wget https://launchpad.net fails with certificate error

[Matthew Paul Thomas]

$ wget https://launchpad.net
--23:37:17-- https://launchpad.net/
           => `index.html'
Resolving launchpad.net... 82.211.81.179
Connecting to launchpad.net|82.211.81.179|:443... connected.
ERROR: Certificate verification error for launchpad.net: unable to get local issuer certificate
To connect to launchpad.net insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.

[James Troup (elmo)]

This works for me (as expected - the certificate is a valid) - what version of wget are you using and on what OS?

[Matthew Paul Thomas (mpt)]

GNU Wget 1.10.2, FreeBSD 6.1-STABLE

I see the same version of wget works from Ubuntu, though. Weird.

[Diogo Matsubara (matsubara)]

Got the same output as reported by mpt.

$ lsb_release -a
Description: Ubuntu 6.06.1 LTS
Release: 6.06
Codename: dapper

$ wget --version
GNU Wget 1.10.2

It works on edgy using the same version of wget

[James Henstridge (jamesh)]

The difference is probably in the list of CA certificates wget finds on Ubuntu vs. FreeBSD.

[Emilio Pozuelo Monfort (pochu)]

I didn't have ca-certificates installed in Hardy. After installing it, I could use wget/dget

[Bradley Peters (ubuntu-moberley)]

I received a similar error from prevu with hardy (server edition) using a link to a dsc on launchpad.net. Based on the post by Emilio Pozuelo Monfort I installed the ca-certificates package with apt-get. That solved the problem.

[Liz Fong-Jones (lizthegrey)]

Likewise - wget doesn't work especially well for verifying ssl certs until ca-certificates is installed. Is there a reason that ca-certificates isn't higher priority than 'optional'?

[Liz Fong-Jones (lizthegrey)]

To clarify why I added prevu as well - prevu should Depend: on ca-certificates otherwise the launchpad fetching functionality is completely and utterly broken.

[Micah Cowan (micahcowan)]

Nothing in here indicates a bug in Ubuntu's wget, particularly since the reporter's OS was FreeBSD.

[Jamie Strandboge (jdstrand)]

With ca-certificates installed, this works just fine. Marking the ca-certificates task as Invalid. ca-certificates is a Recommends of w3m (part of the server install) and part of the desktop seed. As such, ca-certificates should be installed in standard Ubuntu installs. If there is still a bug here, it is possibly in that wget should Recommends ca-certificates, but since it should be installed already, I don't think it worth fixing there.