Need suggestion:- Failed HTTPS transfer to https://supportfiles.sun.com/curl

UNIX Solaris
1

Hi Guys,

I have recently started reciving below Error message

Failed HTTPS transfer to https://supportfiles.sun.com/curl

whenever I run

/usr/local/bin/sudo /opt/SUNWexplo/bin/explorer -P -q -v

from all Servers.

Looks like the SSL certificate as Expired.

Whenever I type this https://supportfiles.sun.com in address bar I get below message before proceeding .

So I need to know that first whose job is to update/provide this certificate, Network Team or we Unix team.

If Unix Team on which Server do we need to update this as from all Servers when we execute explorer we get below message:-

Dec 27 05:07:03 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html
Dec 27 05:07:03 server31[27116] explorer: ERROR
Dec 27 05:07:03 server31[27116] explorer: ERROR  curl performs SSL certificate verification by default, using a "bundle"
Dec 27 05:07:03 server31[27116] explorer: ERROR  of Certificate Authority (CA) public keys (CA certs). If the default
Dec 27 05:07:03 server31[27116] explorer: ERROR  bundle file isn't adequate, you can specify an alternate file
Dec 27 05:07:03 server31[27116] explorer: ERROR  using the --cacert option.
Dec 27 05:07:03 server31[27116] explorer: ERROR  If this HTTPS server uses a certificate signed by a CA represented in
Dec 27 05:07:03 server31[27116] explorer: ERROR  the bundle, the certificate verification probably failed due to a
Dec 27 05:07:03 server31[27116] explorer: ERROR  problem with the certificate (it might be expired, or the name might
Dec 27 05:07:03 server31[27116] explorer: ERROR  not match the domain name in the URL).
Dec 27 05:07:03 server31[27116] explorer: ERROR  If you'd like to turn off curl's verification of the certificate, use
Dec 27 05:07:03 server31[27116] explorer: ERROR  the -k (or --insecure) option.
Dec 27 05:07:03 server31[27116] explorer:  Transfer failed (attempt 3 of 5)
Dec 27 05:07:03 server31[27116] explorer:  Waiting one minute before next try
Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15305: Failed HTTPS transfer to https://supportfiles.sun.com/curl (exit code: 60)
Dec 27 05:08:04 server31[27116] explorer: ERROR  EXPL-15306: Error output from curl:
Dec 27 05:08:04 server31[27116] explorer: ERROR  curl: (60) SSL certificate problem, verify that the CA cert is OK. Details:
Dec 27 05:08:04 server31[27116] explorer: ERROR  error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
Dec 27 05:08:04 server31[27116] explorer: ERROR  More details here: http://curl.haxx.se/docs/sslcerts.html
Dec 27 05:08:04 server31[27116] explorer: ERROR

Here is the Curl version on one of the System.

-bash-3.00$ /usr/local/bin/sudo ./curl -V
curl 7.19.5 (sparc-sun-solaris2.10) libcurl/7.19.5 OpenSSL/0.9.7d zlib/1.2.3
Protocols: tftp ftp telnet dict ldap http file https ftps
Features: IPv6 Largefile NTLM SSL libz
-bash-3.00$

and

-bash-3.00$ /usr/local/bin/sudo /usr/bin/pkginfo -l  SFWcurl
Password:
   PKGINST:  SFWcurl
      NAME:  curl - tool for transfering data specified with URL syntax
  CATEGORY:  system
      ARCH:  sparc
   VERSION:  7.10.3,REV=2004.07.08.09.30
   BASEDIR:  /opt
    VENDOR:  http://curl.haxx.se/
      DESC:  curl - tool for transfering data specified with URL syntax
    PSTAMP:  freeware20040708094034
  INSTDATE:  Nov 15 2005 15:06
   HOTLINE:  Please contact the owners of this software
    STATUS:  completely installed
     FILES:       56 installed pathnames
                  52 shared pathnames
                   8 directories
                   3 executables
                4960 blocks used (approx)

-bash-3.00$

Please advise.
Thanks
Please advise.

Continue to this website (not recommended).
2

It seems like it wants to install curl! Perhaps you should install it and see where it goes from there?

Clients do not need their own certificates, servers do, but clients have root certificates to verify the server's certificates. Sometimes the roots get aged out. They are usually updated with the containing package, like curl.

BTW, explorer docs: Contents Sounds like you are missing the Prereq: https://blogs.oracle.com/frontline/entry/upload

3

Hi Guys,
I need to know where exactly I need to implement this certificate, i really have NO idea about it.
However when I changed this entries in file

/etc/opt/SUNWexplo/default/explorer

from

# Where explorer output should be posted
EXP_TRANSPORT="https://supportfiles.sun.com/curl"

to

# 
# Where explorer output should be posted
EXP_TRANSPORT="http://transport.oracle.com/curl"

I got below messaage , the data was sent to Oracle.

Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz created
Dec 31 09:34:32 server31[18723] explorer:  explorer.844d540d.server31-2013.12.31.08.26.tar.gz sent to http://transport.oracle.com/curlDec 31 09:34:33 server31[18723] explorer:  Removing previous explorers from /opt/SUNWexplo/output ...
Dec 31 09:34:42 server31[18723] explorer:  Explorer finished

So I need to know where exactly is the problem and where I need to do required changes?
As far as the current Curl package is concerned it had wordk properly with 8.01 Sun Explorer version for last 3 weeks.
Please advise, what I need to do here to resolve the issue.
Thanks.

4

It seems like you could install these in a file and point to them with that option: http://www.geotrust.com/resources/root-certificates/

5

NOTE:

from supportfiles.sun.com

10/11/13 :Changes to Uploading Files to Oracle Support Oracle continuously strives to improve quality of service, security, and data handling. To support this effort, Oracle is making changes to the way we receive customer data by establishing a common corporate data transport capability using two standard secure protocols. Be prepared for the changes and learn about the new file upload options.
As part of this change this web site will be decommissioned in the next 4-6 months. Please begin using the new file upload options immediately.