Re: [Bug-wget] Probs downloading secure content on Cygwin/Windows 7/64

[Tim Ruehsen]

Either update your CygWin packages (restart setup.exe) (I selected 'cur' in 
setup.exe). If you want to stay with stable, you have to wait until 'cur' 
drops in.

'cur' has wget 1.16.3 and GnuTLS 3.x.

Regards, Tim

On Monday 31 August 2015 16:09:29 L Walsh wrote:
> Tim Ruehsen wrote:
> > Hi,
> > 
> > in addition to Ander Juaristi's posting:
> > 
> > Have you installed the package 'ca-certificates' ?
> > Check with 'ls -la /etc/ssl/certs/'
> > 
> > In my CygWin environment wget 1.16.3 downloads your example URL.
> 
> ---
> Thanks...
> 
> I have 1.6.1:
> >> law.Bliss> wget --version
> >> GNU Wget 1.16.1 built on cygwin.
> >> 
> >> +digest +https +ipv6 +iri +large-file +nls +ntlm +opie -psl +ssl/gnutls
> 
> ---
> 
> But in /etc/ssl, I have:
> > tree -fFl
> 
> /etc/ssl
> └── certs -> /usr/ssl/certs/
>     ├── README.RootCerts*
>     ├── ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem*
>     ├── ca-bundle.trust.crt ->
> /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt* ├── demo/
>     │   ├── ca-cert.pem*
>     │   ├── dsa-ca.pem*
>     │   ├── dsa-pca.pem*
>     │   └── pca-cert.pem*
>     └── expired/
>         └── ICE.crl*
> 
> 3 directories, 8 files
> /> tree -fFl /etc/ssl
> /etc/ssl
> └── /etc/ssl/certs -> /usr/ssl/certs/
>     ├── /usr/ssl/certs/README.RootCerts*
>     ├── /usr/ssl/certs/ca-bundle.crt ->
> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem* ├──
> /usr/ssl/certs/ca-bundle.trust.crt ->
> /etc/pki/ca-trust/extracted/openssl/ca-bundle.trust.crt* ├──
> /usr/ssl/certs/demo/
>     │   ├── /usr/ssl/certs/demo/ca-cert.pem*
>     │   ├── /usr/ssl/certs/demo/dsa-ca.pem*
>     │   ├── /usr/ssl/certs/demo/dsa-pca.pem*
>     │   └── /usr/ssl/certs/demo/pca-cert.pem*
>     └── /usr/ssl/certs/expired/
>         └── /usr/ssl/certs/expired/ICE.crl*
> 3 directories, 8 files
> =============
> The Readme in rootcert says:
> The OpenSSL project does not (any longer) include root CA certificates.
> Please check out the FAQ:
>   * How can I set up a bundle of commercial root CA certificates?
> ---
> but I'm not seeing any FAQ at this point.
> 
> hmmm..