[MacPorts] #68108: lastpass-cli 1.3.4 is broken due to certificate pinning

MacPorts noreply at macports.org
Fri Sep 1 09:08:21 UTC 2023


#68108: lastpass-cli 1.3.4 is broken due to certificate pinning
--------------------+--------------------------
 Reporter:  fs111   |      Owner:  (none)
     Type:  defect  |     Status:  new
 Priority:  Normal  |  Milestone:
Component:  ports   |    Version:
 Keywords:          |       Port:  lastpass-cli
--------------------+--------------------------
 lastpass-cli apparently does certificate pinning, meaning they have to
 change the code every time the certificates on lastpass.com are rotated.
 The certs have been rotated and therefore all old releases are broken. The
 new release 1.3.5 has a fix:

 new release: https://github.com/lastpass/lastpass-cli/releases/tag/v1.3.5

 the commit:  https://github.com/lastpass/lastpass-
 cli/commit/11cc281498027da39bd7ec3ddd2c0bbf8dc46083

 I also opened a bug that they stop the pinning:
 https://github.com/lastpass/lastpass-cli/issues/657

-- 
Ticket URL: <https://trac.macports.org/ticket/68108>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list