API tools faq
paste
Advertisement
Guest User

EM12c R4 SSL Security Checkup v1.0

a guest
Mar 13th, 2015
361
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Bash 15.34 KB | None | 0 0
raw download clone embed print report
  1. #!/bin/bash
  2. #
  3. # This script should examine your EM12c R4 environment, identify the ports
  4. # each component uses, and check for SSLv2/SSLv3 usage, as well as make
  5. # sure that weak cipher suites get rejected.  It also contains a patch
  6. # check currently comparing against the Jan/Feb 2015 recommended patches
  7. # and flags the use of self-signed certificates.
  8. #
  9. # Added in v1.0: Repository database patch check
  10. #
  11. # From: @BrianPardy on Twitter
  12. #
  13. # Known functional on Linux x86-64, Solaris, AIX.
  14. #
  15. # Run this script as the Oracle EM12c software owner, with your environment
  16. # fully up and running.
  17. #
  18. # Thanks to Dave Corsar, who tested on Solaris and let me know the
  19. # changes needed to make an earlier version work on Solaris.
  20. #
  21. # Thanks to opa tropa who confirmed AIX functionality and noted the
  22. # use of GNU extensions to grep, which I have since removed.
  23. #
  24. # Dedicated to our two Lhasa Apsos, Lucy and Ethel.
  25. #
  26.  
  27. SCRIPTNAME=`basename $0`
  28. PATCHDATE="4 March 2015"
  29. OMSHOST=`hostname -f`
  30. VERSION="1.0"
  31.  
  32. RUN_DB_CHECK=0
  33.  
  34. ORAGCHOMELIST="/etc/oragchomelist"
  35. ORATAB="/etc/oratab"
  36.  
  37. if [[ ! -r $ORAGCHOMELIST ]]; then          # Solaris
  38.     ORAGCHOMELIST="/var/opt/oracle/oragchomelist"
  39. fi
  40.  
  41. if [[ ! -r $ORATAB ]]; then                 # Solaris
  42.     ORATAB="/var/opt/oracle/oratab"
  43. fi
  44.  
  45. if [[ -x "/usr/sfw/bin/gegrep" ]]; then
  46.     GREP=/usr/sfw/bin/gegrep
  47. else
  48.     GREP=`which grep`
  49. fi
  50.  
  51. OMS_HOME=`$GREP -i oms $ORAGCHOMELIST | xargs ls -d 2>/dev/null`
  52.  
  53. OPATCH="$OMS_HOME/OPatch/opatch"
  54. OPATCHAUTO="$OMS_HOME/OPatch/opatchauto"
  55. OMSORAINST="$OMS_HOME/oraInst.loc"
  56. ORAINVENTORY=`head -n 1 $OMSORAINST | awk -F= '{print $2}'`
  57.  
  58. MW_HOME=`dirname $OMS_HOME`
  59. BIP_HOME=`$GREP -vi REMOVED $ORAINVENTORY/ContentsXML/inventory.xml | $GREP "HOME NAME=\"Oracle_BI" | awk '{print $3}' | sed -e 's/LOC=\"//' | sed -e 's/"//'`
  60. COMMON_HOME=`$GREP -vi REMOVED $ORAINVENTORY/ContentsXML/inventory.xml | $GREP "HOME NAME=\"common" | awk '{print $3}' | sed -e 's/LOC=\"//' | sed -e 's/"//'`
  61. WEBTIER_HOME=`$GREP -vi REMOVED $ORAINVENTORY/ContentsXML/inventory.xml | $GREP "HOME NAME=\"webtier" | awk '{print $3}' | sed -e 's/LOC=\"//' | sed -e 's/"//'`
  62. AGENT_HOME=`$GREP -vi REMOVED $ORAINVENTORY/ContentsXML/inventory.xml | $GREP "HOME NAME=\"agent12c" | awk '{print $3}' | sed -e 's/LOC=\"//' | sed -e 's/"//'`
  63. AGENT_DB_PLUGIN_HOME="$AGENT_HOME/../../plugins/oracle.sysman.db.agent.plugin_12.1.0.7.0"
  64. AGENT_FMW_PLUGIN_HOME="$AGENT_HOME/../../plugins/oracle.sysman.emas.agent.plugin_12.1.0.7.0"
  65.  
