• Help updating SSL options

    From David LaRue@huey.dll@tampabay.rr.com to comp.sys.mac.system on Sun Mar 22 03:07:51 2026
    From Newsgroup: comp.sys.mac.system

    Hello,

    I'm looking at a friend's Macbook OS X laptop. Many web sites aren't
    loading. Firefox at least told me that the web sites in question don't have an overlap of SSL Protocols to enable verification of the site and content. Safari just gave up and didn't offer an error message.

    I am a linux and Windows user of FF. I've not touched a Mac since the 512+. How do I find the SSL Protocols on the Mac Book and update them?

    Some update functions still work. I'm just not finding the appropriate network protocol settings. Where are they hidden on Apple Devices?

    Thank you!
    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From David B.@David@hotmail.co.uk to comp.sys.mac.system on Sun Mar 22 07:57:50 2026
    From Newsgroup: comp.sys.mac.system

    On 22/03/2026 03:07, David LaRue wrote:
    Hello,

    I'm looking at a friend's Macbook OS X laptop. Many web sites aren't loading. Firefox at least told me that the web sites in question don't have an overlap of SSL Protocols to enable verification of the site and content. Safari just gave up and didn't offer an error message.

    I am a linux and Windows user of FF. I've not touched a Mac since the 512+. How do I find the SSL Protocols on the Mac Book and update them?

    Some update functions still work. I'm just not finding the appropriate network protocol settings. Where are they hidden on Apple Devices?

    Thank you!

    Hi David,

    Since you're comfortable with a command line, you can bypass the
    "Keychain Access" GUI and fix this directly via the Terminal. The issue
    is almost certainly that the MacBook's local certificate store is
    unaware of modern Root CAs (like ISRG Root X1) that have replaced the now-expired DST Root CA X3.

    Here is how you can manually inject the new trust relationship:

    1. Download the new Root Certificate
    From the Terminal on the Mac (or download it on your machine and move
    it via USB), grab the Let's Encrypt Root:

    Bash
    curl -O https://letsencrypt.org/certs/isrgrootx1.der
    2. Inject and Force Trust
    Run the following command to import the certificate into the System
    Keychain and explicitly set it to "Always Trust" for SSL. You will be
    prompted for the friend's admin password:

    Bash
    sudo security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain isrgrootx1.der
    3. Cleanup the Expired Certificate (Optional but Recommended)
    If the system still struggles, it might be trying to use the old,
    expired DST Root CA X3 first. You can find and delete it via the GUI
    (Keychain Access -> System Roots), or try to locate it via CLI:

    Bash
    # To list certificates and find the exact name for deletion
    security find-certificate -c "DST Root CA X3"
    Why Safari is "Silent" vs Firefox
    On older Macs, Safari uses the Secure Transport library built into OS X.
    If that library doesn't support TLS 1.2 (common in OS X 10.8 or older),
    Safari simply fails the handshake without a helpful error. Firefox is
    your best bet for a "quick fix" browser because it brings its own
    internal encryption libraries and root store, bypassing the aging Apple
    system files.

    The "Nuclear" Option (Linux)
    If the laptop is a mid-2010s model, it’s likely a 64-bit Intel machine. Since you're a Linux user, you'll find that Linux Mint (Xfce) or
    ChromeOS Flex runs beautifully on that hardware and will give your
    friend a modern, secure browser environment without the "Apple Tax" of
    forced obsolescence.

    Good luck with the rescue mission!

    (Assistance provided by Gemini)
    --
    Kind regards,
    David B.
    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From =?UTF-8?Q?J=C3=B6rg_Lorenz?=@hugybear@gmx.net to comp.sys.mac.system on Sun Mar 22 09:17:53 2026
    From Newsgroup: comp.sys.mac.system

    Am 22.03.26 um 04:07 schrieb David LaRue:
    Hello,

    I'm looking at a friend's Macbook OS X laptop. Many web sites aren't loading. Firefox at least told me that the web sites in question don't have an overlap of SSL Protocols to enable verification of the site and content. Safari just gave up and didn't offer an error message.

    I am a linux and Windows user of FF. I've not touched a Mac since the 512+.
    How do I find the SSL Protocols on the Mac Book and update them?

    Some update functions still work. I'm just not finding the appropriate network protocol settings. Where are they hidden on Apple Devices?

