Can not download files with unmatched certificate

[hrply]

Succeeded when download with wget

hrply@20319:/ssd/bioraw/downloads/DSS$ wget --header "Host: chibiotech3.kmdns.net:35000" \
--user-agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0" \
--header "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8" \
--header "Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5" \
--referer "https://chibiotech3.kmdns.net:35000/sharing/BHicGO0C3" \
--header "Cookie: sharing_sid=C8QHc8YeDaBJ4w2xiJTyyiNaLtGwqbcK" \
--header "Upgrade-Insecure-Requests: 1" \
--header "Sec-Fetch-Dest: iframe" \
--header "Sec-Fetch-Mode: navigate" \
--header "Sec-Fetch-Site: same-origin" \
'https://chibiotech3.kmdns.net:35000/fsdownload/webapi/file_download.cgi/CON_4_S1_L001_R1_001.fastq.gz?dlink=%222f463030322f3230323630313330***5f52315f3030312e66617374712e677a%22&noCache=1770109402048&_sharing_id=%22BHicGO0C3%22&api=SYNO.FolderSharing.Download&version=2&method=download&mode=download&stdhtml=false' \
--output-document "CON_4_S1_L001_R1_001.fastq.gz"
--2026-02-03 17:19:28--  https://chibiotech3.kmdns.net:35000/fsdownload/webapi/file_download.cgi/CON_4_S1_L001_R1_001.fastq.gz?dlink=%222f463030322f3230323630313330***5f52315f3030312e66617374712e677a%22&noCache=1770109402048&_sharing_id=%22BHicGO0C3%22&api=SYNO.FolderSharing.Download&version=2&method=download&mode=download&stdhtml=false
Resolving chibiotech3.kmdns.net (chibiotech3.kmdns.net)... 14.19.147.248
Connecting to chibiotech3.kmdns.net (chibiotech3.kmdns.net)|14.19.147.248|:35000... connected.
WARNING: cannot verify chibiotech3.kmdns.net's certificate, issued by ‘CN=Synology Inc. CA,O=Synology Inc.,L=Taipel,C=TW’:
  Unable to locally verify the issuer's authority.
WARNING: no certificate subject alternative name matches
        requested host name ‘chibiotech3.kmdns.net’.
HTTP request sent, awaiting response... 200 OK
Length: 36121952028 (34G) [application/octet-stream]
Saving to: ‘CON_4_S1_L001_R1_001.fastq.gz’

CON_4_S1_L001_R1_001.fastq.gz        0%[                                                                ] 208.59M  1.36MB/s    eta 5h 47m 

For data security concerns, i deleted some words in the URL and insteaded with ***

Failed when download with mwget:

hrply@20319:/ssd/bioraw/downloads/DSS-2$ ~/software/mwget/target/release/mwget --header "Host: chibiotech3.kmdns.net:35000" \
--user-agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:147.0) Gecko/20100101 Firefox/147.0" \
--header "Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8" \
--header "Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5" \
--header "Cookie: sharing_sid=C8QHc8YeDaBJ4w2xiJTyyiNaLtGwqbcK" \
--header "Upgrade-Insecure-Requests: 1" \
--header "Sec-Fetch-Dest: iframe" \
--header "Sec-Fetch-Mode: navigate" \
--header "Sec-Fetch-Site: same-origin" \
--output-document "CON_4_S1_L001_R1_001.fastq.gz" \
"https://chibiotech3.kmdns.net:35000/fsdownload/webapi/file_download.cgi/CON_4_S1_L001_R1_001.fastq.gz?dlink=%222f463030322f3230323630313330***5f52315f3030312e66617374712e677a%22&noCache=1770109402137&_sharing_id=%22BHicGO0C3%22&api=SYNO.FolderSharing.Download&version=2&method=download&mode=download&stdhtml=false"
Error: Http(reqwest::Error { kind: Request, url: Url { scheme: "https", cannot_be_a_base: false, username: "", password: None, host: Some(Domain("chibiotech3.kmdns.net")), port: Some(35000), path: "/fsdownload/webapi/file_download.cgi/CON_4_S1_L001_R1_001.fastq.gz", query: Some("dlink=%222f463030322f3230323630313330***5f52315f3030312e66617374712e677a%22&noCache=1770109402137&_sharing_id=%22BHicGO0C3%22&api=SYNO.FolderSharing.Download&version=2&method=download&mode=download&stdhtml=false"), fragment: None }, source: hyper::Error(Connect, Custom { kind: Other, error: Custom { kind: InvalidData, error: InvalidCertificate(UnknownIssuer) } }) })

So can mwget skip certification？

[hburaylee]

Thanks for raising this issue! I've implemented a fix. Could you please test the latest changes when you have a moment?

Using https://github.com/rayylee/mwget/tree/dev with --no-check-certificate option.