Re: [pca] Issue with wget version 1.18 (Solaris 10 patch# 125215-07) :: ERROR "Unable to establish SSL connection"

2017-02-20 Thread Michele Vecchiato 
Oracle BugID # 25575614


I found a workaround. Add "secure-protocol = TLSv1" on "/etc/wgetrc" file
on client with wget 1.16 version.

root@sunlab1:/[1]$ egrep -v ^# /etc/wgetrc | sort -u

check_certificate = off
*secure_protocol = TLSv1*
waitretry = 10
root@sunlab1:/[2]$

HTH
Michele.

2017-02-17 13:47 GMT+01:00 Michele Vecchiato :

> Hi Martin,
>   Apache pre-installed (Bundled with OS) was already updated to the latest
> version.
>
> root@pdpcasrv1 # pca  --pattern=[Aa]pache -l installed
> Using /patches/pca/patchdiag.xref from Feb/16/17
> Host: pdpcasrv1 (SunOS 5.10/Generic_Virtual/sparc/sun4v)
> List: installed (3/341)
>
> Patch  IR   CR RSB Age Synopsis
> -- -- - -- --- --- --
> -
> 120543 37 = 37 RS-   8 SunOS 5.10: Apache 2 Patch
> 122911 37 = 37 RS- 325 SunOS 5.10: Apache 1.3 Patch
> 152643 02 = 02 R--   8 SunOS 5.10: Apache 2.4 Patch
> root@pdpcasrv1 #
>
> I opened an Oracle Service Request (SR# 3-14302325071) where a Support
> Engineer opened a BUG. I keep you informed.
> For my curiosity, i'll try in my lab, to use Apache 1.3.x and Apache 2.4.x
> and observing the results .
>
> Many thank Martin for your time and support.
>
> Michele
>
> 2017-02-17 11:38 GMT+01:00 Martin Paul :
>
>> Am 17.02.2017 um 11:11 schrieb Michele Vecchiato:
>>
>>> Thanks Martin,
>>>  i don't understand why with wget 1.18 the SSL Handshake failed and
>>> with
>>> 1.16 work fine...
>>> When try to connect with the wget 1.18 client version, the apache 2
>>> (httpd)
>>> process core...
>>>
>>
>> Now that's weird indeed. Must be some bug in apache which gets triggered
>> by a change in wget 1.18.
>>
>> If not done yet, I'd try to update the apache with the latest patch (if
>> you're using the one that comes with Solaris) or with the most recent
>> version available otherwise. If you don't want to hassle with reporting the
>> bug to Oracle, the apache maintainers and/or the wget authors, I'd take the
>> easy way out and just stick to wget 1.16, I guess.
>>
>> Martin.
>>
>>
>
>
> --
> --
> Michele Vecchiato
> Fax +39 06 9186 7019 <+39%2006%209186%207019> | Mob.+39 335 633 6950
> <+39%20335%20633%206950>
> e-mail: michele.vecchi...@gmail.com
> LinkedIn  pub profile http://www.linkedin.com/in/michelevecchiato
>
> *** Per favore considerate l' ambiente prima di stampare questa e-mail.
> Grazie ***
>



-- 
--
Michele Vecchiato
Fax +39 06 9186 7019 | Mob.+39 335 633 6950
e-mail: michele.vecchi...@gmail.com
LinkedIn  pub profile http://www.linkedin.com/in/michelevecchiato

*** Per favore considerate l' ambiente prima di stampare questa e-mail.
Grazie ***

Re: [pca] Issue with wget version 1.18 (Solaris 10 patch# 125215-07) :: ERROR "Unable to establish SSL connection"

2017-02-17 Thread Michele Vecchiato 
Hi Martin,
  Apache pre-installed (Bundled with OS) was already updated to the latest
version.

root@pdpcasrv1 # pca  --pattern=[Aa]pache -l installed
Using /patches/pca/patchdiag.xref from Feb/16/17
Host: pdpcasrv1 (SunOS 5.10/Generic_Virtual/sparc/sun4v)
List: installed (3/341)

Patch  IR   CR RSB Age Synopsis
-- -- - -- --- ---
---
120543 37 = 37 RS-   8 SunOS 5.10: Apache 2 Patch
122911 37 = 37 RS- 325 SunOS 5.10: Apache 1.3 Patch
152643 02 = 02 R--   8 SunOS 5.10: Apache 2.4 Patch
root@pdpcasrv1 #

I opened an Oracle Service Request (SR# 3-14302325071) where a Support
Engineer opened a BUG. I keep you informed.
For my curiosity, i'll try in my lab, to use Apache 1.3.x and Apache 2.4.x
and observing the results .