    Thank you!

    Disconnect this museum piece immediately from the outside world.
    --
    "Roma locuta, causa finita."
    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From Alan B@user237@newsgrouper.org.invalid to comp.sys.mac.system on Sun Mar 22 12:36:21 2026
    From Newsgroup: comp.sys.mac.system

    =?UTF-8?Q?J=C3=B6rg_Lorenz?= <hugybear@gmx.net> posted:

    Am 22.03.26 um 04:07 schrieb David LaRue:
    Hello,

    I'm looking at a friend's Macbook OS X laptop. Many web sites aren't loading. Firefox at least told me that the web sites in question don't have
    an overlap of SSL Protocols to enable verification of the site and content.
    Safari just gave up and didn't offer an error message.

    I am a linux and Windows user of FF. I've not touched a Mac since the 512+.
    How do I find the SSL Protocols on the Mac Book and update them?

    Some update functions still work. I'm just not finding the appropriate network protocol settings. Where are they hidden on Apple Devices?

    Thank you!

    Disconnect this museum piece immediately from the outside world.

    It might help if the exact Macbook model is known plus the OS X version.
    "About This Mac" from the Apple icon dropdown menu should say.
    --
    Cheers, Alan
    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From David LaRue@huey.dll@tampabay.rr.com to comp.sys.mac.system on Sun Mar 22 18:15:32 2026
    From Newsgroup: comp.sys.mac.system

    Alan B <user237@newsgrouper.org.invalid> wrote in news:1774182981-237 @newsgrouper.org:

    =?UTF-8?Q?J=C3=B6rg_Lorenz?= <hugybear@gmx.net> posted:

    Am 22.03.26 um 04:07 schrieb David LaRue:
    Hello,

    I'm looking at a friend's Macbook OS X laptop. Many web sites aren't
    loading. Firefox at least told me that the web sites in question
    don't have
    an overlap of SSL Protocols to enable verification of the site and content.
    Safari just gave up and didn't offer an error message.

    I am a linux and Windows user of FF. I've not touched a Mac since the 512+.
    How do I find the SSL Protocols on the Mac Book and update them?

    Some update functions still work. I'm just not finding the
    appropriate
    network protocol settings. Where are they hidden on Apple Devices?

    Thank you!

    Disconnect this museum piece immediately from the outside world.

    It might help if the exact Macbook model is known plus the OS X version. "About This Mac" from the Apple icon dropdown menu should say.


    Hello Alan,

    Mac OS X
    Version 10.6.8

    Software Update button works, but no updates available.

    Thank you for your help,

    David
    --- Synchronet 3.21d-Linux NewsLink 1.2
  • From Your Name@YourName@YourISP.com to comp.sys.mac.system on Mon Mar 23 11:21:57 2026
    From Newsgroup: comp.sys.mac.system

    On 2026-03-22 18:15:32 +0000, David LaRue said:
    Alan B <user237@newsgrouper.org.invalid> wrote in news:1774182981-237 @newsgrouper.org:

    =?UTF-8?Q?J=C3=B6rg_Lorenz?= <hugybear@gmx.net> posted:

    Am 22.03.26 um 04:07 schrieb David LaRue:
    Hello,

    I'm looking at a friend's Macbook OS X laptop. Many web sites aren't
    loading. Firefox at least told me that the web sites in question don't >>>> have an overlap of SSL Protocols to enable verification of the site and >>>> content. Safari just gave up and didn't offer an error message.

    I am a linux and Windows user of FF. I've not touched a Mac since the >>>> 512+. How do I find the SSL Protocols on the Mac Book and update them? >>>>
    Some update functions still work. I'm just not finding the appropriate >>>> network protocol settings. Where are they hidden on Apple Devices?

    Thank you!

    Disconnect this museum piece immediately from the outside world.

    It might help if the exact Macbook model is known plus the OS X version.
    "About This Mac" from the Apple icon dropdown menu should say.

    Hello Alan,

    Mac OS X
    Version 10.6.8

    Software Update button works, but no updates available.

    Thank you for your help,

    David

    MacOS 10.6 stopped getting any updates years ago. There's almost
    certainly nothing you can do to get the installed web browser to work
    with new websites.

