Important Announcement Regarding up2date and Unbreakable Linux Network

Last updated: 19 September, 2010

What are we announcing?

A small number of Unbreakable Linux Network (ULN) users may have one or more servers registered whose up2date agent must be updated. On August 10th, we will be making a change to ULN that may effect your ability to download and install updates via up2date.

What should you do?

First, verify whether you have a current version of up2date installed. The following are current versions of up2date for Oracle Linux 4 and 5:

Oracle Linux 4:

Oracle Linux 5

To verify the version of up2date installed, run the following command as root:

# rpm -qa | grep up2date

If you do not have a current version of up2date installed, update it using the following command:

# up2date up2date

What if you missed the deadline?

If you have an outdated version of up2date installed and you were unable to update your up2date agent before August 10th, you will see the following message when you attempt to connect to ULN:

There was an SSL error: [('SSL routines', 'SSL3_GET_SERVER_CERTIFICATE', 'certificate verify failed')]
A common cause of this error is the system time being incorrect. Verify that the time on this system is correct.

You must do the following before you can connect to ULN:

  1. Download ULN-CA-CERT from this location: http://linux-update.oracle.com/rpms/ULN-CA-CERT
  2. Put it in /usr/share/rhn
  3. Verify the ULN-CA-CERT file
  4. Update your up2date agent

For example, as root, run the following commands:

# cd /usr/share/rhn
# mv ULN-CA-CERT ULN-CA-CERT.old
# wget http://linux-update.oracle.com/rpms/ULN-CA-CERT

Once you have downloaded, verify that the correct ULN-CA-CERT file is in place by running the commands below and comparing the output

# ls -l /usr/share/rhn/ULN-CA-CERT 
-rw-r--r-- 1 root root 5135 Jun 29 16:39 /usr/share/rhn/ULN-CA-CERT
# md5sum /usr/share/rhn/ULN-CA-CERT 
ec90ebdae92a12c4d4678867c12c2b7c  /usr/share/rhn/ULN-CA-CERT

You can now download and install the most recent up2date agent for your system by running the following command:

# up2date up2date