Sure. I patched (1 installed) Saturday without issue and, per your request,
have just pulled a couple of random patches without issue:
NONAME Sun SPARC Enterprise T5120 64 GB RAM Serial #99975552 Host ID: 99915d80
SunOS Release 5.10 Version Generic 64-bit SPARC CSN: ZZZ0825QKF
Oracle Solaris 10 8/11 s10s_u10wos_17b SPARC
Copyright (c) 1983, 2014, Oracle and/or its affiliates. All rights reserved
Assembled 23 August 2011
# pca --wget=/usr/sfw/bin/wget -d 148120
Using /var/tmp/patchdiag.xref from May/03/15
Host: noname (SunOS 5.10/Generic_Virtual/sparc/sun4v)
List: 148120 (1/1172)
Patch IR CR RSB Age Synopsis
------ -- - -- --- --- -------------------------------------------------------
148120 -- < 02 --- 999 X11 6.6.2: xset patch
Looking for 148120-02 (1/1)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
Done
------------------------------------------------------------------------------
Download Summary: 1 total, 1 successful, 0 skipped, 0 failed
# /usr/sfw/bin/wget -V
GNU Wget 1.12 built on solaris2.10.
+digest +ipv6 -nls +ntlm +opie +md5/solaris +https -gnutls +openssl
-iri
Wgetrc:
/etc/wgetrc (system)
Compile: /ws/on10-tools/SUNWspro/SOS8/bin/cc -DHAVE_CONFIG_H
-DSYSTEM_WGETRC="/etc/wgetrc" -DLOCALEDIR="/usr/sfw/share/locale"
-I. -I../lib -I/usr/sfw/include -xO3 -xarch=v8 -xspace -W0,-Lt
-W2,-Rcond_elim -Xa -xildoff -xc99
Link: /ws/on10-tools/SUNWspro/SOS8/bin/cc -xO3 -xarch=v8 -xspace -W0,-Lt
-W2,-Rcond_elim -Xa -xildoff -xc99 /usr/sfw/lib/libssl.so
/usr/sfw/lib/libcrypto.so -R/usr/sfw/lib -lmd5 -ldl -lsocket -lnsl
-lrt ftp-opie.o openssl.o http-ntlm.o gen-md5.o ../lib/libgnu.a
# pca --version
pca 20150327-01
#
Verbose:
Looking for 148912-01 (1/1)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
src: oracle, srcurl:
Adding to /tmp/pca.986105: header=Authorization: Basic <base64-user-passwd>
/usr/sfw/bin/wget --progress=dot:binary --ca-certificate=/usr/local/bin/pca
--no-check-certificate --secure-protocol=TLSv1 -O /var/tmp/./148912-01.zip
"https://getupdates.oracle.com/all_unsigned/148912-01.zip";
--2015-05-04 14:43:39--
https://getupdates.oracle.com/all_unsigned/148912-01.zip
Resolving getupdates.oracle.com... 141.146.44.51
Connecting to updates.oracle.com|141.146.44.51|:443... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://updates.oracle.com/all_unsigned/148912-01.zip [following]
--2015-05-04 14:43:44-- https://updates.oracle.com/all_unsigned/148912-01.zip
Connecting to updates.oracle.com|141.146.44.51|:443... connected.
HTTP request sent, awaiting response... 302 Found
Location:
https://aru-akam-secure.oracle.com/adcarurepos/vol/patch33/PLATFORM/Solaris-64/R40
00001100000/148912-01.zip?FilePath=/adcarurepos/vol/patch33/PLATFORM/Solaris-64/R4
000001100000/148912-01.zip ...
BTW, that's a branded zone on 11.2. How are you patching 2.10 zones?
A bit dumb but timesaving, I'm just relying on -si missingrs and the
failure of checks to stop me patching things that I can't or shouldn't.
Kind regards,
-----Original Message-----
Date: Mon, 04 May 2015 13:44:02 +0200
From: Martin Paul <[email protected]>
To: "PCA (Patch Check Advanced) Discussion" <[email protected]>
Subject: Re: [pca] Patch file not downloaded with "cipher or hash unavailable"
Am 03.05.2015 um 11:53 schrieb Frank Langelage:
> Connecting to aru-akam-secure.oracle.com|184.31.84.14|:443... connected.
> OpenSSL: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or hash
> unavailable
> Unable to establish SSL connection.
Strange. Did patch downloads work on that system before? Did you update
wget or pca or install patches recently?
The error seems to suggest that certain ciphers are missing from the SSL
library. If that's true, and nothing has changed on your system, it
would mean that something must have changed on the server. Could other
PCA users please test patch downloads and see if they get the same error?
Martin.
