LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware
User Name
Password
Slackware This Forum is for the discussion of Slackware Linux.

Notices


Reply
  Search this Thread
Old 04-18-2016, 11:47 AM   #1
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Rep: Reputation: 144Reputation: 144
Question wget unable to establish SSL connect slackware 13.1


hi all, I'm having a problem with a slackware 13.1 machine being unable to download a page using wget. the page is
https://wiki.scribus.net/canvas/Download
I get "Unable to establish SSL connection". The command I am using is
Code:
wget --no-check-certificate --user-agent="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/38.0" -O tmp.html https://wiki.scribus.net/canvas/Download
This works fine on a slackware 14.1 machine, or using firefox, so I know the content is there. I have tried creating and installing wget 1.17 from slackware-current/source/n/wget
but it still gives the same error. Has anyone got any ideas (without upping the 13.1 machine to 14.1 ). thanks
 
Old 04-18-2016, 12:13 PM   #2
mralk3
Slackware Contributor
 
Registered: May 2015
Distribution: Slackware
Posts: 1,904

Rep: Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053
It is likely that the site requires a cookie to be set or that SSL certificate verification needs to be used. I noticed when visiting this site that much of the content is clear text and I receive a warning in my address bar that the connection is not completely secure.

You may also wish to run as root:
Code:
update-ca-certificates -f
I could be completely wrong, but its just my
 
1 members found this post helpful.
Old 04-18-2016, 12:47 PM   #3
Markus Wiesner
Member
 
Registered: Mar 2016
Distribution: Slackware
Posts: 147

Rep: Reputation: 237Reputation: 237Reputation: 237
Quote:
Originally Posted by timsoft View Post
hi all, I'm having a problem with a slackware 13.1 machine being unable to download a page using wget. the page is
https://wiki.scribus.net/canvas/Download
I get "Unable to establish SSL connection".
The server requires TLS 1.2 which is not supported by openssl 0.9.8, see https://www.ssllabs.com/ssltest/anal...hideResults=on
 
Old 04-18-2016, 04:38 PM   #4
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Original Poster
Rep: Reputation: 144Reputation: 144
thanks, I had no success with update-ca-certificates -f (file not on slack 13.1) but i'll try to create the openssl packages from the 14.1 openssl source on the 13.1 machine and see if that works.
 
1 members found this post helpful.
Old 04-18-2016, 05:55 PM   #5
mralk3
Slackware Contributor
 
Registered: May 2015
Distribution: Slackware
Posts: 1,904

Rep: Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053Reputation: 1053
Quote:
Originally Posted by timsoft View Post
thanks, I had no success with update-ca-certificates -f (file not on slack 13.1) but i'll try to create the openssl packages from the 14.1 openssl source on the 13.1 machine and see if that works.
I should have looked to see if that command even existed in 13.1. Openssl, openssl-solibs were updated last on March 2 of 2016 for 13.1. Maybe you need to update your system?

I am still very new to Slackware. Please post back here with the results, I am interested in learning what you ended up doing to resolve your issue.
 
Old 04-19-2016, 03:16 AM   #6
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Original Poster
Rep: Reputation: 144Reputation: 144
well, creating the 2 openssl packages from the slackware 14.1 (patches) source on slackware 13.1 and then re-creating the wget package from the 14.1 (patches) source seams to have done the trick. I can now download the file, even if it now complains about being unable to locally verify the issuer's authority.
Installing the slackware 14.1/patches/ca-certificates-20150426-noarch-2_slack14.1.txz package gets rid of the "unable to locally verify" warning.

thanks Markus and mralk3
 
Old 04-19-2016, 03:38 AM   #7
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Original Poster
Rep: Reputation: 144Reputation: 144
Smile

for others who may find it more helpfull, follow these steps on the 13.1 machine.
obtain the following directories from your local slackware mirror
/pub/slackware/slackware-14.1/patches/source/openssl/
/pub/slackware/slackware-14.1/patches/source/wget/
and the file /pub/slackware/slackware-14.1/patches/packages/ca-certificates-20150426-noarch-2_slack14.1.txz
cd into openssl directory and run
Code:
./openssl.SlackBuild
(if it is not executable, make it so with
Code:
chmod +x ./openssl.SlackBuild
)
then run
Code:
upgradepkg /tmp/openssl-solibs-1.0.1s-i486-1_slack14.1.txz
upgradepkg /tmp/openssl-1.0.1s-i486-1_slack14.1.txz
now cd into the wget directory (if necessary
Code:
chmod +x wget.SlackBuild
) and run
Code:
./wget.SlackBuild
then run
Code:
upgradepkg /tmp/wget-1.14-i486-3_slack14.1.txz
finally, move to where you downloaded the ca-certificates package and run
Code:
installpkg ca-certificates-20150426-noarch-2_slack14.1.txz
ta-da wget should now handle those fussy servers.
 
Old 04-19-2016, 06:53 AM   #8
CTM
Member
 
Registered: Apr 2004
Distribution: Slackware
Posts: 308

Rep: Reputation: 287Reputation: 287Reputation: 287
Just a warning: OpenSSL 1.0.1 isn't 100% ABI-compatible with 0.9.8, so by doing this you've broken or introduced subtle bugs into programs in other packages too. Refer to Fri Jul 13 23:14:15 UTC 2012 in the 14.0 ChangeLog to get an idea of what else you'll need to rebuild (warning: it's a lot of stuff).

Last edited by CTM; 04-19-2016 at 06:54 AM.
 
Old 04-19-2016, 09:09 AM   #9
timsoft
Member
 
Registered: Oct 2004
Location: scotland
Distribution: slackware 15.0 64bit, 14.2 64 and 32bit and arm, ubuntu and rasbian
Posts: 495

Original Poster
Rep: Reputation: 144Reputation: 144
I've had a look at the changelog, and the only things mentioned are mailx, bind, php5.4.24 and ruby.
I have installed the updated packages for them from /pub/slackware-13.1/patches/packages
I haven't noticed anything else. I'm not using https in apache. I'm not sure of an easy way to see what is dynamically linked to openssl libs that might break, but when slackware 14.2 comes out, I'll probably move the server onto that.
 
  


Reply

Tags
slackware, ssl, wget


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
unable to connect to ftp server(pure-ftpd) with ssl/tls enabled rtz Linux - Networking 2 11-24-2014 03:21 PM
Proxy tunneling failed: UnauthorizedUnable to establish SSL connection. thomas2004ch Linux - Software 1 08-12-2013 08:18 AM
[SOLVED] Slackware 14 unable to connect with WICD BodieSkate Linux - Newbie 3 05-30-2013 03:39 AM
unable to establish connection neerajchaudhari Linux - Software 2 09-14-2005 10:22 PM
Unable to connect to SSL with https : // ohe Linux - Security 5 11-07-2003 01:31 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Slackware

All times are GMT -5. The time now is 10:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration