Login Register
scusi

scusi / fixing eMudhra CA Keys Compromise in FreeBSD

Last active 2 weeks ago

Like 0

describes how to fix the issue in FreeBSD

FreeBSD compromise eMudhra fix key

Revision b389efa9c87acf1e4f42f48042f4748b64f91c8f

fix_emudhra_on_FreeBSD.md Raw

fixing eMudhra CA Keys Compromise in FreeBSD

fixing the issue on FreeBSD ist literaly 3 commands:

sudo cp /etc/ssl/certs/14bc7599.0 /usr/share/certs/untrusted/14bc7599.pem
sudo cp /etc/ssl/certs/eed8c118.0 /usr/share/certs/untrusted/eed8c118.pem
sudo certctl rehash

verify the fix

With the follwoing two commands you can check if you fixed the issue.

fetch https://dv-g3b-emudhra.we-have-a-problem.com/
fetch https://dv-g3b-aaa-emudhra.we-have-a-problem.com/

Both above fetchcommands are expectedto fail with a Certificate verification failed error. If that is the case your are fine and your fixing has worked as expected.

links