LinuxQuestions.org - [SOLVED] Need suggestion:->>Failed HTTPS transfer to https://supportfiles.sun.com/curl

- Solaris / OpenSolaris (https://www.linuxquestions.org/questions/solaris-opensolaris-20/)

- - Need suggestion:->>Failed HTTPS transfer to https://supportfiles.sun.com/curl (https://www.linuxquestions.org/questions/solaris-opensolaris-20/need-suggestion-failed-https-transfer-to-https-supportfiles-sun-com-curl-4175489267/)

Need suggestion:->>Failed HTTPS transfer to https://supportfiles.sun.com/curl

Hi Guys,

I have recently started reciving below Error message

Code:

Failed HTTPS transfer to https://supportfiles.sun.com/curl

whenever I run

Code:

/usr/local/bin/sudo /opt/SUNWexplo/bin/explorer -P -q -v

from all Servers.

Looks like the SSL certificate as Expired.

Whenever I type this https://supportfiles.sun.com in address bar I get below message before proceeding .

So I need to know that first whose job is to update/provide this certificate, Network Team or we Unix team.

If Unix Team on which Server do we need to update this as from all Servers when we execute explorer we get below message:-

Code:

Dec 27 05:07:03 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html

Dec 27 05:07:03 server31[27116] explorer: ERROR

Dec 27 05:07:03 server31[27116] explorer: ERROR  curl performs SSL certificate verification by default, using a "bundle"

Dec 27 05:07:03 server31[27116] explorer: ERROR  of Certificate Authority (CA) public keys (CA certs). If the default

Dec 27 05:07:03 server31[27116] explorer: ERROR  bundle file isn't adequate, you can specify an alternate file

Dec 27 05:07:03 server31[27116] explorer: ERROR  using the --cacert option.

Dec 27 05:07:03 server31[27116] explorer: ERROR  If this HTTPS server uses a certificate signed by a CA represented in

Dec 27 05:07:03 server31[27116] explorer: ERROR  the bundle, the certificate verification probably failed due to a

Dec 27 05:07:03 server31[27116] explorer: ERROR  problem with the certificate (it might be expired, or the name might

Dec 27 05:07:03 server31[27116] explorer: ERROR  not match the domain name in the URL).

Dec 27 05:07:03 server31[27116] explorer: ERROR  If you'd like to turn off curl's verification of the certificate, use

Dec 27 05:07:03 server31[27116] explorer: ERROR  the -k (or --insecure) option.

Dec 27 05:07:03 server31[27116] explorer:  Transfer failed (attempt 3 of 5)

Dec 27 05:07:03 server31[27116] explorer:  Waiting one minute before next try

Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15305: Failed HTTPS transfer to https://supportfiles.sun.com/curl (exit code: 60)

Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15306: Error output from curl:

Dec 27 05:08:04 server31[27116] explorer: ERROR  curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:

Dec 27 05:08:04 server31[27116] explorer: ERROR  error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Dec 27 05:08:04 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html

Dec 27 05:08:04 server31[27116] explorer: ERROR

Here is the Curl version on one of the System.

Code:

-bash-3.00$ /usr/local/bin/sudo ./curl -V

curl 7.19.5 (sparc-sun-solaris2.10) libcurl/7.19.5 OpenSSL/0.9.7d zlib/1.2.3

Protocols: tftp ftp telnet dict ldap http file https ftps

Features: IPv6 Largefile NTLM SSL libz

-bash-3.00$

and

Code:

-bash-3.00$ /usr/local/bin/sudo /usr/bin/pkginfo -l  SFWcurl

Password:

  PKGINST:  SFWcurl

      NAME:  curl - tool for transfering data specified with URL syntax

  CATEGORY:  system

      ARCH:  sparc

  VERSION:  7.10.3,REV=2004.07.08.09.30

  BASEDIR:  /opt

    VENDOR:  http://curl.haxx.se/

      DESC:  curl - tool for transfering data specified with URL syntax

    PSTAMP:  freeware20040708094034

  INSTDATE:  Nov 15 2005 15:06

  HOTLINE:  Please contact the owners of this software

    STATUS:  completely installed

    FILES:      56 installed pathnames

                  52 shared pathnames

                  8 directories

                  3 executables

                4960 blocks used (approx)



-bash-3.00$

Please advise.
Thanks
Please advise.

Code:

Continue to this website (not recommended).

