[pca] back and annoyed

[Martin Paul]

Hi Don,

> I don't believe that there are any plans to move the patchdiag.xref 
> file to Akamai, but I will try to get confirmation.

Ok, thanks. I hope that downloads will really be more stable now when 
going through Akamai - after all there are now at least three servers 
and two redirects involved for each download, all of which could fail ..

>>> http://sunsolve.sun.com/search/document.do?assetkey=1-9-240066-1 was 
>>> updated last Friday to reflect this information.
> If you feel that there is anything missing from this document that 
> you feel would be useful please let me know and I can get it added.

AFAIK, wget 1.11 (this exact version) will not work at all with the 
described method. It was this version where download from SunSolves with 
--http-user and --http-passwd suddenly stopped working. I talked about 
that to Micah Cowan, and he fixed it by adding --auth-no-challenge to 
wget in 1.11.1. That's why I use a different method to provide SOA data 
in pca, which works with all versions of wget.

One thing that's been a nuisance for a long time, and which you list as 
well:

   Use the "--no-check-certificate". This is not available with earlier
   versions of wget and may result in problems with certificates.

The reason for all those problems with the certificate is that on 
Solaris there are no default CA certs installed with wget or OpenSSL. 
When trying e.g. "wget https://sunsolve.sun.com/patchdiag.xref" on some 
Linux system, it will work without a flaw, because some default CA certs 
are delivered with the OS. I always wondered why doesn't do something 
similar with Solaris - as the certs come on DVD or from a checksummed 
ISO image, this should be pretty safe. I understand that this is not 
part of the area you work in, but still wanted to bring it up.

Martin.