1165 # |
1165 # |
1166 # This is a comma separated value of one or more case-sensitive strings, each |
1166 # This is a comma separated value of one or more case-sensitive strings, each |
1167 # of which represents a policy for determining if a CA should be distrusted. |
1167 # of which represents a policy for determining if a CA should be distrusted. |
1168 # The supported values are: |
1168 # The supported values are: |
1169 # |
1169 # |
1170 # SYMANTEC_TLS : Distrust TLS Server certificates anchored by |
1170 # SYMANTEC_TLS : Distrust TLS Server certificates anchored by a Symantec |
1171 # a Symantec root CA and issued after April 16, 2019. |
1171 # root CA and issued after April 16, 2019 unless issued by one of the |
|
1172 # following subordinate CAs which have a later distrust date: |
|
1173 # 1. Apple IST CA 2 - G1, SHA-256 fingerprint: |
|
1174 # AC2B922ECFD5E01711772FEA8ED372DE9D1E2245FCE3F57A9CDBEC77296A424B |
|
1175 # Distrust after December 31, 2019. |
|
1176 # 2. Apple IST CA 8 - G1, SHA-256 fingerprint: |
|
1177 # A4FE7C7F15155F3F0AEF7AAA83CF6E06DEB97CA3F909DF920AC1490882D488ED |
|
1178 # Distrust after December 31, 2019. |
1172 # |
1179 # |
1173 # Leading and trailing whitespace surrounding each value are ignored. |
1180 # Leading and trailing whitespace surrounding each value are ignored. |
1174 # Unknown values are ignored. If the property is commented out or set to the |
1181 # Unknown values are ignored. If the property is commented out or set to the |
1175 # empty String, no policies are enforced. |
1182 # empty String, no policies are enforced. |
1176 # |
1183 # |