[bug-notifications] [wget 0005068]: Problems negotiating SSL with updates.oracle.com

[Mantis Bug Tracker]

The following issue has been ASSIGNED. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=5068 
====================================================================== 
Reported By:                beezly
Assigned To:                dam
====================================================================== 
Project:                    wget
Issue ID:                   5068
Category:                   regular use
Reproducibility:            always
Severity:                   minor
Priority:                   normal
Status:                     assigned
====================================================================== 
Date Submitted:             2013-04-19 11:58 CEST
Last Modified:              2013-04-19 23:15 CEST
====================================================================== 
Summary:                    Problems negotiating SSL with updates.oracle.com
Description: 
with wget 1.14 I am experiencing problems connecting to updates.oracle.com
(as PCA does when it pulls down the patchdiag.xref file).

If I do;

/opt/csw/bin/wget -d --progress=dot:binary
--ca-certificate=/opt/csw/bin/pca -O /var/tmp/patchdiag.xref
"https://getupdates.oracle.com/reports/patchdiag.xref"

I get;

Setting --progress (progress) to dot:binary
Setting --ca-certificate (cacertificate) to /opt/csw/bin/pca
Setting --output-document (outputdocument) to /var/tmp/patchdiag.xref
DEBUG output created by Wget 1.14 on solaris2.10.

URI encoding = 'ISO8859-1'
--2013-04-19 10:54:03-- 
https://getupdates.oracle.com/reports/patchdiag.xref
Resolving getupdates.oracle.com (getupdates.oracle.com)... 141.146.44.51
Caching getupdates.oracle.com => 141.146.44.51
Connecting to getupdates.oracle.com
(getupdates.oracle.com)|141.146.44.51|:443... connected.
Created socket 5.
Releasing 0x000e8a18 (new refcount 1).
Initiating SSL handshake.
SSL handshake failed.
Closed fd 5
Unable to establish SSL connection.

The same works if I use /usr/sfw/bin/wget instead (1.12 on this system). 
====================================================================== 

---------------------------------------------------------------------- 
 (0010339) dam (administrator) - 2013-04-19 16:05
 https://www.opencsw.org/mantis/view.php?id=5068#c10339 
---------------------------------------------------------------------- 
This looks like an issue of OpenSSL 1.0.0 as this also fails:
  openssl s_client -connect getupdates.oracle.com:443
I'll forward this to the OpenSSL maintainer and keep you posted.