[SOLVED] Need suggestion:->>Failed HTTPS transfer to https://supportfiles.sun.com/curl

manalisharmabe · 12-27-2013, 01:40 AM

Hi Guys,

I have recently started reciving below Error message

Code:

Failed HTTPS transfer to https://supportfiles.sun.com/curl

whenever I run

Code:

/usr/local/bin/sudo /opt/SUNWexplo/bin/explorer -P -q -v

from all Servers.

Looks like the SSL certificate as Expired.

Whenever I type this https://supportfiles.sun.com in address bar I get below message before proceeding .

So I need to know that first whose job is to update/provide this certificate, Network Team or we Unix team.

If Unix Team on which Server do we need to update this as from all Servers when we execute explorer we get below message:-

Code:

Dec 27 05:07:03 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html
Dec 27 05:07:03 server31[27116] explorer: ERROR
Dec 27 05:07:03 server31[27116] explorer: ERROR  curl performs SSL certificate verification by default, using a "bundle"
Dec 27 05:07:03 server31[27116] explorer: ERROR  of Certificate Authority (CA) public keys (CA certs). If the default
Dec 27 05:07:03 server31[27116] explorer: ERROR  bundle file isn't adequate, you can specify an alternate file
Dec 27 05:07:03 server31[27116] explorer: ERROR  using the --cacert option.
Dec 27 05:07:03 server31[27116] explorer: ERROR  If this HTTPS server uses a certificate signed by a CA represented in
Dec 27 05:07:03 server31[27116] explorer: ERROR  the bundle, the certificate verification probably failed due to a
Dec 27 05:07:03 server31[27116] explorer: ERROR  problem with the certificate (it might be expired, or the name might
Dec 27 05:07:03 server31[27116] explorer: ERROR  not match the domain name in the URL).
Dec 27 05:07:03 server31[27116] explorer: ERROR  If you'd like to turn off curl's verification of the certificate, use
Dec 27 05:07:03 server31[27116] explorer: ERROR  the -k (or --insecure) option.
Dec 27 05:07:03 server31[27116] explorer:  Transfer failed (attempt 3 of 5)
Dec 27 05:07:03 server31[27116] explorer:  Waiting one minute before next try
Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15305: Failed HTTPS transfer to https://supportfiles.sun.com/curl (exit code: 60)
Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15306: Error output from curl:
Dec 27 05:08:04 server31[27116] explorer: ERROR  curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
Dec 27 05:08:04 server31[27116] explorer: ERROR  error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Dec 27 05:08:04 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html
Dec 27 05:08:04 server31[27116] explorer: ERROR

Here is the Curl version on one of the System.

Code:

-bash-3.00$ /usr/local/bin/sudo ./curl -V
curl 7.19.5 (sparc-sun-solaris2.10) libcurl/7.19.5 OpenSSL/0.9.7d zlib/1.2.3
Protocols: tftp ftp telnet dict ldap http file https ftps
Features: IPv6 Largefile NTLM SSL libz
-bash-3.00$

and

Code:

-bash-3.00$ /usr/local/bin/sudo /usr/bin/pkginfo -l  SFWcurl
Password:
   PKGINST:  SFWcurl
      NAME:  curl - tool for transfering data specified with URL syntax
  CATEGORY:  system
      ARCH:  sparc
   VERSION:  7.10.3,REV=2004.07.08.09.30
   BASEDIR:  /opt
    VENDOR:  http://curl.haxx.se/
      DESC:  curl - tool for transfering data specified with URL syntax
    PSTAMP:  freeware20040708094034
  INSTDATE:  Nov 15 2005 15:06
   HOTLINE:  Please contact the owners of this software
    STATUS:  completely installed
     FILES:       56 installed pathnames
                  52 shared pathnames
                   8 directories
                   3 executables
                4960 blocks used (approx)

-bash-3.00$

Please advise.
Thanks
Please advise.

Code:

Continue to this website (not recommended).

jlliagre · 12-27-2013, 02:39 AM

Quote:

Originally Posted by manalisharmabe

So I need to know that first whose job is to update/provide this certificate, Network Team or we Unix team.

That would be neither of them but anyway as you do not manage this certificate. In any case, I wouldn't expect it to be updated given the fact supportfiles.com is going to be decommissioned. Have a look to the last paragraph of the https://supportfiles.sun.com/upload page for details.

manalisharmabe · 12-27-2013, 07:02 AM

Yes, I did read that paragraph.

