Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

wget: can't execute 'ssl_helper': No such file or directory #25

Closed
ghost opened this issue Jan 13, 2017 · 3 comments
Closed

wget: can't execute 'ssl_helper': No such file or directory #25

ghost opened this issue Jan 13, 2017 · 3 comments

Comments

@ghost
Copy link

ghost commented Jan 13, 2017

It appears that the busybox image is missing the ssl_helper:

# docker run -ti busybox:1.26.1
(in container) / # wget https://google.com
Connecting to google.com (172.217.16.174:443)
wget: can't execute 'ssl_helper': No such file or directory
wget: error getting response: Connection reset by peer
@tianon
Copy link
Member

tianon commented Jan 27, 2017

This is expected -- a basic install of BusyBox doesn't include ssl_helper (it's a separate binary, usually linked to something like matrixssl or openssl), and would complicate our build a bit.

Over in #23 (comment), I noted that upstream is starting to release official binaries now, and they also release an ssl_helper binary, but there's a strong caveat there that it doesn't do any certificate verification (as far as I could figure out how to enable).

@devurandom
Copy link

The issue still appears with busybox:1.26.2-musl.

@tianon
Copy link
Member

tianon commented Apr 3, 2017

@devurandom as I noted above, this is the expected behavior -- without an ssl_helper, BusyBox's built-in wget cannot download from https:// sources.

Since BusyBox upstream does not recommend an officially-supported ssl_helper, and since it would complicate and increase the size of the build (needing to compile openssl, needing to embed and update ca-certificates, etc), that is left as an exercise for the reader.

For realistic uses, I think the best solution is probably to use Alpine as a base instead, since it's essentially just BusyBox plus a package manager (suitable for downloading an ssl_helper and ca-certificates).

@tianon tianon closed this as completed Apr 3, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants