macOS tools read a cert file that still includes the eMudhra/emSign root

A Mastodon post by Filippo Valsorda says macOS's built-in curl, git, pip, python3, perl, ruby and openssl read /etc/ssl/cert.pem, which still contains the emSign root. The post adds that these tools don't check revocation the way Apple's Secure Transport libraries do.

Timeline

1. 21 Oct, 12:13 UTCFirst appeared on Filippo Valsorda

Top sources

• The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSiFilippo Valsorda