patch 118855-36

Is anybody having a problem installing the sign version of patch 118855-36. I have the latest certificates. I getting a error saying that the package has been alter. sorry if this in the wrong forum.
[206 byte] By [Minix007a] at [2007-11-26 16:46:08]
# 1

Yes - I am having this problem getting this patch to stick, however it seems that my issue is with the cert.

I get the following message:

Verifying signed patch <118855-36>...

Verifying digital signature for signer <es-signature>

ERROR: Signature verification failed while verifying certificate <subject=Sun Microsystems Inc Root CA, issuer=/C=US/O=Verisign, Inc./OU=Class2 Public Primary Certification Authority - G2/O:><unable to get local issuer certificate>.

ERROR: Unable to verify signature for signer <es-signature>

Signature invalid on signed patch <118855-36>.

Look familar?

ghynes01a at 2007-7-8 23:13:31 > top of Java-index,General,Maintenance...
# 2
yeah it looks like your cert is the problem. Sun put out new certs in September http://sunsolve.sun.com/search/document.do?assetkey=1-26-102639-1. I have a md5 error in my message. I think somone just forgot to resign it after publishing it.
Minix007a at 2007-7-8 23:13:31 > top of Java-index,General,Maintenance...
# 3
You can always run patchadd with -n to bypass the certs validation.
nthomassina at 2007-7-8 23:13:31 > top of Java-index,General,Maintenance...
# 4
They have updated 118855-36. I haven't tested it out yet, but it probably works now.This also works okay with smpatch add -i 118855-36.
Minix007a at 2007-7-8 23:13:31 > top of Java-index,General,Maintenance...
# 5
Thanks for the tip. Works great with the -n switch.
mseszenya at 2007-7-8 23:13:31 > top of Java-index,General,Maintenance...
# 6

I'm sorry for not exact in-topic question, but my adventure with patching Solaris has just begun.

My question is how to check if my Solaris is up to date? And, if it's not up to date, what patches are needed? Is there any way to automate patches checking via Internet?

Thanx a lot,

Reveler_

reveler_a at 2007-7-8 23:13:31 > top of Java-index,General,Maintenance...
# 7

Yes there is a way to automate.

As root - type smpatch update. This will check your system and then get the required updates.

Another way is to run the GUI version of smpatch called - Sun Update Manager from the Tools eleveator on the dashboard.

Also, you may need a sun mtce contract to get some of the patches.

aorcutta at 2007-7-8 23:13:31 > top of Java-index,General,Maintenance...