Mac OS X Server: Software Update Certificate expiration

由于苹果系统的软件更新包中使用的证书将在2012年3月23日过期，所以在22日，苹果仓促发布了一个知道系统管理员更新所有软件更新包的指南，Mac OS X Server: Software Update Certificate expiration。

这个将影响所有Snow Leopard 10.6和Lion 10.7的服务器版本的系统，如果该系统中管理员使用Apple的SUS服务并下载保留了以前的更新软件包的，都需要重新从苹果官方网站重新下载更新。但问题是，苹果只对现在还有效的软件包进行更新，其它"过时"的，苹果不会进行更新。而且这些更新了的证书，有效期只到2019年。

如果不更新，那么负面影响将会是比如客户端软件更新异常和你的服务器中的SUS软件包占用双倍磁盘空间等等。

对于使用reposado工具的来说，该开发者提供下面的方法来更新：

You can then do a repo_sync to get all the updated updates from Apple. Once you've done, that:

Purge all deprecated updates from the server:
   repoutil --force --purge-products all-deprecated

Create a staging branch:
   repoutil --new-branch staging (or what ever name you'd like, this won't be exposed to clients)

Now either cherry-pick updates to add to the staging branch, or add everything:
   repoutil --add-products all staging

Then perhaps selectively remove updates you don't want to offer from the staging branch:
   repoutil --remove-products xxx-yyyy www-zzzz staging

Once you are happy with the contents of the staging branch, copy it to an active branch:
   repoutil --copy-branch staging testing

Rinse and repeat for other active branches. (Meaning --  add or remove updates from the staging branch until you are happy with the list, then copy to an active branch.)

When you are done with all your active branches, remove the staging branch:
   repoutil --delete-branch staging

Additionally:
   repoutil --diff branch1 branch2