[Distutils] Problems with download redirection and secure certificate

[Donald Stufft]

> On Jan 7, 2015, at 9:38 AM, anatoly techtonik <techtonik at gmail.com> wrote:
> 
> Hi,
> 
> I can't download package from PyPI due to redirection to HTTPS and
> failed certificate check.
> 
> # wget http://pypi.python.org/packages/source/h/hexdump/hexdump-3.1.zip
> --2015-01-07 06:04:22--
> http://pypi.python.org/packages/source/h/hexdump/hexdump-3.1.zip
> Resolving pypi.python.org... 199.27.79.223
> Connecting to pypi.python.org|199.27.79.223|:80... connected.
> HTTP request sent, awaiting response... 301 Moved Permanently
> Location: https://pypi.python.org/packages/source/h/hexdump/hexdump-3.1.zip
> [following]
> --2015-01-07 06:04:22--
> https://pypi.python.org/packages/source/h/hexdump/hexdump-3.1.zip
> Connecting to pypi.python.org|199.27.79.223|:443... connected.
> ERROR: certificate common name `www.python.org' doesn't match
> requested host name `pypi.python.org'.
> To connect to pypi.python.org insecurely, use `--no-check-certificate'.
> 
> 
> This is from Debian Squeeze.

Your wget is too old and doesn’t support SAN names.

https://docs.fastly.com/guides/ssl/why-do-i-see-ssl-certificate-errors-when-using-wget

---
Donald Stufft
PGP: 7C6B 7C5D 5E2B 6356 A926 F04F 6E3C BCE9 3372 DCFA