PatchPro download failure | Failed to validate the digital signature
Hi,
Patchpro failing to validate some patches on 2 of our servers. One is throwing an error (1, below), the other is echoing an error to screen(2).
We are patching around a dozen servers (all SPARC, versions 8, 9 and 10) and these are the only 2 with problems.
Thanks for any help you can provide.
1)
Sol 9, SunFire 440
Error: PatchPro failed: ERROR: Failed to validate the digital signature(s).
/var/tmp/patches/124215-01.jar.tmp cannot be validated.
2)
Sol 8, SunFire 890
......
117557-04 cannot be validated.
com.sun.patchpro.model.PatchProRuntimeException: Unexpected throwable
at com.sun.patchpro.cli.PatchServices.waitForThread(PatchServices.java:1284)
at com.sun.patchpro.cli.PatchServices.downloadAllPatches(PatchServices.java:835)
at com.sun.patchpro.cli.PatchServices.main(PatchServices.java:502)
Caused by:
java.lang.Throwable: ERROR: Failed to validate the digital signature(s).
at com.sun.patchpro.model.PatchProModel$InnerDownloadPatchThread.downloadPatchFail ed(PatchProModel.java:2855)
at com.sun.patchpro.server.GroupPatchDownloader.dispatchFailedEvent(GroupPatchDown loader.java:384)
at com.sun.patchpro.server.GroupPatchDownloader.downloadPatchFailed(GroupPatchDown loader.java:335)
at com.sun.patchpro.server.ServerPatchServiceProvider.dispatchFailedEvent(ServerPa tchServiceProvider.java:2577)
at com.sun.patchpro.server.ServerPatchServiceProvider.validatePatchBundle(ServerPa tchServiceProvider.java:2196)
at com.sun.patchpro.server.ServerPatchServiceProvider.requestDownload(ServerPatchS erviceProvider.java:1780)
at com.sun.patchpro.server.ServerPatchServiceProvider.performDownloadPatches(Serve rPatchServiceProvider.java:1082)
at com.sun.patchpro.server.ServerPatchServiceProvider.downloadPatches(ServerPatchS erviceProvider.java:860)
at com.sun.patchpro.server.PatchServerProxy.downloadPatches(PatchServerProxy.java: 142)
at com.sun.patchpro.server.GroupPatchDownloader.downloadPatches(GroupPatchDownload er.java:124)
at com.sun.patchpro.model.PatchProModel.performPatchDownload(PatchProModel.java:19 32)
at com.sun.patchpro.model.PatchProStateMachine$10.run(PatchProStateMachine.java:52 6)
at com.sun.patchpro.util.State.run(State.java:266)
at java.lang.Thread.run(Thread.java:536)
#
[2411 byte] By [
gerrymcf] at [2007-11-26 11:30:53]
# 1
Can you post your "smpatch get" output as well as verify that all the patest Patchmanager patches are already installed
# 2
smpatch get on one of the hosts (Sol 9) the output gives the help message for smpatch, with the error unknown subcommand given
The other host gives the following output...
# smpatch get
patchpro.backout.directory-""
patchpro.download.directory/var/spool/pkg/patchpro//var/sadm/spool
patchpro.install.types "" rebootafter:reconfigafter:standard
patchpro.patch.sourcehttps://patchpro.sun.com/servlets/com.sun.patchpro.server.PatchProServerServlet /https://updateserver.sun.com/solaris/
patchpro.patchset-patchdb
patchpro.proxy.host 150.3.200.5""
patchpro.proxy.passwd********
patchpro.proxy.port 31288080
patchpro.proxy.user -""
patchpro.sun.passwd ********
patchpro.sun.user-""
# 3
A pprosetup -L on the first host from above gives:
# pprosetup -L
Log file location:System log file (consult /etc/syslog.conf for exact location)
Log file size: 50000
Download directory:/var/sadm/spool
Sequester directory:/var/sadm/spool/patchproSequester
Proxy server name:150.3.200.5
Proxy server port:3128
Server URL: https://patchpro.sun.com/servlet/com.sun.patchpro.server.PatchProServerServlet/
Database URL:https://patchpro.sun.com/database/patchprodb.zip
Detectors URL: https://patchpro.sun.com/database/pprodetectors.jar
# 4
Please check for patch121118-08 on any update connection proxies _and_ all clients. This patch contains updated certs.It may be useful to establish if working and non-working hosts have the same patch level of this patch, java version (# java -version) .
