elinks and links2 don't verify ssl certificates at all on debian 8

From	Georgi Guninski <guninski@guninski.com>
Newsgroups	linux.debian.user
Subject	elinks and links2 don't verify ssl certificates at all on debian 8
Date	2016-03-21 16:00 +0100
Message-ID	<rf9tf-7al-9@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Slightly paraphrased from the cypherpunks mailing list:

https://cpunks.org/pipermail/cypherpunks/2016-March/012574.html
[OT] Would someone please check if links2 and elinks verify
certificates on clean install of Debian 8?

----

...elinks and links2 don't verify ssl certificates at all
on Debian 8 (this got confirmation in the thread)

To verify, try to open site which doesn't properly chain to trusted
root, say https://cacert.org (unless you trust their root ) and check
if it opens or there is error/warning.

For me, on updated system, both don't verify certificates.

Looks like at least ubuntu and fedora killed the elinks bug long ago.

Searching the web for "$browser self signed certificate" shows some
relevant results.

----

Sarcastic comment asks "when debian will learn about this".

Will leave this list soon.

Back to linux.debian.user | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

elinks and links2 don't verify ssl certificates at all on debian 8 Georgi Guninski <guninski@guninski.com> - 2016-03-21 16:00 +0100
  Re: elinks and links2 don't verify ssl certificates at all on debian  8 Vincent Lefevre <vincent@vinc17.net> - 2016-03-22 17:00 +0100

csiph-web