[pca] Patch file not downloaded with "cipher or hash unavailable"

[Frank Langelage]

On 04.05.15 13:44, Martin Paul wrote:
> Am 03.05.2015 um 11:53 schrieb Frank Langelage:
>> Connecting to aru-akam-secure.oracle.com|184.31.84.14|:443... connected.
>> OpenSSL: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or hash
>> unavailable
>> Unable to establish SSL connection.
>
> Strange. Did patch downloads work on that system before? Did you 
> update wget or pca or install patches recently?
>
> The error seems to suggest that certain ciphers are missing from the 
> SSL library. If that's true, and nothing has changed on your system, 
> it would mean that something must have changed on the server. Could 
> other PCA users please test patch downloads and see if they get the 
> same error?
>
> Martin.
>
>
>
>
Martin,

last time patches were installed was April 14th. At that time pca / wget 
worked.
Now patches / new packages since then.
wget is 1.12 as of January 2015.

But
root at sb2000:/ ldd /usr/sfw/bin/wget
         libssl.so.0.9.7 =>       /usr/sfw/lib/libssl.so.0.9.7
         libcrypto.so.0.9.7 =>    /usr/sfw/lib/libcrypto.so.0.9.7
         libmd5.so.1 =>   /lib/libmd5.so.1
         libdl.so.1 =>    /lib/libdl.so.1
         libsocket.so.1 =>        /lib/libsocket.so.1
         libnsl.so.1 =>   /lib/libnsl.so.1
         librt.so.1 =>    /lib/librt.so.1
         libc.so.1 =>     /lib/libc.so.1
         libmp.so.2 =>    /lib/libmp.so.2
         libmd.so.1 =>    /lib/libmd.so.1
         libscf.so.1 =>   /lib/libscf.so.1
         libaio.so.1 =>   /lib/libaio.so.1
         libdoor.so.1 =>  /lib/libdoor.so.1
         libuutil.so.1 =>         /lib/libuutil.so.1
         libgen.so.1 =>   /lib/libgen.so.1
         libcrypto_extra.so.0.9.7 =>      *(Datei nicht gefunden)*
         libm.so.2 =>     /lib/libm.so.2
         /platform/SUNW,Sun-Blade-1000/lib/libc_psr.so.1
         /platform/SUNW,Sun-Blade-1000/lib/libmd_psr.so.1

libcrypto_extra.so.0.9.7 is missing. SUNWopenssl-libraries was updated 
on Apr. 14th.

root at sb2000:/ grep "SUNWopenssl-libraries" /var/sadm/install/contents | 
grep " f "
/usr/sfw/lib/libcrypto.so.0.9.7 f none 0755 root bin 1478540 28194 
1427846326 SUNWopenssl-libraries
/usr/sfw/lib/libssl.so.0.9.7 f none 0755 root bin 1424792 61922 
1427846326 SUNWopenssl-libraries
/usr/sfw/lib/llib-lcrypto f none 0644 root bin 1282 46464 1186623729 
SUNWopenssl-libraries
/usr/sfw/lib/llib-lcrypto.ln f none 0644 root bin 313219 5907 1427805407 
SUNWopenssl-libraries
/usr/sfw/lib/llib-lssl f none 0644 root bin 293 23152 1106348616 
SUNWopenssl-libraries
/usr/sfw/lib/llib-lssl.ln f none 0644 root bin 280100 23230 1427805428 
SUNWopenssl-libraries
/usr/sfw/lib/sparcv9/libcrypto.so.0.9.7 f none 0755 root bin 1875672 
8540 1427846326 SUNWopenssl-libraries
/usr/sfw/lib/sparcv9/libssl.so.0.9.7 f none 0755 root bin 1500816 24526 
1427846326 SUNWopenssl-libraries
/usr/sfw/lib/sparcv9/llib-lcrypto.ln f none 0644 root bin 311958 50946 
1427805415 SUNWopenssl-libraries
/usr/sfw/lib/sparcv9/llib-lssl.ln f none 0644 root bin 278839 17372 
1427805437 SUNWopenssl-libraries

Relevant patch: 148071-17. According to the README,
/usr/sfw/lib/libcrypto_extra.so.0.9.7
should be part of the patch.

removed this patch, pca / wget is working again:
Downloading xref file to /var/tmp/patchdiag.xref
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
Using /var/tmp/patchdiag.xref from May/03/15
Host: sb2000 (SunOS 5.10/Generic_150400-23/sparc/sun4u)
List: missing (2/25)

Patch  IR   CR RSB Age Synopsis
------ -- - -- --- --- 
-------------------------------------------------------
119963 32 < 33 R--   4 SunOS 5.10: Shared library patch for C++

Looking for 119963-33 (1/2)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
Done
------------------------------------------------------------------------------
148071 16 < 17 RS-  21 SunOS 5.10: openssl patch

Looking for 148071-17 (2/2)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
Done
------------------------------------------------------------------------------
Download Summary: 2 total, 2 successful, 0 skipped, 0 failed

Now I'll switch to single user mode and apply these patches and see, if 
the problem reappears.