[Bug-wget] [bug #46061] wget https://contributors.debian.org fails with "No data received."

[NoëlKöthe]

URL:
  <http://savannah.gnu.org/bugs/?46061>

                 Summary: wget https://contributors.debian.org fails with "No
data received."
                 Project: GNU Wget
            Submitted by: nok
            Submitted on: So 27 Sep 2015 18:13:54 CEST
                Category: Protocol Issue
                Severity: 3 - Normal
                Priority: 5 - Normal
                  Status: None
                 Privacy: Public
             Assigned to: None
         Originator Name: 
        Originator Email: 
             Open/Closed: Open
         Discussion Lock: Any
                 Release: 1.16.3
        Operating System: GNU/Linux
         Reproducibility: Every Time
           Fixed Release: None
         Planned Release: None
              Regression: None
           Work Required: None
          Patch Included: No

    _______________________________________________________

Details:

Hello,

a forwarded bug from https://bugs.debian.org/797057

"We currently added "SSLVerifyClient optional" to the server configuration to
support authentication with client certificates, but client certificates are
not required to connect. The relevant apache configuration is here:

 
https://wiki.debian.org/DebianSingleSignOn#Documentation_for_web_application_owners-1

curl can access the site."

$ LC_ALL=C wget -d https://contributors.debian.org
DEBUG output created by Wget 1.16.3 on linux-gnu.

URI encoding = 'ANSI_X3.4-1968'
converted 'https://contributors.debian.org' (ANSI_X3.4-1968) ->
'https://contributors.debian.org' (UTF-8)
--2015-09-27 18:08:27--  https://contributors.debian.org/
Certificates loaded: 180
Resolving contributors.debian.org (contributors.debian.org)...
2607:f8f0:610:4000:216:36ff:fe40:3861, 206.12.19.123
Caching contributors.debian.org => 2607:f8f0:610:4000:216:36ff:fe40:3861
206.12.19.123
Connecting to contributors.debian.org
(contributors.debian.org)|2607:f8f0:610:4000:216:36ff:fe40:3861|:443...
connected.
Created socket 4.
Releasing 0x000055f91c3876f0 (new refcount 1).

---request begin---
GET / HTTP/1.1
User-Agent: Wget/1.16.3 (linux-gnu)
Accept: */*
Accept-Encoding: identity
Host: contributors.debian.org
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response... No data received.
Retrying.

--2015-09-27 18:08:29--  (try: 2)  https://contributors.debian.org/
Found contributors.debian.org in host_name_addresses_map (0x55f91c3876f0)
Connecting to contributors.debian.org
(contributors.debian.org)|2607:f8f0:610:4000:216:36ff:fe40:3861|:443...
connected.
Created socket 4.
Releasing 0x000055f91c3876f0 (new refcount 1).

---request begin---
GET / HTTP/1.1
User-Agent: Wget/1.16.3 (linux-gnu)
Accept: */*
Accept-Encoding: identity
Host: contributors.debian.org
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response... No data received.
Retrying.

^C
$  openssl s_client -connect contributors.debian.org:443
CONNECTED(00000003)
depth=3 C = SE, O = AddTrust AB, OU = AddTrust External TTP Network, CN =
AddTrust External CA Root
verify return:1
depth=2 C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network,
CN = USERTrust RSA Certification Authority
verify return:1
depth=1 C = FR, ST = Paris, L = Paris, O = Gandi, CN = Gandi Standard SSL CA
2
verify return:1
depth=0 OU = Domain Control Validated, OU = Gandi Standard SSL, CN =
contributors.debian.org
verify return:1
---
Certificate chain
 0 s:/OU=Domain Control Validated/OU=Gandi Standard
SSL/CN=contributors.debian.org
   i:/C=FR/ST=Paris/L=Paris/O=Gandi/CN=Gandi Standard SSL CA 2
 1 s:/C=FR/ST=Paris/L=Paris/O=Gandi/CN=Gandi Standard SSL CA 2
   i:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust
RSA Certification Authority
 2 s:/C=US/ST=New Jersey/L=Jersey City/O=The USERTRUST Network/CN=USERTrust
RSA Certification Authority
   i:/C=SE/O=AddTrust AB/OU=AddTrust External TTP Network/CN=AddTrust External
CA Root
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/OU=Domain Control Validated/OU=Gandi Standard
SSL/CN=contributors.debian.org
issuer=/C=FR/ST=Paris/L=Paris/O=Gandi/CN=Gandi Standard SSL CA 2
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 5177 bytes and written 441 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 3072 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID:
C294DC945A410D580AADFB9254CC0D33B6CB1220CCE2522E86559AF90F93B1A8
    Session-ID-ctx: 
    Master-Key:
BE0C2D1DCCB7F7FBCB6CC7A960456BC10F98CDD7C0AD9B154567D5C768DAA4D9137FC1F17F71D1186BA1825AB0DC19BB
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 1a f3 8c 98 3a a9 fc 8c-be 32 c1 42 e9 b3 2c 61   ....:....2.B..,a
    0010 - 0b 0d f1 14 dc d5 3f 5d-4c 78 4e a3 d3 1f 5c 8e   ......?]LxN...\.
    0020 - bf f4 5e 25 61 0b 4d 4f-49 fb a1 5d 19 31 70 30   ..^%a.MOI..].1p0
    0030 - 98 37 1b fc 25 e2 88 51-0f c5 a8 3b 3d b5 6c e9   .7..%..Q...;=.l.
    0040 - 9c 0b 7d 18 d1 5d e0 9a-02 65 9d 79 42 41 3d b5   ..}..]...e.yBA=.
    0050 - b6 57 1d b5 7d 0f 2c 00-21 c0 5c da 52 92 15 16   .W..}.,.!.\.R...
    0060 - 46 f2 2b 54 6b 2c 99 08-e2 a3 cc fa 62 d8 28 8e   F.+Tk,......b.(.
    0070 - 7d 3f 2e 50 3e 63 91 6c-5a 99 39 04 2c 26 09 4d   }?.P>c.lZ.9.,&.M
    0080 - aa ae 9b 33 76 34 ea 39-e9 f5 f7 b2 4e 3f f0 b5   ...3v4.9....N?..
    0090 - 2c 75 96 b9 4c 68 47 56-e5 76 ea 50 13 1e 4f 5b   ,u..LhGV.v.P..O[
    00a0 - be cf 1f 8b 9a 4c c2 45-9c 72 a9 fa 70 81 44 9d   .....L.E.r..p.D.
    00b0 - 9c 04 b0 94 fb 72 e3 ea-a9 73 15 b6 ba fb 8c 98   .....r...s......

    Start Time: 1443370323
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---





    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?46061>

_______________________________________________
  Nachricht gesendet von/durch Savannah
  http://savannah.gnu.org/