  66. EM_INSTANCE_BASE=`$GREP GCDomain $MW_HOME/domain-registry.xml | sed -e 's/.*=//' | sed -e 's/\/user_projects.*$//' | sed -e 's/"//'`
  67. WL_HOME=`$GREP wlserver $MW_HOME/domain-registry.xml | sed -e 's/.*=//' | sed -e 's/\/samples.*$//' | sed -e 's/"//' | uniq`
  68.  
  69. EMGC_PROPS="$EM_INSTANCE_BASE/em/EMGC_OMS1/emgc.properties"
  70. EMBIP_PROPS="$EM_INSTANCE_BASE/em/EMGC_OMS1/embip.properties"
  71. OPMN_PROPS="$EM_INSTANCE_BASE/WebTierIH1/config/OPMN/opmn/ports.prop"
  72. OHS_ADMIN_CONF="$EM_INSTANCE_BASE/WebTierIH1/config/OHS/ohs1/admin.conf"
  73.  
  74. PORT_UPL=`$GREP EM_UPLOAD_HTTPS_PORT $EMGC_PROPS | awk -F= '{print $2}'`
  75. PORT_OMS=`$GREP EM_CONSOLE_HTTPS_PORT $EMGC_PROPS | awk -F= '{print $2}'`
  76. PORT_OMS_JAVA=`$GREP MS_HTTPS_PORT $EMGC_PROPS | awk -F= '{print $2}'`
  77. PORT_NODEMANAGER=`$GREP EM_NODEMGR_PORT $EMGC_PROPS | awk -F= '{print $2}'`
  78. PORT_BIP=`$GREP BIP_HTTPS_PORT $EMBIP_PROPS | awk -F= '{print $2}'`
  79. PORT_ADMINSERVER=`$GREP AS_HTTPS_PORT $EMGC_PROPS | awk -F= '{print $2}'`
  80. PORT_OPMN=`$GREP '/opmn/remote_port' $OPMN_PROPS | awk -F= '{print $2}'`
  81. PORT_OHS_ADMIN=`$GREP Listen $OHS_ADMIN_CONF | awk '{print $2}'`
  82. PORT_AGENT=`$AGENT_HOME/bin/emctl status agent | $GREP 'Agent URL' | sed -e 's/\/emd\/main\///' | sed -e 's/^.*://' | uniq`
  83.  
  84. REPOS_DB_CONNDESC=`$GREP EM_REPOS_CONNECTDESCRIPTOR $EMGC_PROPS | sed -e 's/EM_REPOS_CONNECTDESCRIPTOR=//' | sed -e 's/\\\\//g'`
  85. REPOS_DB_HOST=`echo $REPOS_DB_CONNDESC | sed -e 's/^.*HOST=//' | sed -e 's/).*$//'`
  86. REPOS_DB_SID=`echo $REPOS_DB_CONNDESC | sed -e 's/^.*SID=//' | sed -e 's/).*$//'`
  87.  
  88. if [[ "$REPOS_DB_HOST" == "$OMSHOST" ]]; then
  89.     REPOS_DB_HOME=`$GREP "$REPOS_DB_SID:" $ORATAB | awk -F: '{print $2}'`
  90.     REPOS_DB_VERSION=`$REPOS_DB_HOME/OPatch/opatch lsinventory -oh $REPOS_DB_HOME | $GREP 'Oracle Database' | awk '{print $4}'`
  91.  
  92.     if [[ "$REPOS_DB_VERSION" == "11.2.0.4.0" ]]; then
  93.         RUN_DB_CHECK=1
  94.     fi
  95.  
  96.     if [[ "$REPOS_DB_VERSION" == "12.1.0.2.0" ]]; then
  97.         RUN_DB_CHECK=1
  98.     fi
  99.  
  100.     if [[ "$RUN_DB_CHECK" -eq 0 ]]; then
  101.         echo -e "\tSkipping local repository DB patch check, only 11.2.0.4 or 12.1.0.2 supported for now"
  102.     fi
  103. fi
  104.  