# 5
You're correct, these hosts don't have this patch.
However in the process of installing this patch and it's dependants I've descended into dependancy hell..... :-(
I'll get there, eventually......
Why should there be a requirement to install solaris 10 patches on a Sol 8 or 9 box? 119574-02 is a requirement for this 121118-08
# 6
Hi121118-08 is only Solaris 10 ... I am an idiot , please forgive me.For Solaris 8 please check this patch : 124270-01and for Solaris 9 : 112945-44Sorry for the confusion and my mistake.
# 7
No worries.
I've installed the 2 patches you suggested and got the following results:
Sol 8
====
Tail of install:
Patch number 124270-01 has been successfully installed.
See /var/sadm/patch/124270-01/log for details
Patch packages installed:
SUNWpprou
smpatch analyze now produces the following error
# smpatch analyze
patchdb1: not found at https://patchpro.sun.com/servlets/com.sun.patchpro.server.PatchProServerServlet /
Sol 9
=====
The patch you suggested was not installed. It installed OK but the problem we had seen previously (Failed to validate digital signature) still occurs when carrying out smpatch download.
# 8
It's strange that the Sol 9 system gave an error for the smpatch get command. I would like to compare the working systems with the non-working systems.
From a working Sol 8 & Sol 9 system please provide the following:
$ uname -a
$ smpatch get
$ smpatch analyze
$ cat /etc/release
$ cat /var/sadm/system/admin/CLUSTER
$ pkginfo -l SUNWpmgr SUNWppror SUNWpprou
Provide the same information from the non-working systems as well.
# 9
Working host - Sol 8
uname -a
========
SunOS november06 5.8 Generic_117350-43 sun4u sparc SUNW,Sun-Fire-V440
smpatch get
===========
patchpro.backout.directory-""
patchpro.download.directory-/var/sadm/spool
patchpro.install.types -rebootafter:reconfigafter:standard
patchpro.patch.source-https://updateserver.sun.com/solaris/
patchpro.patchset-patchdb1
patchpro.proxy.host 150.3.200.5""
patchpro.proxy.passwd********
patchpro.proxy.port 31288080
patchpro.proxy.user -""
patchpro.sun.passwd ********
patchpro.sun.user-""
smpatch analyze
==============
# smpatch analyze
109779-04 SunOS 5.8_x86: Misc. locales have errors in LC_CTYPE definitions
119067-04 X11 6.4.1: Xsun patch
# cat /etc/release
===============
Solaris 8 2/04 s28s_hw4wos_05a SPARC
Copyright 2004 Sun Microsystems, Inc. All Rights Reserved.
Assembled 08 January 2004
# cat /var/sadm/system/admin/CLUSTER
================================
CLUSTER=SUNWCuser
pkginfo
======
# pkginfo -l SUNWpmgr SUNWppror SUNWpprou
PKGINST: SUNWpmgr
NAME: Patch Manager CLI
CATEGORY: system
ARCH: sparc
VERSION: 2.0,REV=2004.06.10.04.44
BASEDIR: /
VENDOR: Sun Microsystems, Inc.
DESC: Patch Manager command line interface (smpatch)
PSTAMP: on28-patch20040610045105
INSTDATE: May 17 2006 13:59
HOTLINE: Please contact your local service provider
STATUS: completely installed
FILES:12 installed pathnames
7 shared pathnames
7 directories
1 executables
301 blocks used (approx)
PKGINST: SUNWppror
NAME: PatchPro core functionality (Root)
CATEGORY: system
ARCH: sparc
VERSION: 5.0,REV=2004.06.10.04.44
BASEDIR: /
VENDOR: Sun Microsystems, Inc.
DESC: PatchPro core functionality (Root)
PSTAMP: on28-patch20040610045108
INSTDATE: May 17 2006 13:59
HOTLINE: Please contact your local service provider
STATUS: completely installed
FILES:11 installed pathnames
6 shared pathnames
7 directories
4 blocks used (approx)
PKGINST: SUNWpprou
NAME: PatchPro core functionality (Usr)
CATEGORY: system
ARCH: sparc
VERSION: 5.0,REV=2004.06.10.04.44
BASEDIR: /
VENDOR: Sun Microsystems, Inc.
