LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 04-18-2016, 12:47 PM   #1
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 13.1,13.37,14.0,14.1,14.2 64 and 32bit and arm
Posts: 348

Rep: Reputation: 96
Question wget unable to establish SSL connect slackware 13.1


hi all, I'm having a problem with a slackware 13.1 machine being unable to download a page using wget. the page is
https://wiki.scribus.net/canvas/Download
I get "Unable to establish SSL connection". The command I am using is
Code:
wget --no-check-certificate --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/38.0" -O tmp.html https://wiki.scribus.net/canvas/Download
This works fine on a slackware 14.1 machine, or using firefox, so I know the content is there. I have tried creating and installing wget 1.17 from slackware-current/source/n/wget
but it still gives the same error. Has anyone got any ideas (without upping the 13.1 machine to 14.1 ). thanks
 
Old 04-18-2016, 01:13 PM   #2
mralk3
Senior Member
 
Registered: May 2015
Location: Utah, USA
Distribution: Slackware 14.2 || Slackware-current && CentOS
Posts: 1,378

Rep: Reputation: 747Reputation: 747Reputation: 747Reputation: 747Reputation: 747Reputation: 747Reputation: 747
It is likely that the site requires a cookie to be set or that SSL certificate verification needs to be used. I noticed when visiting this site that much of the content is clear text and I receive a warning in my address bar that the connection is not completely secure.

You may also wish to run as root:
Code:
update-ca-certificates -f
I could be completely wrong, but its just my
 
1 members found this post helpful.
Old 04-18-2016, 01:47 PM   #3
Markus Wiesner
Member
 
Registered: Mar 2016
Distribution: Slackware
Posts: 47

Rep: Reputation: 83
Quote:
Originally Posted by timsoft View Post
hi all, I'm having a problem with a slackware 13.1 machine being unable to download a page using wget. the page is
https://wiki.scribus.net/canvas/Download
I get "Unable to establish SSL connection".
The server requires TLS 1.2 which is not supported by openssl 0.9.8, see https://www.ssllabs.com/ssltest/anal...hideResults=on
 
Old 04-18-2016, 05:38 PM   #4
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 13.1,13.37,14.0,14.1,14.2 64 and 32bit and arm
Posts: 348

Original Poster
Rep: Reputation: 96
thanks, I had no success with update-ca-certificates -f (file not on slack 13.1) but i'll try to create the openssl packages from the 14.1 openssl source on the 13.1 machine and see if that works.
 
1 members found this post helpful.
Old 04-18-2016, 06:55 PM   #5
mralk3
Senior Member
 
Registered: May 2015
Location: Utah, USA
Distribution: Slackware 14.2 || Slackware-current && CentOS
Posts: 1,378

Rep: Reputation: 747Reputation: 747Reputation: 747Reputation: 747Reputation: 747Reputation: 747Reputation: 747
Quote:
Originally Posted by timsoft View Post
thanks, I had no success with update-ca-certificates -f (file not on slack 13.1) but i'll try to create the openssl packages from the 14.1 openssl source on the 13.1 machine and see if that works.
I should have looked to see if that command even existed in 13.1. Openssl, openssl-solibs were updated last on March 2 of 2016 for 13.1. Maybe you need to update your system?

I am still very new to Slackware. Please post back here with the results, I am interested in learning what you ended up doing to resolve your issue.
 
Old 04-19-2016, 04:16 AM   #6
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 13.1,13.37,14.0,14.1,14.2 64 and 32bit and arm
Posts: 348

Original Poster
Rep: Reputation: 96
well, creating the 2 openssl packages from the slackware 14.1 (patches) source on slackware 13.1 and then re-creating the wget package from the 14.1 (patches) source seams to have done the trick. I can now download the file, even if it now complains about being unable to locally verify the issuer's authority.
Installing the slackware 14.1/patches/ca-certificates-20150426-noarch-2_slack14.1.txz package gets rid of the "unable to locally verify" warning.

thanks Markus and mralk3
 
Old 04-19-2016, 04:38 AM   #7
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 13.1,13.37,14.0,14.1,14.2 64 and 32bit and arm
Posts: 348

Original Poster
Rep: Reputation: 96
Smile

for others who may find it more helpfull, follow these steps on the 13.1 machine.
obtain the following directories from your local slackware mirror
/pub/slackware/slackware-14.1/patches/source/openssl/
/pub/slackware/slackware-14.1/patches/source/wget/
and the file /pub/slackware/slackware-14.1/patches/packages/ca-certificates-20150426-noarch-2_slack14.1.txz
cd into openssl directory and run
Code:
./openssl.SlackBuild
(if it is not executable, make it so with
Code:
chmod +x ./openssl.SlackBuild
)
then run
Code:
upgradepkg /tmp/openssl-solibs-1.0.1s-i486-1_slack14.1.txz
upgradepkg /tmp/openssl-1.0.1s-i486-1_slack14.1.txz
now cd into the wget directory (if necessary
Code:
chmod +x wget.SlackBuild
) and run
Code:
./wget.SlackBuild
then run
Code:
upgradepkg /tmp/wget-1.14-i486-3_slack14.1.txz
finally, move to where you downloaded the ca-certificates package and run
Code:
installpkg ca-certificates-20150426-noarch-2_slack14.1.txz
ta-da wget should now handle those fussy servers.
 
Old 04-19-2016, 07:53 AM   #8
CTM
Member
 
Registered: Apr 2004
Distribution: Slackware
Posts: 302

Rep: Reputation: 282Reputation: 282Reputation: 282
Just a warning: OpenSSL 1.0.1 isn't 100% ABI-compatible with 0.9.8, so by doing this you've broken or introduced subtle bugs into programs in other packages too. Refer to Fri Jul 13 23:14:15 UTC 2012 in the 14.0 ChangeLog to get an idea of what else you'll need to rebuild (warning: it's a lot of stuff).

Last edited by CTM; 04-19-2016 at 07:54 AM.
 
Old 04-19-2016, 10:09 AM   #9
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 13.1,13.37,14.0,14.1,14.2 64 and 32bit and arm
Posts: 348

Original Poster
Rep: Reputation: 96
I've had a look at the changelog, and the only things mentioned are mailx, bind, php5.4.24 and ruby.
I have installed the updated packages for them from /pub/slackware-13.1/patches/packages
I haven't noticed anything else. I'm not using https in apache. I'm not sure of an easy way to see what is dynamically linked to openssl libs that might break, but when slackware 14.2 comes out, I'll probably move the server onto that.
 
  


Reply

Tags
slackware, ssl, wget


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
unable to connect to ftp server(pure-ftpd) with ssl/tls enabled rtz Linux - Networking 2 11-24-2014 04:21 PM
Proxy tunneling failed: UnauthorizedUnable to establish SSL connection. thomas2004ch Linux - Software 1 08-12-2013 09:18 AM
[SOLVED] Slackware 14 unable to connect with WICD BodieSkate Linux - Newbie 3 05-30-2013 04:39 AM
unable to establish connection neerajchaudhari Linux - Software 2 09-14-2005 11:22 PM
Unable to connect to SSL with https : // ohe Linux - Security 5 11-07-2003 02:31 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 01:16 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration