Thread: N900 ssl connection problem qt and wget no match hostname
View Single Post
Halftux's Avatar
Halftux is offline Halftux
2018-04-12 , 12:50
Posts: 862 | Thanked: 2,511 times | Joined on Feb 2012 @ Germany
#1
I am writing a qt application which should download a file over ssl connection. Sadly it is not working with the following error message*. The protocol is fixed to TLSv1. I am using cssu-testing with openssl 0.9.8zh-1+maemo1+0m5+0cssu0 and maemosec. version 0.2.10.

*
The host name did not match any of the valid hosts for this certificate
To investigate the problem I am using wget and also getting same error message like:

Der Common Name *.usgs.gov des Zertifikates entspricht nicht dem angeforderten Hostname basemap.nationalmap.gov.
Code:
wget https://navigator.er.usgs.gov/tiles/aerial_Imagery.cgi/
12/2199/1345 --secure-protocol=TLSv1
will redirect to basemap.nationalmap.gov

Code:
wget https://basemap.nationalmap.gov/ArcGIS/rest/services/US
GSImageryOnly/MapServer/tile/12/1345/2199 --secure-protocol=TLSv1
Both downloads not working.

Maybe it has something to do with redirection.

I have also installed needed certificates with the certificate manager and created /etc/osso-af-init/ssl.defs file which get loaded during boot time. I guess this was not needed.

When I check with:

Code:
openssl s_client -connect navigator.er.usgs.gov:443 -tls1 -CApath /etc/certs/common-ca
or
Code:
openssl s_client -connect basemap.nationalmap.gov:443 -tls1 -CApath /etc/certs/common-ca
I will get a successful ssl handshake.
Maybe someone has a clue about this or has maybe some hint.

Could it be possible to make a certificate with a different hostname?

Please help me I am happy to hear any suggestions.
__________________
N900: gpxsee, fahrplan, gpscon, genwall, qrcode, hextool, libjansson4, libevent-2.0-5, cnee, psi-plus, mihphoto, shc

Maemo flasher/rescue live image.
Fremantle Harmattan SDK VM
 

The Following 2 Users Say Thank You to Halftux For This Useful Post: