3 ms·
I attempted to remove all StartCom certs from the OS X keychain, apparently you can't do it even as root. You have to boot into the recovery partition first.
by rblatz 10y ago
I attempted to remove all StartCom certs from the OS X keychain, apparently you can't do it even as root. You have to boot into the recovery partition first.
http://superuser.com/questions/1070664/security-seckeychainitemdelete-unixoperation-not-permitted-on-os-x-when-tryi http://superuser.com/questions/1070664/security-seckeychaini...
Edit: Don't delete them, instead right click each certificate, select "Get Info", Expand the "Trust" panel, and set it to "Never Trust"
- aianus 10y agoYou don't have to remove them, you can just set the 'Trust' setting to 'Never Trust'.
- joosters 10y agoI can't remember whether it was MacOS or Windows, but at least one OS will sometimes re-install a 'standard' CA certificate if you delete it. Setting 'never trust' is the most reliable way to kick out the CA as it ensures that it stays out.
- rblatz 10y agoThanks! I assumed that was an option I just didn't see it at first.