Heya Chris.You win! I haven't seen this issue before. There was a reasonable looking answer here: https://unix.stackexchange.com/questions/465416/solaris-wont-update-because-ddt-incorporation-is-using-a-self-signed-certifcateWhere they do an upgrade to that specific SRU that has the bew cert trust chain.Basically came down to pkg update --reject ddt-incorporation --accept [email protected] should hopefully fix the cert issue... (The DDT incorp is the one with diag stuff like explorer etc..)Alternately, you could download an 11.3 and 11.4 repo bundle(s) and host it yourself... IIRC, there were bundles (maybe by SRU?) That you can download from support.oracle.com... Then you could hand pick what you want to upgrade. This would be my last resort... I'd really hope Or log a call... ;)Btw... current solaris is 11.4, and if you are pointing at the default support repa, a straight pkg update is going to take youball thebway there, if it works... so make sure you have read to upgrade docs, as a few things happen tgat can be a pain to recover from if you dontdo the prework, like completely emptying /var/tmp...Cheers!Nathan. -------- Original message --------From: Chris Wells <[email protected]> Date: 6/4/20 8:09 pm (GMT+10:00) To: [email protected] Cc: Melbourne Solaris and Oracle Systems User Group <[email protected]> Subject: [msosug] 11.2 upgrade Can this be done?root@marvin:/# pkg set-publisher -k ~/pkg.oracle.com.key.pem -c ~/pkg.oracle.com.certificate.pem -G "*" -g https://pkg.oracle.com/solaris/support/ solarisroot@marvin:/# ls -al /var/pkg/ssltotal 11drwxr-xr-x 4 root root 6 Apr 6 19:52 .drwxr-xr-x 12 root root 14 Apr 6 19:59 ..-rw-r--r-- 1 root root 1679 Apr 6 19:59 115de6dc66cd0016ee31cb4b62a9746166632486-rw-r--r-- 1 root root 1111 Apr 6 19:59 4b6a56f831b71a6062da515a11a49d4f7aaa0856drwxr-xr-x 2 root root 4 Apr 6 19:52 olddrwxr-xr-x 2 root root 8 Sep 11 2014 olderroot@marvin:/# pkg update -v --no-be-activate --require-new-beCreating Plan (Package planning: 63/987): |pkg update: Chain was rooted in an untrusted self-signed certificate.The package involved is pkg://solaris/library/python/[email protected],5.11-11.4.0.0.1.9.0:20180618T175853ZAccording to problem ID 2455567:The certificates and keys were updated in SRU21 and the old code (pre-11.3 SRU21) does not know about it.So maybe upgrading from 11.2 is a bit of a long shot (Goodness only knows what's changed in 5-6 years).Chris
_______________________________________________ msosug mailing list [email protected] http://mexico.purplecow.org/m/listinfo/msosug Delivered for: [email protected]
