Req #71027 [NEW]: certificate common name '*.php.net' doesn't match requested host name 'php.net'
| From: | g dot rossolini at gmail dot com | Date: | Fri, 04 Dec 2015 10:33:44 +0000 |
| Subject: | Req #71027 [NEW]: certificate common name '*.php.net' doesn't match requested host name 'php.net' | ||
| Groups: | php.webmaster | ||
| Request: | Send a blank email to php-webmaster+get-24346@lists.php.net to get a copy of this message | ||
From: g dot rossolini at gmail dot com
Operating system:
PHP version: Irrelevant
Package: Website problem
Bug Type: Feature/Change Request
Bug description:certificate common name '*.php.net' doesn't match requested host name
'php.net'
Description:
------------
The links provided in the https://secure.php.net/downloads.php page
cause an SSL error:
wget https://php.net/get/php-7.0.0.tar.bz2/from/a/mirror
--2015-12-04 10:16:11--
https://php.net/get/php-7.0.0.tar.bz2/from/a/mirror
Resolving php.net... 72.52.91.14, 2a02:cb41::7
Connecting to php.net|72.52.91.14|:443... connected.
ERROR: certificate common name `*.php.net' doesn't match requested host
name `php.net'.
To connect to php.net insecurely, use `--no-check-certificate'.
wget --version
GNU Wget 1.12 built on linux-gnu.
Although cURL does not complain:
curl -I https://php.net/get/php-7.0.0.tar.bz2/from/a/mirror
HTTP/1.1 301 Moved Permanently
Server: nginx/1.6.2
Date: Fri, 04 Dec 2015 10:26:48 GMT
Content-Type: text/html
Content-Length: 184
Connection: keep-alive
Location: https://secure.php.net/get/php-7.0.0.tar.bz2/from/a/mirror
curl --version
curl 7.44.0 (i686-pc-linux-gnu) libcurl/7.44.0 OpenSSL/1.0.2d zlib/1.2.8
libidn/1.25 libssh2/1.4.3 nghttp2/1.3.0
Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s
rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL
libz TLS-SRP HTTP2 UnixSockets Metalink
When using secure.php.net as the domain name, download works:
wget https://secure.php.net/distributions/php-7.0.0.tar.bz2
--2015-12-04 10:16:46--
https://secure.php.net/distributions/php-7.0.0.tar.bz2
Resolving secure.php.net... 72.52.91.14, 2a02:cb41::7
Connecting to secure.php.net|72.52.91.14|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 13975832 (13M) [application/octet-stream]
Saving to: `php-7.0.0.tar.bz2'
100%[==================================================================================================================================================================================================>]
13,975,832 478K/s in 28s
2015-12-04 10:17:15 (494 KB/s) - `php-7.0.0.tar.bz2' saved
[13975832/13975832]
Expected result:
----------------
Links provided in the secure downloads webpage should point to a domain
that matches the certificate, or a certificate should be set up for the
root domain.
Actual result:
--------------
Links provided in the secure downloads webpage point to the root domain,
which has no valid certificate:
certificate common name '*.php.net' doesn't match requested host name
'php.net'
Also see #70972
--
Edit bug report at https://bugs.php.net/bug.php?id=71027&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=71027&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=71027&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=71027&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=71027&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=71027&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=71027&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=71027&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=71027&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=71027&r=support
Expected behavior: https://bugs.php.net/fix.php?id=71027&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=71027&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=71027&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=71027&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=71027&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=71027&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=71027&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=71027&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=71027&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=71027&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=71027&r=mysqlcfg