Originally posted by: dhsharp

After wget was updated to 1.17.1-1, we are getting certificate errors when downloading from github.com:

$ /bin/wget -O - https://github.com/[...] >/dev/null
--2017-02-16 17:26:55--  https://github.com/[...]
Resolving github.com... 192.30.253.113, 192.30.253.112
Connecting to github.com|192.30.253.113|:443... connected.
ERROR: cannot verify github.com's certificate, issued by 'CN=DigiCert SHA2 Extended Validation Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US':
  Unable to locally verify the issuer's authority.
To connect to github.com insecurely, use `--no-check-certificate'.

Downgrading wget to wget-1.9.1-3, we could download from github.com again.

It may have something to do with how openssl is linked?

Originally posted by: sangameshm

Hi David,

The difference i can see is.

rpm -qp --requires wget-1.9.1-3.aix6.1.ppc.rpm
/sbin/install-info
/bin/sh
libc.a(shr.o)
libcrypto.a(libcrypto.so.0.9.8)
libintl.a(libintl.so.1)
libssl.a(libssl.so.0.9.8)

rpm -qp --requires wget-1.17.1-1.aix6.1.ppc.rpm
/sbin/install-info
/bin/sh
libc.a(shr.o)
libcrypto.a(libcrypto.so)
libintl.a(libintl.so.1)
libpthreads.a(shr_xpg5.o)
libssl.a(libssl.so)
libz.a(libz.so.1)

But it is unclear how libssl.a version making the difference here.

In my machine i could see the this error with both the versions.

# /bin/wget -O - https://github.com/[...] >/dev/null
--04:38:35--  https://github.com/[...]
           => `-'
Resolving github.com... 192.30.253.112, 192.30.253.113
Connecting to github.com[192.30.253.112]:443... connected.
HTTP request sent, awaiting response... 404 Not Found
04:38:36 ERROR 404: Not Found.

By chance, do you have any certificate installed in your machine ?

Anyway, we will be publishing wget with ca-certificate which could solve the https connection issues.

Thanks,

Sangamesh