4 ms·
Does OSX have the same DoD root certs[1] as iOS? Which new root certs came in with this update? [1] https://support.apple.com/kb/ht5012 https://support.apple.
by eik3_de 13y ago
Does OSX have the same DoD root certs[1] as iOS?
Which new root certs came in with this update?
[1] https://support.apple.com/kb/ht5012 https://support.apple.com/kb/ht5012 search "DoD"
- mpyne 13y agoDoD has its own smartcard-based PKI, which is what those certs are tied into. Apple supported those smartcards natively with earlier versions of Mac OS X (though you had to install the root certs yourself) so it wouldn't surprise me at all that Apple is trying to make their gear "out of the box" compatible with DoD's PKI-based web services. Not even necessarily so that you can use Mac in DoD, but so that a soldier, sailor, Marine, airman, etc. can buy a Mac for their own personal use and still login to those damn training sites, pay processing sites, etc. After all, if DoD wanted to do nefarious things with a digitally-signed something or other, they'd just buy the digital cert needed from VeriSign or whatever today's equivalent of DigiNotar is, instead of something so hopelessly obvious. But don't let me interrupt the jerk.
- mpyne 13y agoAlso, Red Hat supports the same: https://admin.fedoraproject.org/pkgdb/acls/name/coolkey https://admin.fedoraproject.org/pkgdb/acls/name/coolkey (CAC is the DoD "Common Access Card" smartcard...)