Post

installing 25 gigabytes in the hopes that /etc/ssl/cert.pem has been updated

…I wonder how many people Apple has maintaining the UNIX side of macOS. Such an update feels like a relatively simple thing, on their side. 🤷🏻‍♂️

removing the root is simple but the problem cannot be fully fixed by simply updating it. one of the roots that signed the problematic intermediate is otherwise valid and should not itself be revoked, but there’s no way to put a CRL in that file