smpatch broken (4 identical machines)

Hi,

i've got a serious problem regarding smpatch. If I try to start smpatch to do anything (like download, analyze, etc.), I get the following error.

Failure: Cannot connect to retrieve Database/current.zip: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

The systems were registered without service plan. The process of registering went fine, without any complication.

I tried to import the servercertificate manually via openssl & keytool (maybe to the wrong location).

I even installed from the same media into my VMWare, it's working great :( Then I came around with PCA (http://www.par.univie.ac.at/solaris/pca/), works on any machine tested except the four ones.

I didn't do the install, but it was an experienced collegue of mine. But I can't give you any specials about the installation (should be a full install). A fresh install isn't possible, time is running short (everything else seems working)

I took a look at the certificatechain of "https://getupdates.sun.com", the root-CA isn't valid anymore (expired 23/2/2006).

In the first try, the machines were behind a bluecurve proxy with ssl-interception, this feature is now disabled for *.sun.com

Specs: Compaq DL3x0 dual-Xeon, Solaris 10x86, recommended patchcluster (03/04/06). One running zone (with LDAP-Server), no 3rd party software.

Had anyone a similiar problem? (and/or maybe a solution?)

greetings

Ralf

[1613 byte] By [SoulSweeper] at [2007-11-26 7:15:42]
# 1
Hi Ralf,Try installing one of the patches below (according to the architecture of your host) to update the certs - SPARC - 122231-01x86 - 122232-01
ForumModerator at 2007-7-6 18:51:11 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 2

Hi,

thanks for the response. I installed the patch (122232-01). The errormessage changed to:

Failure: Cannot connect to retrieve detectors: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

So something happened, but not quite enough. I'am waiting to get a supportcontract for the machines (as always a manager issue), and open a support-request. There more issues to be fixed, like an updated version of smpatch with zonesupport (for the patch you need a valid serviceplan also).

Thanks again,

Ralf

SoulSweeper at 2007-7-6 18:51:11 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 3

> I even installed from the same media into my VMWare,

> it's working great :( Then I came around with PCA

> (http://www.par.univie.ac.at/solaris/pca/), works on

> any machine tested except the four ones.

I can't help you with smpatch, but if pca doesn't work, you

probably have some very basic (networking) problem. This is

not the forum to discuss this, but you can send me output

of "pca -V" to martin@par.univie.ac.at if you like.

mp.

Martin_Paul at 2007-7-6 18:51:11 > top of Java-index,Administration Tools,Sun Update Connection-System...