<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi Jeff (and everybody still reading this),<div class=""><br class=""></div><div class="">it’s been a long time since messages popped up on this mailing list :)</div><div class=""><br class=""></div><div class="">I took a look, and it seems as if <a href="http://getupdates.oracle.com" class="">getupdates.oracle.com</a> still exists, but the SSL certificate is invalid for that hostname:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">/usr/bin/wget --progress=dot:binary --ca-certificate=./pca -O /var/tmp/patchdiag.xref "<a href="https://getupdates.oracle.com/reports/patchdiag.xref" class="">https://getupdates.oracle.com/reports/patchdiag.xref</a>"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">--2021-12-14 10:44:10-- <a href="https://getupdates.oracle.com/reports/patchdiag.xref" class="">https://getupdates.oracle.com/reports/patchdiag.xref</a></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Resolving <a href="http://getupdates.oracle.com" class="">getupdates.oracle.com</a> (<a href="http://getupdates.oracle.com" class="">getupdates.oracle.com</a>)... 104.96.155.106, 2a02:26f0:ea:48d::4425, 2a02:26f0:ea:486::4425</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connecting to <a href="http://getupdates.oracle.com" class="">getupdates.oracle.com</a> (<a href="http://getupdates.oracle.com" class="">getupdates.oracle.com</a>)|104.96.155.106|:443... connected.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">ERROR: no certificate subject alternative name matches</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>requested host name '<a href="http://getupdates.oracle.com" class="">getupdates.oracle.com</a>'.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">To connect to <a href="http://getupdates.oracle.com" class="">getupdates.oracle.com</a> insecurely, use `--no-check-certificate’.</span></div></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span style="font-family: Helvetica; font-size: 12px;" class="">I looked at the certificate details of </span><a href="https://getupdates.oracle.com" class="" style="font-family: Helvetica; font-size: 12px;">https://getupdates.oracle.com</a><span style="font-family: Helvetica; font-size: 12px;" class=""> in the browser, and it seems as if the certificate is for </span><a href="http://peo-eas-esps-prod.oracle.com" class="" style="font-family: Helvetica; font-size: 12px;">peo-eas-esps-prod.oracle.com</a><span style="font-family: Helvetica; font-size: 12px;" class=""> and has a lot of alternative names (e.g. </span><a href="http://updates.oracle.com" class="" style="font-family: Helvetica; font-size: 12px;">updates.oracle.com</a><span style="font-family: Helvetica; font-size: 12px;" class="">), but </span><a href="http://getupdates.oracle.com" class="" style="font-family: Helvetica; font-size: 12px;">getupdates.oracle.com</a><span style="font-family: Helvetica; font-size: 12px;" class=""> is missing in this list, and the certificate is therefore not valid for that hostname.</span></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span style="font-family: Helvetica; font-size: 12px;" class=""><br class=""></span></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures;" class="">Unfortunately Don O’Malley doesn’t seem to work for Oracle anymore, but back in 2018 he told me about two other guys working for the patch team. I contacted them, let’s see if they can get the certficate fixed so PCA would work out of the box again.</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""><br class=""></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures;" class="">Until then, everybody still using PCA can use Jeff’s workaround.</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures;" class=""><br class=""></span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures;" class="">Best,</span></div><div style="margin: 0px; font-stretch: normal; line-height: normal;" class=""><span style="font-variant-ligatures: no-common-ligatures;" class="">Martin.</span></div><div class=""><br class="">
<div><br class=""><blockquote type="cite" class=""><div class="">Am 10.12.2021 um 16:59 schrieb Jeff Wieland <<a href="mailto:wieland@purdue.edu" class="">wieland@purdue.edu</a>>:</div><br class="Apple-interchange-newline"><div class=""><div class="">The hostname for downloading patchdiag.xref appears to have changed<br class="">from <a href="http://getupdates.oracle.com" class="">getupdates.oracle.com</a> to <a href="http://updates.oracle.com" class="">updates.oracle.com</a>.<br class=""><br class="">Of course you can fix this by adding the following to your .pca file:<br class=""><br class="">ohost=<a href="http://updates.oracle.com" class="">updates.oracle.com</a><br class=""><br class="">--<br class="">Jeff Wieland, UNIX Systems Administrator<br class="">Purdue University IT Infrastructure Services UNIX Platforms<br class=""><br class=""><br class=""></div></div></blockquote></div><br class=""></div></body></html>