Page 1 of 1

Oracle pkg support certificate

Posted: Fri Sep 27, 2013 3:55 pm
by cah
I have been getting the following email from root user on the server lately:

Code: Select all

Your "cron" job on cahtoh02
/usr/lib/update-manager/update-refresh.sh

produced the following output:

Certificate '/var/pkg/ssl/2888dc5f5031f2406a532c9459d2f5ed7e51cc27' for publisher 'solaris', needed to access 'https://pkg.oracle.com/solaris/support/', will expire in '18' days.
Certificate '/var/pkg/ssl/2888dc5f5031f2406a532c9459d2f5ed7e51cc27' for publisher 'solaris', needed to access 'https://pkg.oracle.com/solaris/support/', will expire in '18' days. 
I recall installing certificate last year when I was troubleshooting SSH issue with Oracle.
It looks like the one year has come up.

I did some research and found the link:

https://pkg-register.oracle.com/register/status/

It shows me the certificate I requested last year.
I checked it after I request the certificate again today and it has both certificates on the bottom of the page.

I requested the certificate again and got both key and certificate.

[The extension zip has been deactivated and can no longer be displayed.]

Following is the information from the site:
YOUR CERTIFICATE


Certificate Contents
Product Oracle Solaris 11 Support
Publisher solaris
Issued By Software Packaging at Oracle
Issued To chang_an@yahoo.com
Date of Issue Fri, 27 Sep 2013 19:09:06 UTC
Expiration Date Sat, 27 Sep 2014 19:09:06 UTC
User Comment

How to Install this Oracle Solaris 11 Support Certificate

Download the provided key and certificate files, called Oracle_Solaris_11_Support.key.pem and Oracle_Solaris_11_Support.certificate.pem using the buttons above. Don't worry if you get logged out, or lose the files. You can come back to this site later and re-download them. We'll assume that you downloaded these files into your Desktop folder, ~/Desktop/.
Use the following comands to make a directory inside of /var/pkg to store the key and certificate, and copy the key and certificate into this directory. The key files are kept by reference, so if the files become inaccessible to the packaging system, you will encounter errors. Here is how to do it:

$ sudo mkdir -m 0755 -p /var/pkg/ssl
$ sudo cp -i ~/Desktop/Oracle_Solaris_11_Support.key.pem /var/pkg/ssl

$ sudo cp -i ~/Desktop/Oracle_Solaris_11_Support.certificate.pem /var/pkg/ssl


Add the publisher:

$ sudo pkg set-publisher \
-k /var/pkg/ssl/Oracle_Solaris_11_Support.key.pem \
-c /var/pkg/ssl/Oracle_Solaris_11_Support.certificate.pem \
-G '*' -g https://pkg.oracle.com/solaris/support/ solaris


Check your publisher settings, there should be no unrelated mirrors set up. To check for any set up mirrors invoke the following command:

$ pkg publisher solaris | grep Mirror

If the output is empty you are all set. If not remove unrelated mirrors by running:

$ sudo pkg set-publisher -M http://mirror1.x.com -M http://mirror2.y.com ... solaris

To see the packages supplied by this publisher, try:

$ pkg list -a 'pkg://solaris/*'

If you use the Package Manager graphical application, you will be able to locate the newly discovered packages when you restart Package Manager.

Re: Oracle pkg support certificate

Posted: Thu Sep 04, 2014 2:42 am
by cah
I am getting cron job notification lately:

Code: Select all

Your "cron" job on cahtoh02
/usr/lib/update-manager/update-refresh.sh

produced the following output:

Certificate '/var/pkg/ssl/a0c4b46f2a0ed5059f94667b044145dfc88d251d' for publisher 'solaris', needed to access 'https://pkg.oracle.com/solaris/support/', will expire in '23' days.
Certificate '/var/pkg/ssl/a0c4b46f2a0ed5059f94667b044145dfc88d251d' for publisher 'solaris', needed to access 'https://pkg.oracle.com/solaris/support/', will expire in '23' days.
Just like last year, I had to go through the same steps to get both key and certificate.

[The extension zip has been deactivated and can no longer be displayed.]

