I get for example: Resolving aru-akam-secure.oracle.com... 104.64.51.207 Connecting to aru-akam-secure.oracle.com|104.64.51.207|:443... connected. ERROR: cannot verify aru-akam-secure.oracle.com's certificate, issued by `/C=US/O=GeoTrust, Inc./CN=GeoTrust SSL CA': Unable to locally verify the issuer's authority. ERROR: certificate common name `download-secure.oracle.com' doesn't match requested host name `aru-akam-secure.oracle.com'. To connect to aru-akam-secure.oracle.com insecurely, use `--no-check-certificate'. Removing /tmp/pca.412347 Failed (Unknown Error) Failed (patch not found)
On Mon, Mar 23, 2015 at 9:06 AM, Martin Paul <[email protected]> wrote: > Thanks for providing the docs, Daniel! > > Doesn't look as if they were updated. Doc ID 1199543.1 (Patch download > automation for Sun products using wget) was last updated 11-Feb-2014 and it > does only mention the known certificates. Just to be sure - could > you/somebody download and post getupdates.pem mentioned in that doc? > > BTW - Bernd Senf said that "--wgetopt=--secure-protocol=TLSv1" was > required for patch downloads to work as well - are you using a local copy > of wget or the one provided with Solaris? See this note in the above > document: > > IMPORTANT: > > "https://getupdates.oracle.com web server does not fully support TLS 1.2. > Only OpenSSL versions from branch 1.0.0 will work - Oracle Solaris does not > deliver higher versions at this time. Customers who are trying to access > the URL using latest wget/OpenSSL (ie. from www.opencsw.org) version with > TLS 1.2 support may get connection failures." > > Best, > Martin. > > > -- Ken Herold Director, Library Information Systems Hamilton College 198 College Hill Road Clinton, NY 13323 315-859-4487 [email protected]
