added more documentation

Former-commit-id: 1f3ef3a136bf05da797236b898371b4f7edb56a4
This commit is contained in:
Jeremy Long
2015-05-04 06:21:46 -04:00
parent c0f9a382b3
commit 0c5dfdbe24
4 changed files with 85 additions and 0 deletions

View File

@@ -0,0 +1,16 @@
Mirroring the NVD from NIST
===========================
Several organizations have opted to mirror the NVD on an internal server
and have the dependency-check clients simply pull the updates from the
mirror. This setup is fairly simple:
1) Setup a nightly job to pull down the latest NVD files files from NIST
* See the [Nist-Data-Mirror](https://github.com/stevespringett/nist-data-mirror/)
project on github.
* All of the NVD
2) Configure the dependency-check clients to use the internal CVE urls. Note, all four URLs
must be specified (see the configuration for the specific dependency-check client used):
* cveUrl12Modified
* cveUrl20Modified
* cveUrl12Base
* cveUrl20Base