The Apple curl security incident 12604

daniel.haxx.se

15 pointsar02 comments

Well, I mean, come on that does make those corporate MITM tools work better, dontit? I haven't checked it, but there's a non-zero chance that curl.exe on win32 "helps" in the same way, assuming there's an equivalent libressl in WSL

I'm not sure you understand how WSL works: it's just the native `curl` binary for whatever Linux distro you're using in WSL. On both Ubuntu and OpenSuSE, which are the two I have installed, --cacerts works as expected, because of course it does.

Separately, Microsoft bundles curl.exe as part of Windows since somewhere in the later Windows 10 or early Windows 11 releases, I forget which. This also appears to be honoring --cacerts.

So no, this seems to very much be an Apple problem.

Reply on news.ycombinator.com