[pca] Patch file not downloaded with "cipher or hash unavailable"

[West, Daniel]

I had the same problem with one of my Solaris 10 systems.

In April Oracle released an openSSL patch for Solaris 10 (148071-17).   Apparently this patch caused a problem for applications which use certain crypto library calls in openSSL but only older installs of Solaris 10 were affected.   There is a missing package (SUNWcry) even in fully patched Solaris 10 systems with an initial install of Update 3 and earlier.   There is a note buried at the bottom of the readme file for this patch.  I backed out the patch which reverted to the -16 version and pca downloads started working again.

FYI: this also turned out to be the root cause of an issue I had been having with that same server communicating with Microsoft's SCOM.



Dan West - Sr. System Administrator
Computer Sciences Corporation
Contractor to ORD - Ada, OK
Voice: (580) 436-8717
e-mail: west.daniel at epa.gov
------------------------------------------------------------------------
** Disclaimer: Text reflects my opinions, not CSC's nor the EPA's. **

________________________________________
From: pca <pca-bounces at lists.univie.ac.at> on behalf of Gale, Michael D CTR USARMY PEO EIS (US) <michael.d.gale6.ctr at mail.mil>
Sent: Monday, May 4, 2015 7:52 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Patch file not downloaded with "cipher or    hash    unavailable"

I pulled patches on Sunday morning without incident.
michaeldgale

-----Original Message-----
From: pca [mailto:pca-bounces at lists.univie.ac.at] On Behalf Of Martin Paul
Sent: Monday, May 04, 2015 7:44 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Patch file not downloaded with "cipher or hash unavailable"

Am 03.05.2015 um 11:53 schrieb Frank Langelage:
> Connecting to aru-akam-secure.oracle.com|184.31.84.14|:443... connected.
> OpenSSL: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or
> hash unavailable Unable to establish SSL connection.

Strange. Did patch downloads work on that system before? Did you update wget
or pca or install patches recently?

The error seems to suggest that certain ciphers are missing from the SSL
library. If that's true, and nothing has changed on your system, it would mean
that something must have changed on the server. Could other PCA users please
test patch downloads and see if they get the same error?

Martin.