But I guess that site is still in USE.

So how to upload data to sun site?

How to resolve this issue and where to update the certificate?

Thanks for reply.

jlliagre · 12-27-2013, 09:15 AM

Quote:

Originally Posted by manalisharmabe

Yes, I did read that paragraph.
...
So how to upload data to sun site?

The page I posted a link to explains the new method to upload data to Oracle. supportfiles.com is being decommissioned.

Quote:

How to resolve this issue and where to update the certificate?

The certificate is expired and is installed on an Oracle server, nothing you can fix. You might want to investigate if a newer version of explorer doesn't use an updated upload method.

Habitual · 12-27-2013, 09:40 AM

https://support.oracle.com/epmos/fac...x?id=1547088.1

manalisharmabe · 12-29-2013, 06:29 AM

Quote:

Originally Posted by Habitual

https://support.oracle.com/epmos/fac...x?id=1547088.1

Ok Thanks.

This is what I got from above link.

Code:

Several upload methods currently exist in production:
MY ORACLE SUPPORT File Upload
FTPS (not SFTP) & HTTPS to transport.oracle.com (NEW)
Supportfiles – (being decommissioned April 2014)
Diagnostic Assistant
Oracle Configuration Manager
Secure File Transfer

So I guess, I need to use transport.oracle.com instead of Supportfiles.oracle.com

I will find out where exactly I need to edit this.

Thnaks

manalisharmabe · 12-31-2013, 02:52 AM

Hi Guys,

I need to know where exactly I need to implement this certificate, i really have NO idea about it.

However when I changed this entries in file

Code:

/etc/opt/SUNWexplo/default/explorer

from

Code:

# Where explorer output should be posted
EXP_TRANSPORT="https://supportfiles.sun.com/curl"

to

Code:

# 

# Where explorer output should be posted
EXP_TRANSPORT="http://transport.oracle.com/curl"

I got below messaage , the data was sent to Oracle.

Code:

Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz created
Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz sent to http://transport.oracle.com/curlDec 31 09:34:33 server31[18723] explorer:  Removing previous explorers from /opt/SUNWexplo/output ...
Dec 31 09:34:42 server31[18723] explorer:  Explorer finished

So I need to know where exactly is the problem and where I need to do required changes?
As far as the current Curl package is concerned it had wordk properly with 8.01 Sun Explorer version for last 3 weeks.

Please advise, what I need to do here to resolve the issue.

Thanks.

jlliagre · 12-31-2013, 03:54 AM

Quote:

Originally Posted by manalisharmabe

I need to know where exactly I need to implement this certificate, i really have NO idea about it.

As already answered twice, nowhere. Forget about this certificate.

manalisharmabe · 12-31-2013, 04:00 AM

Quote:

Originally Posted by jlliagre

As already answered twice, nowhere. Forget about this certificate.

So you mean to say I need to implement this ?

Code:

EXP_TRANSPORT="http://transport.oracle.com/curl"

So what is Solution should set HTTPonly and not HTTPS?
Please advise.

Thanks.

manalisharmabe · 01-03-2014, 01:47 AM

I guess, Only Oracle need to do something to send these explorer data to them and nothing from my side.

Can anyone confirm this?

Thanks a lot for your valuable support.

jlliagre · 01-03-2014, 02:45 AM

Quote:

Originally Posted by manalisharmabe

I guess, Only Oracle need to do something to send these explorer data to them and nothing from my side.

Can anyone confirm this?

That depends on what you mean with "do something".

Oracle is not going to send the explorer files from your site to them. That's up to you to configure and schedule this.

manalisharmabe · 01-10-2014, 12:58 AM

Quote:

Originally Posted by jlliagre

That depends on what you mean with "do something".

Oracle is not going to send the explorer files from your site to them. That's up to you to configure and schedule this.

Yes, now only Oracle had to do with this error to resolve it and they did it after opening ticket with them, no my data is getting sent to oracle. it took them long to understand that, the problem is at their end. :-(

Code:

Jan 10 07:48:29 server31[25066] explorer:  explorer.83cfab13.server31-2014.01.10.06.41.tar.gz sent to https://supportfiles.sun.com/curlJan 10 07:48:29 server31[25066] explorer:  Removing previous explorers from /opt/SUNWexplo/output ...

Thank you very very much for your valuable time and suggestion, its been great help for me and I learn one more new thing from you people.

Speacial thanks to jlliagre