On December 5, 2016 at 9:55 PM Joseph Tam jtam.home@gmail.com wrote:
Timo announced:
https://dovecot.org/releases/2.2/dovecot-2.2.27.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.27.tar.gz.sig
Note that the download URLs are now https with a certificate from Let's Encrypt.
wget complained about
ERROR: certificate common name
wiki.dovecot.org' doesn't match requested host namedovecot.org'.and indeed, the certificate CN and download URL is mismatched. The nice thing about Let's Encrypt is that it's easy to (re)generate the certitcate with SANs to get rid of this mismatch.
Browser didn't complain though.
Joseph Tam jtam.home@gmail.com
Despite what wget says the cert does have subject alternate name correctly specified.
Try adding cacert dir or file option. I recall wget being "helpful" and reporting this for all cert errors if primary CN and requested name disagree.
Aki