<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">You're (probably - seems plausible but I haven't verified it myself) right that that's annoying and fixable.<div class=""><br class=""></div><div class="">But there's a big reason to think carefully about whether to do that. If something is old enough that it isn't receiving certificate updates, it probably isn't receiving security updates either. And the same applications and functionality that need current root certificates to work are also likely to be common attack points.</div><div class=""><br class=""></div><div class="">So at the very least, anything that makes it easier to take such a risk should come with a prominent warning, IMO.</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Oct 29, 2021, at 07:12, René J.V. Bertin <<a href="mailto:rjvbertin@gmail.com" class="">rjvbertin@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi,<br class=""><br class="">Users of older Apple OSes that are no longer receiving updates probably noticed that Safari and Chrome-based browsers no longer connect to lots of sites because a crucial root certificate has expired.<br class=""><br class="">Answer 1 to <a href="https://apple.stackexchange.com/questions/422332/how-do-i-update-my-root-certificates-on-an-older-version-of-mac-os-e-g-el-capi" class="">https://apple.stackexchange.com/questions/422332/how-do-i-update-my-root-certificates-on-an-older-version-of-mac-os-e-g-el-capi</a> provides an easy solution, but you need access to an up-to-date OS install.<br class=""><br class="">These are not proprietary to Apple so I presume it should be possible to provide the suggested `rootcerts.pem` file via a port - possibly even install it in the post-activate. I had a look but couldn't find if such a port already exists. I think it'd help for lots of people... I'd propose a draft but I'm running 10.9 ... so thanks to anyone picking this up!<br class=""><br class="">R.<br class=""><br class=""></div></div></blockquote></div><br class=""><div class="">
<div dir="auto" style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div><br class=""></div></div></div></div></body></html>