  105.  
  106.  
  107.  
  108. sslcheck () {
  109.     OPENSSL_CHECK_COMPONENT=$1
  110.     OPENSSL_CHECK_HOST=$2
  111.     OPENSSL_CHECK_PORT=$3
  112.     OPENSSL_CHECK_PROTO=$4
  113.  
  114.     OPENSSL_RETURN=`echo Q | openssl s_client -prexit -connect $OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT -$OPENSSL_CHECK_PROTO 2>&1 | $GREP Cipher | $GREP -c 0000`
  115.    
  116.    
  117.  
  118.     if [[ $OPENSSL_CHECK_PROTO == "tls1" ]]; then
  119.         echo -en "\tConfirming $OPENSSL_CHECK_PROTO available for $OPENSSL_CHECK_COMPONENT at $OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT... "
  120.         if [[ $OPENSSL_RETURN -eq "0" ]]; then
  121.             echo OK
  122.         else
  123.             echo FAILED
  124.         fi
  125.     fi
  126.  
  127.     if [[ $OPENSSL_CHECK_PROTO == "ssl2" || $OPENSSL_CHECK_PROTO == "ssl3" ]]; then
  128.         echo -en "\tConfirming $OPENSSL_CHECK_PROTO disabled for $OPENSSL_CHECK_COMPONENT at $OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT... "
  129.         if [[ $OPENSSL_RETURN -ne "0" ]]; then
  130.             echo OK
  131.         else
  132.             echo FAILED
  133.         fi
  134.     fi
  135. }
  136.  
  137. opatchcheck () {
  138.     OPATCH_CHECK_COMPONENT=$1
  139.     OPATCH_CHECK_OH=$2
  140.     OPATCH_CHECK_PATCH=$3
  141.  
  142.     if [[ "$OPATCH_CHECK_COMPONENT" == "ReposDBHome" ]]; then
  143.         OPATCH_RET=`$OPATCH_CHECK_OH/OPatch/opatch lsinv -oh $OPATCH_CHECK_OH | $GREP $OPATCH_CHECK_PATCH`
  144.     else
  145.         OPATCH_RET=`$OPATCH lsinv -oh $OPATCH_CHECK_OH | $GREP $OPATCH_CHECK_PATCH`
  146.     fi
  147.  
  148.     if [[ -z "$OPATCH_RET" ]]; then
  149.         echo FAILED
  150.     else
  151.         echo OK
  152.     fi
  153.  
  154.     echo $OPATCH_RET
  155.  
  156. }
  157.  
  158. opatchautocheck () {
  159.     OPATCHAUTO_CHECK_COMPONENT=$1
  160.     OPATCHAUTO_CHECK_OH=$2
  161.     OPATCHAUTO_CHECK_PATCH=$3
  162.  
  163.     OPATCHAUTO_RET=`$OPATCHAUTO lspatches -oh $OPATCHAUTO_CHECK_OH | $GREP $OPATCHAUTO_CHECK_PATCH`
  164.  
  165.     if [[ -z "$OPATCHAUTO_RET" ]]; then
  166.         echo FAILED
  167.     else
  168.         echo OK
  169.     fi
  170.  
  171.     echo $OPATCHAUTO_RET
  172.  
  173. }
  174.  
  175. certcheck () {
  176.     CERTCHECK_CHECK_COMPONENT=$1
  177.     CERTCHECK_CHECK_HOST=$2
  178.     CERTCHECK_CHECK_PORT=$3
  179.  
  180.     echo -ne "\tChecking certificate at $CERTCHECK_CHECK_COMPONENT ($CERTCHECK_CHECK_HOST:$CERTCHECK_CHECK_PORT)... "
  181.  
  182.     OPENSSL_SELFSIGNED_COUNT=`echo Q | openssl s_client -prexit -connect $CERTCHECK_CHECK_HOST:$CERTCHECK_CHECK_PORT 2>&1 | $GREP -ci "self signed certificate"`
  183.  