DESC: PatchPro core functionality (Usr)
PSTAMP: on28-patch20060916215759
INSTDATE: Oct 05 2006 14:00
HOTLINE: Please contact your local service provider
STATUS: completely installed
FILES:40 installed pathnames
7 shared pathnames
20 directories
4 executables
1569 blocks used (approx)
Not Working - Sol 8
================
uname -a
==========
# uname -a
SunOS juliet05 5.8 Generic_117350-39 sun4u sparc SUNW,Sun-Fire-V890
smpatch get
==========
# smpatch get
patchpro.backout.directory-""
patchpro.download.directory/var/spool/pkg/patchpro//var/sadm/spool
patchpro.install.types "" rebootafter:reconfigafter:standard
patchpro.patch.sourcehttps://patchpro.sun.com/servlets/com.sun.patchpro.server.PatchProServerServlet /https://updateserver.sun.com/solaris/
patchpro.patchset-patchdb1
patchpro.proxy.host 150.3.200.5""
patchpro.proxy.passwd********
patchpro.proxy.port 31288080
patchpro.proxy.user -""
patchpro.sun.passwd ********
patchpro.sun.user-""
smpatch analyze
==============
# smpatch analyze
patchdb1: not found at https://patchpro.sun.com/servlets/com.sun.patchpro.server.PatchProServerServlet /
/etc/release
==========
# cat /etc/release
Solaris 8 2/04 s28s_hw4wos_05a SPARC
Copyright 2004 Sun Microsystems, Inc. All Rights Reserved.
Assembled 08 January 2004
CLUSTER
=========
# cat /var/sadm/system/admin/CLUSTER
CLUSTER=SUNWCuser
pkginfo
=======
# pkginfo -l SUNWpmgr SUNWppror SUNWpprou
PKGINST: SUNWpmgr
NAME: Patch Manager CLI
CATEGORY: system
ARCH: sparc
VERSION: 2.0,REV=2004.06.10.04.44
BASEDIR: /
VENDOR: Sun Microsystems, Inc.
DESC: Patch Manager command line interface (smpatch)
PSTAMP: on28-patch20040610045105
INSTDATE: May 19 2006 14:34
HOTLINE: Please contact your local service provider
STATUS: completely installed
FILES:12 installed pathnames
7 shared pathnames
7 directories
1 executables
301 blocks used (approx)
PKGINST: SUNWppror
NAME: PatchPro core functionality (Root)
CATEGORY: system
ARCH: sparc
VERSION: 5.0,REV=2004.06.10.04.44
BASEDIR: /
VENDOR: Sun Microsystems, Inc.
DESC: PatchPro core functionality (Root)
PSTAMP: on28-patch20040610045108
INSTDATE: May 19 2006 14:33
HOTLINE: Please contact your local service provider
STATUS: completely installed
FILES:11 installed pathnames
6 shared pathnames
7 directories
4 blocks used (approx)
PKGINST: SUNWpprou
NAME: PatchPro core functionality (Usr)
CATEGORY: system
ARCH: sparc
VERSION: 5.0,REV=2004.06.10.04.44
BASEDIR: /
VENDOR: Sun Microsystems, Inc.
DESC: PatchPro core functionality (Usr)
PSTAMP: on28-patch20060916215759
INSTDATE: Nov 17 2006 11:14
HOTLINE: Please contact your local service provider
STATUS: completely installed
FILES:40 installed pathnames
7 shared pathnames
20 directories
4 executables
1569 blocks used (approx)
$ uname -a
$ smpatch get
$ smpatch analyze
$ cat /etc/release
$ cat /var/sadm/system/admin/CLUSTER
$ pkginfo -l SUNWpmgr SUNWppror SUNWpprou
# 10
Not Working - Solaris9
===========
uname -a
=========
SunOS 05alpha 5.9 Generic_118558-28 sun4u sparc SUNW,Sun-Fire-V440
smpatch get
===========
# smpatch get
Unknown subcommand was specified.
Usage:
smpatch add -i <patchid> [-i <patchid> ...] |
-x idlist=<patchlist_file> [-d <patchdir>] [-h] where:
addSubcommand used to install the patches.
-d <patchdir>
Used to specify the directory where patches are
expected to be installed from.
-hUsed to display help information for the add
subcommand.
-i <patchid>
Used to specify the id of the patch to install.
One or more patches can be specified using this
option.
