wget ssl alert handshake failure

Question

I am trying to download files from an https site and keep getting the following error   OpenSSL  error 14077410 SSL routines SSL23 GET SERVER HELLO sslv3 alert handshake failure Unable to establish SSL connection    From reading blogs online I gather I have to provide the server cert and the client cert  I have found steps on how to download the server cert but not the client cert  Does anyone have a complete set of steps to use wget with SSL  I also tried the --no-check-certificate option but that did not work   wget version  wget-1 13 4 openssl version  OpenSSL 1 0 1f 6 Jan 2014   trying to download all lecture resources from a course s webpage on coursera org  So  the URL would look something like this  https   class coursera org matrix-002 lecture  Accessing this webpage online requires form authentication  not sure if that is causing the failure

User · Accepted Answer

It works from here with same OpenSSL version, but a newer version of wget (1.15). Looking at the Changelog there is the following significant change regarding your problem:

1.14: Add support for TLS Server Name Indication.

Note that this site does not require SNI. But www.coursera.org requires it. And if you would call wget with -v --debug (as I've explicitly recommended in my comment!) you will see:

$ wget https://class.coursera.org
...
HTTP request sent, awaiting response...
  HTTP/1.1 302 Found
...
Location: https://www.coursera.org/ [following]
...
Connecting to www.coursera.org (www.coursera.org)|54.230.46.78|:443... connected.
OpenSSL: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
Unable to establish SSL connection.

So the error actually happens with www.coursera.org and the reason is missing support for SNI. You need to upgrade your version of wget.

User · Answer

I was in SLES12 and for me it worked after upgrading to wget 1 14  using --secure-protocol TLSv1 2 and using --auth-no-challenge   wget --no-check-certificate --secure-protocol TLSv1 2 --user satul --password xxx --auth-no-challenge -v --debug https   jenkins-server artifact build x86 64 tgz

User · Answer

I was having this problem on Ubuntu 12 04 3 LTS  well beyond EOL  I know     and got around it with   sudo apt-get update  amp  amp  sudo apt-get install ca-certificates

User · Answer

You probably have an old version of wget  I suggest installing wget using Chocolatey  the package manager for Windows  This should give you a more recent version  if not the latest    Run this command after having installed Chocolatey  as Administrator    choco install wget

User · Answer

Below command for download files from TLSv1 2 website   curl -v --tlsv1 2 https   example com filename zip  It s worked

User · Answer

Basically your OpenSSL uses SSLv3 and the site you are accessing does not support that protocol   Just update your wget   sudo apt-get install wget  Or if it is already supporting another secure protocol  just add it as argument   wget https   example com --secure-protocol PROTOCOL v1

User · Answer

One alternative is to replace the  https  with  http  in the url that you re trying to download from to just circumvent the SSL connection   Not the most secure solution  but this worked in my case

[ssl] wget ssl alert handshake failure

Examples related to ssl

Examples related to https

Examples related to wget