At some point one must call it a night and realize that the problem is not with pca nor wget or even some openssl linkage.
Martin, the Oracle service is broken. Its not your fault and all the work in the world can not fix what Oracle has shattered. # ../../bin/pca --debug -f $PCA_FROMFILES -d 118666-29 Option download: 1 Option xrefdir: /root/pca_data/xref Option patchdir: /root/pca_data/mercury/archive Option user: <user> Option passwd: <passwd> Option fromfiles: /root/pca_data/mercury/system_data Option wget: /opt/csw/bin/wget Option debug: 1 Command: ../../bin/pca ARGV: 118666-29 Version: 20101216-02 CWD: /root/pca_data/mercury Found /opt/csw/bin/wget (1.11.4, 11104, https) Using /opt/csw/bin/wget Using /root/pca_data/mercury/system_data as prefix to read .out files Prerequisites for threads not met, setting threads to 0 Never update Expanded patch list: 118666-29 xref mtime: Thu Dec 16 18:22:53 2010 xref now : Fri Dec 17 04:29:07 2010 xref ctime: Fri Dec 17 01:54:11 2010 xref age : 9296 Local file /root/pca_data/xref/patchdiag.xref is up to date osname from uname: SunOS Reading from </root/pca_data/mercury/system_data/showrev.out Using /root/pca_data/xref/patchdiag.xref from Dec/16/10 All operands are fully qualified patch IDs plus revisions Host: mercury (SunOS 5.10/Generic_144488-02/sparc/sun4u) List: 118666-29 (1/0) Patch IR CR RSB Age Synopsis ------ -- - -- --- --- ------------------------------------------------------- 118666 28 < 29 RS- 2 JavaSE 5.0: update 27 patch (equivalent to JDK 5.0u27) Looking for 118666-29 (1/1) Trying Oracle Trying https://getupdates.oracle.com/ (1/1) wgetrc: found /root/.wgetrc Adding to /tmp/pca.914003: header=Authorization: Basic <base64-user-passwd> /opt/csw/bin/wget --progress=dot:binary "https://getupdates.oracle.com/all_unsigned/118666-29.zip"; --ca-certificate=../../bin/pca -O /root/pca_data/mercury/archive/118666-29.tmp --2010-12-17 04:29:11-- https://getupdates.oracle.com/all_unsigned/118666-29.zip Resolving getupdates.oracle.com... 192.18.110.9 Connecting to getupdates.oracle.com|192.18.110.9|:443... connected. HTTP request sent, awaiting response... 403 Service Error 2010-12-17 04:29:12 ERROR 403: Service Error. Removing /tmp/pca.914003 Failed (Error 403: Service Error) Failed (patch not found) ------------------------------------------------------------------------------ Download Summary: 1 total, 0 successful, 0 skipped, 1 failed # I can use a diff rev of wget and get similar results. # ../../bin/pca --debug -f $PCA_FROMFILES --wget=/usr/sfw/bin/wget -d 118666-29 Option download: 1 Option xrefdir: /root/pca_data/xref Option patchdir: /root/pca_data/mercury/archive Option user: <user> Option passwd: <passwd> Option fromfiles: /root/pca_data/mercury/system_data Option wget: /usr/sfw/bin/wget Option debug: 1 Command: ../../bin/pca ARGV: 118666-29 Version: 20101216-02 CWD: /root/pca_data/mercury Found /usr/sfw/bin/wget (1.12, 11200, https) Using /usr/sfw/bin/wget Using /root/pca_data/mercury/system_data as prefix to read .out files Prerequisites for threads not met, setting threads to 0 Never update Expanded patch list: 118666-29 xref mtime: Thu Dec 16 18:22:53 2010 xref now : Fri Dec 17 04:40:09 2010 xref ctime: Fri Dec 17 01:54:11 2010 xref age : 9958 Local file /root/pca_data/xref/patchdiag.xref is up to date osname from uname: SunOS Reading from </root/pca_data/mercury/system_data/showrev.out Using /root/pca_data/xref/patchdiag.xref from Dec/16/10 All operands are fully qualified patch IDs plus revisions Host: mercury (SunOS 5.10/Generic_144488-02/sparc/sun4u) List: 118666-29 (1/0) Patch IR CR RSB Age Synopsis ------ -- - -- --- --- ------------------------------------------------------- 118666 28 < 29 RS- 2 JavaSE 5.0: update 27 patch (equivalent to JDK 5.0u27) Looking for 118666-29 (1/1) Trying Oracle Trying https://getupdates.oracle.com/ (1/1) wgetrc: found /root/.wgetrc Adding to /tmp/pca.158093: header=Authorization: Basic <base64-user-passwd> /usr/sfw/bin/wget --progress=dot:binary "https://getupdates.oracle.com/all_unsigned/118666-29.zip"; --ca-certificate=../../bin/pca -O /root/pca_data/mercury/archive/118666-29.tmp --2010-12-17 04:40:13-- https://getupdates.oracle.com/all_unsigned/118666-29.zip Resolving getupdates.oracle.com... 192.18.110.9 Connecting to getupdates.oracle.com|192.18.110.9|:443... connected. HTTP request sent, awaiting response... 