-x idlist=<patchlist_file>
Used to specify the path of the file that contains
a list of patches to install.
Usage:
smpatch analyze [-h] where:
analyze Subcommand used to analyze a host and list needed
patches.
-hUsed to display help information for the analyze
subcommand.
Usage:
smpatch download [-i <patchid> [-i <patchid> ...] |
-x idlist=<patchlist_file>] [-d <patchdir>] [-h] where:
downloadSubcommand used to download patches from SunSolve.
-d <patchdir>
Used to specify the directory where the patches
from SunSolve are to be downloaded.
-hUsed to display help information for the download
subcommand.
-i <patchid>
Used to specify the id of the patch to download.
One or more patches can be specified using this
option.
-x idlist=<patchlist_file>
Used to specify the path of the file that contains
a list of patches to download.
Usage:
smpatch remove -i <patchid> [-h] where:
remove Subcommand used to remove a patch.
-hUsed to display help information for the remove
subcommand.
-i <patchid>
Used to specify the id of the patch to remove.
Usage:
smpatch update [-d <patchdir>] [-h] where:
update Subcommand used to download and install required
patches for the local host.
-d <patchdir>
Used to specify the directory where the patches
from SunSolve which are required by the local host
are to be downloaded and installed from.
-hUsed to display help information for the update
subcommand.
smpatch analyze
==============
smpatch analyze
Assessing required patches for machine "05alpha/150.3.84.207" . Please wait...
113434-33 SunOS 5.9: /usr/snadm/lib Library and Differential Flash Patch
111711-16 32-bit Shared library patch for C++
111712-16 64-Bit Shared library patch for C++
111722-05 SunOS 5.9: Math Library (libm) patch
117560-04 SunOS 5.9: Microtasking libraries (libmtsk) patch
115835-03 SunOS 5.9: Ghostscript patch
114344-21 SunOS 5.9: kernel/drv/arp Patch
117453-01 SunOS 5.9: libwrap Patch
114131-03 SunOS 5.9: multi-terabyte disk support - libadm.so.1 patch
120441-03 SunOS 5.9: libsec patch
113319-24 SunOS 5.9: libnsl nispasswdd patch
112960-40 SunOS 5.9: patch libsldap ldap_cachemgr libldap
118465-03 SunOS 5.9: rcm_daemon Patch
123762-01 SunOS 5.9: Chicago audio driver Patch
113318-26 SunOS 5.9: patch /kernel/fs/nfs and /kernel/fs/sparcv9/nfs
114718-05 SunOS 5.9: usr/kernel/fs/pcfs Patch
115544-02 SunOS 5.9: nss_compat patch
118463-01 SunOS 5.9: du Patch
116016-03 SunOS 5.9: /usr/sbin/logadm patch
123182-01 SunOS 5.9: iwscn patch
115542-02 SunOS 5.9: nss_user patch
116014-06 SunOS 5.9: /usr/sbin/usermod patch
117433-02 SunOS 5.9: FSS FX RT Patch
117431-01 SunOS 5.9: nss_nis Patch
123770-01 SunOS 5.9: Netra-CP3010 platform libraries patch
118558-35 SunOS 5.9: Kernel Patch
116561-15 SunOS 5.9: Volume System H/W Series platmod patch
123769-01 SunOS 5.9: Netra-CP3010 platform binaries patch
115336-04 SunOS 5.9: /usr/bin/tar, /usr/sbin/static/tar Patch
