On Sun, 7 Nov 2021, Bill Cole wrote:

I have my own Mojave machines working without a problem after removing the bad certificate from /etc/ssl/cert.pem. The one that starts like this:

[...]

Intrigued, I checked my own:

    mackie:~ dave$ grep "Not After" /etc/ssl/cert.pem


            Not After : Aug 13 23:59:00 2018 GMT
            Not After : Aug 22 16:41:51 2018 GMT
                Not After: Aug 22 16:41:51 2018 GMT
            Not After : Aug  1 23:59:59 2028 GMT
            Not After : Jan 28 12:00:00 2028 GMT
            Not After : Dec 15 08:00:00 2021 GMT
            Not After : Mar 18 10:00:00 2029 GMT
            Not After : Dec 31 23:59:59 2020 GMT
            Not After : Dec 31 23:59:59 2020 GMT
            Not After : Jul 16 23:59:59 2036 GMT
            Not After : Jul 16 23:59:59 2036 GMT
            Not After : Jan 18 23:59:59 2038 GMT
            Not After : Dec  1 23:59:59 2037 GMT
            Not After : Jul 16 23:59:59 2036 GMT
            Not After : Sep 17 19:46:36 2036 GMT
            Not After : Jun 26 00:19:54 2019 GMT
            Not After : May 25 16:39:40 2019 GMT
                Not Before: May 25 16:09:40 1999 GMT, Not After: May 25 
16:09:40 2019 GMT
            Not After : Nov 10 00:00:00 2031 GMT
            Not After : Nov 10 00:00:00 2031 GMT
            Not After : Nov 10 00:00:00 2031 GMT
            Not After : Jun 21 04:00:00 2020 GMT
            Not After : Jun 21 04:00:00 2020 GMT
            Not After : May 21 04:00:00 2022 GMT
            Not After : Mar  4 05:00:00 2019 GMT
            Not After : Jul 16 23:59:59 2036 GMT
            Not After : Dec  1 23:59:59 2037 GMT
            Not After : Mar  4 05:00:00 2029 GMT
            Not After : Mar  4 05:00:00 2029 GMT
            Not After : Jun 29 17:06:20 2034 GMT
            Not After : Dec 31 23:59:59 2037 GMT
            Not After : Jun 29 17:39:16 2034 GMT
            Not After : Dec 31 23:59:59 2037 GMT
            Not After : Dec 31 23:59:59 2037 GMT
            Not After : Dec 31 23:59:01 2039 GMT
            Not After : Jul 16 23:59:59 2036 GMT
            Not After : Jan 18 23:59:59 2038 GMT
            Not After : Dec  1 23:59:59 2037 GMT
            Not After : May 30 10:48:38 2020 GMT
            Not After : Dec 31 23:59:59 2028 GMT
            Not After : Jul  9 18:19:22 2019 GMT
            Not After : May 12 23:59:00 2025 GMT
            Not After : Jul  9 23:59:00 2019 GMT
            Not After : Oct  1 23:59:59 2033 GMT
            Not After : Oct  1 23:59:59 2033 GMT
            Not After : Oct 25 08:30:35 2036 GMT
            Not After : Oct 25 08:36:00 2036 GMT
            Not After : Oct 25 08:32:46 2036 GMT
            Not After : Sep 30 14:01:15 2021 GMT
            Not After : Dec  6 15:08:21 2028 GMT

So I wonder how widespread this problem is? And I'm not happy with those that are set way in the future; I heard somewhere that 5 years is the recommended max.

-- Dave

Reply via email to