4 ms·
In /etc/hosts: 0.0.0.0 ocsp.apple.com then: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder # refresh hosts Or alternatively: defaults
by Reason077 6y ago
In /etc/hosts:
0.0.0.0 ocsp.apple.com
then:
sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder # refresh hosts
Or alternatively:
defaults write /Library/Preferences/com.apple.security.revocation.plist CRLStyle None
defaults write /Library/Preferences/com.apple.security.revocation.plist OCSPStyle None
defaults write com.apple.security.revocation.plist CRLStyle None
defaults write com.apple.security.revocation.plist OCSPStyle None
- zerocrates 6y agoDisabling OCSP (I believe you have a typo in your hosts file suggestion, by the way) presumably doesn't actually disable notarization, just the OCSP (checking for revoked certificates) part of that process.
- Reason077 6y agoYes, thanks. Edited to fix.