Wget Doesn't Accept Google's Certificate [Closed]

I use wget in a cron job to download my google calendar. I know it was still working last week. Today I noticed it doesn't anymore. wget won't accept google's certificate:

$ wget --debug  
> DEBUG output created by Wget 1.12 on linux-gnu.

--2013-07-26 12:36:31--  
Resolving  109.105.109.234, 109.105.109.223, 109.105.109.208, ...
Caching  => 109.105.109.234 109.105.109.223 109.105.109.208 109.105.109.249 109.105.109.229 109.105.109.219 109.105.109.245 109.105.109.227 109.105.109.240 109.105.109.230 109.105.109.241 109.105.109.212 109.105.109.251 109.105.109.216 109.105.109.238 109.105.109.218 2a00:1450:400f:803::1012
Connecting to  connected.
Created socket 3.
Releasing 0x09046cf8 (new refcount 1).
Initiating SSL handshake.
Handshake successful; connected socket 3 to SSL handle 0x09047090
certificate:
  subject: /C=US/ST=California/O=Google Inc/CN=google.com
  issuer:  /C=US/O=Google Inc/CN=Google Internet Authority
ERROR: certificate common name `google.com' doesn't match requested host name `
To connect to  insecurely, use `--no-check-certificate'.
Closed 3/SSL 0x09047090

So wget doesn't want to match google.com with Which is weird. The certificates seem to be fine. curl is working:

curl -v 
* About to connect() to  port 443 (#0)
*   Trying 109.105.109.219... connected
* Connected to  (109.105.109.219) port 443 (#0)
* successfully set certificate verify locations:
*   CAfile: none
  CApath: /etc/ssl/certs
* SSLv3, TLS handshake, Client hello (1):
* SSLv3, TLS handshake, Server hello (2):
* SSLv3, TLS handshake, CERT (11):
* SSLv3, TLS handshake, Server key exchange (12):
* SSLv3, TLS handshake, Server finished (14):
* SSLv3, TLS handshake, Client key exchange (16):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSLv3, TLS change cipher, Client hello (1):
* SSLv3, TLS handshake, Finished (20):
* SSL connection using ECDHE-RSA-RC4-SHA
* Server certificate:
*    subject: C=US; ST=California; L=Mountain View; O=Google Inc; CN=
*    start date: 2013-07-12 08:56:36 GMT
*    expire date: 2013-10-31 23:59:59 GMT
*    subjectAltName:  matched
*    issuer: C=US; O=Google Inc; CN=Google Internet Authority
*    SSL certificate verify ok.
> GET /calendar/ical/<private-id>/basic.ics HTTP/1.1
> User-Agent: curl/7.21.6 (i686-pc-linux-gnu) libcurl/7.21.6 OpenSSL/1.0.0e zlib/1.2.3.4 libidn/1.22 librtmp/2.3
> Host: 
> Accept: */*
> 
< HTTP/1.1 200 OK
< Expires: Fri, 01 Jan 1990 00:00:00 GMT
< Date: Fri, 26 Jul 2013 10:42:18 GMT
< Content-Type: text/calendar; charset=UTF-8
< Cache-Control: no-cache, no-store, max-age=0, must-revalidate
< Pragma: no-cache
< X-Content-Type-Options: nosniff
< X-Frame-Options: SAMEORIGIN
< X-XSS-Protection: 1; mode=block
< Server: GSE
< Transfer-Encoding: chunked
< 
...

It's not terrible, I can just use curl instead. But still - why isn't it working?

My system is:

$ wget --version
> GNU Wget 1.12 built on linux-gnu.

+digest +ipv6 +nls +ntlm +opie +md5/openssl +https -gnutls +openssl 
-iri 

Wgetrc: 
    /etc/wgetrc (system)
Locale: /usr/share/locale 
Compile: gcc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc" 
    -DLOCALEDIR="/usr/share/locale" -I. -I../lib -g -O2 -DNO_SSLv2 
    -D_FILE_OFFSET_BITS=64 -O2 -g -Wall 
Link: gcc -g -O2 -DNO_SSLv2 -D_FILE_OFFSET_BITS=64 -O2 -g -Wall 
    -Wl,-Bsymbolic-functions /usr/lib/libssl.so /usr/lib/libcrypto.so 
    -ldl -lrt ftp-opie.o openssl.o http-ntlm.o gen-md5.o 
    ../lib/libgnu.a 

Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Originally written by Hrvoje Niksic <>.
Currently maintained by Micah Cowan <>.
Please send bug reports and questions to <>.


$ uname -a
> Linux andrEee 3.0.0-32-generic #51-Ubuntu SMP Thu Mar 21 15:51:26 UTC 2013 i686 i686 i386 GNU/Linux

$ lsb_release -a
> No LSB modules are available.
  Distributor ID:   Ubuntu
  Description:  Ubuntu 11.10
  Release:  11.10
  Codename: oneiric
5

This is a known bug in wget 1.12.

As you are running an unsupported version of ubuntu the best course of action would be to upgrade to a supported version . wget 1.14 is the latest version in ubuntu and has fixed this bug.

Chloe Bennett

Chloe Bennett

Culture, Media & Entertainment Columnist

Chloe Bennett explores the intersection of pop culture, streaming entertainment, digital trends, and contemporary lifestyle. Her weekly commentary reaches thousands of culture enthusiasts.

Share this article
Twitter Facebook Pinterest