Once you try the download mode in AutoUpgrade to get patches from My Oracle Support, you will never download patches in any other way. It’s so simple and so easy.
Suppose you need to connect through a proxy server to reach My Oracle Support and get the patches. AutoUpgrade now supports several ways to use a proxy.
Download Patches Through a Proxy
-
Get the latest version of AutoUpgrade:
wget https://download.oracle.com/otn-pub/otn_software/autoupgrade.jar -
Set the proxy settings in an environment variable before calling AutoUpgrade:
export https_proxy=https://proxy.weyland-yutani.net:8080 java -jar autoupgrade.jar ... -mode download-
Set
https_proxyin lowercase. At least on Linux, environment variables are case-sensitive and although some programs can handle any case, it’s better to use the official case. -
AutoUpgrade automatically picks up and uses the proxy.
-
Other Proxy Types
You can set https_proxy to a value matching this specification:
[https|http|socks5|socks]://(user_info@)site:port
-
Here’s an example of how to use SOCKS5 proxy:
export https_proxy=socks5://proxy.weyland-yutani.net:8080 -
The
user_infois optional. Here’s an example::export https_proxy=https://ellen:Olympia2092@proxy.weyland-yutani.net:8080
It Doesn’t Work
-
This error message indicates that you forgot to set the
https_proxyenvironment variable or set it correctly:There were conditions found preventing AutoUpgrade Patching from successfully running *Downloading Oracle Patch files Patch query failed *login-ext.identity.oraclecloud.com* -
This error message indicates that your proxy doesn’t allow connections to all the required servers:
There were conditions found preventing AutoUpgrade Patching from successfully running *Downloading Oracle Patch files Patch query failed *Unable to tunnel through proxy. Proxy returns "HTTP/1.1 403 Forbidden"*
Required Connections
AutoUpgrade must connect to:
URLs are part of a CDN, so expect changing IP addresses. Use DNS names instead of IP addresses in your firewall/proxy configuration.
Happy patching!
Hi Daniel,
thanks for this short and helpful article.
When I try to download the patches I will get the error
unable to find valid certification path to requested target
Is there a way to suppress the SSL cert checks, like wget –no-check-certificate?
Best regards
Bernd
LikeLike
Hi Bernd,
I’m not aware of such switch, but let me check internally and see what we can do.
Can you file an SR with the details on the error? Be sure to include the AutoUpgrade zip file: https://dohdatabase.com/2025/04/02/auzip. Mail me the SR number at daniel.overby.hansen (a) oracle.com and I’ll get on it right away.
Regards,
Daniel
LikeLike
Hi,
It’s not possible to ignore those errors and usually it is advisable to fix the issue, rather than ignoring it. You can find instructions in this MOS note:
New DocumentAutoupgrade Patching Fails To Download Patches With Error “Unable To Find Valid Certification Path” (Doc ID 3082396.1)
Regards,
Daniel
LikeLike
Great post of the customer :) same like on my site. Will now test the createhome option these days. Hopefully I’ll present that at the next Global Leader Summer Event in Montenegro.
LikeLike
Let me know how it turns out with the create_home feature. We have a new version of AutoUpgrade coming out soon (hopefully in April) and it brings several enhancements to the create_home mode.
– You can give the Oracle home a custom name
– You can install a new Oracle home on a brand-new server without an existing Oracle home
– Automatic run of root.sh and handling of special patches that otherwise require an additional root.sh execution
Regards,
Daniel
LikeLike
Sorry posted without beeing logged in. Christian (Switzerland).
LikeLike