From mboxrd@z Thu Jan  1 00:00:00 1970
From: Mark H Weaver <mhw@netris.org>
Subject: bug#22408: wget rejects Let's Encrypt certs,
	although Icecat accepts them
Date: Tue, 19 Jan 2016 09:27:09 -0500
Message-ID: <87twm9tzk2.fsf@netris.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Return-path: <bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:33877)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1aLXGQ-0003bq-1A
	for bug-guix@gnu.org; Tue, 19 Jan 2016 09:28:10 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1aLXGM-0001Dq-Mw
	for bug-guix@gnu.org; Tue, 19 Jan 2016 09:28:05 -0500
Received: from debbugs.gnu.org ([208.118.235.43]:37092)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1aLXGM-0001Dl-JX
	for bug-guix@gnu.org; Tue, 19 Jan 2016 09:28:02 -0500
Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84)
	(envelope-from <Debian-debbugs@debbugs.gnu.org>) id 1aLXGM-0000qX-D6
	for bug-guix@gnu.org; Tue, 19 Jan 2016 09:28:02 -0500
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
Resent-Message-ID: <handler.22408.B.14532136663226@debbugs.gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:33727)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <mhw@netris.org>) id 1aLXFu-0003Xr-2U
	for bug-guix@gnu.org; Tue, 19 Jan 2016 09:27:37 -0500
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <mhw@netris.org>) id 1aLXFq-000187-P3
	for bug-guix@gnu.org; Tue, 19 Jan 2016 09:27:34 -0500
Received: from world.peace.net ([50.252.239.5]:36512)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <mhw@netris.org>) id 1aLXFq-00013U-Kp
	for bug-guix@gnu.org; Tue, 19 Jan 2016 09:27:30 -0500
List-Id: Bug reports for GNU Guix <bug-guix.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/bug-guix>,
	<mailto:bug-guix-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/bug-guix>
List-Post: <mailto:bug-guix@gnu.org>
List-Help: <mailto:bug-guix-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/bug-guix>,
	<mailto:bug-guix-request@gnu.org?subject=subscribe>
Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org
Sender: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org
To: 22408@debbugs.gnu.org

On recent GuixSD, IceCat accepts the Let's Encrypt certificate from
https://git.dthompson.us/, but 'wget' rejects it:

  mhw@jojen:~$ wget https://git.dthompson.us/presentations.git/blob/HEAD:/g=
uix-blu-2016-01-20.pdf
  --2016-01-19 09:23:23--  https://git.dthompson.us/presentations.git/blob/=
HEAD:/guix-blu-2016-01-20.pdf
  Resolving git.dthompson.us (git.dthompson.us)... 23.92.20.238
  Connecting to git.dthompson.us (git.dthompson.us)|23.92.20.238|:443... co=
nnected.
  ERROR: The certificate of =E2=80=98git.dthompson.us=E2=80=99 is not trust=
ed.
  ERROR: The certificate of =E2=80=98git.dthompson.us=E2=80=99 hasn't got a=
 known issuer.

      Mark