# fixing eMudhra CA Keys Compromise in FreeBSD

fixing the issue on FreeBSD ist literaly 3 commands:

```
sudo cp /etc/ssl/certs/14bc7599.0 /usr/share/certs/untrusted/14bc7599.pem
sudo cp /etc/ssl/certs/eed8c118.0 /usr/share/certs/untrusted/eed8c118.pem
sudo certctl rehash
```

## verify the fix

With the follwoing two commands you can check if you fixed the issue.

```
fetch https://dv-g3b-emudhra.we-have-a-problem.com/
fetch https://dv-g3b-aaa-emudhra.we-have-a-problem.com/
```

Both above fetchcommands are expectedto fail with a `Certificate verification failed` error.
If that is the case your are fine and your fixing has worked as expected.

## links

* Website for the bug: [https://emudhra.we-have-a-problem.com/](https://emudhra.we-have-a-problem.com/)
* [HackerNews article about the Vulnerability](https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html)