    There may be an old version of Firefox or Opera, or one of the Firefox spin-offs, which could work for a while longer, but even the modernised Firefox Dynasty requires MacOS 10.7 or newer.

    There is PowerFox which claims to work with MacOS X 10.4 to 10.6 and is
    likely the best (if not only) option, but I've never tried it: <https://powerfox.jazzzny.me>

    Probably the most sensible option is to simply retire the old Mac and
    get a new / newer model.


    --- Synchronet 3.21f-Linux NewsLink 1.2
  • From Jolly Roger@jollyroger@pobox.com to comp.sys.mac.system on Tue Mar 24 22:21:43 2026
    From Newsgroup: comp.sys.mac.system

    On 2026-03-22, David LaRue <huey.dll@tampabay.rr.com> wrote:
    Alan B <user237@newsgrouper.org.invalid> wrote in news:1774182981-237 @newsgrouper.org:
    =?UTF-8?Q?J=C3=B6rg_Lorenz?= <hugybear@gmx.net> posted:
    Am 22.03.26 um 04:07 schrieb David LaRue:
    Hello,

    I'm looking at a friend's Macbook OS X laptop. Many web sites
    aren't loading. Firefox at least told me that the web sites in
    question don't have an overlap of SSL Protocols to enable
    verification of the site and content. Safari just gave up and
    didn't offer an error message.

    I am a linux and Windows user of FF. I've not touched a Mac since
    the 512+. How do I find the SSL Protocols on the Mac Book and
    update them?

    Some update functions still work. I'm just not finding the
    appropriate network protocol settings. Where are they hidden on
    Apple Devices?

    Thank you!

    Disconnect this museum piece immediately from the outside world.

    It might help if the exact Macbook model is known plus the OS X
    version. "About This Mac" from the Apple icon dropdown menu should
    say.

    Hello Alan,

    Mac OS X
    Version 10.6.8

    LOL...

    That's an OS from 2009.

    It's 2026, my friend.
    --
    E-mail sent to this address may be devoured by my ravenous SPAM filter.
    I often ignore posts from Google. Use a real news client instead.

    JR
    --- Synchronet 3.21f-Linux NewsLink 1.2
  • From David LaRue@huey.dll@tampabay.rr.com to comp.sys.mac.system on Wed Mar 25 07:54:20 2026
    From Newsgroup: comp.sys.mac.system

    Jolly Roger <jollyroger@pobox.com> wrote in news:n2gh3nFdpprU1 @mid.individual.net:

    <snip>
    Mac OS X
    Version 10.6.8

    LOL...

    That's an OS from 2009.

    It's 2026, my friend.

    and still useful to my friend.

    I'm knowledgeable enough to know that adding TLS 1.2 support to an older computer is possible. Just because Apple or any other company wants you to buy their new hardware or software and throw away what they sold you before doesn't mean you always should. It is just a corporate scam you fall for.

    Enjoy what you have before your own planned obsolescence eventually occurs.

    Thanks for the leads and comments everyone.
    --- Synchronet 3.21f-Linux NewsLink 1.2
  • From Alan B@alanrichardbarker@gmail.com.invalid to comp.sys.mac.system on Wed Mar 25 08:16:38 2026
    From Newsgroup: comp.sys.mac.system

    On 2026-03-25, David LaRue <huey.dll@tampabay.rr.com> wrote:
    Jolly Roger <jollyroger@pobox.com> wrote in news:n2gh3nFdpprU1 @mid.individual.net:

    <snip>
    Mac OS X
    Version 10.6.8

    LOL...

    That's an OS from 2009.

    It's 2026, my friend.

    and still useful to my friend.

    I'm knowledgeable enough to know that adding TLS 1.2 support to an older computer is possible. Just because Apple or any other company wants you to buy their new hardware or software and throw away what they sold you before doesn't mean you always should. It is just a corporate scam you fall for.

    Enjoy what you have before your own planned obsolescence eventually occurs.

    Thanks for the leads and comments everyone.

    As far as finding a suitable browser is concerned, I came across a
    link to the SpiderWeb app which may be OK. Sadly I don't have an old
    OS X build to try it out for myself.

    <https://randommacstuff.blogspot.com/p/spiderweb-browser.html>
    --
    Cheers, Alan
    --- Synchronet 3.21f-Linux NewsLink 1.2