  184.     if [[ $OPENSSL_SELFSIGNED_COUNT -eq "0" ]]; then
  185.         echo OK
  186.     else
  187.         echo FAILED - Found self-signed certificate
  188.     fi
  189. }
  190.  
  191.  
  192. ciphercheck () {
  193.     OPENSSL_CHECK_COMPONENT=$1
  194.     OPENSSL_CHECK_HOST=$2
  195.     OPENSSL_CHECK_PORT=$3
  196.  
  197.     echo -ne "\tChecking LOW strength ciphers on $OPENSSL_CHECK_COMPONENT ($OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT)..."
  198.  
  199.     OPENSSL_LOW_RETURN=`echo Q | openssl s_client -prexit -connect $OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT -tls1 -cipher LOW 2>&1 | $GREP Cipher | uniq | $GREP -c 0000`
  200.  
  201.     if [[ $OPENSSL_LOW_RETURN -eq "0" ]]; then
  202.         echo -e "\tFAILED - PERMITS LOW STRENGTH CIPHER CONNECTIONS"
  203.     else
  204.         echo -e "\tOK"
  205.     fi
  206.  
  207.  
  208.     echo -ne "\tChecking MEDIUM strength ciphers on $OPENSSL_CHECK_COMPONENT ($OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT)..."
  209.  
  210.     OPENSSL_MEDIUM_RETURN=`echo Q | openssl s_client -prexit -connect $OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT -tls1 -cipher MEDIUM 2>&1 | $GREP Cipher | uniq | $GREP -c 0000`
  211.  
  212.     if [[ $OPENSSL_MEDIUM_RETURN -eq "0" ]]; then
  213.         echo -e "\tFAILED - PERMITS MEDIUM STRENGTH CIPHER CONNECTIONS"
  214.     else
  215.         echo -e "\tOK"
  216.     fi
  217.  
  218.  
  219.  
  220.     echo -ne "\tChecking HIGH strength ciphers on $OPENSSL_CHECK_COMPONENT ($OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT)..."
  221.  
  222.     OPENSSL_HIGH_RETURN=`echo Q | openssl s_client -prexit -connect $OPENSSL_CHECK_HOST:$OPENSSL_CHECK_PORT -tls1 -cipher HIGH 2>&1 | $GREP Cipher | uniq | $GREP -c 0000`
  223.  
  224.     if [[ $OPENSSL_HIGH_RETURN -eq "0" ]]; then
  225.         echo -e "\tOK"
  226.     else
  227.         echo -e "\tFAILED - CANNOT CONNECT WITH HIGH STRENGTH CIPHER"
  228.     fi
  229.     echo
  230. }
  231.  
  232. wlspatchcheck () {
  233.     WLSDIR=$1
  234.     PATCH=$2
  235.  
  236.     WLSCHECK_RETURN=`( cd $MW_HOME/utils/bsu && $MW_HOME/utils/bsu/bsu.sh -report ) | $GREP $PATCH`
  237.     WLSCHECK_COUNT=`echo $WLSCHECK_RETURN | wc -l`
  238.  
  239.     if [[ $WLSCHECK_COUNT -ge "1" ]]; then
  240.         echo -e "\tOK"
  241.     else
  242.         echo -e "\tFAILED - PATCH NOT FOUND"
  243.     fi
  244.  
  245.     echo $WLSCHECK_RETURN
  246.    
  247. }
  248.  
  249.  
  250. ### MAIN SCRIPT HERE
  251.  
  252.  
  253. echo -e "Performing EM12cR4 security checkup version $VERSION.\n"
  254.  
