Thanks for providing the docs, Daniel!
Doesn't look as if they were updated. Doc ID 1199543.1 (Patch download
automation for Sun products using wget) was last updated 11-Feb-2014 and
it does only mention the known certificates. Just to be sure - could
you/somebody download and post getupdates.pem mentioned in that doc?
BTW - Bernd Senf said that "--wgetopt=--secure-protocol=TLSv1" was
required for patch downloads to work as well - are you using a local
copy of wget or the one provided with Solaris? See this note in the
above document:
IMPORTANT:
"https://getupdates.oracle.com web server does not fully support TLS
1.2. Only OpenSSL versions from branch 1.0.0 will work - Oracle Solaris
does not deliver higher versions at this time. Customers who are trying
to access the URL using latest wget/OpenSSL (ie. from www.opencsw.org)
version with TLS 1.2 support may get connection failures."
Best,
Martin.