123767-01 SunOS 5.9: locator patch
117426-03 SunOS 5.9: ctsmc and sc_nct driver patch
123766-02 SunOS 5.9: pcf8584/pmugpio/ebus patch
121319-01 SunOS 5.9: devfsadmd_mod.so Patch
123765-01 SunOS 5.9: Chicago platform Patch
123764-01 SunOS 5.9: Boston platform Patch
123763-02 SunOS 5.9: Sun Fire V215/V245 platform Patch
121316-02 SunOS 5.9: kernel/sys/doorfs Patch
121314-01 SunOS 5.9: tl driver patch
120445-01 SunOS 5.9: Toshiba platform token links (TSBW,Ultra-3i)
112964-16 SunOS 5.9: /usr/bin/ksh Patch
113032-04 SunOS 5.9: /usr/sbin/init Patch
114259-02 SunOS 5.9: usr/sbin/psrinfo Patch
116543-04 SunOS 5.9: vmstat Patch
112958-04 SunOS 5.9: patch pci.so
112954-15 SunOS 5.9: uata Driver Patch
122716-01 SunOS 5.9: kernel/fs/lofs patch
122713-01 SunOS 5.9: expr patch
117168-02 SunOS 5.9: mpstat Patch
116498-02 SunOS 5.9: bufmod Patch
116495-03 SunOS 5.9: specfs Patch
117160-01 SunOS 5.9: /kernel/misc/krtld patch
118586-02 SunOS 5.9: cp/ln/mv & XPG4 cp/ln/mv Patch
120025-01 SunOS 5.9: ipsecconf Patch
117155-10 SunOS 5.9: pcipsy Patch
116486-03 SunOS 5.9: tsalarm Driver Patch
121998-01 SunOS 5.9: two-key mode fix for 3DES Patch
116482-02 SunOS 5.9: modload Utils Patch
117746-04 SunOS 5.9: patch platform/sun4u/kernel/drv/sparcv9/pic16f819
121992-01 SunOS 5.9: fgrep Patch
120768-01 SunOS 5.9: grpck patch
119438-01 SunOS 5.9: usr/bin/login Patch
116510-02 SunOS 5.9: wscons Patch
114224-06 SunOS 5.9: csh Patch
116670-04 SunOS 5.9: gld Patch
114383-04 SunOS 5.9: Enchilada/Stiletto - pca9556 driver
114370-05 SunOS 5.9: libumem.so.1 patch
124498-01 SunOS 5.9: tail patch
117483-01 SunOS 5.9: ntwdt Patch
112908-27 SunOS 5.9: gl_kmech_krb5 Patch
117480-01 SunOS 5.9: pkgadd Patch
117123-07 SunOS 5.9: wanboot Patch
115030-03 SunOS 5.9: Multiterabyte UFS - patch mount
113335-04 SunOS 5.9: devinfo Patch
113493-03 SunOS 5.9: libproc.so.1 Patch
113330-03 SunOS 5.9: rpcbind Patch
115028-02 SunOS 5.9: patch /usr/lib/fs/ufs/df
117471-03 SunOS 5.9: fifofs Patch
118897-01 SunOS 5.9: stc Patch
115022-03 SunOS 5.9: quota utilities
113720-02 SunOS 5.9: rootnex Patch
113329-18 SunOS 5.9: lp Patch
123056-01 SunOS 5.9: ldterm patch
114349-04 SunOS 5.9: sbin/dhcpagent Patch
113278-15 SunOS 5.9: NFS Daemon Patch
113471-09 SunOS 5.9: truss Patch
113277-48 SunOS 5.9: sd and ssd Patch
117457-01 SunOS 5.9: elfexec Patch
113077-18 SunOS 5.9: /platform/sun4u/kernal/drv/su Patch
113072-08 SunOS 5.9: patch /usr/sbin/format
112839-08 SunOS 5.9: patch libthread.so.1
114331-02 SunOS 5.9: power Patch
112998-04 SunOS 5.9: patch /usr/sbin/syslogd
114133-03 SunOS 5.9: mail Patch
119937-02 SunOS 5.9: inetboot patch
115553-23 SunOS 5.9: USB drivers patch
117443-01 SunOS 5.9: libkvm Patch
114329-02 SunOS 5.9: /usr/bin/pax Patch
114128-03 SunOS 5.9: sd_lun patch
119929-01 SunOS 5.9: /usr/bin/xargs patch
113459-05 SunOS 5.9: udp patch
116009-05 SunOS 5.9: sgcn & sgsbbc patch
123761-04 SunOS 5.9: PCIE/Fire drivers Patch
