[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Bug-wget] [FEATURE-REQUEST] Pinning SSL certificates / check SSL fi
From: |
Daniel Kahn Gillmor |
Subject: |
Re: [Bug-wget] [FEATURE-REQUEST] Pinning SSL certificates / check SSL fingerprints |
Date: |
Sat, 07 Jul 2012 13:25:49 -0600 |
User-agent: |
Mozilla/5.0 (X11; Linux i686; rv:10.0.4) Gecko/20120510 Icedove/10.0.4 |
On 07/07/2012 12:50 PM, Ángel González wrote:
> On 06/07/12 01:01, address@hidden wrote:
>> Because SSL CA's have failed many times (Comodo, DigiNotar, ...) I wish to
>> have an option to pin a SSL certificate. The fingerprint may be optionally
>> provided through a new option.
> Have you tried using --ca-certificate option?
I believe the OP wants to pin the certificate of the remote server (that
is, the end entity certificate), whereas --ca-certificate pins the
certificate of the issuing authority.
--dkg
signature.asc
Description: OpenPGP digital signature