SSL certificate failure?

By trailerparkopera on 9 Mar 2016 at 01:51 UTC

I am attempting to download the current version of D8.

wget https://ftp.drupal.org/files/projects/drupal-8.0.5.zip

returns:

--2016-03-08 18:44:04--  https://ftp.drupal.org/files/projects/drupal-8.0.5.zip
Resolving ftp.drupal.org... 23.235.40.68
Connecting to ftp.drupal.org|23.235.40.68|:443... connected.
ERROR: certificate common name `j.ssl.fastly.net' doesn't match requested host name `ftp.drupal.org'.
To connect to ftp.drupal.org insecurely, use `--no-check-certificate'.

I don't want to take the chance of downloading a fake version of D8. Can anyone shed some light on what's happening?

Comments

What version of wget are you

John Morahan commented 9 March 2016 at 08:20

What version of wget are you using?

wget version

trailerparkopera commented 9 March 2016 at 15:25

GNU Wget 1.12

This problem was reported on another site as well: http://www.drupalcenter.de/node/54797 but no answers there except to use CURL instead, which doesn't seem like much of a fix.

The certificate for ftp

John Morahan commented 9 March 2016 at 16:13

The certificate for ftp.drupal.org is actually a certificate from the Fastly CDN which covers *.drupal.org along with many other domains. This uses the subjectAltName extension to allow a single certificate to cover multiple domains. However, older versions of wget don't support this extension.

You can upgrade to a newer version of wget (sorry I don't know which one exactly, but I can confirm that at least 1.15 works), or use curl, or download the file in a browser and upload it to your site via SFTP.