Information from the site (https://pkg-register.oracle.com/registe ... nfo/25703/):
Certificate Information

YOUR CERTIFICATE


Certificate Contents
Product Oracle Solaris 11 Support
Publisher solaris
Issued By Software Packaging at Oracle
Issued To chang_an@yahoo.com
Date of Issue Thu, 04 Sep 2014 06:37:38 UTC
Expiration Date Fri, 04 Sep 2015 06:37:38 UTC
User Comment
Download Key Download Certificate

How to Install this Oracle Solaris 11 Support Certificate

Download the provided key and certificate files, called Oracle_Solaris_11_Support.key.pem and Oracle_Solaris_11_Support.certificate.pem using the buttons above. Don't worry if you get logged out, or lose the files. You can come back to this site later and re-download them. We'll assume that you downloaded these files into your Desktop folder, ~/Desktop/.
Use the following comands to make a directory inside of /var/pkg to store the key and certificate, and copy the key and certificate into this directory. The key files are kept by reference, so if the files become inaccessible to the packaging system, you will encounter errors. Here is how to do it:

$ sudo mkdir -m 0755 -p /var/pkg/ssl
$ sudo cp -i ~/Desktop/Oracle_Solaris_11_Support.key.pem /var/pkg/ssl

$ sudo cp -i ~/Desktop/Oracle_Solaris_11_Support.certificate.pem /var/pkg/ssl


Add the publisher:

$ sudo pkg set-publisher \
-k /var/pkg/ssl/Oracle_Solaris_11_Support.key.pem \
-c /var/pkg/ssl/Oracle_Solaris_11_Support.certificate.pem \
-G '*' -g https://pkg.oracle.com/solaris/support/ solaris


Check your publisher settings, there should be no unrelated mirrors set up. To check for any set up mirrors invoke the following command:

$ pkg publisher solaris | grep Mirror



If the output is empty you are all set. If not remove unrelated mirrors by running:

$ sudo pkg set-publisher -M http://mirror1.x.com -M http://mirror2.y.com ... solaris



To see the packages supplied by this publisher, try:

$ pkg list -a 'pkg://solaris/*'

Oracle pkg support certificate - 2015

Posted: Fri Aug 07, 2015 7:19 pm
by cah
I am getting cron job notification lately:

Code: Select all

Your "cron" job on cahtoh02
/usr/lib/update-manager/update-refresh.sh

produced the following output:

Certificate '/var/pkg/ssl/e55919bb109f88d96cd27f4b189c93241f2ea29f' for publisher 'solaris', needed to access 'https://pkg.oracle.com/solaris/support/', will expire in '27' days.
Certificate '/var/pkg/ssl/e55919bb109f88d96cd27f4b189c93241f2ea29f' for publisher 'solaris', needed to access 'https://pkg.oracle.com/solaris/support/', will expire in '27' days. 
Just like last year, I had to go through the similar steps to get both key and certificate. This year, I got both from https://pkg-register.oracle.com/register/certificate/.

[The extension zip has been deactivated and can no longer be displayed.]

Information from the site (https://pkg-register.oracle.com/registe ... ct_info/1/):

Product Details
Product Oracle Solaris 11 Support
Product Information http://www.oracle.com/us/products/serve ... index.html
Repository URI https://pkg.oracle.com/solaris/support/
Publisher solaris
User Account chang_an@yahoo.com
Access Granted Oct. 15, 2012, 6:11 p.m.
How to access the Oracle Solaris 11 Support repository

Download your personal key and certificate files, called pkg.oracle.com.key.pem and pkg.oracle.com.certificate.pem from the certificate page. Don't worry if you get logged out, or lose the files. You can come back to this site later and re-download them. We'll assume that you downloaded these files into your Desktop folder, ~/Desktop/.

Use the following commands to set up your publisher configuration for the Oracle Solaris 11 Support repository:

$ sudo pkg set-publisher \
-k ~/Desktop/pkg.oracle.com.key.pem \
-c ~/Desktop/pkg.oracle.com.certificate.pem \
-G "*" -g https://pkg.oracle.com/solaris/support/ solaris

NOTE: There is a space before solaris".

The packaging system will create copies of the key and certificate files and put them into the right place. So if required, you can safely remove both files from ~/Desktop after this step.

Check your publisher settings, there should be no unrelated mirrors set up. To check for any set up mirrors invoke the following command:

$ pkg publisher solaris | grep Mirror

If the output is empty you are all set. If not remove unrelated mirrors by running:

$ sudo pkg set-publisher -M http://mirror1.x.com -M http://mirror2.y.com ... solaris

To see the packages supplied by this publisher, try:

$ pkg list -a 'pkg://solaris/*'