Re: [Bug-wget] the gnu.org wget manual

[John]

"Micah Cowan" <address@hidden> wrote in message 
news:<address@hidden>...
> On 06/21/2012 04:08 PM, John wrote:
> > Hello.
> >
> > After looking at the manual for wget while online here
> > "https://www.gnu.org/software/wget/manual/wget.html";, I created the
> > following command to download it:
> >
> > wget --secure-protocol=auto --convert-links --page-requisites
> > --append-output=c:\logging\wget\wget.log --server-response
> > --read-timeout=600 www.gnu.org/software/wget/manual/wget.html
> >
> > The command failed and the log explained that it could not verify the CA
> > certificate from Gandi. I looked at the Gandi site to see about
> > downloading it, but I couldn't find any link for it. Then I sent an
> > email to the webmaster at "gnu.org", and he promptly responded with this
> > link, "http://crt.gandi.net/GandiStandardSSLCA.crt";.  I downloaded that
> > certificate and let Windows install it in the default location of its
> > choice. I am using 64-bit Win7.
> >
> > I then ran the same command, but nothing different happened.
>
> Have you tried the --ca-certificate=... option? If it doesn't work
> against the Gandi-specific cert, you might also try the cert at
> root/bin/cacert.pem that seems to have been included.

Micha, hello.  Okay, it is working now that I have used the --ca-certificate 
option against the provided pem.  Awesome!  I was expecting (hoping) it to 
be aware of Windows Certificate Store, which is updated automatically 
periodically, but I can see that appears not to be the case, as Ángel 
pointed out too. I suppose I will just have to update the separate one 
which, according to the text in the pem itself, it retrieved from Mozilla's 
website:

"These were automatically extracted from Mozilla's root certificates file 
(certdata.txt).  This file can be found in the mozilla source tree: 
http://mxr.mozilla.org/mozilla/source/security/nss/lib/ckfw/builtins/certdata.txt?raw=1";

I don't expect that this would change much, but I will need to retrieve it 
myself now. It will probably cover most cases too. Then again, maybe there 
is some way to export Windows CA store into a workable format?

The more I look at this program and consider how I will be using it, the 
more I am beginning to think that using it with Windows command shell will 
be just as efficient as any GUI I might be able to make use of, at least for 
the most part. I did find one program called WinWget here: 
http://www.cybershade.us/winwget/, but it is older and I believe wget has 
many more features currently than it allows for.  Even so, I really thing 
making some text files would be the way to go. Anyway, thanks again and talk 
to you later.

John