Heads-up: eMudhra intermediate CA compromised

[golden_labels]

The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.

— Full text

If your system ships a CA certificates package, update it ASAP. If not, revoke (instructions given on the website). Remember that programs that depend on this certificate may need a restart too.

[ftg]

4 

[golden_labels]

After this event, eMuhdra decided to quit the global TLS market: official announcement.

A sane decision, I say. The statement does not fully acknowledge the scale of the failure and still attempts to put blame on “social media amplification.” But compared to the typical PR nonsense, I find that unexpectedly reasonable.

[madires]

Not CA certs but 400k TLS certs:
 GoDaddy revokes hundreds of thousands of certificates over documentation errors  - https://www.heise.de/en/news/GoDaddy-revokes-hundreds-of-thousands-of-certificates-over-documentation-errors-11497136.html

[Siwastaja]

[5U4GB]

-----BEGIN RSA PRIVATE KEY-----
4
-----END RSA PRIVATE KEY-----