#24652 addressed a number of issues with root_[no]cgo_darwin, but the nocgo version still resorts to shelling out to security instead of parsing the trust settings.
Ideally, we want to obtain the trust settings from security, and apply the same logic as the cgo code. (Possibly the same code, so we don't make mistakes twice.)
#24652 addressed a number of issues with root_[no]cgo_darwin, but the nocgo version still resorts to shelling out to security instead of parsing the trust settings.
Ideally, we want to obtain the trust settings from security, and apply the same logic as the cgo code. (Possibly the same code, so we don't make mistakes twice.)