Apple's command-line utilities are still exposed to the recent eMudhra weak certificate problem, and will be until an pending software update.
MacOS command-line utilities do use the OS-built-in certificate store, but they (curl, git, python, pip, ruby, bunch of others including openssl, alarmingly) are not built to know about Apple's revocation lists.
So, something to have on the, ahem, radar. More somewhat unsatisfying information here: https://support.apple.com/en-us/149555
mhoye but seasonally spooky
npub1qa…pxq6d
2026-10-28 14:04:30 UTC
Author Public Key
npub1qaer5wy50n05r7y0mrlzctu8chmrtnpw9ke44cr96plpka3d0a4qwpxq6dSeen on
wss://relay.momostr.pinkPublished at
2026-10-28 14:04:30 UTCEvent JSON
{
"id": "58f6f2f4b809a87bbfd2bae2d2b56a3ab3ed58701a207fd0a498c6c7ce5123f3",
"pubkey": "07723a38947cdf41f88fd8fe2c2f87c5f635cc2e2db35ae065d07e1b762d7f6a",
"created_at": 1793196270,
"kind": 1,
"tags": [
[
"proxy",
"https://cosocial.ca/@mhoye/117518910787911157",
"web"
],
[
"proxy",
"https://cosocial.ca/users/mhoye/statuses/117518910787911157",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cosocial.ca/users/mhoye/statuses/117518910787911157",
"pink.momostr"
],
[
"-"
]
],
"content": "Apple's command-line utilities are still exposed to the recent eMudhra weak certificate problem, and will be until an pending software update. \n\nMacOS command-line utilities do use the OS-built-in certificate store, but they (curl, git, python, pip, ruby, bunch of others including openssl, alarmingly) are not built to know about Apple's revocation lists. \n\nSo, something to have on the, ahem, radar. More somewhat unsatisfying information here: https://support.apple.com/en-us/149555",
"sig": "8e793b327d20c7316ebff4aaf058cb2d7046b4a267d97115408ee44f8bfe86677991db2cd05b9caf4872c39c5a58a00003dd473f7c42dd7f007fdaf04803dff1"
}