[MacPorts] #63740: [apple-pki-bundle] : extend to cover all certificates from "System Roots"

MacPorts noreply at macports.org
Mon Nov 1 15:15:55 UTC 2021


#63740: [apple-pki-bundle] : extend to cover all certificates from "System Roots"
-------------------------------+--------------------
  Reporter:  RJVB              |      Owner:  (none)
      Type:  enhancement       |     Status:  new
  Priority:  Normal            |  Milestone:
 Component:  ports             |    Version:
Resolution:                    |   Keywords:
      Port:  apple-pki-bundle  |
-------------------------------+--------------------

Comment (by essandess):

 > I can confirm explicitly that adding the missing or updated certificates
 to the {{{System}}} store does indeed restore connectivity to the affected
 sites.

 Great! That’s simple. What about providing a bash one-liner in the notes
 or a script that adds CAs to the {{{System}}} keychain, per macosguy’s
 suggestion?

 The less simple thing is that there appear to be different Apple PKI
 bundles: the one at https://www.apple.com/certificateauthority/, the macOS
 {{{System Roots}}}, and the ones on iOS.

 Which one did you install to get macOS 11 working again?

 Also, port {{{apple-pki-bundle}}} must be updated to include all of
 {{{System Roots}}}, so I’ll issue a PR for that too.

-- 
Ticket URL: <https://trac.macports.org/ticket/63740#comment:13>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list