<html><head></head><body><div class="yahoo-style-wrap" style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:13px;"><div dir="ltr" data-setdir="false">I am using pulp/katello and the way katello is setup is all "protected" repos are shared via https and setup with client cert checking (subscription-manager), while all "unprotected" repos are shared via unencrypted-http but no certificate checking. </div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">By default katello wants to use unprotected/unencrypted http for sharing "kickstart" repos for clients to access to boot off of during the first phase of kickstart. Anaconda/kickstart can't use self-signed SSL certs which I assume is what they were thinking, but https it works fine for commercial certs.</div><div dir="ltr" data-setdir="false"><br></div><div dir="ltr" data-setdir="false">So I was wondering if there is a way to just disable all client cert checking and then I can point the kickstart at the protected copy of the repo instead.</div></div></body></html>