Security1 hOctober 29, 2026, 07:07

macOS certificate revocation misses curl and git that read a flat file

Apple blocked twelve certificates on 19 October 2026 and one more, emSign ECC Root CA G3, on 23 October, but tools like curl and git read /etc/ssl/cert.pem and do not check revocation. Apple's support article 149555 confirms these tools ignore the block list, and manual edits to the file can be overwritten by an OS update.

DEV Community

Open source

macOS certificate revocation misses curl and git that read a flat file

Apple blocked 12 certificates on 19 October and one more on 23 October 2026
curl and git read /etc/ssl/cert.pem and skip revocation checks
A macOS update can silently revert manual edits to the file
Homebrew and Python certifi maintain separate trust stores

#Apple#macOS#Curl

Apple revokes trust for eight compromised eMudhra certificates

Security

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Software

Gemini app for macOS adds iMessage send and read integration

Security

macOS certificate revocation misses curl and git that read a flat file

Apple revokes trust for eight compromised eMudhra certificates

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Gemini app for macOS adds iMessage send and read integration

GraphWorm backdoor survives token revocation via OneDrive C2