Downloading files from SSL/HTTPS sites via proxy is broken

Bug #994097 reported by Srinath on 2012-05-03
56
This bug affects 12 people
Affects Status Importance Assigned to Milestone
wget (Ubuntu)
Undecided
Unassigned

Bug Description

Description: Ubuntu 12.04 LTS
Release: 12.04

wget:
  Installed: 1.13.4-2ubuntu1
  Candidate: 1.13.4-2ubuntu1
  Version table:
 *** 1.13.4-2ubuntu1 0

When setting the parameter https_proxy, wget fails with the following error:

Proxy tunneling failed: Bad RequestUnable to establish SSL connection.

Here is and example:

WITHOUT PROXY:

root@server:~# wget -O test https://www.google.com/
--2012-05-03 16:49:33-- https://www.google.com/
Resolving www.google.com (www.google.com)... 74.125.226.82, 74.125.226.83, 74.125.226.84, ...
Connecting to www.google.com (www.google.com)|74.125.226.82|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location: https://www.google.ca/ [following]
--2012-05-03 16:49:33-- https://www.google.ca/
Resolving www.google.ca (www.google.ca)... 74.125.226.87, 74.125.226.88, 74.125.226.95
Connecting to www.google.ca (www.google.ca)|74.125.226.87|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `test'

    [ <=> ] 12,137 --.-K/s in 0.009s

2012-05-03 16:49:33 (1.36 MB/s) - `test' saved [12137]

WITH PROXY:

root@server:~# export https_proxy=http://192.168.1.5:80/
root@server:~# wget -O test https://www.google.com/
--2012-05-03 16:49:47-- https://www.google.com/
Connecting to 192.168.1.5:80... connected.
Proxy tunneling failed: Bad RequestUnable to establish SSL connection.

Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in wget (Ubuntu):
status: New → Confirmed
Spencer Krum (nibalizer) wrote :

I am affected as well.

Shiraz (shiru-hu) wrote :

I am affected as well.

gcc (chris+ubuntu-qwirx) wrote :

Is it possible that wget simply expects a HTTPS proxy to speak SSL? So the proxy should be configured to listen on a different port and present a certificate, etc.

Admin (ilw10) wrote :

This is your friendly ubuntu admin typing:

I just wanted to let you guys know that we here at Ubunutu really love giving our contributors the shaft: fuck you for trying to get ubuntu over ssl, and, additionally, we now no longer offer the MD5 checksums over ssl for you faggot developers.

Lol I even remember a couple times when contributors donated us money to us specifically for buying SSL and we just spent it on toiletpaper.

We get paid more $ than you can ever fucking imagine by windows and mac just to fuck you open source developers in the ass.

Have a nice day.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers