LinuxQuestions.org
Visit the LQ Articles and Editorials section
Go Back   LinuxQuestions.org > Forums > Other *NIX Forums > Solaris / OpenSolaris
User Name
Password
Solaris / OpenSolaris This forum is for the discussion of Solaris and OpenSolaris.
General Sun, SunOS and Sparc related questions also go here.

Notices

Reply
 
Search this Thread
Old 12-27-2013, 01:40 AM   #1
manalisharmabe
Member
 
Registered: Dec 2010
Posts: 240

Rep: Reputation: 1
Need suggestion:->>Failed HTTPS transfer to https://supportfiles.sun.com/curl


Hi Guys,

I have recently started reciving below Error message

Code:
Failed HTTPS transfer to https://supportfiles.sun.com/curl
whenever I run

Code:
/usr/local/bin/sudo /opt/SUNWexplo/bin/explorer -P -q -v
from all Servers.

Looks like the SSL certificate as Expired.


Whenever I type this https://supportfiles.sun.com in address bar I get below message before proceeding .


So I need to know that first whose job is to update/provide this certificate, Network Team or we Unix team.

If Unix Team on which Server do we need to update this as from all Servers when we execute explorer we get below message:-

Code:
Dec 27 05:07:03 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html
Dec 27 05:07:03 server31[27116] explorer: ERROR
Dec 27 05:07:03 server31[27116] explorer: ERROR  curl performs SSL certificate verification by default, using a "bundle"
Dec 27 05:07:03 server31[27116] explorer: ERROR  of Certificate Authority (CA) public keys (CA certs). If the default
Dec 27 05:07:03 server31[27116] explorer: ERROR  bundle file isn't adequate, you can specify an alternate file
Dec 27 05:07:03 server31[27116] explorer: ERROR  using the --cacert option.
Dec 27 05:07:03 server31[27116] explorer: ERROR  If this HTTPS server uses a certificate signed by a CA represented in
Dec 27 05:07:03 server31[27116] explorer: ERROR  the bundle, the certificate verification probably failed due to a
Dec 27 05:07:03 server31[27116] explorer: ERROR  problem with the certificate (it might be expired, or the name might
Dec 27 05:07:03 server31[27116] explorer: ERROR  not match the domain name in the URL).
Dec 27 05:07:03 server31[27116] explorer: ERROR  If you'd like to turn off curl's verification of the certificate, use
Dec 27 05:07:03 server31[27116] explorer: ERROR  the -k (or --insecure) option.
Dec 27 05:07:03 server31[27116] explorer:  Transfer failed (attempt 3 of 5)
Dec 27 05:07:03 server31[27116] explorer:  Waiting one minute before next try
Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15305: Failed HTTPS transfer to https://supportfiles.sun.com/curl (exit code: 60)
Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15306: Error output from curl:
Dec 27 05:08:04 server31[27116] explorer: ERROR  curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
Dec 27 05:08:04 server31[27116] explorer: ERROR  error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Dec 27 05:08:04 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html
Dec 27 05:08:04 server31[27116] explorer: ERROR

Here is the Curl version on one of the System.

Code:
-bash-3.00$ /usr/local/bin/sudo ./curl -V
curl 7.19.5 (sparc-sun-solaris2.10) libcurl/7.19.5 OpenSSL/0.9.7d zlib/1.2.3
Protocols: tftp ftp telnet dict ldap http file https ftps
Features: IPv6 Largefile NTLM SSL libz
-bash-3.00$

and

Code:
-bash-3.00$ /usr/local/bin/sudo /usr/bin/pkginfo -l  SFWcurl
Password:
   PKGINST:  SFWcurl
      NAME:  curl - tool for transfering data specified with URL syntax
  CATEGORY:  system
      ARCH:  sparc
   VERSION:  7.10.3,REV=2004.07.08.09.30
   BASEDIR:  /opt
    VENDOR:  http://curl.haxx.se/
      DESC:  curl - tool for transfering data specified with URL syntax
    PSTAMP:  freeware20040708094034
  INSTDATE:  Nov 15 2005 15:06
   HOTLINE:  Please contact the owners of this software
    STATUS:  completely installed
     FILES:       56 installed pathnames
                  52 shared pathnames
                   8 directories
                   3 executables
                4960 blocks used (approx)

-bash-3.00$
Please advise.
Thanks
Please advise.


Code:
Continue to this website (not recommended).
 
Old 12-27-2013, 02:39 AM   #2
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,493

Rep: Reputation: 355Reputation: 355Reputation: 355Reputation: 355
Quote:
Originally Posted by manalisharmabe View Post
So I need to know that first whose job is to update/provide this certificate, Network Team or we Unix team.
That would be neither of them but anyway as you do not manage this certificate. In any case, I wouldn't expect it to be updated given the fact supportfiles.com is going to be decommissioned. Have a look to the last paragraph of the https://supportfiles.sun.com/upload page for details.
 
1 members found this post helpful.
Old 12-27-2013, 07:02 AM   #3
manalisharmabe
Member
 
Registered: Dec 2010
Posts: 240

Original Poster
Rep: Reputation: 1
Yes, I did read that paragraph.

But I guess that site is still in USE.

So how to upload data to sun site?


How to resolve this issue and where to update the certificate?

Thanks for reply.
 
Old 12-27-2013, 09:15 AM   #4
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,493

Rep: Reputation: 355Reputation: 355Reputation: 355Reputation: 355
Quote:
Originally Posted by manalisharmabe View Post
Yes, I did read that paragraph.
...
So how to upload data to sun site?
The page I posted a link to explains the new method to upload data to Oracle. supportfiles.com is being decommissioned.
Quote:
How to resolve this issue and where to update the certificate?
The certificate is expired and is installed on an Oracle server, nothing you can fix. You might want to investigate if a newer version of explorer doesn't use an updated upload method.
 
1 members found this post helpful.
Old 12-27-2013, 09:40 AM   #5
Habitual
Senior Member
 
Registered: Jan 2011
Distribution: Undecided
Posts: 3,196
Blog Entries: 4

Rep: Reputation: 764Reputation: 764Reputation: 764Reputation: 764Reputation: 764Reputation: 764Reputation: 764
https://support.oracle.com/epmos/fac...x?id=1547088.1
 
1 members found this post helpful.
Old 12-29-2013, 06:29 AM   #6
manalisharmabe
Member
 
Registered: Dec 2010
Posts: 240

Original Poster
Rep: Reputation: 1
Quote:
Originally Posted by Habitual View Post
Ok Thanks.

This is what I got from above link.


Code:
Several upload methods currently exist in production:
MY ORACLE SUPPORT File Upload
FTPS (not SFTP) & HTTPS to transport.oracle.com (NEW)
Supportfiles  (being decommissioned April 2014)
Diagnostic Assistant
Oracle Configuration Manager
Secure File Transfer

So I guess, I need to use transport.oracle.com instead of Supportfiles.oracle.com

I will find out where exactly I need to edit this.

Thnaks
 
Old 12-31-2013, 02:52 AM   #7
manalisharmabe
Member
 
Registered: Dec 2010
Posts: 240

Original Poster
Rep: Reputation: 1
Hi Guys,

I need to know where exactly I need to implement this certificate, i really have NO idea about it.

However when I changed this entries in file
Code:
/etc/opt/SUNWexplo/default/explorer
from

Code:
# Where explorer output should be posted
EXP_TRANSPORT="https://supportfiles.sun.com/curl"
to
Code:
# 

# Where explorer output should be posted
EXP_TRANSPORT="http://transport.oracle.com/curl"

I got below messaage , the data was sent to Oracle.