403 Service Error 2010-12-17 04:40:14 ERROR 403: Service Error. Removing /tmp/pca.158093 Failed (Error 403: Service Error) Failed (patch not found) ------------------------------------------------------------------------------ Download Summary: 1 total, 0 successful, 0 skipped, 1 failed # Let me show you the depths of insanity : # /usr/sfw/bin/wget -v --progress=dot:mega \ > --server-response --no-proxy --inet4-only \ > --bind-address=192.168.35.24 \ > --user=$PCA_USER --password=$PCA_PASSWD \ > --referer=https\:\/\/support.oracle.com\/CSP\/ui\/flash.html \ > --user-agent=Mozilla\/5.0\ \(X11\;\ U\;\ SunOS\ i86pc\;\ en-US\;\ rv\:1.9.2.10\)\ Gecko\/20101021\ Firefox\/3.6.10 \ > --ca-certificate=$PCA_XREFDIR/getupdates.pem --random-file=/dev/urandom \ > --secure-protocol=SSLv3 --no-check-certificate \ > -O $PCA_PATCHDIR/118666-29.zip \ > https://getupdates.oracle.com/all_unsigned/118666-29.zip --2010-12-17 04:45:23-- https://getupdates.oracle.com/all_unsigned/118666-29.zip Resolving getupdates.oracle.com... 192.18.110.9 Connecting to getupdates.oracle.com|192.18.110.9|:443... connected. HTTP request sent, awaiting response... HTTP/1.1 302 Redirect to Oracle SSO Server for login Date: Fri, 17 Dec 2010 04:45:23 GMT Server: Oracle-iPlanet-Web-Server/7.0 Location: https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken= six lines of HEX snipped Content-type: text/html;charset=UTF-8 Content-Length: 79 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Language: en Location: https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken= six lines of HEX snipped [following] --2010-12-17 04:45:23-- https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login?Site2pstoreToken= six lines of HEX snipped Resolving login.oracle.com... 141.146.8.119 Connecting to login.oracle.com|141.146.8.119|:443... connected. HTTP request sent, awaiting response... HTTP/1.1 302 Moved Temporarily Date: Fri, 17 Dec 2010 04:45:24 GMT Server: Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server Content-Length: 1932 Set-Cookie: ORASSO_AUTH_HINT=v1.0~20101217124524; Domain=.oracle.com; Path=/ Cache-Control: private Location: https://login.oracle.com/mysso/signon.jsp?site2pstoretoken= six lines of HEX snipped &p_error_code=&p_submit_url=https%3A%2F%2Flogin.oracle.com%2Fsso%2Fauth&p_cancel_url=https%3A%2F%2Flogin.oracle.com&ssousername=&subscribername= Connection: close Content-Type: text/html; charset=UTF-8 Set-Cookie: BIGipServerloginadc_oracle_com_http=2030932621.25630.0000; expires=Fri, 17-Dec-2010 12:45:24 GMT; path=/ Location: https://login.oracle.com/mysso/signon.jsp?site2pstoretoken= six lines of HEX snipped &p_error_code=&p_submit_url=https%3A%2F%2Flogin.oracle.com%2Fsso%2Fauth&p_cancel_url=https%3A%2F%2Flogin.oracle.com&ssousername=&subscribername= [following] --2010-12-17 04:45:24-- https://login.oracle.com/mysso/signon.jsp?site2pstoretoken= six lines of HEX snipped &p_error_code=&p_submit_url=https%3A%2F%2Flogin.oracle.com%2Fsso%2Fauth&p_cancel_url=https%3A%2F%2Flogin.oracle.com&ssousername=&subscribername= Connecting to login.oracle.com|141.146.8.119|:443... connected. HTTP request sent, awaiting response... HTTP/1.1 200 OK Date: Fri, 17 Dec 2010 04:45:24 GMT Server: Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server Cache-Control: no-cache Pragma: no-cache Expires: Thu, 29 cfhOct 1969 17:04:19 GMT Connection: close Content-Type: text/html; charset=UTF-8 Set-Cookie: BIGipServerloginadc_oracle_com_http=2030932621.25630.0000; expires=Fri, 17-Dec-2010 12:45:24 GMT; path=/ Length: unspecified [text/html] Saving to: `/root/pca_data/mercury/archive/118666-29.zip' 0K 62.4K=0.1s 2010-12-17 04:45:24 (62.4 KB/s) - `/root/pca_data/mercury/archive/118666-29.zip' saved [7508] # ls archive/118666-29.zip archive/118666-29.zip # # file archive/118666-29.zip archive/118666-29.zip: html document Martin, if you see this, pca works. It has for years. You didn't break anything. You should not have to 'fix' anything. -- Dennis
