Michael Egorov
@newmichwill
Curve and Yield Basis
/
加入 November 2013
543 正在關注 43.3K 粉絲
World is not safu
Be careful when developing on macOS now. Apple did not yet revoke the vulnerable certificates, so /usr/bin/curl still trusts them because.
$ curl
Your client successfully connected to the site. That's bad!
Workaround:
mkdir -p ~/.config/certs
awk '/^(###|===) /{skip=0}
/^=== .*\/CN=(AAA Certificate Services|emSign ECC Root CA - G3)$/{skip=1}
!skip' /etc/ssl/cert.pem > ~/.config/certs/cert.pem
echo 'export CURL_CA_BUNDLE="$HOME/.config/certs/cert.pem"' >> ~/.zshrc
source ~/.zshrc
This only fixes curl. Update certifi, Go, pip/Python, Node, Docker images etc. separately.
顯示更多
