Wget returning error: "Unable to establish SSL connection."

When I try to run Wget with the following options:

E:\Program Files\GnuWin32\bin>wget -p --html-extension --convert-links --no-check-certificate https://minecraft.net/en-us/
SYSTEM_WGETRC = c:/progra~1/wget/etc/wgetrc
syswgetrc = E:\Program Files\GnuWin32/etc/wgetrc
--2017-02-24 10:38:01--  https://minecraft.net/en-us/
Resolving minecraft.net... 52.84.24.33, 52.84.24.150, 52.84.24.230, ...
Connecting to minecraft.net|52.84.24.33|:443... connected.
OpenSSL: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake failure
Unable to establish SSL connection.

I get the error: Unable to establish SSL connection. The website that I am trying to download is safe.

I have also tried to change the protocol to SSLv3, but it still is not working.

Can someone tell me why it is doing this and how to get around it?

William V.

Posted 2017-02-24T18:43:42.017

Reputation: 351

What type fo connnection is this server expecting? It migh be configured to support (SSLv1, SSLv3, SSLv3, TLS 1.0, TLS 1.1, TLS 1.2) or any combination of those possible choices. Does a connection to this website work within a browser, on the same PC and connection, your attempting to connect to it with wget? – Ramhound – 2017-02-24T19:10:03.997

I can access this website on my computer normally using Chrome with no problems. – William V. – 2017-02-25T01:01:06.813

I look's like it may be using the SSLv3 connection as it states the following in the error: routines:SSL23_GET_SERVER_HELLO:sslv3. – William V. – 2017-02-25T01:02:02.513

That is what, wget is attempting to use, but the server is rejecting that connection because SSLv3 isn't secure. – Ramhound – 2017-02-25T01:48:52.433

According to other answers below, it looks like the protocol is TLSv1.0 – William V. – 2017-02-25T01:50:31.277

Answers

As SSL Labs shows, only TLSv1.0 and above are supported by minecraft.net. You can't use SSLv3 with it. It's likely that your version of wget doesn't support this (possibly due to being too old). Try upgrading it.

Joseph Sible-Reinstate Monica

Posted 2017-02-24T18:43:42.017

Reputation: 1 420

You can find a newer version here: Windows binaries of GNU Wget

It works fine, I had the same problem.

Chris

Posted 2017-02-24T18:43:42.017

Reputation: 101

The exact file link is here: https://eternallybored.org/misc/wget/releases/wget-1.19.1-win32.zip

– William V. – 2017-08-18T19:23:47.430

1Years later, version 1.20.3 was available... but it had problems. I had to run this to get a working version (under Windows): choco install wget --version 1.20 – MarkHu – 2019-04-17T21:27:39.467

I have the problem that all 64bit Versions of this wget there always crush after some seconds of downloading a file over https – Radon8472 – 2019-11-21T14:56:46.543

I had wget 1.11.x - moving up to 1.20.3 resolved this for me as well. Thanks. – Chris Emerson – 2019-12-17T14:02:29.043

I downloaded the 32-bit .exe file. It works.

wget.exe np -r -nH -L --cut-dirs=2 https://coast.noaa.gov/htdata/lidar1_z/geoid12a/data/3654/20090316_249102.laz

Jack

Posted 2017-02-24T18:43:42.017

Reputation: 21

You may want to add --secure-protocol=TLSv1 option.

Check also if installed OpenSSL supporting TLS by running:

openssl s_client -connect minecraft.net:443 -tls1

Alex

Posted 2017-02-24T18:43:42.017

Reputation: 5 606

--secure-protocol+TLSv1 Gave me the same error that I got before. – William V. – 2017-03-17T20:59:36.457

@WilliamV. I just run the same wget ... string by copy/pasting it from your question without changes on debian 8 jessie and it works without any error. Since you using some Window's port of wget, it looks like linked OpenSSL lib is outdated. Try to setup virtual machine with bare(non gui) debian and it should work. Another option, - use cygwin, it always comes with most recent versions of all programs. I just check the same wget... from cygwin, and it worked too.

– Alex – 2017-03-18T05:01:36.867

I can't install cygwin. Is it possible that I could try this on Xubuntu with Wget? I have a Linux machine that is running Xubuntu currently. – William V. – 2017-03-29T01:05:04.813

Had a similar error, but in my case only “Unable to establish SSL connection.” was shown without explanation. I have used a WinWget, which included a wget compiled without SSL support. Solved by downloading full version from https://eternallybored.org/misc/wget/

Ivan P.

Posted 2017-02-24T18:43:42.017

Reputation: 121

I had this problem and using a newer wget as mentioned in other answers solved it. However I'm not into installing binaries from random sites, if you're on Windows as the OP is and have WSL installed with Ubuntu then you can open a bash shell and have the latest ubuntu wget. If wget not installed:

sudo apt install wget

You can easily get to your windows stuff via cd /mnt/c (or d or whichever drive)

User

Posted 2017-02-24T18:43:42.017

Reputation: 2 430

adding to the accepted answer: if you're on windows and don't find or don't trust a reasonably new wget, try curl instead. As mentioned here it may already be included in Windows 10.

user829755

Posted 2017-02-24T18:43:42.017

Reputation: 387

You might try adding your information as a comment to the accepted answer. – William V. – 2020-02-01T02:59:51.217