Index | Thread | Search

From:
Ralph Siegler <rsiegler@rsiegler.org>
Subject:
Re: cert.pem update?
To:
tech@openbsd.org
Date:
Wed, 21 Oct 2026 19:24:49 -0000

Download raw body.

Thread
On Tue, 20 Oct 2026 19:27:43 +0000, Lloyd wrote:

> With the drama unfolding today around the eMudhra CA key compromise,
> Mozilla has dropped trust in at least one root CA:
> 
> https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c18
> 
> Is this serious enough to issue errata for cert.pem?
> 
> Regards Lloyd

I manually removed four with eMudhra and emSign in them, and currently am 
looking cross-eyed at a fifth that might be affected.  Better if OpenBSD 
team expert fixes things though 8D