If I tried to update the usual way:

donald@frodo:~$ pfexec pkg update

No updates available for this image.

The listed publisher is:

donald@frodo:~$ pfexec pkg publisher

PUBLISHER                   TYPE     STATUS P LOCATION

solaris                     origin   online F http://pkg.oracle.com/solaris/release/

I downloaded the SSl cert & key and copied them to /var/pkg/ssl

donald@frodo:~$ pfexec pkg unset-publisher solaris

donald@frodo:~$ pfexec pkg publisher

PUBLISHER                   TYPE     STATUS P LOCATION

donald@frodo:~$ sudo pkg set-publisher -k /var/pkg/ssl/Oracle_Solaris_11_Support.key.pem -c /var/pkg/ssl/Oracle_Solaris_11_Support.certificate.pem -G '*' -g https://pkg.oracle.com/solaris/support/ solaris

Password:

pkg set-publisher: The origin URIs for 'solaris' do not appear to point to a valid pkg repository.

Please verify the repository's location and the client's network configuration.

Additional details:

Unable to contact valid package repository

Encountered the following error(s):

Unable to contact any configured publishers.

This is likely a network configuration problem.

Framework error: code: 60 reason: SSL certificate problem, verify that the CA cert is OK. Details:

error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

URL: 'https://pkg.oracle.com/solaris/support'

So I reverted:

donald@frodo:~$ sudo pkg set-publisher -g http://pkg.oracle.com/solaris/release/ solaris

donald@frodo:~$ sudo pkg update -v

No updates available for this image.

donald@frodo:~$ sudo pkg publisher

PUBLISHER                   TYPE     STATUS P LOCATION

solaris                     origin   online F http://pkg.oracle.com/solaris/release/

Any ideas?