3 ms·
That's not true. Apple issued a new root certificate using the latest OpenSSL standard. The apps that "expired" were using an out-of-date version. They techn
by dkonofalski 11y ago
That's not true. Apple issued a new root certificate using the latest OpenSSL standard. The apps that "expired" were using an out-of-date version. They technically shouldn't have worked in the first place, but Apple kept renewing the old SHA-1 certificate alongside the current one which allowed these apps to validate, despite using a cert that was obsolete since 2005.
- mingus68040 11y ago>Apple issued a new root certificate using the latest OpenSSL standard. The apps that "expired" were using an out-of-date version And they were simply following Apple's recommendation to statically link OpenSSL. An app which hasn't been updated in a year or two could easily fall into this trap.