I had the same problem with one of my Solaris 10 systems. In April Oracle released an openSSL patch for Solaris 10 (148071-17). Apparently this patch caused a problem for applications which use certain crypto library calls in openSSL but only older installs of Solaris 10 were affected. There is a missing package (SUNWcry) even in fully patched Solaris 10 systems with an initial install of Update 3 and earlier. There is a note buried at the bottom of the readme file for this patch. I backed out the patch which reverted to the -16 version and pca downloads started working again.
FYI: this also turned out to be the root cause of an issue I had been having with that same server communicating with Microsoft's SCOM. Dan West - Sr. System Administrator Computer Sciences Corporation Contractor to ORD - Ada, OK Voice: (580) 436-8717 e-mail: west.dan...@epa.gov ------------------------------------------------------------------------ ** Disclaimer: Text reflects my opinions, not CSC's nor the EPA's. ** ________________________________________ From: pca <pca-boun...@lists.univie.ac.at> on behalf of Gale, Michael D CTR USARMY PEO EIS (US) <michael.d.gale6....@mail.mil> Sent: Monday, May 4, 2015 7:52 AM To: PCA (Patch Check Advanced) Discussion Subject: Re: [pca] Patch file not downloaded with "cipher or hash unavailable" I pulled patches on Sunday morning without incident. michaeldgale -----Original Message----- From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Martin Paul Sent: Monday, May 04, 2015 7:44 AM To: PCA (Patch Check Advanced) Discussion Subject: Re: [pca] Patch file not downloaded with "cipher or hash unavailable" Am 03.05.2015 um 11:53 schrieb Frank Langelage: > Connecting to aru-akam-secure.oracle.com|184.31.84.14|:443... connected. > OpenSSL: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or > hash unavailable Unable to establish SSL connection. Strange. Did patch downloads work on that system before? Did you update wget or pca or install patches recently? The error seems to suggest that certain ciphers are missing from the SSL library. If that's true, and nothing has changed on your system, it would mean that something must have changed on the server. Could other PCA users please test patch downloads and see if they get the same error? Martin.
