pkg(1M) on Solaris 11 System Fails with "Framework error: code: 60 reason: SSL certificate problem, verify that the CA cert is OK" (Doc ID 1395637.1)

Last updated on MARCH 17, 2017

Applies to:

Solaris Operating System - Version 11 11/11 and later
Oracle Solaris on x86-64 (64-bit)
Oracle Solaris on SPARC (64-bit)

Symptoms

When attempting to register a Solaris 11 host with any of the repositories detailed at https://pkg-register.oracle.com/ by following the details in <Document 1021281.1> or https://pkg-register.oracle.com/help/#support, one may encounter the following error:

$ sudo pkg set-publisher -k /var/pkg/ssl/pkg.oracle.com.key.pem \
-c /var/pkg/ssl/pkg.oracle.com.certificate.pem \
-O https://pkg.oracle.com/solaris/support solaris
pkg set-publisher: The origin URIs for 'solaris' do not appear to point  to a valid pkg repository. 
Please verify the repository's location and the client's network  configuration. 
Additional details: 

Unable to contact valid package repository 
Encountered the following error(s): 
Unable to contact any configured publishers. 
This is likely a network configuration problem. 
Framework error: code: 60 reason: SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
URL: 'https://pkg.oracle.com/solaris/support'
$



This error may also occur when performing any other query of your repository, like refreshing:

$ sudo pkg refresh
pkg: 0/1 catalogs successfully updated:

Unable to contact valid package repository
Encountered the following error(s):
Unable to contact any configured publishers.
This is likely a network configuration problem.
Framework error: code: 60 reason: SSL certificate problem, verify that the CA cert is OK. Details:
error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed
URL: 'https://pkg.oracle.com/solaris/support'
$

 

You may encounter this error when attempting to register with or query any of the following repositories:

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms