Apple Blocks Compromised eMudhra Certificates
Apple has revoked trust for eight intermediate certificate authority (CA) certificates from eMudhra due to weak private cryptographic keys. Impacted Systems Safari, Mail, and Networking Frameworks: These have been blocking the certificates automatically since October 19, 2026, without requiring a system update. Command-Line Tools: macOS command-line utilities may continue to trust these…
Apple has taken action to revoke trust for eight intermediate certificate authority (CA) certificates from eMudhra, citing weak private cryptographic keys. This move has automatically blocked the affected certificates in Safari, Mail, and Networking Frameworks on affected systems since October 19, 2026, without necessitating a system update.
However, it's worth noting that macOS command-line utilities may still trust these certificates until a future macOS update is rolled out. For system administrators, a remediation step involves manually removing the compromised root CA certificates from the /etc/ssl/cert.pem directory until the official patch is released. Detailed instructions and specific certificate identifiers can be found in Apple's official support documentation.
Brief written by urgent.news from Dev.to's own syndicated text. Machine-written — may contain errors; check the original before relying on it.
This story
This is one outlet's version. Read the fullest account.
- Apple's git still trusts the compromised eMudhra certificates emudhra.we-have-a-problem.com
