[pca] Issue with wget on RHEL6.5

Laurent Blume laurent at elanor.org
Fri Jan 3 14:14:27 CET 2014


Hello all, and Happy New Year!

To start it properly - I've found a PCA issue. It's been a while since 
I've found one.

I'm running PCA as a proxy on a RHEL6 machine, Apparently, since early 
December and an update to 6.5, it fails connecting to 
getupdates.oracle.com (through a web proxy) with a message saying: 
Unable to establish SSL connection.

After comparing with a Solaris box where it was working, I noticed this 
parameter was present when running on Solaris, not on RHEL:
--secure-protocol=TLSv1

Adding it manually, it connects.

So this bit of the code should be modified to add the parameter in other 
cases than OpenCSW:

   if ((($url =~ /https:\/\/getupdates.oracle.com\//) || ($url =~ 
/https:\/\/support.oracle.com\//)) && ($wget{path} =~ /csw/)) { $cmd .= 
" --secure-protocol=TLSv1" }

So, wget was *not* updated. It's still 1.12, the binary dated Oct 2012.
OpenSSL was updated, so it's probably coming from that.

I'd say, just always add the parameter. It works with /usr/sfw/bin/wget 
(in a recently patched S10 at least) as well as with wget on RHEL >= 5.

Thanks,

Laurent



More information about the pca mailing list