123760-01 SunOS 5.9: platform driver Patch
116557-04 SunOS 5.9: sbd Patch
120241-04 SunOS 5.9: bge patch
116530-02 SunOS 5.9: bge.conf Patch
116488-03 SunOS 5.9: Lights Out Management (lom) patch
117131-01 SunOS 5.9: adm1031 Patch
117124-12 SunOS 5.9: platmod, drmach, dr, ngdr, & gptwocfg Patch
118539-02 SunOS 5.9: schpc Patch
118472-01 SunOS 5.9: pargs Patch
122002-01 SunOS 5.9: kstat patch
122709-01 SunOS 5.9: /usr/bin/dc patch
117067-04 SunOS 5.9: awk nawk oawk Patch
115259-03 SunOS 5.9: patch usr/lib/acct/acctcms
112959-03 SunOS 5.9: patch libfru
112913-02 SunOS 5.9: fruadm Patch
113027-06 SunOS 5.9: libfrureg.so.1 Patch
114564-09 SunOS 5.9: /usr/sbin/in.ftpd Patch
117441-01 SunOS 5.9: FSSdispadmin Patch
118191-01 gtar patch
114818-06 GNOME 2.0.0: libpng Patch
117177-02 SunOS 5.9: lib/gss module Patch
116340-05 SunOS 5.9: gzip and Freeware info files patch
113579-09 SunOS 5.9: ypserv/ypxfrd Patch
122673-01 SunOS 5.9: sockio.h header patch
116474-03 SunOS 5.9: libsmedia Patch
116669-20 SunOS 5.9: md Patch
112965-06 SunOS 5.9: patch /kernel/drv/sparcv9/eri
112838-12 SunOS 5.9: pcicfg Patch
117127-02 SunOS 5.9: header Patch
123768-02 SunOS 5.9: byteorder.h and ddi_impldefs.h patch
121321-03 SunOS 5.9: ldap Patch
116231-03 SunOS 5.9: llc2 Patch
122976-01 SunOS 5.9: /usr/lib/mdb/kvm/ipc.so Patch
117179-01 SunOS 5.9: nfs_dlboot Patch
121194-01 SunOS 5.9: usr/lib/nfs/statd Patch
116502-03 SunOS 5.9: mountd Patch
113320-06 SunOS 5.9: patch se driver
114731-09 SunOS 5.9: kernel/drv/glm Patch
114716-02 SunOS 5.9: usr/bin/rcp Patch
112915-04 SunOS 5.9: snoop Patch
116778-01 SunOS 5.9: in.ripngd patch
119447-01 SunOS 5.9: ses Patch
114356-08 SunOS 5.9: /usr/bin/ssh Patch
113273-11 SunOS 5.9: /usr/lib/ssh/sshd Patch
113575-08 SunOS 5.9: sendmail Patch
116780-02 SunOS 5.9: scmi2c Patch
112972-17 SunOS 5.9: patch /usr/lib/libssagent.so.1 /usr/lib/libssasnmp.so.1 mibiisa
122485-01 SunOS 5.9: 1394 mass storage driver patch
113716-02 SunOS 5.9: sar & sadc Patch
117473-01 SunOS 5.9: fwtmp Patch
116472-02 SunOS 5.9: rmformat Patch
120443-01 SunOS 5.9: sed core dumps on long lines
121588-01 SunOS 5.9: /usr/xpg4/bin/awk Patch
123058-01 SunOS 5.9: /usr/xpg4/bin/more Patch
123184-02 SunOS 5.9: Bug fixes for Arabic fonts
113584-17 SunOS 5.9: yesstr, nostr nl_langinfo() strings incorrect in S9
117100-04 SunOS 5.9: New Euro UTF-8 locales needed
114600-06 SunOS 5.9: vlan driver patch
112817-29 SunOS 5.9: Sun GigaSwift Ethernet 1.0 driver patch
113042-16 SunOS 5.9: qlc driver patch
113041-13 SunOS 5.9: fcip driver patch
113039-17 SunOS 5.9: Sun StorEdge Traffic Manager patch
113040-21 SunOS 5.9: fctl/fp/fcp driver patch
117595-05 SunOS 5.9: Manual Page updates for Solaris 9
112622-19 SunOS 5.9: M64 Graphics Patch
116126-05 Fixes to general release PatchPro 2.2
119480-10 SUNWppro SUNWsy1cf SUNWsdb Bug fixes and updated keystore file with new patch signing certificate.
