wget: implement TLS verification with ENABLE_FEATURE_WGET_OPENSSL
authorDimitri John Ledkov <xnox@ubuntu.com>
Tue, 19 May 2020 17:20:39 +0000 (18:20 +0100)
committerDenys Vlasenko <vda.linux@googlemail.com>
Wed, 20 May 2020 13:10:44 +0000 (15:10 +0200)
commit45fa3f18adf57ef9d743038743d9c90573aeeb91
treebb23b4ce9517ad2a547828e2712fc9ae3a61d8e7
parent9f3b410006956c59896034bb790b20e655f8b4cb
wget: implement TLS verification with ENABLE_FEATURE_WGET_OPENSSL

When ENABLE_FEATURE_WGET_OPENSSL is enabled, correctly implement TLS
verification by default. And only ignore verification errors, if
--no-check-certificate was passed.

Also note, that previously OPENSSL implementation did not implement
TLS verification, nor printed any warning messages that verification
was not performed.

Bug-Ubuntu: https://bugs.launchpad.net/bugs/1879533

CVE-2018-1000500

Signed-off-by: Dimitri John Ledkov <xnox@ubuntu.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
networking/wget.c