The sandbox's throwaway certificate authority can now be given a custom name and lifetime.
What's wrong with this entry?
The generator for the sandbox's throwaway CA is parameterised instead of hard-coding its identity and lifetime.
- Accepts an options object with a custom common name and a
validityDaysvalue. validityDaysstill defaults to 825, matching the previous hard-coded value.- Used by the sandbox TLS-terminating proxy.
sandbox-runtime ephemeral CA
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox