[pca] Downloading patches from proxy

Mon Feb 7 21:23:40 CET 2011

The apache server is the local caching proxy as well.  I am trying to
download the patches from a server without access to the internet
through the local caching proxy.  If the patches are already on the
local caching proxy then they are delivered to the client fine but if
not I get the ssl error when it tries to download them through the
proxy.

Pca.conf of client:

user=xxxxxx
passwd=xxxxxxx
debug=1

pca-proxy.conf of local caching proxy:

xrefdir=/patches
patchdir=/patches
wgetproxy=http://servername:portnumber
dltries=5
threads=5
user=Oracle username
passwd=Oracle password
debug=1

Changed values from wgetrc of client:

http_proxy = http://servername:portnumber/
https_proxy = http://servername:portnumber/
ftp_proxy = http://servername:portnumber/

# If you do not want to use proxy at all, set this to off.
use_proxy = on

Debug output of trying to download one patch that does not reside on the
proxy server:

Option download: 1
Option patchdir: /var/sadm/patch/.
Option user: <user>
Option passwd: <passwd>
Option patchurl: http://servername:portnumber/cgi-bin/pca-proxy.cgi?
Option xrefurl: http:// servername:portnumber /cgi-bin/pca-proxy.cgi?
Option noreboot: 1
Option safe: 1
Option debug: 1
Command: /usr/sfw/bin/pca
ARGV: 144221-02
Version: 20101221-01
CWD: /var/sadm/patch
Config files: /etc/pca.conf
Found /usr/sfw/bin/wget (1.12, 11200, https)
Using /usr/sfw/bin/wget
Found /usr/bin/uname
Prerequisites for threads not met, setting threads to 0
Never update
Expanded patch list: 144221-02
xref mtime: Mon Feb 7 13:16:55 2011
xref now : Mon Feb 7 13:18:24 2011
xref ctime: Mon Feb 7 13:16:55 2011
xref age : 89
Local file /var/tmp/patchdiag.xref is up to date
osname from uname: SunOS
Reading from /usr/bin/showrev -p 2>/dev/null
Using /var/tmp/patchdiag.xref from Jan/19/11
All operands are fully qualified patch IDs plus revisions
Host: servername (SunOS 5.10/Generic_142909-17/sparc/sun4u)
List: 144221-02 (1/0)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- ---
-------------------------------------------------------
144221 01 < 02 ---  89 Solaris Cluster 3.2: CORE patch for Solaris 10

Looking for 144221-02 (1/1)
Trying http:// servername:portnumber/cgi-bin/pca-proxy.cgi?
wgetrc: found /root/.wgetrc
Adding to /tmp/pca.803954: header=X_PCA_USER: <user>
Adding to /tmp/pca.803954: header=X_PCA_PASSWD: <passwd>
/usr/sfw/bin/wget --progress=dot:binary "http://
servername:portnumber/cgi-bin/pca-proxy.cgi?144221-02" --timeout 3600 -O
/var/sadm/patch/./144221-02.tmp
--2011-02-07 13:18:35--  http://
servername:portnumber/cgi-bin/pca-proxy.cgi?144221-02
Resolving servername... x.x.x.x
Connecting to servername|x.x.x.x|:portnumber... connected.
Proxy request sent, awaiting response... 500 Internal Server Error
2011-02-07 13:18:35 ERROR 500: Internal Server Error.

Removing /tmp/pca.803954
Failed (Error 500: Internal Server Error)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
wgetrc: found /root/.wgetrc
Adding to /tmp/pca.696456: header=Authorization: Basic
<base64-user-passwd>
/usr/sfw/bin/wget --progress=dot:binary
"https://getupdates.oracle.com/all_unsigned/144221-02.zip"
--ca-certificate=/usr/sfw/bin/pca -O /var/sadm/patch/./144221-02.tmp
--2011-02-07 13:18:35--
https://getupdates.oracle.com/all_unsigned/144221-02.zip
Resolving servername... x.x.x.x
Connecting to servername|x.x.x.x|:portnumber... connected.
Proxy tunneling failed: Authorization RequiredUnable to establish SSL
connection.
Removing /tmp/pca.696456
Failed (Unknown Error)
Failed (patch not found)
------------------------------------------------------------------------
------
Download Summary: 1 total, 0 successful, 0 skipped, 1 failed

-jeremy

-----Original Message-----
From: pca-bounces at lists.univie.ac.at
[mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Martin Paul
Sent: Monday, February 07, 2011 10:32 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Downloading patches from proxy

Am 07.02.2011 17:38, schrieb Fairburn, Jeremy:
> Does the apache server need to be configured with SSL?  I just checked
> and it is not.

I'm confused. Which role does the apache server play? The message you 
showed seems to come from a generic web proxy, have you set up a PCA 
local caching proxy as well?

It might help if you show me the wgetrc, pca.conf file(s) and exact 
wget/pca commands with their (debug) output.

Martin.

</PRE>The information in this electronic mail ("e-mail") message may contain information that is confidential and/or privileged, or may otherwise be protected by work product or other legal rules. It is solely for the use of the individual(s) or the entity (ies) originally intended. Access to this electronic mail message by anyone else is unauthorized. If you are not the intended recipient, be advised that any unauthorized review, disclosure, copying, distribution or use of this information, or any action taken or omitted to be taken in reliance on it, is prohibited and may be unlawful. Please notify the sender immediately if you have received this electronic message by mistake, and destroy all copies of the original message.
 
The sender believes that this e-mail and any attachments were free of any virus, worm, Trojan horse, malicious code and/or other contaminants when sent. E-mail transmissions cannot be guaranteed to be secure or error-free, so this message and its attachments could have been infected, corrupted or made incomplete during transmission. By reading the message and opening any attachments, the recipient accepts full responsibility for any viruses or other defects that may arise, and for taking remedial action relating to such viruses and other defects. Neither Wyndham Worldwide Corporation nor any of its affiliated entities is liable for any loss or damage arising in any way from, or for errors or omissions in the contents of, this message or its attachments