php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #71027 certificate common name '*.php.net' doesn't match requested host name 'php.net'
Submitted: 2015-12-04 10:33 UTC Modified: 2019-05-20 11:22 UTC
Votes:1
Avg. Score:3.0 ± 0.0
Reproduced:0 of 0 (0.0%)
From: g dot rossolini at gmail dot com Assigned: petk (profile)
Status: Closed Package: Website problem
PHP Version: Irrelevant OS:
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If this is not your bug, you can add a comment by following this link.
If this is your bug, but you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: g dot rossolini at gmail dot com
New email:
PHP Version: OS:

 

 [2015-12-04 10:33 UTC] g dot rossolini at gmail dot com 
Description:
------------
The links provided in the https://secure.php.net/downloads.php page cause an SSL error:
wget https://php.net/get/php-7.0.0.tar.bz2/from/a/mirror
--2015-12-04 10:16:11--  https://php.net/get/php-7.0.0.tar.bz2/from/a/mirror
Resolving php.net... 72.52.91.14, 2a02:cb41::7
Connecting to php.net|72.52.91.14|:443... connected.
ERROR: certificate common name `*.php.net' doesn't match requested host name `php.net'.
To connect to php.net insecurely, use `--no-check-certificate'.

wget --version
GNU Wget 1.12 built on linux-gnu.

Although cURL does not complain:
curl -I https://php.net/get/php-7.0.0.tar.bz2/from/a/mirror
HTTP/1.1 301 Moved Permanently
Server: nginx/1.6.2
Date: Fri, 04 Dec 2015 10:26:48 GMT
Content-Type: text/html
Content-Length: 184
Connection: keep-alive
Location: https://secure.php.net/get/php-7.0.0.tar.bz2/from/a/mirror

curl --version
curl 7.44.0 (i686-pc-linux-gnu) libcurl/7.44.0 OpenSSL/1.0.2d zlib/1.2.8 libidn/1.25 libssh2/1.4.3 nghttp2/1.3.0
Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp
Features: IDN IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz TLS-SRP HTTP2 UnixSockets Metalink


When using secure.php.net as the domain name, download works:
wget https://secure.php.net/distributions/php-7.0.0.tar.bz2
--2015-12-04 10:16:46--  https://secure.php.net/distributions/php-7.0.0.tar.bz2
Resolving secure.php.net... 72.52.91.14, 2a02:cb41::7
Connecting to secure.php.net|72.52.91.14|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 13975832 (13M) [application/octet-stream]
Saving to: `php-7.0.0.tar.bz2'

100%[==================================================================================================================================================================================================>] 13,975,832   478K/s   in 28s

2015-12-04 10:17:15 (494 KB/s) - `php-7.0.0.tar.bz2' saved [13975832/13975832]


Expected result:
----------------
Links provided in the secure downloads webpage should point to a domain that matches the certificate, or a certificate should be set up for the root domain.

Actual result:
--------------
Links provided in the secure downloads webpage point to the root domain, which has no valid certificate:
certificate common name '*.php.net' doesn't match requested host name 'php.net'

Also see #70972

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2015-12-04 22:57 UTC] bjori@php.net 
sneaky.

We only support https over secure.php.net -- no other mirrors, including the primary "www.php.net" or "php.net".

secure.php.net is a special type of mirror, and not actually registered as mirror, and reports itself as being "php.net" -- hence the download urls "https://php.net/..".

Not sure how to fix this at the moment..
 [2019-05-20 11:22 UTC] petk@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: petk
 [2019-05-20 11:22 UTC] petk@php.net 
This has been now resolved via a migration to the server and infrastructure where mirrors aren't used anymore and PHP https issues are finally solved with this context. Thank you for reporting issues and helping us making PHP better as much as it can be.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Jun 13 22:01:31 2024 UTC