Heya Chris -
Did you find a solution to your issue? :)
Cheers!
Nathan.
On 7/04/2020 8:05 am, nathan.kroenert wrote:
Heya Chris.
You win! I haven't seen this issue before.
There was a reasonable looking answer here:
https://unix.stackexchange.com/questions/465416/solaris-wont-update-because-ddt-incorporation-is-using-a-self-signed-certifcate
Where they do an upgrade to that specific SRU that has the bew cert
trust chain.
Basically came down to
pkg update --reject ddt-incorporation --accept
[email protected]
This should hopefully fix the cert issue... (The DDT incorp is the one
with diag stuff like explorer etc..)
Alternately, you could download an 11.3 and 11.4 repo bundle(s) and
host it yourself... IIRC, there were bundles (maybe by SRU?) That you
can download from support.oracle.com... Then you could hand pick what
you want to upgrade. This would be my last resort... I'd really hope
Or log a call... ;)
Btw... current solaris is 11.4, and if you are pointing at the default
support repa, a straight pkg update is going to take youball thebway
there, if it works... so make sure you have read to upgrade docs, as a
few things happen tgat can be a pain to recover from if you dontdo the
prework, like completely emptying /var/tmp...
Cheers!
Nathan.
-------- Original message --------
From: Chris Wells <[email protected]>
Date: 6/4/20 8:09 pm (GMT+10:00)
To: [email protected]
Cc: Melbourne Solaris and Oracle Systems User Group
<[email protected]>
Subject: [msosug] 11.2 upgrade
Can this be done?
root@marvin:/# pkg set-publisher -k ~/pkg.oracle.com.key.pem -c
~/pkg.oracle.com.certificate.pem -G "*" -g
https://pkg.oracle.com/solaris/support/ solaris
root@marvin:/# ls -al /var/pkg/ssl
total 11
drwxr-xr-x 4 root root 6 Apr 6 19:52 .
drwxr-xr-x 12 root root 14 Apr 6 19:59 ..
-rw-r--r-- 1 root root 1679 Apr 6 19:59
115de6dc66cd0016ee31cb4b62a9746166632486
-rw-r--r-- 1 root root 1111 Apr 6 19:59
4b6a56f831b71a6062da515a11a49d4f7aaa0856
drwxr-xr-x 2 root root 4 Apr 6 19:52 old
drwxr-xr-x 2 root root 8 Sep 11 2014 older
root@marvin:/# pkg update -v --no-be-activate --require-new-be
Creating Plan (Package planning: 63/987): |
pkg update: Chain was rooted in an untrusted self-signed certificate.
The package involved is
pkg://solaris/library/python/[email protected],5.11-11.4.0.0.1.9.0:20180618T175853Z
According to problem ID 2455567:
The certificates and keys were updated in SRU21 and the old code
(pre-11.3 SRU21) does not know about it.
So maybe upgrading from 11.2 is a bit of a long shot (Goodness only
knows what's changed in 5-6 years).
Chris
_______________________________________________
msosug mailing list
[email protected]
http://mexico.purplecow.org/m/listinfo/msosug
Delivered for: [email protected]
_______________________________________________
msosug mailing list
[email protected]
http://mexico.purplecow.org/m/listinfo/msosug
Delivered for: [email protected]
