Failing patch downloads - Solaris

This is a discussion on Failing patch downloads - Solaris ; An old and well-known problem is showing up again on Sun's patch server. Patches which are listed as new or updated in patchdiag.xref are unavailable on Sun's patch download server. It seems as if only restricted Solaris 10 patches are ...

+ Reply to Thread
Results 1 to 5 of 5

Thread: Failing patch downloads

  1. Failing patch downloads


    An old and well-known problem is showing up again on Sun's patch
    server. Patches which are listed as new or updated in patchdiag.xref
    are unavailable on Sun's patch download server.

    It seems as if only restricted Solaris 10 patches are affected, and
    they usually show up one day later. I have experienced the problem
    every single day in the last week, and it has been reported to me by
    multiple users of pca.

    I have reported this to patchpolicy@sun.com already, but have received
    no reply. A very simple solution would be to push back the update of
    patchdiag.xref by one day.

    Hopefully someone from Sun is listening here who can either fix this
    or name a contact within Sun who I could forward this query to. If it's
    necessary that more users report this problem, I'll call for support from
    the pca user base.

    Thanks for listening,

    mp.
    --
    Systems Administrator | Institute of Scientific Computing | Univ. of Vienna
    | http://www.par.univie.ac.at/solaris/pca/
    Patch Check Advanced | Analyze, download and install patches for Sun Solaris

  2. Re: Failing patch downloads

    Hi. I recently had problems downloading patches too, using the (Java)
    Update Manager client. The thing would get so far, reporting
    'Downloading updates', then just hang. I later noticed that one of the
    patches was for the Update Manager client itself, so I tried selecting
    just this one. That one worked, and the new version let me download and
    install the others.

    Rob


  3. Re: Failing patch downloads

    In <1160049983.838422.171710@e3g2000cwe.googlegroups.c om> "lafros" writes:

    >Hi. I recently had problems downloading patches too, using the (Java)
    >Update Manager client. The thing would get so far, reporting
    >'Downloading updates', then just hang. I later noticed that one of the
    >patches was for the Update Manager client itself, so I tried selecting
    >just this one. That one worked, and the new version let me download and
    >install the others.


    Sun recently changed its signing key for signed patches. The new
    certificate was included in one of the Update Manager patches, signed
    with the old key. Until that patch was applied, it couldn't validate
    newer patches that were signed with the new key. There's a Sun Alert
    that describes this problem.

    --
    -Gary Mills- -Unix Support- -U of M Academic Computing and Networking-

  4. Re: Failing patch downloads


    Martin Paul wrote:
    > An old and well-known problem is showing up again on Sun's patch
    > server. Patches which are listed as new or updated in patchdiag.xref
    > are unavailable on Sun's patch download server.
    >


    Using "pca" I solved all the problems with Sun's update manager (just
    stopped using it). Including the problem of updating servers that do
    not have X or any other Desktop package installed.

    HD


  5. Re: Failing patch downloads

    On 2006-10-05 13:54:13 +0100, Gary Mills said:

    > In <1160049983.838422.171710@e3g2000cwe.googlegroups.c om> "lafros"
    > writes:
    >
    >> Hi. I recently had problems downloading patches too, using the (Java)
    >> Update Manager client. The thing would get so far, reporting
    >> 'Downloading updates', then just hang. I later noticed that one of the
    >> patches was for the Update Manager client itself, so I tried selecting
    >> just this one. That one worked, and the new version let me download and
    >> install the others.

    >
    > Sun recently changed its signing key for signed patches. The new
    > certificate was included in one of the Update Manager patches, signed
    > with the old key. Until that patch was applied, it couldn't validate
    > newer patches that were signed with the new key. There's a Sun Alert
    > that describes this problem.


    That sounds a bit weird, and hence probably true ;-)

    The "normal" way to do this sort of stuff is to have a long lasting key
    sign a more rapidly changing one (which is the one that signs the
    patches), and to make the end user tools (update manager in this case)
    trust the long lasting key. This avoids the pain of having to
    frequently update the end user's trusted keys.

    Doesn't Sun do that?

    Cheers,

    Chris


+ Reply to Thread