[Bug 2043636] [NEW] all https downloads fail on armhf (confirmed bug)

[theofficialgman]

Public bug reported:

Release: Ubuntu Focal
Architecture: armhf
wget version: 1.20.3-1ubuntu2


The following affects Ubuntu focal and likely future releases as well on armhf platforms. No this is not a missing certificate issue.

Attempting to download a file with wget using https fails to verify the
certificate always. This does not happen on other architectures. The bug
is described in more detail here:
https://archlinuxarm.org/forum/viewtopic.php?t=16337

The fix there was to add build options `-D_TIME_BITS=64
-D_FILE_OFFSET_BITS=64` for armhf builds which fixes the issue for them.

As an example try to download a file from raw.githubusercontent.com on
armhf and it will fail with such an error

wget
https://raw.githubusercontent.com/probonopd/AppImages/master/excludelist
-O-

--2023-11-16 04:28:37--  https://raw.githubusercontent.com/probonopd/AppImages/master/excludelist
Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 185.199.110.133, 185.199.111.133, 185.199.108.133, ...
Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|185.199.110.133|:443... connected.
ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US':
  Unable to locally verify the issuer's authority.
To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.

** Affects: wget (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to wget in Ubuntu.
https://bugs.launchpad.net/bugs/2043636

Title:
  all https downloads fail on armhf (confirmed bug)

Status in wget package in Ubuntu:
  New

Bug description:
  Release: Ubuntu Focal
  Architecture: armhf
  wget version: 1.20.3-1ubuntu2

  
  The following affects Ubuntu focal and likely future releases as well on armhf platforms. No this is not a missing certificate issue.

  Attempting to download a file with wget using https fails to verify
  the certificate always. This does not happen on other architectures.
  The bug is described in more detail here:
  https://archlinuxarm.org/forum/viewtopic.php?t=16337

  The fix there was to add build options `-D_TIME_BITS=64
  -D_FILE_OFFSET_BITS=64` for armhf builds which fixes the issue for
  them.

  As an example try to download a file from raw.githubusercontent.com on
  armhf and it will fail with such an error

  wget
  https://raw.githubusercontent.com/probonopd/AppImages/master/excludelist
  -O-

  --2023-11-16 04:28:37--  https://raw.githubusercontent.com/probonopd/AppImages/master/excludelist
  Resolving raw.githubusercontent.com (raw.githubusercontent.com)... 185.199.110.133, 185.199.111.133, 185.199.108.133, ...
  Connecting to raw.githubusercontent.com (raw.githubusercontent.com)|185.199.110.133|:443... connected.
  ERROR: cannot verify raw.githubusercontent.com's certificate, issued by 'CN=DigiCert TLS RSA SHA256 2020 CA1,O=DigiCert Inc,C=US':
    Unable to locally verify the issuer's authority.
  To connect to raw.githubusercontent.com insecurely, use `--no-check-certificate'.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/wget/+bug/2043636/+subscriptions