Harry Sintonen on Nostr: #Apple is doing stupid things in their own #curl builds: When --cacert option is used ...
#Apple is doing stupid things in their own #curl builds: When --cacert option is used with #macOS provided curl, it falls back and checks the system CA store in case the provided set of CA certs fail the verification. This is not what is supposed to be happening, and HEAD builds of curl error out as expected (and documented). -
https://daniel.haxx.se/blog/2024/03/08/the-apple-curl-security-incident-12604/Published at
2024-03-08 22:20:45Event JSON
{
"id": "52932afec31ccc738aca8e666ee45159d19b732d4512714bf07412be65325739",
"pubkey": "029bf35c63e8b20564400c0ab35fe3f14bc6c64ff6e3ba1c115271bd053b7e8c",
"created_at": 1709936445,
"kind": 1,
"tags": [
[
"t",
"apple"
],
[
"t",
"curl"
],
[
"t",
"macos"
],
[
"proxy",
"https://infosec.exchange/users/harrysintonen/statuses/112062394886381002",
"activitypub"
]
],
"content": "#Apple is doing stupid things in their own #curl builds: When --cacert option is used with #macOS provided curl, it falls back and checks the system CA store in case the provided set of CA certs fail the verification. This is not what is supposed to be happening, and HEAD builds of curl error out as expected (and documented). - https://daniel.haxx.se/blog/2024/03/08/the-apple-curl-security-incident-12604/",
"sig": "c75862f795e00b2bfddb4c6d672017ac54973f81365e3e73fa875148eb923f8150a4b48561856f7b838527657c7d85a22ad37dbd109ca7894da32b8623ab523d"
}
