The Apple curl security incident 12604

The Apple curl security incident 12604(daniel.haxx.se)

15 points by ar0 2 years ago | 2 comments

mdaniel 2 years ago |

Well, I mean, come on that does make those corporate MITM tools work better, dontit? I haven't checked it, but there's a non-zero chance that curl.exe on win32 "helps" in the same way, assuming there's an equivalent libressl in WSL

gecko 2 years ago | |

I'm not sure you understand how WSL works: it's just the native `curl` binary for whatever Linux distro you're using in WSL. On both Ubuntu and OpenSuSE, which are the two I have installed, --cacerts works as expected, because of course it does.

Separately, Microsoft bundles curl.exe as part of Windows since somewhere in the later Windows 10 or early Windows 11 releases, I forget which. This also appears to be honoring --cacerts.

So no, this seems to very much be an Apple problem.