Lukasz Olejnik(@lukOlejnik):Be careful when developing on macOS now. Apple did not yet revoke the vulnerable certificates, so /usr/bin/curl still trusts them because. $ curl https://t.co/tapcS4Cc5x Your client successfully connected to the site. That's bad! Workaround: mkdir -p ~/.config/certs awk '/^(###|===) /{skip=0} /^=== .*\/CN=(AAA Certificate Services|emSign ECC Root CA - G3)$/{skip=1} !skip' /etc/ssl/cert.pem > ~/.config/certs/cert.pem echo 'export CURL_CA_BUNDLE="$HOME/.config/certs/cert.pem"' >> ~/.zshrc source ~/.zshrc This only fixes curl. Update certifi, Go, pip/Python, Node, Docker images etc. separately.

2026.10.21 06:19

Be careful when developing on macOS now. Apple did not yet revoke the vulnerable certificates, so /usr/bin/curl still trusts them because. $ curl Your client successfully connected to the site. That's bad! Workaround: mkdir -p ~/.config/certs awk '/^(###|===) /{skip=0} /^=== .*\/CN=(AAA Certificate Services|emSign ECC Root CA - G3)$/{skip=1} !skip' /etc/ssl/cert.pem > ~/.config/certs/cert.pem echo 'export CURL_CA_BUNDLE="$HOME/.config/certs/cert.pem"' >> ~/.zshrc source ~/.zshrc This only fixes curl. Update certifi, Go, pip/Python, Node, Docker images etc. separately.

287

커뮤니티로 전달

인기 있는 사용자