Re: [Bug-wget] wget seems to be "out of touch" with security (fails on most (all?) https websites...(where browsers work)

[L Walsh]

Daniel Kahn Gillmor wrote:

>  A) if the client already has the root CA's cert, there is no need to
> transmit it
>
>  B) alternately, if the client does not already have the root CA's cert,
> then it has no reason to trust the root CA's cert, so why bother
> transmitting it?
---
perfect sense.

The reason I spoke up is this was the 2nd or 3rd time since upgrading.

kernel.org also comes back with probs:

> wget https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.11.3.xz
--2013-12-20 15:49:09-- 
https://www.kernel.org/pub/linux/kernel/v3.x/patch-3.11.3.xz
Resolving web-proxy (web-proxy)... 192.168.4.1
Connecting to web-proxy (web-proxy)|192.168.4.1|:8118... connected.
WARNING: cannot verify www.kernel.org's certificate, issued by ‘/C=IL/O=StartCom 
Ltd./OU=Secure Digital Certificate Signing/CN=StartCom Class 2 Primary 
Intermediate Server CA’:
  Unable to locally verify the issuer's authority.
Proxy request sent, awaiting response... 200 OK
Length: 67900 (66K) [application/x-xz]
Saving to: ‘patch-3.11.3.xz’

I can't find the 3rd rq, right now, I so not sure what its prob was...
but 3 probs in as many days and I begin to think wget isn't accessing the
right security files (the "out of touch" bit...)....;-)