{"id":26976,"date":"2019-10-18T16:16:27","date_gmt":"2019-10-18T20:16:27","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=26976"},"modified":"2019-11-05T20:43:10","modified_gmt":"2019-11-06T01:43:10","slug":"beware-apple-security-certificates-after-october-24","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2019\/10\/18\/beware-apple-security-certificates-after-october-24\/","title":{"rendered":"Beware Apple Security Certificates After October 24"},"content":{"rendered":"

Howard Oakley<\/a>:<\/p>\n

\n

If you have macOS or other Apple installers, chances are that they’ll be signed, or use as an intermediate certificate authority, by a certificate which expires very shortly. If you were to try installing that package, macOS will report that it’s damaged, and can’t be used. The installers affected can be very recent: I’ve checked an Installer package for the Mojave 10.14.6 Supplemental Update 2, which shipped on 23 September, just a month from the date of expiration, and both its intermediate and user certificates expire on 24 October 2019.<\/p>\n

[…]<\/p>\n

This is unfortunate timing, as it’s when those migrating to Catalina are likely to be downloading Mojave installers to give them a safe way back if necessary, or to use in a VM provided by Parallels Desktop or VMWare, for instance. In a week or two you could discover that those installers can no longer run because of this expiration. The only real solution is to wait until after 24 October, then download all important Apple installers, which should have new certificates.<\/p>\n<\/blockquote>\n\n

Previously:<\/p>\n