[pca] Patch download fails

Martin Paul martin.paul at univie.ac.at
Mon Mar 23 14:06:13 CET 2015


Thanks for providing the docs, Daniel!

Doesn't look as if they were updated. Doc ID 1199543.1 (Patch download 
automation for Sun products using wget) was last updated 11-Feb-2014 and 
it does only mention the known certificates. Just to be sure - could 
you/somebody download and post getupdates.pem mentioned in that doc?

BTW - Bernd Senf said that "--wgetopt=--secure-protocol=TLSv1" was 
required for patch downloads to work as well - are you using a local 
copy of wget or the one provided with Solaris? See this note in the 
above document:

IMPORTANT:

"https://getupdates.oracle.com web server does not fully support TLS 
1.2. Only OpenSSL versions from branch 1.0.0 will work - Oracle Solaris 
does not deliver higher versions at this time. Customers who are trying 
to access the URL using latest wget/OpenSSL (ie. from www.opencsw.org) 
version with TLS 1.2 support may get connection failures."

Best,
Martin.




More information about the pca mailing list