Thanks Jan for the detailed analysis, that makes perfect sense!
I have made two changes to the development version of PCA:
http://www.par.univie.ac.at/solaris/pca/develop/pca
- Add the GeoTrust CA cert
- Use --no-check-certificate with wget versions <= 1.12
The bug with recognizing alternative names in certs seems to be fixed in
wget 1.13.1 onwards.
For wget versions <= 1.12 I have no choice but turning off certificate
checks. That's ugly, but if Oracle doesn't change the certificate, there
is no other choice.
Can somebody please check whether the latest wget patches for Solaris
(125215-05 and 125216-05) provide a version of wget newer than 1.12, and
if so, whether patch downloads work with the current development version
of PCA?
I'd also like to encourage anybody to test the new version with other
versions of wget, and see whether it works in all environments. If patch
downloads fail, please post output of "pca --debug -d 151615-01".
Best,
Martin.
