tree bb23b4ce9517ad2a547828e2712fc9ae3a61d8e7
parent 9f3b410006956c59896034bb790b20e655f8b4cb
author Dimitri John Ledkov <xnox@ubuntu.com> 1589908839 +0100
committer Denys Vlasenko <vda.linux@googlemail.com> 1589980244 +0200

wget: implement TLS verification with ENABLE_FEATURE_WGET_OPENSSL

When ENABLE_FEATURE_WGET_OPENSSL is enabled, correctly implement TLS
verification by default. And only ignore verification errors, if
--no-check-certificate was passed.

Also note, that previously OPENSSL implementation did not implement
TLS verification, nor printed any warning messages that verification
was not performed.

Bug-Ubuntu: https://bugs.launchpad.net/bugs/1879533

CVE-2018-1000500

Signed-off-by: Dimitri John Ledkov <xnox@ubuntu.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>