Security-Privacy on smcleod.net https://smcleod.net/categories/security-privacy/ Recent content in Security-Privacy on smcleod.net smcleod.net https://smcleod.net/logo-painted-350.svg https://smcleod.net/logo-painted-350.svg Hugo -- 0.152.2 en Fri, 10 Jul 2026 12:03:26 +1000 Delete Government-Linked Certificate Authorities in OSX https://smcleod.net/2015/02/delete-government-linked-certificate-authorities-in-osx/ Mon, 23 Feb 2015 00:00:00 +0000 https://smcleod.net/2015/02/delete-government-linked-certificate-authorities-in-osx/ <p><a href="http://zitseng.com/archives/7489">Inspired by http://zitseng.com/archives/7489</a></p> <ul> <li><a href="https://github.com/sammcj/delete-unknown-root-ca">Source (Github)</a></li> </ul> <p><strong>WARNINGS</strong></p> <ul> <li>Do not run unless you understand what this is doing</li> <li>The CA system is broken by design - This is not a fix for that</li> <li>This is merely a band-aid for those interested or concerned about these root CAs</li> </ul> <h2 id="usage">Usage</h2> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-shell" data-lang="shell"><span class="line"><span class="cl">chmod +x delete_gov_roots.sh </span></span><span class="line"><span class="cl">./delete_gov_roots.sh </span></span></code></pre></div><p>You&rsquo;ll be prompted for your password as root access is required to delete system-wide root certs.</p> <p><img alt="sha1" loading="lazy" src="https://cloud.githubusercontent.com/assets/862951/6326428/a261ae24-bba5-11e4-9f69-5aeb36257077.png"></p> <h2 id="see-also">See Also</h2> <ul> <li><a href="http://convergence.io">http://convergence.io</a></li> <li><a href="https://addons.mozilla.org/en-US/firefox/addon/certificate-patrol/">https://addons.mozilla.org/en-US/firefox/addon/certificate-patrol/</a></li> <li><a href="https://github.com/kirei/catt">https://github.com/kirei/catt</a></li> <li><a href="https://www.eff.org/observatory">https://www.eff.org/observatory</a></li> <li><a href="https://bugzilla.mozilla.org/show_bug.cgi?id=478418">https://bugzilla.mozilla.org/show_bug.cgi?id=478418</a></li> <li><a href="http://support.apple.com/en-us/HT202858">http://support.apple.com/en-us/HT202858</a></li> <li><a href="https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning">https://www.owasp.org/index.php/Certificate_and_Public_Key_Pinning</a></li> </ul>