  255. echo "Using port definitions from configuration files "
  256. echo -e "\t/etc/oragchomelist"
  257. echo -e "\t$EMGC_PROPS"
  258. echo -e "\t$EMBIP_PROPS"
  259. echo -e "\t$OPMN_PROPS"
  260. echo -e "\t$OHS_ADMIN_CONF"
  261. echo
  262. echo -e "\tAgent port found at $OMSHOST:$PORT_AGENT"
  263. echo -e "\tBIPublisher port found at $OMSHOST:$PORT_BIP"
  264. echo -e "\tNodeManager port found at $OMSHOST:$PORT_NODEMANAGER"
  265. echo -e "\tOHSadmin port found at $OMSHOST:$PORT_OHS_ADMIN"
  266. echo -e "\tOMSconsole port found at $OMSHOST:$PORT_OMS"
  267. echo -e "\tOMSproxy port found at $OMSHOST:$PORT_OMS_JAVA"
  268. echo -e "\tOMSupload port found at $OMSHOST:$PORT_UPL"
  269. echo -e "\tOPMN port found at $OMSHOST:$PORT_OPMN"
  270. echo -e "\tWLSadmin found at $OMSHOST:$PORT_ADMINSERVER"
  271. echo
  272. echo -e "\tRepository DB version=$REPOS_DB_VERSION SID=$REPOS_DB_SID host=$REPOS_DB_HOST"
  273.  
  274. if [[ $RUN_DB_CHECK -eq "1" ]]; then
  275.     echo -e "\tRepository DB on OMS server, will check patches in $REPOS_DB_HOME"
  276.  
  277. fi
  278.  
  279. #echo -e "\tRepository DB connect descriptor $REPOS_DB_CONNDESC"
  280. #echo -e "\tRepository DB host $REPOS_DB_HOST"
  281. #echo -e "\tRepository DB SID $REPOS_DB_SID"
  282. #echo -e "\tRepository DB ORACLE_HOME $REPOS_DB_HOME"
  283.  
  284.  
  285.  
  286. echo -e "\n(1) Checking SSL/TLS configuration (see notes 1602983.1, 1477287.1, 1905314.1)"
  287.  
  288. echo -e "\n\t(1a) Forbid SSLv2 connections"
  289. sslcheck Agent $OMSHOST $PORT_AGENT ssl2
  290. sslcheck BIPublisher $OMSHOST $PORT_BIP ssl2
  291. sslcheck NodeManager $OMSHOST $PORT_NODEMANAGER ssl2
  292. sslcheck OHSadmin $OMSHOST $PORT_OHS_ADMIN ssl2
  293. sslcheck OMSconsole $OMSHOST $PORT_OMS ssl2
  294. sslcheck OMSproxy $OMSHOST $PORT_OMS_JAVA ssl2
  295. sslcheck OMSupload $OMSHOST $PORT_UPL ssl2
  296. sslcheck OPMN $OMSHOST $PORT_OPMN ssl2
  297. sslcheck WLSadmin $OMSHOST $PORT_ADMINSERVER ssl2
  298.  
  299. echo -e "\n\t(1b) Forbid SSLv3 connections"
  300. sslcheck Agent $OMSHOST $PORT_AGENT ssl3
  301. sslcheck BIPublisher $OMSHOST $PORT_BIP ssl3
  302. sslcheck NodeManager $OMSHOST $PORT_NODEMANAGER ssl3
  303. sslcheck OHSadmin $OMSHOST $PORT_OHS_ADMIN ssl3
  304. sslcheck OMSconsole $OMSHOST $PORT_OMS ssl3
  305. sslcheck OMSproxy $OMSHOST $PORT_OMS_JAVA ssl3
  306. sslcheck OMSupload $OMSHOST $PORT_UPL ssl3
  307. sslcheck OPMN $OMSHOST $PORT_OPMN ssl3
  308. sslcheck WLSadmin $OMSHOST $PORT_ADMINSERVER ssl3
  309.  
  310. echo -e "\n\t(1c) Permit TLSv1 connections"
  311. sslcheck Agent $OMSHOST $PORT_AGENT tls1
  312. sslcheck BIPublisher $OMSHOST $PORT_BIP tls1
  313. sslcheck NodeManager $OMSHOST $PORT_NODEMANAGER tls1
  314. sslcheck OHSadmin $OMSHOST $PORT_OHS_ADMIN tls1
  315. sslcheck OMSconsole $OMSHOST $PORT_OMS tls1
  316. sslcheck OMSproxy $OMSHOST $PORT_OMS_JAVA tls1
  317. sslcheck OMSupload $OMSHOST $PORT_UPL tls1
  318. sslcheck OPMN $OMSHOST $PORT_OPMN tls1
  319. sslcheck WLSadmin $OMSHOST $PORT_ADMINSERVER tls1
  320.  
