Lukasz Olejnik
@lukOlejnik
Security & Privacy. Data Protection. Research & Development. Engineering. Analyst. Policy. W3C. Consultant. Author. me@lukaszolejnik.com
Ph.D, LL.M. @warstudies
参加 March 2013
267 フォロー中 32.4K ファン
Be careful when developing on macOS now. Apple did not yet revoke the vulnerable certificates, so /usr/bin/curl still trusts them because.
$ curl
Your client successfully connected to the site. That's bad!
Workaround:
mkdir -p ~/.config/certs
awk '/^(###|===) /{skip=0}
/^=== .*\/CN=(AAA Certificate Services|emSign ECC Root CA - G3)$/{skip=1}
!skip' /etc/ssl/cert.pem > ~/.config/certs/cert.pem
echo 'export CURL_CA_BUNDLE="$HOME/.config/certs/cert.pem"' >> ~/.zshrc
source ~/.zshrc
This only fixes curl. Update certifi, Go, pip/Python, Node, Docker images etc. separately.
もっと見る