Many thank Martin for your time and support.

Michele

2017-02-17 11:38 GMT+01:00 Martin Paul :

> Am 17.02.2017 um 11:11 schrieb Michele Vecchiato:
>
>> Thanks Martin,
>>  i don't understand why with wget 1.18 the SSL Handshake failed and
>> with
>> 1.16 work fine...
>> When try to connect with the wget 1.18 client version, the apache 2
>> (httpd)
>> process core...
>>
>
> Now that's weird indeed. Must be some bug in apache which gets triggered
> by a change in wget 1.18.
>
> If not done yet, I'd try to update the apache with the latest patch (if
> you're using the one that comes with Solaris) or with the most recent
> version available otherwise. If you don't want to hassle with reporting the
> bug to Oracle, the apache maintainers and/or the wget authors, I'd take the
> easy way out and just stick to wget 1.16, I guess.
>
> Martin.
>
>


-- 
--
Michele Vecchiato
Fax +39 06 9186 7019 | Mob.+39 335 633 6950
e-mail: michele.vecchi...@gmail.com
LinkedIn  pub profile http://www.linkedin.com/in/michelevecchiato

*** Per favore considerate l' ambiente prima di stampare questa e-mail.
Grazie ***

Re: [pca] Issue with wget version 1.18 (Solaris 10 patch# 125215-07) :: ERROR "Unable to establish SSL connection"

2017-02-17 Thread Martin Paul 

Am 17.02.2017 um 11:11 schrieb Michele Vecchiato:

Thanks Martin,
 i don't understand why with wget 1.18 the SSL Handshake failed and with
1.16 work fine...
When try to connect with the wget 1.18 client version, the apache 2 (httpd)
process core...


Now that's weird indeed. Must be some bug in apache which gets triggered 
by a change in wget 1.18.


If not done yet, I'd try to update the apache with the latest patch (if 
you're using the one that comes with Solaris) or with the most recent 
version available otherwise. If you don't want to hassle with reporting 
the bug to Oracle, the apache maintainers and/or the wget authors, I'd 
take the easy way out and just stick to wget 1.16, I guess.


Martin.

Re: [pca] Issue with wget version 1.18 (Solaris 10 patch# 125215-07) :: ERROR "Unable to establish SSL connection"

2017-02-17 Thread Michele Vecchiato 
Thanks Martin,
i don't understand why with wget 1.18 the SSL Handshake failed and with
1.16 work fine...
When try to connect with the wget 1.18 client version, the apache 2 (httpd)
process core...

*WGET 1.16*

# wget -S -O /dev/null --no-check-certificate --debug https://pdpcasrv1
DEBUG output created by Wget 1.16 on solaris2.10.

--2017-02-17 10:47:16--  https://pdpcasrv1/
Resolving pdpcasrv1... 10.41.152.75
Caching pdpcasrv1 => 10.41.152.75
Connecting to pdpcasrv1|10.41.152.75|:443... connected.
Created socket 5.
Releasing 0x0009ce70 (new refcount 1).
Initiating SSL handshake.
Handshake successful; connected socket 5 to SSL handle 0x000a19b0
certificate:
  subject: /C=IT/L=Location/O=Organization/OU=Organization
Unit/CN=pdpcasrv1/emailAddress=myem...@company.com
  issuer:  /C=IT/L=Location/O=Organization/OU=Organization Unit
/CN=pdpcasrv1/emailAddress=
myem...@company.com
WARNING: cannot verify pdpcasrv1's certificate, issued by '/C=IT/L=Location
/O=Organization/OU=Organization Unit/CN=pdpcasrv1/emailAddress=
myem...@company.com':
  Self-signed certificate encountered.