  321. echo -e "\n(2) Checking supported ciphers at SSL/TLS endpoints (see notes 1477287.1, 1905314.1, 1067411.1)"
  322. ciphercheck Agent $OMSHOST $PORT_AGENT
  323. ciphercheck BIPublisher $OMSHOST $PORT_BIP
  324. ciphercheck NodeManager $OMSHOST $PORT_NODEMANAGER
  325. ciphercheck OHSadmin $OMSHOST $PORT_OHS_ADMIN
  326. ciphercheck OMSconsole $OMSHOST $PORT_OMS
  327. ciphercheck OMSproxy $OMSHOST $PORT_OMS_JAVA
  328. ciphercheck OMSupload $OMSHOST $PORT_UPL
  329. ciphercheck OPMN $OMSHOST $PORT_OPMN
  330. ciphercheck WLSadmin $OMSHOST $PORT_ADMINSERVER
  331.  
  332. echo -e "\n(3) Checking self-signed certificates at SSL/TLS endpoints (see notes 1367988.1, 1399293.1, 1593183.1, 1527874.1, 123033.1, 1937457.1)"
  333. certcheck Agent $OMSHOST $PORT_AGENT
  334. certcheck BIPublisher $OMSHOST $PORT_BIP
  335. certcheck NodeManager $OMSHOST $PORT_NODEMANAGER
  336. certcheck OHSadmin $OMSHOST $PORT_OHS_ADMIN
  337. certcheck OMSconsole $OMSHOST $PORT_OMS
  338. certcheck OMSproxy $OMSHOST $PORT_OMS_JAVA
  339. certcheck OMSupload $OMSHOST $PORT_UPL
  340. certcheck OPMN $OMSHOST $PORT_OPMN
  341. certcheck WLSadmin $OMSHOST $PORT_ADMINSERVER
  342.  
  343.  
  344. echo -e "\n(4) Checking EM12c Oracle home patch levels against $PATCHDATE baseline (see notes 1664074.1, 1900943.1, 822485.1, 1470197.1)"
  345.  
  346. echo -ne "\n\t(4a) OMS ($OMS_HOME) PSU2 Patch 19830994... "
  347. opatchcheck OMS $OMS_HOME 19830994
  348.  
  349. echo -ne "\n\t(4b) BI Publisher ($BIP_HOME) CPUJAN2015 Patch 19822893... "
  350. opatchcheck BIP $BIP_HOME 19822893
  351.  
  352. echo -ne "\n\t(4b) BI Publisher ($BIP_HOME) Merge Patch 20444447... "
  353. opatchcheck BIP $BIP_HOME 20444447
  354.  
  355. echo -ne "\n\t(4c) AS Common ($COMMON_HOME) CVE-2015-0426 Oracle Help Patch 20075252... "
  356. opatchcheck COMMON $COMMON_HOME 20075252
  357.  
  358. echo -ne "\n\t(4d) WebLogic Server ($WL_HOME) 10.3.6.0.10 12UV Patch 19637463... "
  359. wlspatchcheck $WL_HOME 19637463
  360.  
  361. echo -ne "\n\t(4e) WebTier ($WEBTIER_HOME) CPUJAN2015 Patch 19948000... "
  362. opatchcheck WebTier $WEBTIER_HOME 19948000
  363.  
  364. echo -ne "\n\t(4e) WebTier ($WEBTIER_HOME) CVE-2014-4212 OPMN Patch 19345576... "
  365. opatchcheck WebTier $WEBTIER_HOME 19345576
  366.  
  367. echo -ne "\n\t(4f) OMS ($OMS_HOME) DB PLUGIN BUNDLE 12.1.0.7.1 20384921... "
  368. opatchautocheck OMS $OMS_HOME 20384921
  369.  
  370. echo -ne "\n\t(4g) OMS ($OMS_HOME) FMW PLUGIN BUNDLE 12.1.0.7.1 20384966... "
  371. opatchautocheck OMS $OMS_HOME 20384966
  372.  
