Hacker News new | ask | show | jobs
by retromario 2049 days ago
How does one disable the signature validation?
1 comments
Reason077 2049 days ago
In /etc/hosts:

  0.0.0.0 ocsp.apple.com
then:

  sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder # refresh hosts
Or alternatively:

  defaults write /Library/Preferences/com.apple.security.revocation.plist CRLStyle None
  defaults write /Library/Preferences/com.apple.security.revocation.plist OCSPStyle None
  defaults write com.apple.security.revocation.plist CRLStyle None
  defaults write com.apple.security.revocation.plist OCSPStyle None
link
zerocrates 2049 days ago
Disabling OCSP (I believe you have a typo in your hosts file suggestion, by the way) presumably doesn't actually disable notarization, just the OCSP (checking for revoked certificates) part of that process.
link
Reason077 2049 days ago
Yes, thanks. Edited to fix.
link