Compilar wget desde código fuente con soporte ssl en SUSE Linux Enterprise Server 11 SP3. Unable to establish SSL connection.

SLES 11 SP3 trae una versión de wget 1.11.4 , el cual no soporta los protocoles de encriptación requerida por muchos sitios web modernos como TLSv1.0. El error que wget muestra es las siguiente:

OpenSSL: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version
Unable to establish SSL connection.

SLES11SP3:/# wget https://github.com
--2018-06-23 23:53:37--  https://github.com/
Resolving github.com... 192.30.253.113, 192.30.253.112
Connecting to github.com|192.30.253.113|:443... connected.
OpenSSL: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert protocol version
Unable to establish SSL connection.
SLES11SP3:/# wget https://aurlen.mx
--2018-06-23 23:53:48--  https://aurlen.mx/
Resolving aurlen.mx... 50.30.40.221
Connecting to aurlen.mx|50.30.40.221|:443... connected.
ERROR: cannot verify aurlen.mx's certificate, issued by `/C=MX/ST=CDMX/L=CDMX/O=NINGUNA/OU=NINGUNA/CN=localhost':
  Self-signed certificate encountered.
ERROR: certificate common name `localhost' doesn't match requested host name `aurlen.mx'.
To connect to aurlen.mx insecurely, use `--no-check-certificate'.
Unable to establish SSL connection.
SLES11SP3:/#

Para compilar una versión de openssl-1.0.2o , usar el procedimiento:

1- Instalar Openssl versión1.0.2o

2.- Es muy importante exportar la variable CFLAGS con la ruta donde están los archivo de cabecera  (include) de openssl , en mi caso lascabeceras están en la ruta /opt/openssl-1.0.2o/include/. De lo contrario tendras un error … Missing md5 headers…

export CFLAGS='-I/opt/openssl-1.0.2o/include'

3.-Compilar con el siguientes comandos:

tar xzf wget-1.19.5.tar.gz
cd wget-1.19.5
./configure --prefix=/opt/wget-1.19.5 --with-ssl=openssl --with-openssl=yes --with-libssl-prefix=/opt/openssl-1.0.2o/
make -j64
make install

4.- Probar:

 

SLES11SP3:/# /opt/wget-1.19.5/bin/wget --no-check-certificate https://aurlen.mx/
--2018-06-24 00:39:03--  https://aurlen.mx/
Resolving aurlen.mx... 50.30.40.221
Connecting to aurlen.mx|50.30.40.221|:443... connected.
WARNING: cannot verify aurlen.mx's certificate, issued by ‘CN=Let's Encrypt Authority X3,O=Let's Encrypt,C=US’:
  Unable to locally verify the issuer's authority.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://aurlen.mx/w/index.php [following]
--2018-06-24 00:39:04--  https://aurlen.mx/w/index.php
Reusing existing connection to aurlen.mx:443.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://aurlen.mx/w/ [following]
--2018-06-24 00:39:04--  https://aurlen.mx/w/
Reusing existing connection to aurlen.mx:443.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: ‘index.html’

index.html                                          [ <=>                                                                                                    ]  20.86K  --.-KB/s    in 0.001s

2018-06-24 00:39:05 (34.4 MB/s) - ‘index.html’ saved [21364]