Copying and Creating Package Repositories in Oracle^® Solaris 11.3

How to Update the Certificate and Key for the Oracle Solaris Support Repository

Use this procedure if you receive a message such as the following when you perform pkg commands:

Certificate '/var/pkg/ssl/certfile' for publisher 'solaris', needed to access 
'https://pkg.oracle.com/solaris/support/', will expire in '7' days.

1. Get new certificate and key files.
   1. Open the Oracle Certificate Request site.

      In your browser, navigate to https://pkg-register.oracle.com/register/certificate/.

   2. Sign in using your My Oracle Account support credentials.
   3. For Oracle Solaris 11.3, select the Download Certificate button, and save the certificate file on your system.
   4. For Oracle Solaris 11.3, select the Download Key button, and save the key file on your system.
2. Configure the solaris publisher using the new certificate and key files.

   Because the support repository is already configured with the old key and certificate, you do not need to specify the origin to update the key and certificate.

   $ pkg set-publisher -c ~/Downloads/pkg.oracle.com.certificate.pem \
   > -k ~/Downloads/pkg.oracle.com.key.pem solaris

   The pkg publisher solaris command shows the updated “Cert. Effective Date” and “Cert. Expiration Date.”