Comment Comment by asveikau > They don't. They use the OS certificate store,It appears to me they do, and that is why everybody is saying to patch your python, go, and node infrastructure separately from /etc/ssl.> which on all platforms has already had this certificate revoked from it.I know of two systems which this doesn't seem to be the case as of yesterday.1. I manually edited cert.pm on OpenBSD. I don't see the OpenBSD errata yet.2. As of yesterday Mac safari was still vulnerable when I tried. parent asveikau 10 days ago
It appears to me they do, and that is why everybody is saying to patch your python, go, and node infrastructure separately from /etc/ssl.
> which on all platforms has already had this certificate revoked from it.
I know of two systems which this doesn't seem to be the case as of yesterday.
1. I manually edited cert.pm on OpenBSD. I don't see the OpenBSD errata yet.
2. As of yesterday Mac safari was still vulnerable when I tried.