Changeset 31829 for main/trunk/greenstone2/build-src/packages/wget/README

Timestamp:

2017-07-28T18:53:37+12:00 (7 years ago)

Author:

ak19

Message:

Intermediate commit for building wget with openssl. This is a working version, part of incremental commits. For now, we're still using wget-1.15-gs (that always requires --no-check-certificate if running wget), which now uses a wgetrc conf file to turn off the check-certificate default of wget, since without this, wget fails getting https pages that don't yet have a valid security certificate. This commit introduces the template wgetrc-gs.in file, which contains a flag set to not require certificate checks, is copied to gs2build/OS as wgetrc. The WGETRC env var is set in setup.bash to point to the wgetrc file so wget runs smoothly against https urls.

File:

• main/trunk/greenstone2/build-src/packages/wget/README (modified) (3 diffs)

main/trunk/greenstone2/build-src/packages/wget/README

@@ -105 +105 @@
 
 
-9) We're now shifting to wget-1.17.1 which is installed on Ubuntu 16.04 and which work on https urls without the --no-check-certificate flag being necessary.
+9) We're now shifting to wget-1.17.1 which is installed on Ubuntu 16.04, and for which a windows binary compiled with OpenSSL is available. Both the linux system version and windows binary work on https urls without the --no-check-certificate flag being necessary. However, the compiled up Linux version still needs this flag, see under PROBLEM.
 
 This way our perl code can launch wget as before, without always passing that additional flag. Hopefully the output in the Download pane will be the same so that the donwload parsing will work.
@@ -118 +118 @@
 * configuring had initially failed, reporting that OPENSSL_CFLAGS and OPENSSL_LIBS need to be set if not wanting to use whatever pkg-config may find. To set LIBS variables, use one of these forms: LIBS="-L/path/to/lib" or LIBS="/path/to/lib/lib.a" or LIBS="-lssl". To combine all three, separate with spaces. See http://trac.greenstone.org/changeset/30948 and https://github.com/tatsuhiro-t/spdylay/issues/43
 
+PROBLEM AND SOLUTION WITH WGETRC
 Can turn off requiring a certificate check for https URLs in wgetrc conf file, as explained here:
 https://superuser.com/questions/508696/wget-without-no-check-certificate
@@ -139 +140 @@
 # https://lists.gnu.org/archive/html/bug-wget/2014-12/msg00104.html
 
-2ND PROBLEM: OpenSSL License, see https://www.openssl.org/source/license.html
+Alternatives for Windows:
+Source:
+- https://soliloquyforthefallen.net/?p=238
+- https://github.com/wertarbyte/wget/tree/master/windows (README at end)
+Binaries:
+- https://stackoverflow.com/questions/14344921/wget-for-windows-7-trusted-source
 
-QUESTION: If I delete the gs2build/bin/linux/openssl folder, the built wget does not seem to care. Is it finding something else or has it included the openssl somehow? How can I verify this?
+COMBINING GREENSTONE's GPL with OpenSSL LICENSES
+OpenSSL is under a double license, see https://www.openssl.org/source/license.html
+The licenses for GPL and OpenSSL are incompatible, see https://www.gnu.org/licenses/license-list.en.html#OpenSSL
+but you can combine it this way: https://opensource.stackexchange.com/questions/2233/gpl-v3-with-openssl-exception?rq=1
+which is what we've done for GS2 and GS3.
+
+
+TO DO:
+- If I delete the gs2build/bin/linux/openssl folder, the built wget still works fine without it. Dr Bainbridge confirmed that this is because, wget is built against OpenSSL's static libraries and therefore no longer needs the OpenSSL stuff we build and have been putting into gs2build/bin/linux/openssl. So we no longer need to put the built OpenSSL there.
+
+- Add a tick box in GLI > File > Preferences for turning on No Check Certificate over https, this should then replace our wgetrc file and env variable set in GS2's setup.bash. By default leave this flag unticked, so downloading won't work over https. Need to store this user setting in GLI's config.xml. Ensure that when the download over https failed, it results in an error.
+
+- If the downloading error count > 0:
+At the bottom of GLI > Download Pane > View Log > download error log - when we get errors:
+You have the option of adjusting your proxy server settings (go through the Configure Proxy button)
+For https certificate authentication, you have the option of turning off checking the certificate in the Connections tab of File > Preferences
+
+Check the warnings on windows. If it's no longer always warning, then do the stuff above on warning too, not just on error.
+