Installing Current breaks RH7.3 SSL

On Sat, 2003-02-01 at 10:47, John Berninger wrote:

>         SSL is an absolute requirement, even for testing.  The client
> has the ability to transfer package headers and packages via HTTP, but
> the login information is always transferred using HTTPS.  This is
> because the login information can potentially contain confidential user
> data, which should never be transmitted in the clear.

This REALLY needs to be made clear in the instructions, because the
NRH-current guys imply otherwise.

In fact, I initially set up my server URL as http: rather than https:,
and the initial configure *worked* and my initial attempt to update
*worked*. It was only on subsequent invocations of client side up2date
--configure that I got a traceback.

At that point, I switched to https: and got a certificate validation
failure.

So the point is that this is an obscure bug that occurs several steps
along the road, and should be documented up front.

shap