Hi all

Oracle stopped supporting smpatch which used getupdates.oracle.com.

A few MOS Docs are already updated.

updates.oracle.com is the new URL
for patchdiag.xref and for patch download.

Best regards,
Marcel Hofstetter
JomaSoft GmbH




Am 14.12.2021 um 11:06 schrieb Martin Paul:
Hi Jeff (and everybody still reading this),

it’s been a long time since messages popped up on this mailing list :)

I took a look, and it seems as if getupdates.oracle.com <http://getupdates.oracle.com> still exists, but the SSL certificate is invalid for that hostname:

/usr/bin/wget --progress=dot:binary --ca-certificate=./pca -O /var/tmp/patchdiag.xref "https://getupdates.oracle.com/reports/patchdiag.xref <https://getupdates.oracle.com/reports/patchdiag.xref>" --2021-12-14 10:44:10-- https://getupdates.oracle.com/reports/patchdiag.xref <https://getupdates.oracle.com/reports/patchdiag.xref> Resolving getupdates.oracle.com <http://getupdates.oracle.com> (getupdates.oracle.com <http://getupdates.oracle.com>)... 104.96.155.106, 2a02:26f0:ea:48d::4425, 2a02:26f0:ea:486::4425 Connecting to getupdates.oracle.com <http://getupdates.oracle.com> (getupdates.oracle.com <http://getupdates.oracle.com>)|104.96.155.106|:443... connected.
ERROR: no certificate subject alternative name matches
requested host name 'getupdates.oracle.com <http://getupdates.oracle.com>'.
To connect to getupdates.oracle.com <http://getupdates.oracle.com> insecurely, use `--no-check-certificate’.

I looked at the certificate details of https://getupdates.oracle.com <https://getupdates.oracle.com> in the browser, and it seems as if the certificate is for peo-eas-esps-prod.oracle.com <http://peo-eas-esps-prod.oracle.com> and has a lot of alternative names (e.g. updates.oracle.com <http://updates.oracle.com>), but getupdates.oracle.com <http://getupdates.oracle.com> is missing in this list, and the certificate is therefore not valid for that hostname.

Unfortunately Don O’Malley doesn’t seem to work for Oracle anymore, but back in 2018 he told me about two other guys working for the patch team. I contacted them, let’s see if they can get the certficate fixed so PCA would work out of the box again.

Until then, everybody still using PCA can use Jeff’s workaround.

Best,
Martin.


Am 10.12.2021 um 16:59 schrieb Jeff Wieland <[email protected] <mailto:[email protected]>>:

The hostname for downloading patchdiag.xref appears to have changed
from getupdates.oracle.com <http://getupdates.oracle.com> to updates.oracle.com <http://updates.oracle.com>.

Of course you can fix this by adding the following to your .pca file:

ohost=updates.oracle.com <http://updates.oracle.com>

--
Jeff Wieland, UNIX Systems Administrator
Purdue University IT Infrastructure Services UNIX Platforms





Reply via email to