Sure. I patched (1 installed) Saturday without issue and, per your request, have just pulled a couple of random patches without issue:
NONAME Sun SPARC Enterprise T5120 64 GB RAM Serial #99975552 Host ID: 99915d80 SunOS Release 5.10 Version Generic 64-bit SPARC CSN: ZZZ0825QKF Oracle Solaris 10 8/11 s10s_u10wos_17b SPARC Copyright (c) 1983, 2014, Oracle and/or its affiliates. All rights reserved Assembled 23 August 2011 # pca --wget=/usr/sfw/bin/wget -d 148120 Using /var/tmp/patchdiag.xref from May/03/15 Host: noname (SunOS 5.10/Generic_Virtual/sparc/sun4v) List: 148120 (1/1172) Patch IR CR RSB Age Synopsis ------ -- - -- --- --- ------------------------------------------------------- 148120 -- < 02 --- 999 X11 6.6.2: xset patch Looking for 148120-02 (1/1) Trying Oracle Trying https://getupdates.oracle.com/ (1/1) Done ------------------------------------------------------------------------------ Download Summary: 1 total, 1 successful, 0 skipped, 0 failed # /usr/sfw/bin/wget -V GNU Wget 1.12 built on solaris2.10. +digest +ipv6 -nls +ntlm +opie +md5/solaris +https -gnutls +openssl -iri Wgetrc: /etc/wgetrc (system) Compile: /ws/on10-tools/SUNWspro/SOS8/bin/cc -DHAVE_CONFIG_H -DSYSTEM_WGETRC="/etc/wgetrc" -DLOCALEDIR="/usr/sfw/share/locale" -I. -I../lib -I/usr/sfw/include -xO3 -xarch=v8 -xspace -W0,-Lt -W2,-Rcond_elim -Xa -xildoff -xc99 Link: /ws/on10-tools/SUNWspro/SOS8/bin/cc -xO3 -xarch=v8 -xspace -W0,-Lt -W2,-Rcond_elim -Xa -xildoff -xc99 /usr/sfw/lib/libssl.so /usr/sfw/lib/libcrypto.so -R/usr/sfw/lib -lmd5 -ldl -lsocket -lnsl -lrt ftp-opie.o openssl.o http-ntlm.o gen-md5.o ../lib/libgnu.a # pca --version pca 20150327-01 # Verbose: Looking for 148912-01 (1/1) Trying Oracle Trying https://getupdates.oracle.com/ (1/1) src: oracle, srcurl: Adding to /tmp/pca.986105: header=Authorization: Basic <base64-user-passwd> /usr/sfw/bin/wget --progress=dot:binary --ca-certificate=/usr/local/bin/pca --no-check-certificate --secure-protocol=TLSv1 -O /var/tmp/./148912-01.zip "https://getupdates.oracle.com/all_unsigned/148912-01.zip" --2015-05-04 14:43:39-- https://getupdates.oracle.com/all_unsigned/148912-01.zip Resolving getupdates.oracle.com... 141.146.44.51 Connecting to updates.oracle.com|141.146.44.51|:443... connected. HTTP request sent, awaiting response... 301 Moved Permanently Location: https://updates.oracle.com/all_unsigned/148912-01.zip [following] --2015-05-04 14:43:44-- https://updates.oracle.com/all_unsigned/148912-01.zip Connecting to updates.oracle.com|141.146.44.51|:443... connected. HTTP request sent, awaiting response... 302 Found Location: https://aru-akam-secure.oracle.com/adcarurepos/vol/patch33/PLATFORM/Solaris-64/R40 00001100000/148912-01.zip?FilePath=/adcarurepos/vol/patch33/PLATFORM/Solaris-64/R4 000001100000/148912-01.zip ... BTW, that's a branded zone on 11.2. How are you patching 2.10 zones? A bit dumb but timesaving, I'm just relying on -si missingrs and the failure of checks to stop me patching things that I can't or shouldn't. Kind regards, -----Original Message----- Date: Mon, 04 May 2015 13:44:02 +0200 From: Martin Paul <martin.p...@univie.ac.at> To: "PCA (Patch Check Advanced) Discussion" <pca@lists.univie.ac.at> Subject: Re: [pca] Patch file not downloaded with "cipher or hash unavailable" Am 03.05.2015 um 11:53 schrieb Frank Langelage: > Connecting to aru-akam-secure.oracle.com|184.31.84.14|:443... connected. > OpenSSL: error:140D308A:SSL routines:TLS1_SETUP_KEY_BLOCK:cipher or hash > unavailable > Unable to establish SSL connection. Strange. Did patch downloads work on that system before? Did you update wget or pca or install patches recently? The error seems to suggest that certain ciphers are missing from the SSL library. If that's true, and nothing has changed on your system, it would mean that something must have changed on the server. Could other PCA users please test patch downloads and see if they get the same error? Martin.