Hacker News Reader

Comment by retromario | Hacker News Reader

How does one disable the signature validation?

In /etc/hosts:

  0.0.0.0 ocsp.apple.com

then:

  sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder # refresh hosts

Or alternatively:

  defaults write /Library/Preferences/com.apple.security.revocation.plist CRLStyle None
  defaults write /Library/Preferences/com.apple.security.revocation.plist OCSPStyle None
  defaults write com.apple.security.revocation.plist CRLStyle None
  defaults write com.apple.security.revocation.plist OCSPStyle None

Disabling OCSP (I believe you have a typo in your hosts file suggestion, by the way) presumably doesn't actually disable notarization, just the OCSP (checking for revoked certificates) part of that process.

Yes, thanks. Edited to fix.

Reply on news.ycombinator.com