How does the tool download a bulletin catalog?
When you run ‘security_patch_check -r’ it makes a connection to ftp.itrc.hp.com or the current https server to get the catalog. The tool then checks the time stamp and the checksum of the catalog to verify the whole catalog has been received. When FTP is used, the, the integrity of the catalog is not guaranteed, but when HTTPS is used (the default), the download is secure. The tool starts with HTTPS, and after two minutes falls back to FTP.