[pca] Unable to download patches anymore in sparc Solaris 10 platform

[leahciM noskcaJ]

> On Sun, 6 Jan 2019 19:05:04 +0100, Dr Tom Bleek wrote:-
>
> You need additional support for sol10 now,
> tb 
> 
> > Am 06.01.2019 um 18:28 schrieb leahciM noskcaJ <leahcim.noskcaj at tel.co.uk>:
> > 
> > Happy new year all.
> > 
> > # pca -V --wget=/usr/sfw/bin/wget --wgetopt=--no-check-certificate -si 
missingrs
> > ...
> > Looking for 152959-01 (32/32)
> > Trying Oracle
> > Trying https://getupdates.oracle.com/ (1/1)
> > src: oracle, srcurl:
> > Adding to /tmp/pca.546644: header=Authorization: Basic <base64-user-passwd>
> > /usr/sfw/bin/wget --no-check-certificate --progress=dot:binary 
> > --ca-certificate=/usr/local/bin/pca --secure-protocol=TLSv1 -O 
> > /var/tmp/./152959-01.zip 
"https://getupdates.oracle.com/all_unsigned/152959-01.zip"
> > --2019-01-05 20:43:39--  
https://getupdates.oracle.com/all_unsigned/152959-01.zip
> > Resolving getupdates.oracle.com... 141.146.44.51
> > Connecting to getupdates.oracle.com|141.146.44.51|:443... connected.
> > WARNING: cannot verify getupdates.oracle.com's certificate, issued by 
'CN=DigiCert 
> > SHA2 Secure Server CA,O=DigiCert Inc,C=US':
> >  Unable to locally verify the issuer's authority.
> > HTTP request sent, awaiting response... 301 Moved Permanently
> > Cookie coming from getupdates.oracle.com attempted to set domain to 
> > updates.oracle.com
> > Resolving login.oracle.com... 156.151.58.18
> > Connecting to login.oracle.com|156.151.58.18|:443... connected.
> > WARNING: cannot verify login.oracle.com's certificate, issued by 'CN=DigiCert 
SHA2 
> > Secure Server CA,O=DigiCert Inc,C=US':
> >  Unable to locally verify the issuer's authority.
> > HTTP request sent, awaiting response... 302 Moved Temporarily
> > ...
> > Resolving updates.oracle.com... 141.146.44.51
> > Connecting to updates.oracle.com|141.146.44.51|:443... connected.
> > WARNING: cannot verify updates.oracle.com's certificate, issued by 'CN=DigiCert 
> > SHA2 Secure Server CA,O=DigiCert Inc,C=US':
> >  Unable to locally verify the issuer's authority.
> > HTTP request sent, awaiting response... 301 Moved Permanently
> > Location: https://updates.oracle.com/all_unsigned/152959-01.zip [following]
> > --2019-01-05 20:43:44--  https://updates.oracle.com/all_unsigned/152959-01.zip
> > Connecting to updates.oracle.com|141.146.44.51|:443... connected.
> > WARNING: cannot verify updates.oracle.com's certificate, issued by 'CN=DigiCert 
> > SHA2 Secure Server CA,O=DigiCert Inc,C=US':
> >  Unable to locally verify the issuer's authority.
> > HTTP request sent, awaiting response... 403 Forbidden
> > 2019-01-05 20:43:45 ERROR 403: Forbidden.
> > 
> > Removing /tmp/pca.546644
> > Failed (Error 403: Forbidden)
> > Failed (patch not found)
> > 
> > Installing 152959-01 (32/32)
> > patchxdir: /tmp/pca.128982
> > Failed - missing patch file (20:43:45/00:00:00/00:16:50, 32/32, 1/0/31)
> > ------------------------------------------------------------------------------
> > Download Summary: 32 total, 1 successful, 3 skipped, 28 failed
> > Install Summary : 32 total, 1 successful, 0 skipped, 31 failed
> > #
> > 
> > So 31 of them failed with 403: Forbidden, patch not found.
> > 
> > The only one that didn't produce the HTTP  403: Forbidden error was:
> > 
> > Patch 152919-11 has been successfully installed.
> > See /var/sadm/patch/152919-11/log for details
> > 
> > Patch packages installed:
> >  SUNWj6cfg
> >  SUNWj6dev
> >  SUNWj6man
> >  SUNWj6rt
> > 
> > Successful (20:43:38/00:03:15/00:16:43, 31/32, 1/0/30)
> > ------------------------------------------------------------------------------
> > 152959 -- < 01 R--  87 SunOS 5.10: ndp patch
> > 
> > This is on a S10 branded zone on S11.3 with Premiere Support for OS.
> > 
> > TIA..
Thanks I found the blog 

https://blogs.oracle.com/solaris/oracle-solaris-10-support-explained

Obviously slow out of the blocks on this one (though reading the
comments through September last year, I wasn't that far behind).

So, destined for the miasma that is Oracle support sales & renewals...

I'm sure there was a good reason why it wasn't a check-box option on
the last Premier support renewal invitation -- it's just that I can't
think what it is.