Go to main content

Creating Package Repositories in Oracle® Solaris 11.4

Exit Print View

Updated: November 2018

How to Install a Certificate and Key for the Oracle Solaris Support Repository

If you use the Oracle Solaris support repository, you must install a certificate and key. You cannot add the support repository origin to your solaris publisher unless you specify a valid certificate and key.

  1. Get certificate and key files.
    1. Open the Oracle Certificate Request site.

      In your browser, navigate to https://pkg-register.oracle.com/.

    2. Sign in to the site.
      1. Select the Request Certificates link.
      2. Sign in using your My Oracle Account support credentials.
    3. Find the Oracle Solaris 11 Support repository, and select the Request Access button.
    4. Read the license and select the Accept button.
    5. Open the Certificate Information page.

      On the Product Details page, select the “certificate page” link or navigate to https://pkg-register.oracle.com/register/certificate/.

    6. Select the Download Certificate button, and save the certificate file on your system.
    7. Select the Download Key button, and save the key file on your system.
  2. Configure the solaris publisher using the new certificate and key files.

    The arguments to the -c and -k options are the certificate and key files that you downloaded in the previous step, as shown in the following example:

    $ pkg set-publisher -g https://pkg.oracle.com/solaris/support/ \
    > -c ~/Downloads/pkg.oracle.com.certificate.pem \
    > -k ~/Downloads/pkg.oracle.com.key.pem solaris

    Use the following command to show that the certificate and key are installed:

    $ pkg publisher solaris
                Publisher: solaris
               Origin URI: https://pkg.oracle.com/solaris/support/
                  SSL Key: /var/pkg/ssl/keyfile
                 SSL Cert: /var/pkg/ssl/certfile
     Cert. Effective Date: July  1, 2015 04:47:13 PM
    Cert. Expiration Date: July  8, 2017 04:47:13 PM
              Client UUID: client-uuid
          Catalog Updated: January 18, 2016 06:59:40 PM
                  Enabled: Yes
                           proxied-urls = []
                           signature-policy = require-signatures

Next Steps

See also SSL Certificate Problem in Updating Systems and Adding Software in Oracle Solaris 11.4.

This process is similar for repositories of other publishers such as solarisstudio or ha-cluster.