Page MenuHomePhabricator

wget: ERROR: certificate common name “*.wikipedia.org” doesn’t match requested host name “commons.wikimedia.org”.
Closed, InvalidPublic

Description

Filing just for the sake of remembering all the HTTPS issues I encounter...

$ wget -O /dev/null https://commons.wikimedia.org/wiki/File:Wikiconference_in_Moscow_day_2_part_5.webm
--2015-12-04 22:12:57--  https://commons.wikimedia.org/wiki/File:Wikiconference_in_Moscow_day_2_part_5.webm
Resolving commons.wikimedia.org... 91.198.174.192, 2620:0:862:ed1a::1
Connecting to commons.wikimedia.org|91.198.174.192|:443... connected.
ERROR: certificate common name “*.wikipedia.org” doesn’t match requested host name “commons.wikimedia.org”.
To connect to commons.wikimedia.org insecurely, use ‘--no-check-certificate’.
$ wget -O /dev/null --no-check-certificate https://upload-lb.eqiad.wikimedia.org/wikipedia/commons/f/f2/Wikiconference_in_Moscow_day_2_part_5.webm
--2015-12-04 22:25:16--  https://upload-lb.eqiad.wikimedia.org/wikipedia/commons/f/f2/Wikiconference_in_Moscow_day_2_part_5.webm
Resolving upload-lb.eqiad.wikimedia.org... 208.80.154.240, 2620:0:861:ed1a::2:b
Connecting to upload-lb.eqiad.wikimedia.org|208.80.154.240|:443... connected.
WARNING: certificate common name “*.wikipedia.org” doesn’t match requested host name “upload-lb.eqiad.wikimedia.org”.
HTTP request sent, awaiting response... 403 Requested target domain not allowed.
2015-12-04 22:25:16 ERROR 403: Requested target domain not allowed..
$ wget --version
GNU Wget 1.12 built on linux-gnu.

+digest +ipv6 +nls +ntlm +opie +md5/openssl +https -gnutls +openssl
-iri

Wgetrc:
    /etc/wgetrc (system)
Locale: /usr/share/locale
Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc"
    -DLOCALEDIR="/usr/share/locale" -I. -I../lib -g -O2
    -D_FILE_OFFSET_BITS=64 -O2 -g -Wall
Link: gcc -g -O2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall /usr/lib/libssl.so
    /usr/lib/libcrypto.so -ldl -lrt ftp-opie.o openssl.o http-ntlm.o
    gen-md5.o ../lib/libgnu.a

Copyright © 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://www.gnu.org/licenses/gpl.html>.
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Originally written by Hrvoje Nikšić <hniksic@xemacs.org>.
Currently maintained by Micah Cowan <micah@cowan.name>.
Please send bug reports and questions to <bug-wget@gnu.org>.

$ uname -a
Linux 2.6.32-5-amd64 #1 SMP Mon Oct 3 03:59:20 UTC 2011 x86_64 GNU/Linux

Event Timeline

Nemo_bis raised the priority of this task from to Needs Triage.
Nemo_bis updated the task description. (Show Details)
Nemo_bis added a project: HTTPS.
Nemo_bis added a subscriber: Nemo_bis.
Nemo_bis set Security to None.
Krenair changed the task status from Declined to Invalid.Dec 4 2015, 8:33 PM
Krenair claimed this task.
Krenair added a subscriber: Krenair.

Sounds like an issue with the client ignoring the SAN

Aklapper renamed this task from ERROR: certificate common name “*.wikipedia.org” doesn’t match requested host name “commons.wikimedia.org”. to wget: ERROR: certificate common name “*.wikipedia.org” doesn’t match requested host name “commons.wikimedia.org”..Dec 5 2015, 1:20 PM