Visit Our UNIX and Linux User Community


Need suggestion:- Failed HTTPS transfer to https://supportfiles.sun.com/curl


 
Thread Tools Search this Thread
Operating Systems Solaris Need suggestion:- Failed HTTPS transfer to https://supportfiles.sun.com/curl
# 1  
Old 12-27-2013
Need suggestion:- Failed HTTPS transfer to https://supportfiles.sun.com/curl

Hi Guys,

I have recently started reciving below Error message

Code:
Failed HTTPS transfer to https://supportfiles.sun.com/curl

whenever I run

Code:
/usr/local/bin/sudo /opt/SUNWexplo/bin/explorer -P -q -v

from all Servers.

Looks like the SSL certificate as Expired.


Whenever I type this https://supportfiles.sun.com in address bar I get below message before proceeding .


So I need to know that first whose job is to update/provide this certificate, Network Team or we Unix team.

If Unix Team on which Server do we need to update this as from all Servers when we execute explorer we get below message:-

Code:
Dec 27 05:07:03 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html
Dec 27 05:07:03 server31[27116] explorer: ERROR
Dec 27 05:07:03 server31[27116] explorer: ERROR  curl performs SSL certificate verification by default, using a "bundle"
Dec 27 05:07:03 server31[27116] explorer: ERROR  of Certificate Authority (CA) public keys (CA certs). If the default
Dec 27 05:07:03 server31[27116] explorer: ERROR  bundle file isn't adequate, you can specify an alternate file
Dec 27 05:07:03 server31[27116] explorer: ERROR  using the --cacert option.
Dec 27 05:07:03 server31[27116] explorer: ERROR  If this HTTPS server uses a certificate signed by a CA represented in
Dec 27 05:07:03 server31[27116] explorer: ERROR  the bundle, the certificate verification probably failed due to a
Dec 27 05:07:03 server31[27116] explorer: ERROR  problem with the certificate (it might be expired, or the name might
Dec 27 05:07:03 server31[27116] explorer: ERROR  not match the domain name in the URL).
Dec 27 05:07:03 server31[27116] explorer: ERROR  If you'd like to turn off curl's verification of the certificate, use
Dec 27 05:07:03 server31[27116] explorer: ERROR  the -k (or --insecure) option.
Dec 27 05:07:03 server31[27116] explorer:  Transfer failed (attempt 3 of 5)
Dec 27 05:07:03 server31[27116] explorer:  Waiting one minute before next try
Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15305: Failed HTTPS transfer to https://supportfiles.sun.com/curl (exit code: 60)
Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15306: Error output from curl:
Dec 27 05:08:04 server31[27116] explorer: ERROR  curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
Dec 27 05:08:04 server31[27116] explorer: ERROR  error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Dec 27 05:08:04 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html
Dec 27 05:08:04 server31[27116] explorer: ERROR


Here is the Curl version on one of the System.

Code:
-bash-3.00$ /usr/local/bin/sudo ./curl -V
curl 7.19.5 (sparc-sun-solaris2.10) libcurl/7.19.5 OpenSSL/0.9.7d zlib/1.2.3
Protocols: tftp ftp telnet dict ldap http file https ftps
Features: IPv6 Largefile NTLM SSL libz
-bash-3.00$


and

Code:
-bash-3.00$ /usr/local/bin/sudo /usr/bin/pkginfo -l  SFWcurl
Password:
   PKGINST:  SFWcurl
      NAME:  curl - tool for transfering data specified with URL syntax
  CATEGORY:  system
      ARCH:  sparc
   VERSION:  7.10.3,REV=2004.07.08.09.30
   BASEDIR:  /opt
    VENDOR:  http://curl.haxx.se/
      DESC:  curl - tool for transfering data specified with URL syntax
    PSTAMP:  freeware20040708094034
  INSTDATE:  Nov 15 2005 15:06
   HOTLINE:  Please contact the owners of this software
    STATUS:  completely installed
     FILES:       56 installed pathnames
                  52 shared pathnames
                   8 directories
                   3 executables
                4960 blocks used (approx)

-bash-3.00$

Please advise.
Thanks
Please advise.


Code:
Continue to this website (not recommended).

# 2  
Old 12-27-2013
It seems like it wants to install curl! Perhaps you should install it and see where it goes from there?

Clients do not need their own certificates, servers do, but clients have root certificates to verify the server's certificates. Sometimes the roots get aged out. They are usually updated with the containing package, like curl.

