Hacker News new | past | comments | ask | show | jobs | submit
woodruffw | on: Apple's git still trusts the compromised eMudhra certificates
Edit: Sorry, I forgot that I had patched my local bundle. This might indeed be an oversight, I'm looking at it now.

Edit 2: This is being fixed now[1]. Everything below is stale.

I couldn't reproduce this:

  % which git
    /opt/homebrew/bin/git
  % git ls-remote https://git-emudhra.we-have-a-problem.com/check.git
    fatal: unable to access 'https://git-emudhra.we-have-a-problem.com/check.git/': SSL certificate problem: unable to get local issuer certificate
Make sure your `git` binary is Homebrew's, not the system/XCode CLT one. If you see `/usr/bin/git`, you're not using the Homebrewed Git.

[1]: https://github.com/Homebrew/homebrew-core/pull/321878

smmeis | parent | next

    $ brew list git --versions
    git 2.56.0_2
    $ which git
    /opt/homebrew/bin/git
    $ which curl
    /opt/homebrew/opt/curl/bin/curl
    $ git ls-remote https://git-emudhra.we-have-a-problem.com/check.git
    2975b9930644b321e18ecae09e29c15b955e6103 HEAD
    2975b9930644b321e18ecae09e29c15b955e6103 refs/heads/main
It seems that the curl formula still needs patching?
bombcar | parent | next

    $ git ls-remote https://git-emudhra.we-have-a-problem.com/check.git && which git
    2975b9930644b321e18ecae09e29c15b955e6103 HEAD
    2975b9930644b321e18ecae09e29c15b955e6103 refs/heads/main
    /opt/homebrew/bin/git
We watch; we wait (I guess)
lukasgelbmann | parent
> “This is being fixed now”

Wow, that was fast!