Hi Jeff (and everybody still reading this),

it’s been a long time since messages popped up on this mailing list :)

I took a look, and it seems as if getupdates.oracle.com 
<http://getupdates.oracle.com/> still exists, but the SSL certificate is 
invalid for that hostname:

/usr/bin/wget --progress=dot:binary --ca-certificate=./pca -O 
/var/tmp/patchdiag.xref "https://getupdates.oracle.com/reports/patchdiag.xref";
--2021-12-14 10:44:10--  https://getupdates.oracle.com/reports/patchdiag.xref
Resolving getupdates.oracle.com (getupdates.oracle.com)... 104.96.155.106, 
2a02:26f0:ea:48d::4425, 2a02:26f0:ea:486::4425
Connecting to getupdates.oracle.com 
(getupdates.oracle.com)|104.96.155.106|:443... connected.
ERROR: no certificate subject alternative name matches
        requested host name 'getupdates.oracle.com'.
To connect to getupdates.oracle.com insecurely, use `--no-check-certificate’.

I looked at the certificate details of https://getupdates.oracle.com 
<https://getupdates.oracle.com/> in the browser, and it seems as if the 
certificate is for peo-eas-esps-prod.oracle.com 
<http://peo-eas-esps-prod.oracle.com/> and has a lot of alternative names (e.g. 
updates.oracle.com <http://updates.oracle.com/>), but getupdates.oracle.com 
<http://getupdates.oracle.com/> is missing in this list, and the certificate is 
therefore not valid for that hostname.

Unfortunately Don O’Malley doesn’t seem to work for Oracle anymore, but back in 
2018 he told me about two other guys working for the patch team. I contacted 
them, let’s see if they can get the certficate fixed so PCA would work out of 
the box again.

Until then, everybody still using PCA can use Jeff’s workaround.

Best,
Martin.


> Am 10.12.2021 um 16:59 schrieb Jeff Wieland <[email protected]>:
> 
> The hostname for downloading patchdiag.xref appears to have changed
> from getupdates.oracle.com to updates.oracle.com.
> 
> Of course you can fix this by adding the following to your .pca file:
> 
> ohost=updates.oracle.com
> 
> --
> Jeff Wieland, UNIX Systems Administrator
> Purdue University IT Infrastructure Services UNIX Platforms
> 
> 

Reply via email to