  373. echo -ne "\n\t(4h) OMS ($OMS_HOME) MOS PLUGIN BUNDLE 12.1.0.6.3 19678601... "
  374. opatchautocheck OMS $OMS_HOME 19678601
  375.  
  376. echo -ne "\n\t(4i) OMS ($OMS_HOME) EXADATA PLUGIN BUNDLE 12.1.0.6.5 20420073... "
  377. opatchautocheck OMS $OMS_HOME 20420073
  378.  
  379. echo -ne "\n\t(4j) OMS CHAINED AGENT HOME ($AGENT_HOME) EM-AGENT BUNDLE 12.1.0.4.6 20423395... "
  380. opatchcheck Agent $AGENT_HOME 20423395
  381.  
  382. echo -ne "\n\t(4j) OMS CHAINED AGENT HOME ($AGENT_HOME) Merge Patch 18502187... "
  383. opatchcheck Agent $AGENT_HOME 18502187
  384.  
  385. echo -ne "\n\t(4j) OMS CHAINED AGENT HOME ($AGENT_HOME) JDBC Security Patch 18721761... "
  386. opatchcheck Agent $AGENT_HOME 18721761
  387.  
  388. echo -ne "\n\t(4k) OMS CHAINED AGENT DB PLUGIN ($AGENT_DB_PLUGIN_HOME) DB PLUGIN BUNDLE 12.1.0.7.1 AGENT-SIDE 20487484... "
  389. opatchcheck AgentDBPlugin $AGENT_DB_PLUGIN_HOME 20487484
  390.  
  391. echo -ne "\n\t(4l) OMS CHAINED AGENT FMW PLUGIN ($AGENT_FMW_PLUGIN_HOME) FMW PLUGIN BUNDLE 12.1.0.7.1 AGENT-SIDE 20487548... "
  392. opatchcheck AgentFMWPlugin $AGENT_FMW_PLUGIN_HOME 20487548
  393.  
  394. if [[ $RUN_DB_CHECK -eq 1 ]]; then
  395.  
  396.     if [[ "$REPOS_DB_VERSION" == "11.2.0.4.0" ]]; then
  397.         echo -ne "\n\t(4m) OMS REPOSITORY DATABASE HOME ($REPOS_DB_HOME) PSU 11.2.0.4.5 19769489... "
  398.         opatchcheck ReposDBHome $REPOS_DB_HOME 19769489
  399.  
  400.         echo -ne "\n\t(4m) OMS REPOSITORY DATABASE HOME ($REPOS_DB_HOME) ORACLE JAVAVM COMPONENT 11.2.0.4.2 DATABASE PSU (JAN2015) 19877440... "
  401.         opatchcheck ReposDBHome $REPOS_DB_HOME 19877440
  402.     fi
  403.  
  404.     if [[ "$REPOS_DB_VERSION" == "12.1.0.2.0" ]]; then
  405.         echo -ne "\n\t(4m) OMS REPOSITORY DATABASE HOME ($REPOS_DB_HOME) Required Patch 20243268... "
  406.         opatchcheck ReposDBHome $REPOS_DB_HOME 20243268
  407.  
  408.         echo -ne "\n\t(4m) OMS REPOSITORY DATABASE HOME ($REPOS_DB_HOME) PSU 12.1.0.2.2 19769480... "
  409.         opatchcheck ReposDBHome $REPOS_DB_HOME 19769480
  410.  
  411.         echo -ne "\n\t(4m) OMS REPOSITORY DATABASE HOME ($REPOS_DB_HOME) ORACLE JAVAVM COMPONENT 12.1.0.2.2 ORACLE JAVAVM COMPONENT 12.1.0.2.2 DATABASE PSU (JAN2015) 19877336... "
  412.         opatchcheck ReposDBHome $REPOS_DB_HOME 19877336
  413.     fi
  414. fi
  415.  
  416. echo
  417.  
  418. echo "Visit https://pardydba.wordpress.com/2015/03/09/em12c-r4-ssl-security-checkup-script/ for the latest version."
  419.  
  420. echo
  421.  
  422. exit
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!