing by
the SRU team.

** Also affects: wget (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Changed in: wget (Ubuntu)
       Status: New => Fix Released

** Changed in: wget (Ubuntu Precise)
       Status: New => Confirmed

** Changed in: wget (Ubuntu Precise)
     Assignee: (unassigned) => Marc Deslauriers (mdeslaur)

** Description changed:

+ [Impact]
+ wget in Ubuntu 12.04 doesn't have support for TLS Server Name Indication, which makes it incompatible with certain sites, includes sites that use the Let's Encrypt Authority.
+ 
+ The updated package fixes the issue with a backported patch from wget
+ 1.14.
+ 
+ [Test Case]
+ 1- wget https://www.x.org
+ 2- Connection should succeed, instead of getting an error (ERROR: no certificate subject alternative name matches)
+ 
+ [Regression Potential]
+ Commit is simple. If broken, could possibly break SSL support in wget.
+ 
+ 
+ Original report:
+ 
  Let's Encrypt Authority should be added to CA-certificates.
  https://www.X.org is now using a cert from this CA, wget fails when
  connecting to X.org.

** Summary changed:

- Add Let's Encrypt Authority to Package
+ wget in 12.04 does not support SNI

** Changed in: wget (Ubuntu Precise)
       Status: Confirmed => In Progress

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to wget in Ubuntu.
https://bugs.launchpad.net/bugs/1580700

Title:
  wget in 12.04 does not support SNI

Status in wget package in Ubuntu:
  Fix Released
Status in wget source package in Precise:
  In Progress

Bug description:
  [Impact]
  wget in Ubuntu 12.04 doesn't have support for TLS Server Name Indication, which makes it incompatible with certain sites, includes sites that use the Let's Encrypt Authority.

  The updated package fixes the issue with a backported patch from wget
  1.14.

  [Test Case]
  1- wget https://www.x.org
  2- Connection should succeed, instead of getting an error (ERROR: no certificate subject alternative name matches)

  [Regression Potential]
  Commit is simple. If broken, could possibly break SSL support in wget.

  
  Original report:

  Let's Encrypt Authority should be added to CA-certificates.
  https://www.X.org is now using a cert from this CA, wget fails when
  connecting to X.org.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/wget/+bug/1580700/+subscriptions