Certificate error when trying to download and install a collector.

Question:

I am trying to install a collector using the  Setup wizard. The wizard generates the wget command download and installs the collector, but the site's certificate cn does not match the requested hostname:

Command generated by wizard:

wget https://collectors.us2.sumologic.com/rest/download/linux/64 -O SumoCollector.sh && chmod +x SumoCollector.sh && ./SumoCollector.sh -q -Vsumo.token_and_url=randomtokengenerated=

Response:

Resolving collectors.us2.sumologic.com... 54.245.121.189, 54.214.44.252, 54.245.251.27, ... 

Connecting to collectors.us2.sumologic.com|54.245.121.189|:443... connected. 

ERROR: certificate common name “service.us2.sumologic.com” doesn’t match requested host name “collectors.us2.sumologic.com”. 

To connect to collectors.us2.sumologic.com insecurely, use ‘--no-check-certificate’.

Why am I receiving this error for the certificate mismatch?

Answer:

There is a known issue with some older versions of WGET where that function does not correctly check the Server Alternate Name (SAN) property in an SSL certificate, resulting in the message your seeing. More information can be found in the following bug report.

    https://bugzilla.redhat.com/show_bug.cgi?id=903756

It is recommended to upgrade wget to a more recent version in order to resolve this issue. A less secure option is to use the --no-check-certificate flag when using wget to download.