Changes between Initial Version and Version 1 of Ticket #63740, comment 14


Ignore:
Timestamp:
Nov 1, 2021, 4:25:50 PM (3 years ago)
Author:
RJVB (René Bertin)
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #63740, comment 14

    initial v1  
    1313> Which one did you install to get macOS 10.11 working again?
    1414
    15 The 10.11 system was done remotely with me instructing my favorite "Jane User" via IM so we kept it to just the ISRG certificate which solves most issues. On my own 10.9 system I also installed the .pem file from the current `port:apple-pki-bundle`. Stupidly I didn't check if any were absent or out-of-date first, but I did notice (on Linux) that you need them to connect to certain Apple sites.
     15The 10.11 system was done remotely with me instructing my favorite "Jane User" via IM so we kept it to just the ISRG certificate. Updating just that one solves the connection issues with most common sites. On my own 10.9 system I also installed the .pem file from the current `port:apple-pki-bundle`. Stupidly I didn't check if any were absent or out-of-date first, but I did notice (on Linux) that you need them to connect to certain Apple sites.
    1616
    1717If in any way possible I'd ship the collection in an up-to-date `System Roots`. If the iOS equivalent has different certificates there must a reason why Apple make that so (and why that is not a problem) - I don't see what we would need them for ... and I could imagine that Apple might object to making them easily available on Mac.