It sounds like the field may have contacted this group but not sure. Have you seen this type
of problem on a Solaris 12 machine?

miles $ sudo pkg set-publisher -k /var/pkg/ssl/Oracle_Solaris_Studio_Support.key.pem -c /var/pkg/ssl/Oracle_Solaris_Studio_Support.certificate.pem -G '*' -g https://pkg.oracle.com/solarisstudio/support solarisstudio pkg set-publisher: The origin URIs for 'solarisstudio' do not appear to point to a valid pkg repository. Please verify the repository's location and the client's network configuration.
Additional details:

Unable to contact valid package repository: https://pkg.oracle.com/solarisstudio/support
Encountered the following error(s):
Transport errors encountered when trying to contact repository.
Reported the following errors:
Framework error: code: 60 reason: SSL certificate problem: self signed certificate in certificate chain
URL: 'https://pkg.oracle.com/solarisstudio/support'

miles $ sudo pkg set-publisher -k /var/pkg/ssl/Oracle_Solaris_Studio.key.pem -c /var/pkg/ssl/Oracle_Solaris_Studio.certificate.pem -G '*' -g https://pkg.oracle.com/solarisstudio/release solarisstudio pkg set-publisher: The origin URIs for 'solarisstudio' do not appear to point to a valid pkg repository. Please verify the repository's location and the client's network configuration.
Additional details:

Unable to contact valid package repository: https://pkg.oracle.com/solarisstudio/release
Encountered the following error(s):
Transport errors encountered when trying to contact repository.
Reported the following errors:
Framework error: code: 60 reason: SSL certificate problem: self signed certificate in certificate chain
URL: 'https://pkg.oracle.com/solarisstudio/release'


Kris




-------- Original Message --------
Subject:        Re: installation (IPS): problems with certificate
Date:   Sat, 17 Nov 2012 01:20:17 +0000
From:   Calum Mackay <[email protected]>
Organization:   Oracle
To:     Bradley Mayer <[email protected]>
CC: Kristin Beatty <[email protected]>, Don Kretsch <[email protected]>, [email protected]



thanks Don, Kris, Brad,

miles $ pkg list entire

NAME (PUBLISHER)                                  VERSION
     IFO

entire                                            5.12-5.12.0.0.0.8.14   i--


miles $ uname -a

SunOS miles 5.12 s12_08 i86pc i386 i86pc Solaris


In answer to the various questions:


- Yes, bash login shell:

miles $ ps -fp $$
     UID   PID  PPID   C    STIME TTY         TIME CMD
   calum 19300 19299   0 01:03:08 pts/7       0:00 -bash


- /var/pkg/ssl

was empty before I started. I've just emptied it, downloaded the files
again from scratch, and tried again:

miles $ ls -ld /var/pkg/ssl
drwxr-xr-x 2 root root 6 Nov 17 01:12 /var/pkg/ssl

miles $ find /var/pkg/ssl
/var/pkg/ssl

miles $ sudo cp -i /export/home/calum/Desktop/Oracle_Solaris_Studio*
/var/pkg/ssl/

miles $ ls -l /var/pkg/ssl
total 6
-rw-r--r-- 1 root root 745 Nov 17 01:12
Oracle_Solaris_Studio_Support.certificate.pem
-rw-r--r-- 1 root root 887 Nov 17 01:12
Oracle_Solaris_Studio_Support.key.pem
-rw-r--r-- 1 root root 745 Nov 17 01:12
Oracle_Solaris_Studio.certificate.pem
-rw-r--r-- 1 root root 887 Nov 17 01:12 Oracle_Solaris_Studio.key.pem

miles $ sudo pkg set-publisher -k
/var/pkg/ssl/Oracle_Solaris_Studio.key.pem -c
/var/pkg/ssl/Oracle_Solaris_Studio.certificate.pem -G '*' -g
https://pkg.oracle.com/solarisstudio/release  solarisstudio
Password:
pkg set-publisher: The origin URIs for 'solarisstudio' do not appear to
point to a valid pkg repository.
Please verify the repository's location and the client's network
configuration.
Additional details:

Unable to contact valid package repository:
https://pkg.oracle.com/solarisstudio/release
Encountered the following error(s):
Transport errors encountered when trying to contact repository.
Reported the following errors:
Framework error: code: 60 reason: SSL certificate problem: self signed
certificate in certificate chain
URL: 'https://pkg.oracle.com/solarisstudio/release'


miles $ pkg publisher
PUBLISHER                   TYPE     STATUS P LOCATION
solaris                     origin   online Fhttp://miles:9000/
punchin                     origin   online F
file:///export/home/calum/scratch/ips-repos/openconnect/


- I tried using curl, to avoid IPS entirely, and got the same problem,
so we may rule out IPS:

miles $ curl --key Oracle_Solaris_Studio_Support.key.pem --cert
Oracle_Solaris_Studio_Support.certificate.pem
https://pkg.oracle.com/solarisstudio/support/versions/0/
curl: (60) SSL certificate problem: self signed certificate in
certificate chain
More details here:http://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.



_______________________________________________
pkg-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/pkg-discuss

Reply via email to