If you’re a frequent visitor to my blog, you’ll know I’m a big AutoUpgrade fanboy – especially the download mode, which can save you hours of downloading patches on My Oracle Support.

Recently, I was preaching to another customer, and when they finally gave in, here’s what happened:

We gave it a shot, but we keep running into errors when we try the download mode.

So, let’s see how we can solve the most common problems.

My Oracle Support

1. You must have an Oracle SSO account.

2. That account must be linked to a Customer Support Identifier (CSI) that has an active support agreement.

3. In that CSI, you must have the privilege to download patches. The MOS administrator in your organization can help you with that.

   • In User Details, select the appropriate Support Identifier, set the Patches drop-down to Download.

4. If AutoUpgrade tells you that your username or password is incorrect:

   *Connection Failed - You entered an incorrect user name or password.* 
   

   • You should ensure that you’re using the latest version of AutoUpgrade. We recently fixed a bug for passwords with certain special characters.

Network Connectivity

1. AutoUpgrade must connect to the following servers:
   • https://updates.oracle.com
   • https://login-ext.identity.oraclecloud.com
   • https://aru-akam.oracle.com
2. Those servers are part of a Content Delivery Network (CDN), so expect changing IP addresses. Base your firewall rules on DNS names rather than IP addresses.
3. You can connect via a proxy:

   export https_proxy=https://proxy.weyland-yutani.net:8080
   java -jar autoupgrade.jar ... -mode download
   

Common Errors

*Request to https://login-ext.identity.oraclecloud.com failed with response code [403]*

• Open your firewall. Allow traffic based on DNS names, not IP addresses.
• Optionally, connect via a proxy server.

*unable to find valid certification path to requested target*

• Check the workaround described in Autoupgrade Patching Fails To Download Patches With Error “Unable To Find Valid Certification Path” (Doc ID 3082396.1).
• InsaneDBA, aka Osman, wrote a good blog post on this topic – especially for those of you on Windows.

*SSL peer shut down incorrectly*

• Check firewall settings and security groups to ensure they permit SSL traffic on the required ports.

Windows

If AutoUpgrade requires that you use an elevated command prompt (the run as administrator thing) when you use download mode, you should update to the latest version of AutoUpgrade. It no longer requires this.

Happy downloading!