HP-UX Software Assistant Reference (November, 2010)

gets updated daily from HP's website. In this case, the downloaded catalog is used, but will
be updated every time SWA checks the catalog's age.
Note: There are two special values, 0 and -1. The value of 0 forces an update. The value of
-1 means the file will not be updated, regardless of age.
-x catalog=${user_dir}/cache/swa_catalog.xml
Usage: Intermediate
Applicable steps: catalog, analyze
This option specifies a locally-cached copy of the catalog, which contains available HP software
and published security bulletins.
Possible values include any absolute or relative path name with appropriate user accessible
permissions.
You may use ${user_dir} at the beginning of this option value. It will be replaced with the
value of the user_dir option (which defaults to $HOME/.swa).
-x catalog_source=https://mycompany.com/wpsl/bin/doc.pl/ \
screen=wpslDownloadPatch/swa_catalog.xml.gz?PatchName= \
/export/patches/swa_catalog.xml.gz
Usage: Intermediate
Applicable steps: catalog
A space-separated list of URLs (appropriately quoted for your shell if applicable) that controls
the remote location and service for obtaining the remote HP software catalog. The catalog
must be internal to your data center; you may not use this option to access the official HP site.
The catalog contains a list of all potential issues, relevant software product updates and patches
that address many issues, along with descriptions of manual actions that address some issues.
HP frequently updates the official catalog on the ITRC as new issues become known and as
new actions are recommended.
The following format is used to specify URLs:
service://[user:password@]hostname.domainname:port
where service is one of the following methods for obtaining the remote catalog:
https Secure/authenticated HTTP
http Unauthenticated HTTP
ftp Unauthenticated FTP
-x crl_check=true
Usage: Advanced
Applicable steps: catalog, download
When set to true, SWA will require the Certificate Revocation List (CRL) to be updated, and
the trusted Certificate Authority (CA) certificate being used to validate the remote server will
be checked.
In the unlikely event that the private certificate of the server pointed to by the catalog_source
option is suspected of being compromised, its certificate will be revoked, and added to a list
of revoked certificates by the CA.
The CRL must be signed by the same certificate chain that signed the host certificate being
checked. Checking the CRL requires regular downloads from the CA, which can lengthen the
SWA run time. If you do not wish to validate a revocation list, set this option to false.
-x crl_url=http://crl.verisign.com/RSASecureServer.crl
Usage: Advanced
Applicable steps: catalog, download
42