top | item 39647025

The Apple curl security incident 12604

15 points| ar0 | 2 years ago |daniel.haxx.se

2 comments

order

mdaniel|2 years ago

Well, I mean, come on that does make those corporate MITM tools work better, dontit? I haven't checked it, but there's a non-zero chance that curl.exe on win32 "helps" in the same way, assuming there's an equivalent libressl in WSL

gecko|2 years ago

I'm not sure you understand how WSL works: it's just the native `curl` binary for whatever Linux distro you're using in WSL. On both Ubuntu and OpenSuSE, which are the two I have installed, --cacerts works as expected, because of course it does.

Separately, Microsoft bundles curl.exe as part of Windows since somewhere in the later Windows 10 or early Windows 11 releases, I forget which. This also appears to be honoring --cacerts.

So no, this seems to very much be an Apple problem.