01
Security
eMudhra Revokes Eight More Intermediate CAs Over Key Handling Concerns
Affected customers are moving to replacement certificates as eMudhra exits publicly trusted TLS issuance and awaits an independent review.
Affected customers are moving to replacement certificates as eMudhra exits publicly trusted TLS issuance and awaits an independent review.
Tools such as curl and git kept accepting the weak certificates after Apple's October block, and this update finally stops them.
The macOS fix would stop command-line tools from trusting certificates from eMudhra that have been compromised.
Systems that depend on the removed roots may need their certificates replaced, and disconnected machines must take the update manually.
Software that depends on web PKI but cannot filter intermediates stays exposed until its updates arrive.
Affected servers need patches for a PHP bug, and some certificates from one authority may still be trusted by a macOS utility.
Browsers and operating systems now reject the affected intermediates, but some software with its own trust store may keep accepting them until it is patched.