On 04.05.15 13:44, Martin Paul wrote:
Am 03.05.2015 um 11:53 schrieb Frank Langelage:
Connecting to aru-akam-secure.oracle.com|184.31.84.14|:443... connected.
OpenSSL: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or hash
unavailable
Unable to establish SSL connection.
Strange. Did patch downloads work on that system before? Did you
update wget or pca or install patches recently?
The error seems to suggest that certain ciphers are missing from the
SSL library. If that's true, and nothing has changed on your system,
it would mean that something must have changed on the server. Could
other PCA users please test patch downloads and see if they get the
same error?
Martin.
Martin,
last time patches were installed was April 14th. At that time pca / wget
worked.
Now patches / new packages since then.
wget is 1.12 as of January 2015.
But
root@sb2000:/ ldd /usr/sfw/bin/wget
libssl.so.0.9.7 => /usr/sfw/lib/libssl.so.0.9.7
libcrypto.so.0.9.7 => /usr/sfw/lib/libcrypto.so.0.9.7
libmd5.so.1 => /lib/libmd5.so.1
libdl.so.1 => /lib/libdl.so.1
libsocket.so.1 => /lib/libsocket.so.1
libnsl.so.1 => /lib/libnsl.so.1
librt.so.1 => /lib/librt.so.1
libc.so.1 => /lib/libc.so.1
libmp.so.2 => /lib/libmp.so.2
libmd.so.1 => /lib/libmd.so.1
libscf.so.1 => /lib/libscf.so.1
libaio.so.1 => /lib/libaio.so.1
libdoor.so.1 => /lib/libdoor.so.1
libuutil.so.1 => /lib/libuutil.so.1
libgen.so.1 => /lib/libgen.so.1
libcrypto_extra.so.0.9.7 => *(Datei nicht gefunden)*
libm.so.2 => /lib/libm.so.2
/platform/SUNW,Sun-Blade-1000/lib/libc_psr.so.1
/platform/SUNW,Sun-Blade-1000/lib/libmd_psr.so.1
libcrypto_extra.so.0.9.7 is missing. SUNWopenssl-libraries was updated
on Apr. 14th.
root@sb2000:/ grep "SUNWopenssl-libraries" /var/sadm/install/contents |
grep " f "
/usr/sfw/lib/libcrypto.so.0.9.7 f none 0755 root bin 1478540 28194
1427846326 SUNWopenssl-libraries
/usr/sfw/lib/libssl.so.0.9.7 f none 0755 root bin 1424792 61922
1427846326 SUNWopenssl-libraries
/usr/sfw/lib/llib-lcrypto f none 0644 root bin 1282 46464 1186623729
SUNWopenssl-libraries
/usr/sfw/lib/llib-lcrypto.ln f none 0644 root bin 313219 5907 1427805407
SUNWopenssl-libraries
/usr/sfw/lib/llib-lssl f none 0644 root bin 293 23152 1106348616
SUNWopenssl-libraries
/usr/sfw/lib/llib-lssl.ln f none 0644 root bin 280100 23230 1427805428
SUNWopenssl-libraries
/usr/sfw/lib/sparcv9/libcrypto.so.0.9.7 f none 0755 root bin 1875672
8540 1427846326 SUNWopenssl-libraries
/usr/sfw/lib/sparcv9/libssl.so.0.9.7 f none 0755 root bin 1500816 24526
1427846326 SUNWopenssl-libraries
/usr/sfw/lib/sparcv9/llib-lcrypto.ln f none 0644 root bin 311958 50946
1427805415 SUNWopenssl-libraries
/usr/sfw/lib/sparcv9/llib-lssl.ln f none 0644 root bin 278839 17372
1427805437 SUNWopenssl-libraries
Relevant patch: 148071-17. According to the README,
/usr/sfw/lib/libcrypto_extra.so.0.9.7
should be part of the patch.
removed this patch, pca / wget is working again:
Downloading xref file to /var/tmp/patchdiag.xref
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
Using /var/tmp/patchdiag.xref from May/03/15
Host: sb2000 (SunOS 5.10/Generic_150400-23/sparc/sun4u)
List: missing (2/25)
Patch IR CR RSB Age Synopsis
------ -- - -- --- ---
-------------------------------------------------------
119963 32 < 33 R-- 4 SunOS 5.10: Shared library patch for C++
Looking for 119963-33 (1/2)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
Done
------------------------------------------------------------------------------
148071 16 < 17 RS- 21 SunOS 5.10: openssl patch
Looking for 148071-17 (2/2)
Trying Oracle
Trying https://getupdates.oracle.com/ (1/1)
Done
------------------------------------------------------------------------------
Download Summary: 2 total, 2 successful, 0 skipped, 0 failed
Now I'll switch to single user mode and apply these patches and see, if
the problem reappears.
