source: main/trunk/greenstone2/build-src/packages/wget/README@ 31829

Last change on this file since 31829 was 31829, checked in by ak19, 6 years ago

Intermediate commit for building wget with openssl. This is a working version, part of incremental commits. For now, we're still using wget-1.15-gs (that always requires --no-check-certificate if running wget), which now uses a wgetrc conf file to turn off the check-certificate default of wget, since without this, wget fails getting https pages that don't yet have a valid security certificate. This commit introduces the template file, which contains a flag set to not require certificate checks, is copied to gs2build/OS as wgetrc. The WGETRC env var is set in setup.bash to point to the wgetrc file so wget runs smoothly against https urls.

  • Property svn:keywords set to Author Date Id Revision
File size: 11.6 KB
1wget - web site mirroring software
3This directory contains a version of the GNU wget program that was written by
4Hrvoje Niksic and others and distributed under the GNU General Public Licence
6The GNU wget homepage is
81) A couple of very small changes were made to this package by Stefan Boddie
9(sjboddi[email protected]). The USE_STDARG preprocessor definition was
10added to the VC++ makefile as it appeared to need it to compile on either
11VC++ 4.2 or VC++ 6.0. A change was also made to prevent backslashes from
12mistakenly being converted to "@5c" on windows.
142) 2003/11/27 - [email protected] made a few more small changes to fix
15h_errno bug preventing code from compiling on latest versions of GCC.
173) 2004/06/30 - [email protected] replaced version 1.5.3 with version 1.9.
18It compiled as is under Windows XP, using VC++ 6.0, under Linux using GCC 3.2.3
19and GCC 2.95.3. So I haven't made any changes.
20Under Windows, I haven't compiled it with openssl, so it doesn't support
21https://. OpenSSL comes with a warning about it being illegal in some countries
22to distribute cryptographic technology, so I haven't used it. Look at
23wget-1.9/windows/README for Windows compiling instructions if you want to add
24it in.
264) 2008/07/03 - ora[email protected] replaced version 1.9 with version 1.11.4.
27Version 1.9 didn't compile statically with the new libraries which come with
28fedora, so upgrading. Had to apply the patch at
29 to get it to compile under
30windows(VC++ 6.0), and those changes are in the tar.gz file in the repository.
31Again, no ssl in windows wget. The packages/configure and packages/Makefile
32files perform the same operations on wget as before, just the directory name
33has changed from wget/wget-1.9 to wget/wget-1.11.4.
365) 2013/01/09 - [email protected] Make minor change to src/ so the code compiles under minGW cross-compiler running on Linux
37diff -r wget-1.13.4/src/ wget-1.13.4.MINGW/src/
40> ifeq ($(GSDLOS),windows)
41> # Compiling wget with MinGW
43> LIBS += -lws2_32
44> endif
47These newly added lines should come after the line:
48> CLEANFILES = *~ *.bak core core.[0-9]* build_info.c version.c
50and before the command to make 'all':
51> all: config.h
52> $(MAKE) $(AM_MAKEFLAGS) all-am
556) 2013/01/29 - [email protected] added some #ifdef __ANDROID__ blocks into src/util.c to cope with the fact that this OS lacks localeconv()
57diff wget-1.13.4-orig/src/utils.c wget-1.13.4-gs/src/utils.c
60> #ifdef __ANDROID__
61> cached_sep =",";
62> cached_grouping = "\x03";
63> #else
65> #endif
67[Now the #endif comes around line 1441 or 1459, immediately before:
68> initialized = true;
69> }
70> *sep = cached_sep;
71> *grouping = cached_grouping;]
747) 2014/10/13 - ak19
75Moved to wget version 1.15.
76Only the changes numbered 5 and 6 above have been ported into it, following Dr Bainbridge's instructions, as they were both changes made to the previous wget version Greenstone used (1.13.4).
77The wget tar file name (wget-1.15-gs) now indicates the version number and that it has been modified for Greenstone, so the Makefile and configure file in build-src/packages/ have been updated to reflect this.
798) 2017/07/27 - ak19 ([email protected]) - still using wget version 1.15, but now compiling wget up with OpenSSL support. Wget needs SSL support in order for it to access pages over HTTPS. In future, the web will be using https.
81We're now compiling up OpenSSL during the configuration phase since wget needs it to exist during its configure phase. We;re building OpenSSL statically, by setting the no-shared flag. The built OpenSSL gets put into gs2build/linux|darwin/openssl, containing lib, include and bin subfolders. When configuring wget, we build wget against our OpenSSl, and make and make install proceed as normal. Refer to gs2build/build-src/packages configure.
83We weren't compiling up wget statically before either, so we're still not doing so. To compile up wget (statically or not) with openssl, a helpful page was
85Note, however, that since the CPPFLAGS and LDFLAGS are now set to point to our OpenSSL during the configure stage, the make command needn't additionally set them as well, contrary to the instruction for make on the stackoverflow page. So we just need to do the usual make, make install once the configure is done against OpenSSL.
87If compiling wget up statically, then, in the LDFLAGS prepended to wget's configure command, append -static. Further, the gcc command that gets run needs to have -lpthread in its library listing at the end. The order of the libraries listed also needs to change for static compilation to be successful:
88-lprce -lpthread -ldl <remaining -llibs>