BTW, explorer docs: Contents Sounds like you are missing the Prereq: https://blogs.oracle.com/frontline/entry/upload

Last edited by DGPickett; 12-27-2013 at 02:34 PM..
# 3  
Old 12-31-2013
Hi Guys,
I need to know where exactly I need to implement this certificate, i really have NO idea about it.
However when I changed this entries in file
Code:
/etc/opt/SUNWexplo/default/explorer

from
Code:
# Where explorer output should be posted
EXP_TRANSPORT="https://supportfiles.sun.com/curl"

to
Code:
# 
# Where explorer output should be posted
EXP_TRANSPORT="http://transport.oracle.com/curl"

I got below messaage , the data was sent to Oracle.
Code:
Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz created
Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz sent to http://transport.oracle.com/curlDec 31 09:34:33 server31[18723] explorer:  Removing previous explorers from /opt/SUNWexplo/output ...
Dec 31 09:34:42 server31[18723] explorer:  Explorer finished

So I need to know where exactly is the problem and where I need to do required changes?
As far as the current Curl package is concerned it had wordk properly with 8.01 Sun Explorer version for last 3 weeks.
Please advise, what I need to do here to resolve the issue.
Thanks.
# 4  
Old 01-03-2014
It seems like you could install these in a file and point to them with that option: http://www.geotrust.com/resources/root-certificates/
# 5  
Old 01-06-2014
NOTE:

from supportfiles.sun.com

10/11/13 :Changes to Uploading Files to Oracle Support Oracle continuously strives to improve quality of service, security, and data handling. To support this effort, Oracle is making changes to the way we receive customer data by establishing a common corporate data transport capability using two standard secure protocols. Be prepared for the changes and learn about the new file upload options.
As part of this change this web site will be decommissioned in the next 4-6 months. Please begin using the new file upload options immediately.

Previous Thread | Next Thread
Test Your Knowledge in Computers #303
Difficulty: Easy
Normally sed is invoked like this: sed SCRIPT INPUTFILE ...
True or False?

9 More Discussions You Might Find Interesting

1. Red Hat

SSL over https

Hi guys, I'm trying to generate a key using the genkey command in centos 6.4 and RHEL6.4, Every thing seems to go cool but I get this error message bad certificate request error -8016 and no key/cert is generated. I don't want use the many openssl(s) commands instead since genkey is a shourtcut... (3 Replies)
Discussion started by: leo_ultra_leo
3 Replies

2. Cybersecurity

Snort HTTPS

Is it possible to rule out in alert all HTTPS traffic or rule out all the HTTPS trafic from the alerts on snort ? (3 Replies)
Discussion started by: drd0spt
3 Replies

3. Red Hat

Configure HTTPS

HI My system is already configured with HTTP setup and I am able to see all the contents using web browser (IE) that is http:// <ip address> But when entered https://<ipaddress> it fails to return any contents. Can anyone please tell how to configure for HTTPs, like which files to edit... (2 Replies)
Discussion started by: tannu
2 Replies

4. AIX

wget https

Hello, can someone tell me where the certificate store on aix 6.1 is. If I want to use wget with a https site Iam getting an error that the issuer is untrusted. Thats right because its an self sign certificate. (3 Replies)
Discussion started by: ralphk
3 Replies

5. UNIX for Advanced & Expert Users

Help with using curl to download files from https

Hi I'm trying to download an xml file from a https server using curl on a Linux machine with Ubuntu 10.4.2 I am able to connect to the remote server with my username and password but the output is only "Virtual user <username> logged in". I am expecting to download the xml file. My output... (4 Replies)
Discussion started by: henryN
4 Replies

6. Shell Programming and Scripting

curl script to download files from Secured HTTPS server?

curl -# -v -d "sendusername=myname&password=mypassword&wheretogo=download.php" -L -o test.zip http://www.ims-dm.com/cgi/securedownload.php?p=HIREFTPM\&prodtype=hire/test.zip * About to connect() to www.ims-dm.com port 80 * Trying 209.61.193.139... connected * Connected to www.ims-dm.com... (1 Reply)
Discussion started by: laknar
1 Replies

7. Shell Programming and Scripting

http and https

Hi friends, I have a local host http://ss3/cgi-bin/page/page_list.cgi running on apache webserver perfectly well. But suddenly, it stopped working and gave an error "Internet explorer Explorer cannot display the webpage". But when i added https, as https://ss3/cgi-bin/page/page_list.cgi the... (2 Replies)
Discussion started by: nmattam
2 Replies

8. UNIX for Dummies Questions & Answers

file transfer from https to a Unix box

Hi, I want to transfer a file from a https side to an unix machine, somebody can let me know a easy way to do so, A simple script to be put in the unix machine to retrieve the file from the https side Thanks (4 Replies)
Discussion started by: jvjaimes
4 Replies

9. Filesystems, Disks and Memory

out of inodes on https dev hd

Hi everybody i'm new in this forum (out of inodes on https dev hd) I'm getting this massages on a unix 5.0.6 If anyone could help me resolve this problem that will be so nice. Please help Thanks Jose (4 Replies)
Discussion started by: josramon
4 Replies

Featured Tech Videos