[pca] Oracle webserver has an SSL bug - incompatible with OpenSSL 1.0

[Laurent Blume]

Hello all,

An heads up:

If you have installed OpenCSW's wget, you might have noticed that for a 
few days, PCA is not working anymore, it cannot download the 
patchdiag.xref file.


This has been analyzed as an issue on the Oracle server side, which 
makes it incompatible with OpenSSL 1.0:


http://lists.opencsw.org/pipermail/users/2013-April/009568.html

https://www.opencsw.org/mantis/view.php?id=5068

A ticket has been open with Oracle, but well, if somebody here has 
faster access to get it fixed, that'd be nice.


Martin, there is a workaround in the first link that you might consider 
to include in PCA when using OpenCSW's wget.


Laurent

Re: [pca] Oracle webserver has an SSL bug - incompatible with OpenSSL 1.0

[Martin Paul]

Hi Laurent,

thanks for the info! Please let us know when/if Oracle fixes their server.


Martin, there is a workaround in the first link that you might consider
to include in PCA when using OpenCSW's wget.


As a quick fix I changed PCA to run wget with --secure-protocol=TLSv1 
when the wget path contains csw. That's far from perfect, but it 
should suffice to avoid this issue.


The fix is in the current development release of PCA (20130425-01).

Martin.