90However, warnings appear when compiling wget statically, as it does not make sense to create some programs statically since they may be stuck including a local context (e.g. something related to DNS warnings in compiling up a previous component statically). Linking against some libraries to create a static binary may not make sense either. For instance -ldl, the dynamic loading or linking library, may not make sense if the binary created is static. This seems to imply that wget makes more sense if compiled up as a shared object, .so, than as a static one, .a.
92The existing version of wget, 1.15, works with HTTPS when compiled against OpenSSL. However, this version of the binary needs to be run with the --no-check-certificate flag on to access https pages without a security certificate.
94e.g. ./wget --no-check-certificate
96The system wget on Ubuntu 16.04 is version 1.17.1 and does not require this flag. Pre-compiled windows binaries are available for version 1.11.4, so that may still require the flag. This will require further investigation. We'd like both unix and windows operating systems to behave similarly, ideally.
99Prebuilt Windows wget binaries (for 32 and 64 bit) version 1.11.4 that includes SSL support
101GNU's prebuilt Windows binaries of wget v 1.11.4. May not have been built with SSL support.
103The wget 1.11.4 we have, compiled without SSL does not work on https pages.
104Neither does the wget from, even after including the --no-check-certificate flag in the wget command. So we'll need to upgrade the wget binary on Windows to a later version too.
1079) We're now shifting to wget-1.17.1 which is installed on Ubuntu 16.04, and for which a windows binary compiled with OpenSSL is available. Both the linux system version and windows binary work on https urls without the --no-check-certificate flag being necessary. However, the compiled up Linux version still needs this flag, see under PROBLEM.
109This way our perl code can launch wget as before, without always passing that additional flag. Hopefully the output in the Download pane will be the same so that the donwload parsing will work.
112- Grabbed wget-1.17.1.tar.gz from
113- Made the modifications in steps 5 and 6 above and re-tarred as wget-1.17.1-gs.tar.gz, with corresponding changes in build-src/packages' configure, and Makefile
114- The configure step has now changed for wget v 1.17.1. Refer to build-src/packages/configure
116The configure step requires setting
117* --with-libssl-prefix to $bindir/openssl, so the wget build process can find openssl's include and lib folders. (Whereas the --with-ssl indicates what type of ssl we're using, which is openssl in our case.)
118* configuring had initially failed, reporting that OPENSSL_CFLAGS and OPENSSL_LIBS need to be set if not wanting to use whatever pkg-config may find. To set LIBS variables, use one of these forms: LIBS="-L/path/to/lib" or LIBS="/path/to/lib/lib.a" or LIBS="-lssl". To combine all three, separate with spaces. See and
121Can turn off requiring a certificate check for https URLs in wgetrc conf file, as explained here:
123And the location of wgetrc: (for now setting the env var WGETRC in $GSDLHOME/setup.bash, which points to $GSDLHOME/bin/linux). Then the locally built linux wget 1.17.1 works, and so would v 1.15.
125However, the linux system wget and windows wget binary v 1.17.1 are not setting thisvariable in their wgetrc file, so how is the certificate check off for them by default? The windows wget binary v 1.15 does require the no-check-certificate flag, but v 1.17.1 works out of the box. So why does the 1.17.1 version I built on linux behave like the 1.15 on Windows binary (and built on Linux), which required the flag?
129Windows binaries for wget 1.7.11 and other versions, built with openSSL support, are at:
132I downloaded the 32 bit version "" from there (at
134Unzipping wouldn't succeed, nor copying the zip's wget.exe directly, both producing a windows error message.
135To successfully extract: use 7zip to view the contents of the zip, then rename the wget.exe to wget.not, then copy out the wget.not file and rename it back.
137This version of wget on Windows 64 bit worked successfully to retrieve the https page of the Tudors site, and without the --no-check-certificate flag.
142Alternatives for Windows:
145- (README at end)
150OpenSSL is under a double license, see
151The licenses for GPL and OpenSSL are incompatible, see
152but you can combine it this way:
153which is what we've done for GS2 and GS3.
156TO DO:
157- If I delete the gs2build/bin/linux/openssl folder, the built wget still works fine without it. Dr Bainbridge confirmed that this is because, wget is built against OpenSSL's static libraries and therefore no longer needs the OpenSSL stuff we build and have been putting into gs2build/bin/linux/openssl. So we no longer need to put the built OpenSSL there.
159- Add a tick box in GLI > File > Preferences for turning on No Check Certificate over https, this should then replace our wgetrc file and env variable set in GS2's setup.bash. By default leave this flag unticked, so downloading won't work over https. Need to store this user setting in GLI's config.xml. Ensure that when the download over https failed, it results in an error.
161- If the downloading error count > 0:
162At the bottom of GLI > Download Pane > View Log > download error log - when we get errors:
163You have the option of adjusting your proxy server settings (go through the Configure Proxy button)
164For https certificate authentication, you have the option of turning off checking the certificate in the Connections tab of File > Preferences
166Check the warnings on windows. If it's no longer always warning, then do the stuff above on warning too, not just on error.
Note: See TracBrowser for help on using the repository browser.