Code:
Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz created
Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz sent to http://transport.oracle.com/curlDec 31 09:34:33 server31[18723] explorer:  Removing previous explorers from /opt/SUNWexplo/output ...
Dec 31 09:34:42 server31[18723] explorer:  Explorer finished
So I need to know where exactly is the problem and where I need to do required changes?
As far as the current Curl package is concerned it had wordk properly with 8.01 Sun Explorer version for last 3 weeks.

Please advise, what I need to do here to resolve the issue.

Thanks.

Last edited by manalisharmabe; 12-31-2013 at 02:56 AM.
 
Old 12-31-2013, 03:54 AM   #8
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,493

Rep: Reputation: 355Reputation: 355Reputation: 355Reputation: 355
Quote:
Originally Posted by manalisharmabe View Post
I need to know where exactly I need to implement this certificate, i really have NO idea about it.
As already answered twice, nowhere. Forget about this certificate.
 
1 members found this post helpful.
Old 12-31-2013, 04:00 AM   #9
manalisharmabe
Member
 
Registered: Dec 2010
Posts: 240

Original Poster
Rep: Reputation: 1
Quote:
Originally Posted by jlliagre View Post
As already answered twice, nowhere. Forget about this certificate.
So you mean to say I need to implement this ?
Code:
EXP_TRANSPORT="http://transport.oracle.com/curl"

So what is Solution should set HTTPonly and not HTTPS?
Please advise.

Thanks.

Last edited by manalisharmabe; 12-31-2013 at 04:05 AM.
 
Old 01-03-2014, 01:47 AM   #10
manalisharmabe
Member
 
Registered: Dec 2010
Posts: 240

Original Poster
Rep: Reputation: 1
I guess, Only Oracle need to do something to send these explorer data to them and nothing from my side.

Can anyone confirm this?


Thanks a lot for your valuable support.
 
Old 01-03-2014, 02:45 AM   #11
jlliagre
Moderator
 
Registered: Feb 2004
Location: Outside Paris
Distribution: Solaris10, Solaris 11, Mint, OL
Posts: 9,493

Rep: Reputation: 355Reputation: 355Reputation: 355Reputation: 355
Quote:
Originally Posted by manalisharmabe View Post
I guess, Only Oracle need to do something to send these explorer data to them and nothing from my side.

Can anyone confirm this?
That depends on what you mean with "do something".

Oracle is not going to send the explorer files from your site to them. That's up to you to configure and schedule this.
 
1 members found this post helpful.
Old 01-10-2014, 12:58 AM   #12
manalisharmabe
Member
 
Registered: Dec 2010
Posts: 240

Original Poster
Rep: Reputation: 1
Quote:
Originally Posted by jlliagre View Post
That depends on what you mean with "do something".

Oracle is not going to send the explorer files from your site to them. That's up to you to configure and schedule this.
Yes, now only Oracle had to do with this error to resolve it and they did it after opening ticket with them, no my data is getting sent to oracle. it took them long to understand that, the problem is at their end. :-(

Code:
Jan 10 07:48:29 server31[25066] explorer:  explorer.83cfab13.server31-2014.01.10.06.41.tar.gz sent to https://supportfiles.sun.com/curlJan 10 07:48:29 server31[25066] explorer:  Removing previous explorers from /opt/SUNWexplo/output ...
Thank you very very much for your valuable time and suggestion, its been great help for me and I learn one more new thing from you people.

Speacial thanks to jlliagre
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
https certication error , the page can not be loaded via https ust Linux - Server 2 11-21-2013 08:49 PM
Curl HTTPS OpenSSL Certificate issue Manjunath1847 Linux - General 1 08-09-2010 10:13 PM
[SOLVED] Using curl to log in to https page. Chris_no Linux - General 3 09-03-2009 03:50 PM
HTTPS and CURL Elv13 Linux - Software 8 08-30-2009 01:19 PM
curl: (1) Protocol https not supported or disabled in libcurl guest Linux - Software 1 05-01-2009 03:40 AM


All times are GMT -5. The time now is 03:09 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration