1 2 Previous Next 21 Replies Latest reply on Feb 15, 2014 12:36 PM by AlexT_Intel

    wget won't work for secure url

    dtung

      It seems that wget won't work for secure url.

       

      $ wget "http://www.google.com"

      connecting to www.google.com (xxx.xxxx.xxx.xxx:80)

      $ wget "https://www.google.com"

      wget: not a http or ftp url: https://www.google.com

       

      Is there any way to get a version of wget that works for secure url? Thanks.

       

      David

        • 1. Re: wget won't work for secure url
          rmm200

          Well - your exact example worked for me. I did get an error message at the end, saying unable to locally verify the issuer's authority, and to retry with --no-check-certificate. My "connecting to" was 67.204.184.209:443. Manually add :443 to your URL and see what happens.

           

          Maybe I should add I went through a lot of painful contortions getting openssl installed and working on my system some time back. What I did is lost in the fog of history - but I did get a lot of certs installed. Maybe relevant - maybe not.

          • 2. Re: wget won't work for secure url
            dtung

            Thanks for your information.

             

            May I ask you what images you built. I built the default image from Intel's package.

             

            After adding :443 manually, I got the same error.

            • 3. Re: wget won't work for secure url
              rmm200

              As in all things Galileo - I followed the instructions on Sergey's blog:

               

              http://www.malinov.com/Home/sergey-s-blog

               

              My image is basically his image-sdk (which is really just image-full + some additions).

              Mine is based on 0.8.0, and I have too much time invested adding things to move on to 0.9.0...

              Also - I snuck in and modified my previous post - see what I said about certs. Lots of fun reading at openssl.org.

              1 of 1 people found this helpful
              • 4. Re: wget won't work for secure url
                AlexanderMerz

                As addition to rmm200 answer:

                The SSL support on the default images seems to be broken. Switching to the "image-sdk" helps. But I think, this is not the result of the LSB based image itself, instead this image contains additional packages related to the SSL support - that might work in the default images too.

                Unfortunately I'm not near my build machine, so I can't verify this at the moment.

                • 5. Re: wget won't work for secure url
                  dtung

                  Thanks. I will build some images to test it out.

                  • 6. Re: wget won't work for secure url
                    AlexT_Intel

                    dtung, what does the below command produce on your Galileo board?

                    opkg list-installed |grep openssl

                    • 7. Re: wget won't work for secure url
                      dtung

                      Is there any way to find out what packages are included in packagegroup-core-boot, packagegroup-core-basic, packagegroup-core-lsb? It seems that wget in 0.7.5 is built without ssl, even though openssh has been included and the ssh works for me.

                      • 8. Re: wget won't work for secure url
                        dtung

                        openssl - 1.0.1e-r15.0

                        • 9. Re: wget won't work for secure url
                          rmm200

                          In my case, it gives:

                           

                          root@clanton:~# opkg list-installed | grep openssl

                          libgnutls-openssl27 - 2.12.23-r8.4

                          openssl - 1.0.1e-r15.0

                          openssl-dev - 1.0.1e-r15.0

                          root@clanton:~#

                          • 10. Re: wget won't work for secure url
                            AlexT_Intel

                            Looking at the recipe (poky/meta/recipes-extended/wget) it is built with openssl. Openssh is a different thing, no relation to the matter.

                             

                            However I don't see that wget is built by default as a separate package on 0.7.5, so maybe that's simply a difference between busybox emulating the wget (on dtung's image) and actual wget package (on rmm200's one).

                             

                            dtung, rmm200 what does the

                            ls -alF `which wget`

                            command return for you?

                            • 11. Re: wget won't work for secure url
                              rmm200

                              Always trying to give more than is asked:

                               

                              root@clanton:~# wget --version

                              GNU Wget 1.14 built on linux-gnu.

                               

                              +digest +https +ipv6 -iri -large-file +nls +ntlm +opie +ssl/openssl

                               

                              Wgetrc:

                                  /etc/wgetrc (system)

                              Locale: /usr/share/locale

                              Compile: i586-poky-linux-gcc -m32 -march=i586

                                  --sysroot=/home/galileo/meta-clanton_v0.8.0/yocto_build/tmp/sysroots/clanton -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc" -DLOCALEDIR="/usr/share/locale" -I. -I/home/galileo/meta-clanton_v0.8.0/yocto_build/tmp/work/i586-poky-linux/wget/1.14-r16.0/wget-1.14/src -I../lib -I/home/galileo/meta-clanton_v0.8.0/yocto_build/tmp/work/i586-poky-linux/wget/1.14-r16.0/wget-1.14/lib -O2 -pipe -g -feliminate-unused-debug-types

                              Link: i586-poky-linux-gcc -m32 -march=i586

                                  --sysroot=/home/galileo/meta-clanton_v0.8.0/yocto_build/tmp/sysroots/clanton -O2 -pipe -g -feliminate-unused-debug-types -Wl,-O1 -Wl,--hash-style=gnu -Wl,--as-needed -lssl /home/galileo/meta-clanton_v0.8.0/yocto_build/tmp/sysroots/clanton/lib/libcrypto.so -lz -ldl -lz -lz -luuid -lpcre ftp-opie.o openssl.o http-ntlm.o ../lib/libgnu.a

                               

                              Copyright (C) 2011 Free Software Foundation, Inc.

                              License GPLv3+: GNU GPL version 3 or later

                              <http://www.gnu.org/licenses/gpl.html>.

                              This is free software: you are free to change and redistribute it.

                              There is NO WARRANTY, to the extent permitted by law.

                               

                              Originally written by Hrvoje Niksic <hniksic@xemacs.org>.

                              Please send bug reports and questions to <bug-wget@gnu.org>.

                              root@clanton:~# ls -alF `which wget`

                              lrwxrwxrwx 1 root root 18 Dec 30 14:41 /usr/bin/wget -> /usr/bin/wget.wget*

                              root@clanton:~#

                              • 12. Re: wget won't work for secure url
                                rmm200

                                And another:

                                 

                                root@clanton:~# which openssl

                                /usr/bin/openssl

                                root@clanton:~# openssl

                                OpenSSL> version

                                OpenSSL 1.0.1e 11 Feb 2013

                                OpenSSL> quit

                                root@clanton:~#

                                • 13. Re: wget won't work for secure url
                                  dtung

                                  # ls -alF `which wget`

                                  lrwxrwxrwx    1 root     root            12 Feb 11 12:08 /usr/bin/wget -> /bin/busybox*

                                   

                                  I actually tried to build wget in poky/meta/recipes-extended/wget, but didn't success.

                                   

                                  # openssl

                                  WARNING: can't open config file: /usr/lib/ssl/openssl.cnf

                                  OpenSSL> version

                                  OpenSSL 1.0.1e 11 Feb 2013

                                  OpenSSL> quit

                                  • 14. Re: wget won't work for secure url
                                    AlexT_Intel

                                    Yep, thanks. So you have th standalone one.

                                     

                                    And I'm almost sure dtung has the busybox one. In this busybox bug the developers explicitly refused to add openssl and I guess nothing has changes since 2005.

                                     

                                    UPDATE: dtung has beat me to it :-) Yes, that's exactly what I suspected. Hold on, I've just built a wget package for non-lsb image and publishing it as we speak. Maybe it will even work (I haven't tested it  - don't have the Galileo at hand) :-)

                                    1 2 Previous Next