117985-03 SunOS 5.9: XIL 1.4.2 Loadable Pipeline Libraries
114538-38 SunOS 5.9: Sun XVR-100 Graphics Accelerator Patch
112661-11 SunOS 5.9: IIIM and X Input & Output Method patch
114677-12 SunOS 5.9: International Components for Unicode Patch
116039-02 SunOS 5.9: sun4u platform links patch
112804-02 CDE 1.5: sdtname patch
113244-09 CDE 1.5: dtwm patch
114312-02 CDE1.5: GNOME/CDE Menu for Solaris 9
119976-01 CDE 1.5: dtterm patch
112771-33 Motif 1.2.7 and 2.1.1: Runtime library patch for Solaris 9
117728-01 CDE1.5: dthello patch
124215-01 CDE 1.5: dtterm patch
112785-56 X11 6.6.1: Xsun patch
112807-18 CDE 1.5: dtlogin patch
118759-01 X11 6.6.1: Font Administration Tools patch
117577-03 X11 6.6.1: TrueType fonts patch
117663-02 X11 6.6.1: xwd patch
113764-05 X11 6.6.1: keyboard patch
/etc/release
==========
# cat /etc/release
Solaris 9 9/04 s9s_u7wos_09 SPARC
Copyright 2004 Sun Microsystems, Inc. All Rights Reserved.
Use is subject to license terms.
Assembled 29 June 2004
CLUSTER
=========
# cat /var/sadm/system/admin/CLUSTER
CLUSTER=SUNWCuser
pkginfo
=======
# pkginfo -l SUNWpmgr SUNWppror SUNWpprou
PKGINST: SUNWpmgr
NAME: Solaris Patch Manager Base 1.0.1 1.0.1
CATEGORY: system
ARCH: all
VERSION: 1.0.1
BASEDIR: /
VENDOR: Sun Microsystems, Inc.
DESC: Patch Manager CLI for Solaris 2.6, 2.7 and 2.8
PSTAMP: ute15320031103164007
INSTDATE: May 16 2006 14:51
HOTLINE: Please contact your local service provider
STATUS: completely installed
FILES:4 installed pathnames
3 shared pathnames
3 directories
1 executables
9 blocks used (approx)
ERROR: information for "SUNWppror" was not found
ERROR: information for "SUNWpprou" was not found
# 11
Try unsetting the patch source on the non-working host:-$ smpatch unset patchpro.patch.source
# 12
This still gives the help message (see below)
# smpatch unset patchpro.patch.source
Unknown subcommand was specified.
Usage:
smpatch add -i <patchid> [-i <patchid> ...] |
-x idlist=<patchlist_file> [-d <patchdir>] [-h] where:
addSubcommand used to install the patches.
-d <patchdir>
Used to specify the directory where patches are
expected to be installed from.
-hUsed to display help information for the add
subcommand.
-i <patchid>
Used to specify the id of the patch to install.
One or more patches can be specified using this
option.
-x idlist=<patchlist_file>
Used to specify the path of the file that contains
a list of patches to install.
Usage:
smpatch analyze [-h] where:
analyze Subcommand used to analyze a host and list needed
patches.
-hUsed to display help information for the analyze
subcommand.
Usage:
smpatch download [-i <patchid> [-i <patchid> ...] |
-x idlist=<patchlist_file>] [-d <patchdir>] [-h] where:
downloadSubcommand used to download patches from SunSolve.
-d <patchdir>
Used to specify the directory where the patches
from SunSolve are to be downloaded.
-hUsed to display help information for the download
subcommand.
-i <patchid>
Used to specify the id of the patch to download.
One or more patches can be specified using this
option.
-x idlist=<patchlist_file>
Used to specify the path of the file that contains
a list of patches to download.
Usage:
smpatch remove -i <patchid> [-h] where:
remove Subcommand used to remove a patch.
-hUsed to display help information for the remove
subcommand.
-i <patchid>
Used to specify the id of the patch to remove.
Usage:
smpatch update [-d <patchdir>] [-h] where:
update Subcommand used to download and install required
patches for the local host.
-d <patchdir>
Used to specify the directory where the patches
from SunSolve which are required by the local host
are to be downloaded and installed from.
-hUsed to display help information for the update
subcommand.
# 13
Please download the unsigned version of the 112945-44 patch to apply manually to the Solaris 9 systems that are giving you problems, then download the latest version of Patch Manager for the Solaris 8 systems:
http://www.sun.com/download/products.xml?id=40c8c2ad
This will allow you to run smpatch unset patchpro.patch.source.
Mod.