---request begin---
GET / HTTP/1.1
User-Agent: Wget/1.16 (solaris2.10)
Accept: */*
Host: pdpcasrv1
Connection: Keep-Alive

---request end---
HTTP request sent, awaiting response...
---response begin---
HTTP/1.1 200 OK
Date: Fri, 17 Feb 2017 09:47:16 GMT
Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/1.0.1u DAV/2
Last-Modified: Fri, 17 Feb 2017 09:15:17 GMT
ETag: "3766-51fb8-5a225340"
Accept-Ranges: bytes
Content-Length: 335800
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html

---response end---

  HTTP/1.1 200 OK
  Date: Fri, 17 Feb 2017 09:47:16 GMT
  Server: Apache/2.0.63 (Unix) mod_ssl/2.0.63 OpenSSL/1.0.1u DAV/2
  Last-Modified: Fri, 17 Feb 2017 09:15:17 GMT
  ETag: "3766-51fb8-5a225340"
  Accept-Ranges: bytes
  Content-Length: 335800
  Keep-Alive: timeout=15, max=100
  Connection: Keep-Alive
  Content-Type: text/html
Registered socket 5 for persistent reuse.
Length: 335800 (328K) [text/html]
Saving to: '/dev/null'

/dev/null
100%[=>]
327.93K  --.-KB/s   in 0.03s

2017-02-17 10:47:16 (11.5 MB/s) - '/dev/null' saved [335800/335800]
#


WGET 1.18


# wget -S -O /dev/null --no-check-certificate --debug https://pdpcasrv1
DEBUG output created by Wget 1.18 on solaris2.10.

Reading HSTS entries from //.wget-hsts
--2017-02-17 10:46:42--  https://pdpcasrv1/
Resolving pdpcasrv1... 10.41.152.75
Caching pdpcasrv1 => 10.41.152.75
Connecting to pdpcasrv1|10.41.152.75|:443... connected.
Created socket 5.
Releasing 0x000ae3a0 (new refcount 1).
Initiating SSL handshake.
SSL handshake failed.
Closed fd 5
Unable to establish SSL connection.
#

Any idea?
Many thanks in advance
Michele


2017-02-16 9:32 GMT+01:00 Martin Paul :

> Hi,
>
>i have a problem with wget ver.1.18 (125215-07). No problem with a
>> previous
>> revision, wget 1.16 (125215-06). My PCA proxy (pdpcasrv1) have a Self
>> Signed
>> Certificate (https).
>>
>
> Just to be sure, I tried wget 1.18 with Oracle's patch download server -
> this still works fine.
>
> To find out why wget 1.18 doesn't like to talk HTTPS to your local PCA
> proxy, I guess you'll need to collect wget debug information (put --debug
> in PCA's "wgetopt"-option or in a wgetrc or the like, or try wget outside
> of PCA) or check the log files of your PCA proxy web server.
>
> Martin.
>
>


-- 
--
Michele Vecchiato
Fax +39 06 9186 7019 | Mob.+39 335 633 6950
e-mail: michele.vecchi...@gmail.com
LinkedIn  pub profile http://www.linkedin.com/in/michelevecchiato

*** Per favore considerate l' ambiente prima di stampare questa e-mail.
Grazie ***

Re: [pca] Issue with wget version 1.18 (Solaris 10 patch# 125215-07) :: ERROR "Unable to establish SSL connection"

2017-02-16 Thread Martin Paul 

Hi,


   i have a problem with wget ver.1.18 (125215-07). No problem with a previous
revision, wget 1.16 (125215-06). My PCA proxy (pdpcasrv1) have a Self  Signed
Certificate (https).


Just to be sure, I tried wget 1.18 with Oracle's patch download server - 
this still works fine.


To find out why wget 1.18 doesn't like to talk HTTPS to your local PCA 
proxy, I guess you'll need to collect wget debug information (put 
--debug in PCA's "wgetopt"-option or in a wgetrc or the like, or try 
wget outside of PCA) or check the log files of your PCA proxy web server.


Martin.