TSSA/BSA: Beginning May 2019 - Windows Catalog Updates failing due to problems downloading Oracle Java patches

Version 7
    Share This:

    This document contains official content from the BMC Software Knowledge Base. It is automatically updated when the knowledge article is modified.


    PRODUCT:

    BladeLogic Server Automation Suite


    COMPONENT:

    BladeLogic Patch Management


    APPLIES TO:

    Windows Patching on BSA/TSA 8.x



    PROBLEM:

    In May 2019, TrueSight Server Automation (TSSA) Windows Patch Catalog Update jobs began to fail with the below errors when downloading Oracle Java patches:


    Error while downloading payload for hotfix : jre-8u211-windows-x64.exe-JAVA8-211-en-JAVA RUNTIME ENVIRONMENT 8.0 X64-Gold, ,Error: com.bmc.sa.patchfeed.FeedException: Maximum retries completed. Failed to download https://download.oracle.com/otn/java/jdk/8u211-b12/478a62b7d4e34b78b671c754eaaf38ab/jre-8u211-windows-x64.exe.Invalid credentials. Cannot connect to url: https://download.oracle.com/otn/java/jdk/8u211-b12/478a62b7d4e34b78b671c754eaaf38ab/jre-8u211-windows-x64.exe (Caused By: Maximum retries completed. Failed to download https://download.oracle.com/otn/java/jdk/8u211-b12/478a62b7d4e34b78b671c754eaaf38ab/jre-8u211-windows-x64.exe.Invalid credentials. Cannot connect to url: https://download.oracle.com/otn/java/jdk/8u211-b12/478a62b7d4e34b78b671c754eaaf38ab/jre-8u211-windows-x64.exe (Caused By: Invalid credentials. Cannot connect to url: https://download.oracle.com/otn/java/jdk

    Other non-Oracle Java patches are downloaded successfully. 


    CAUSE:

    Changes to the download mechanism for Oracle Java patches. BMC DRBLG-119522 created to handle changes


    SOLUTION:

    In May 2019, Oracle changed the way Java updates are hosted, so they are no longer automatically downloadable.  

    Oracle now requires manually accepting a licensing agreement to be able to download the update which generates a user token that is appended to the download URL. This means there is no single URL that can be used for these downloads.  

    Refer to the following Ivanti URL for more information :

    https://forums.ivanti.com/s/article/Oracle-SE-Java-8-support-changes-and-how-it-effects-deployments-through-Ivanti-Patch-Management-solutions

    These changes have been handled in TSSA 8.9.04 P1 via improvement DRBLG-119522. The fix is to avoid a catalog failure and instead display a message such as the following:

    "Ignoring download of patch named - "<PATCH NAME>" as it requires a manual download. To utilize this patch, manually download from vendor and place in the repository

    As a workaround for versions prior to TSSA 8.9.04 P1, remove the 'Sun Java' filter from the Catalog. This will skip the download of Java Patches and will allow the rest of the Catalog Update job to run to completion.


    The only workaround other than eliminating the Java filter in your catalog will be to download the missing patches directly from Oracle and place the executable in the repository location.

    As of May 2019, the unavailable patches were
     
    jre-8u212-windows-i586.exe
    jre-8u212-windows-x64.exe

    But all future Oracle Java patches will be treated similarly

    If a patch with the same name is already in the repo location then TSSA will not attempt to download it again so you can manually download these patches and copy then to the windows repository directory used by the catalog in question.
     


    Article Number:

    000168397


    Article Type:

    Solutions to a Product Problem



      Looking for additional information?    Search BMC Support  or  Browse Knowledge Articles