# 14
Hi,
112945-44 is already installed on Solaris 9 system
# showrev -p| grep 112945
Patch: 112945-27 Obsoletes: 113829-04, 114724-01 Requires: Incompatibles: Packages: SUNWwbapi, SUNWwbcor, SUNWwbcou, SUNWwbpro
Patch: 112945-35 Obsoletes: 113829-04, 114724-01 Requires: Incompatibles: Packages: SUNWwbapi, SUNWwbcor, SUNWwbcou, SUNWwbpro
Patch: 112945-39 Obsoletes: 113829-04, 114724-01 Requires: Incompatibles: Packages: SUNWwbapi, SUNWwbcor, SUNWwbcou, SUNWwbpro
Patch: 112945-40 Obsoletes: 113829-04, 114724-01 Requires: Incompatibles: Packages: SUNWwbapi, SUNWwbcor, SUNWwbcou, SUNWwbpro
Patch: 112945-44 Obsoletes: 113829-04, 114724-01 Requires: Incompatibles: Packages: SUNWwbapi, SUNWwbcor, SUNWwbcou, SUNWwbpro
root@05alpha:/root
Message was edited by:
gerrymcf
# 15
Hi again.I note that patch 119480-10 is being recommended in the smpatch analyze output. This patch contains the updated signatures for PatchPro, so could you install this patch manually and try using smpatch to install patches again?Mod.
# 16
Hi,
I've installed this patch, smpatch analyze and smpatch download.
I get the same error message,
Downloading the requested patches
Error: PatchPro failed: ERROR: Failed to validate the digital signature(s).
/var/tmp/patches/113434-33.jar.tmp cannot be validated.
Error: PatchPro failed: ERROR: Failed to validate the digital signature(s).
/var/tmp/patches/117560-04.jar.tmp cannot be validated.
/var/tmp/patches/115835-03.jar.tmp has been validated.
/var/tmp/patches/114344-21.jar.tmp has been validated.
Error: PatchPro failed: ERROR: Failed to validate the digital signature(s).
/var/tmp/patches/113713-23.jar.tmp cannot be validated.
/var/tmp/patches/117453-01.jar.tmp has been validated.
Error: PatchPro failed: ERROR: Failed to validate the digital signature(s).
/var/tmp/patches/112874-37.jar.tmp cannot be validated.
/var/tmp/patches/114131-03.jar.tmp has been validated.
<Output cut>
# 17
Could you clear the /var/tmp/patches/ directory:# rm /var/tmp/patches/*.jar.tmpand the patchpro spool as well:# rm /var/sadm/spool/*.jarand try again?Mod.
# 18
Hi,
the /var/tmp/patches directory is cleared down before every patching exercise. This directory is empty before any patching begins.
The /var/sadm/spool directory contains no patches.
I did try it again though and got the same results. Some patches downloaded OK, others failed because of the invalid digital signature.
# 19
Hi again.Could you back out and re-install 112945-44 ?112945-44 and 119480-10 contain different versions of the certificates file and 112945-44 was released later, so 112945-44 should contain the current version.Mod.
# 20
Hi,
I've now had a chance to test this and the problem is still the same.
I removed the patch 112945-44, downloaded the patch again (112945-44) and added it. I then used smpatch analyze to get the patch list and then download.
I get the same error "Failed to validate the digital signature"
One other oddity with this system which may help:
on running smpatch download on the analyze file (ie smpatch analyze >> patch.lst; smpatch download -x idlist=patch.lst" ) I get an error about
"Please specify patch in XXX-YY format"
I then need to cut the first field (patch id) from the file and use it. I don't think I need to do this on other systems, if I do then it is only one or two at the most.
Thanks again for your help so far.
# 21
Hi again.I've seen this happen on systems running out of space on disk - is this an issue here? Apart from that I'm running out of ideas.Are you able to raise a case for this issue?Mod.
# 22
Hi,Space isn't an issue here, there is over 500 Mb free on the filesystem.I'll raise a call and reference this topic.Thanks again.
# 23
FYI, the following command won't work:
smpatch analyze >> patch.lst; smpatch download -x idlist=patch.lst
you would need to use a list of only the numerical id of the patch, i.e.
smpatch analyze | awk '{print $1}' > patch.lst; smpatch download -x idlist=patch.lst
or
for patch in `smpatch analyze | awk '{print $1}'
do
smpatch download $patch
done
Although this is essentially exactly what "smpatch download" does, so I wouldn't expect this to work where that doesn't.
# 24
Actually, that command does work on a lot of hosts. Very rarely do I have to use awk to cut out the first field. As I said, this is one of the few hosts that I do have to awk out the patch id.
