wget static binary with HTTPS support

Hey guys,

One problem I've run into is that most of the modern ways to host a file (github, dropbox, various object storage solutions) have all migrated to mandatory HTTPS for their URLs.

This is a problem for the busybox wget which comes on the stock Pogoplug Linux installation, because it can't deal with HTTPS.

I've built a statically-linked wget binary which has HTTPS support (and is compatible with 2.6 kernels), and I'm hosting it on Amazon S3, which supports plain-old-HTTP URLs.

http://pogoplug.s3.amazonaws.com/wget

I thought some of you might find it useful :)

Later tonight I'll create a simple github page with the instructions about how it was built, in case anyone wants to build their own / doesn't trust binaries from strangers.

EDIT: here's the github page, with build instructions for wget. It also includes a few other binaries: https://github.com/pepaslabs/pogoplug_static_binaries

-jason



Edited 1 time(s). Last edit at 11/11/2015 08:38AM by cellularmitosis.

@jason,

It's good for you to do this for the security concious users! but you know that the latest armel wget is also available from Debian repository? or you can also get it from my latest rootfs:
http://forum.doozan.com/read.php?2,12096

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

would there be a Chance to get it into Pogos Rescue-Sytem? (davygravy rescue 2.8.2)
and where to put in a nand based System to use instead of busybox wget?

joerg_999



Edited 3 time(s). Last edit at 10/29/2015 07:16PM by joerg_999.

Thanks for this. I wish I had seen it a few hours ago. I don't want to hijack this thread, but since it's kind of related, here goes.

A few hours ago I was trying to use a bash script I found to update my no-ip host and had trouble with its use of wget. I'd get back:

Resolving dynupdate.no-ip.com (dynupdate.no-ip.com)... 8.23.224.120
Connecting to dynupdate.no-ip.com (dynupdate.no-ip.com)|8.23.224.120|:443... connected.
GnuTLS: A TLS packet with unexpected length was received.
Unable to establish SSL connection.

With jason's, I get back:

Resolving dynupdate.no-ip.com... 8.23.224.120
Connecting to dynupdate.no-ip.com|8.23.224.120|:443... connected.
HTTP request sent, awaiting response... 401 Unauthorized
Connecting to dynupdate.no-ip.com|8.23.224.120|:443... connected.
HTTP request sent, awaiting response... 200 OK

So I think jason's works, but I'm a little confused about the initial "401 Unauthorized". Clearly the one from the Debian repository doesn't work, but that appears to be an issue with GnuTLS? Searching didn't produce anything helpful so I finally gave up on wget and used curl.

-JT

Thanks for sharing this. I think this will be very useful.

-grayman4hire
======================================
Pogoplug V2 and V3 Serial Connection
Tutorial - Pogoplug v4 (Series 4 and Mobile) with Linux (Debian or Arch)
OpenWRT on Pogoplug Mobile
Tutorial - Pogoplug E02/V4 with Arch Linux ARM
Hacking the Pogoplug v3/Oxnas (Pro/Classic) with Debian
OpenWRT on Pogoplug v3/Oxnas (Pro/Classic)

FYI,

In case you're not aware, Dropbox accepts http request, too, not just https (it is only default to https).

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

bodhi Wrote:
-------------------------------------------------------
> FYI,
>
> In case you're not aware, Dropbox accepts http
> request, too, not just https (it is only default
> to https).

It redirects to https behind the scene and will fail with the regular "wget" included with the Pogoplug OS.

-grayman4hire
======================================
Pogoplug V2 and V3 Serial Connection
Tutorial - Pogoplug v4 (Series 4 and Mobile) with Linux (Debian or Arch)
OpenWRT on Pogoplug Mobile
Tutorial - Pogoplug E02/V4 with Arch Linux ARM
Hacking the Pogoplug v3/Oxnas (Pro/Classic) with Debian
OpenWRT on Pogoplug v3/Oxnas (Pro/Classic)

Ah! thanks gray.

-bodhi
===========================
Forum Wiki
bodhi's corner (buy bodhi a beer)

bodhi Wrote:
-------------------------------------------------------
> @jason,
>
> It's good for you to do this for the security
> concious users! but you know that the latest armel
> wget is also available from Debian repository? or
> you can also get it from my latest rootfs:
> http://forum.doozan.com/read.php?2,12096

Thanks bodhi. However, the last time I tried to run a modern Debian binary in the stock Pogoplug linux distro, I got an error saying "kernel too old".

In fact, I had to use a Debian squeeze chroot in order to build that wget binary, to ensure it would run under 2.6 kernels (e.g. the stock Pogolpug linux distro).

I edited the original post to include the build instructions for wget: https://github.com/pepaslabs/pogoplug_static_binaries