Quote:

Originally Posted by manalisharmabe (Post 5087467)

So I need to know that first whose job is to update/provide this certificate, Network Team or we Unix team.

That would be neither of them but anyway as you do not manage this certificate. In any case, I wouldn't expect it to be updated given the fact supportfiles.com is going to be decommissioned. Have a look to the last paragraph of the https://supportfiles.sun.com/upload page for details.

Yes, I did read that paragraph.

But I guess that site is still in USE.

So how to upload data to sun site?

How to resolve this issue and where to update the certificate?

Thanks for reply.

Quote:

Originally Posted by manalisharmabe (Post 5087575)

Yes, I did read that paragraph.
...
So how to upload data to sun site?

The page I posted a link to explains the new method to upload data to Oracle. supportfiles.com is being decommissioned.

Quote:

How to resolve this issue and where to update the certificate?

The certificate is expired and is installed on an Oracle server, nothing you can fix. You might want to investigate if a newer version of explorer doesn't use an updated upload method.

Quote:

Originally Posted by Habitual (Post 5087625)

https://support.oracle.com/epmos/fac...x?id=1547088.1

Ok Thanks.

This is what I got from above link.

Code:

Several upload methods currently exist in production:

MY ORACLE SUPPORT File Upload

FTPS (not SFTP) & HTTPS to transport.oracle.com (NEW)

Supportfiles – (being decommissioned April 2014)

Diagnostic Assistant

Oracle Configuration Manager

Secure File Transfer

So I guess, I need to use transport.oracle.com instead of Supportfiles.oracle.com

I will find out where exactly I need to edit this.

Thnaks

Hi Guys,

I need to know where exactly I need to implement this certificate, i really have NO idea about it.

However when I changed this entries in file

Code:

/etc/opt/SUNWexplo/default/explorer

from

Code:

# Where explorer output should be posted

EXP_TRANSPORT="https://supportfiles.sun.com/curl"

Code:

# 



# Where explorer output should be posted

EXP_TRANSPORT="http://transport.oracle.com/curl"

I got below messaage , the data was sent to Oracle.

Code:

Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz created

Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz sent to http://transport.oracle.com/curlDec 31 09:34:33 server31[18723] explorer:  Removing previous explorers from /opt/SUNWexplo/output ...

Dec 31 09:34:42 server31[18723] explorer:  Explorer finished

So I need to know where exactly is the problem and where I need to do required changes?
As far as the current Curl package is concerned it had wordk properly with 8.01 Sun Explorer version for last 3 weeks.

Please advise, what I need to do here to resolve the issue.

Thanks.

Quote:

Originally Posted by manalisharmabe (Post 5089497)

I need to know where exactly I need to implement this certificate, i really have NO idea about it.

As already answered twice, nowhere. Forget about this certificate.

Quote:

Originally Posted by jlliagre (Post 5089522)

As already answered twice, nowhere. Forget about this certificate.

So you mean to say I need to implement this ?

Code:

EXP_TRANSPORT="http://transport.oracle.com/curl"

So what is Solution should set HTTPonly and not HTTPS?
Please advise.

Thanks.

I guess, Only Oracle need to do something to send these explorer data to them and nothing from my side.

Can anyone confirm this?

Thanks a lot for your valuable support.

Quote:

Originally Posted by manalisharmabe (Post 5091033)

I guess, Only Oracle need to do something to send these explorer data to them and nothing from my side.

Can anyone confirm this?

That depends on what you mean with "do something".

Oracle is not going to send the explorer files from your site to them. That's up to you to configure and schedule this.

Quote:

Originally Posted by jlliagre (Post 5091057)

That depends on what you mean with "do something".

Oracle is not going to send the explorer files from your site to them. That's up to you to configure and schedule this.

Yes, now only Oracle had to do with this error to resolve it and they did it after opening ticket with them, no my data is getting sent to oracle. it took them long to understand that, the problem is at their end. :-(

Code:

Jan 10 07:48:29 server31[25066] explorer:  explorer.83cfab13.server31-2014.01.10.06.41.tar.gz sent to https://supportfiles.sun.com/curlJan 10 07:48:29 server31[25066] explorer:  Removing previous explorers from /opt/SUNWexplo/output ...

Thank you very very much for your valuable time and suggestion, its been great help for me and I learn one more new thing from you people.

Speacial thanks to jlliagre