# HTTPS Downloads - Security Issue

**URL:** <https://forum.openwrt.org/t/https-downloads-security-issue/111733>\
**Category:** Talk about Documentation\
**Created:** [November 12, 2021, 6:08pm UTC](https://forum.openwrt.org/t/https-downloads-security-issue/111733 "2021-11-12T18:08:08Z")\
**Posts on this page:** 1\
**Showing post:** 7

<div class="post-metadata">

**Author:** ![anon89577378](https://forum.openwrt.org/letter_avatar/anon89577378/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon89577378](https://forum.openwrt.org/u/anon89577378)\
**Post date:** [November 14, 2021, 11:48pm UTC](https://forum.openwrt.org/t/https-downloads-security-issue/111733/7 "2021-11-14T23:48:25Z")

</div>

My vote -

> [@Upgrading OpenWrt firmware using CLI](https://forum.openwrt.org/t/upgrading-openwrt-firmware-using-cli/81821/3):
>
> OpenWrt server no longer allows http for images. As the error message says, you need to install libustream-wolfssl and ca-bundle to enable https support to wget. This requires about 1 MB of flash space. wolfssl is the smallest option if you don't already have another ssl library. If something depending on for example openssl is already installed, use libustream-openssl. Technically you don't need ca-bundle, as you can choose not to verify the server certificate with --no-check-certificate, …

---

_[View the full topic](https://forum.openwrt.org/t/https-downloads-security-issue/111733)._