Python users urged toward truststore after eMudhra CA incident
A short oss-security reply says the CA incident should raise priority for replacing certifi with truststore.
28
Product
certifi
- Mentions · 7d6
- Mentions · 30d6
- All mentions6
- First seenOct 20, 2026
- Last mentioned2d ago
Timeline
6 articles · newest firstPython users urged to prefer system stores after eMudhra CA incident
The reply says distribution pip and requests should use the system certifi store.
38
Python developer urges packages to stop vendoring CA roots
The reply says distribution ca-certificates should be the default, with certifi used as a dependency only when necessary.
18
Eight eMudhra intermediate CA private keys compromised
The intermediates chain to roots in major browser programs, so bundled trust stores need updates.
90
certifi 2026.10.19 removes the emSign root in a critical update
Python's security list rates GHSA-6q48-6c7w-9gw2 critical; the forwarded note says certifi 2026.10.19 drops the emSign root.
78
Eight eMudhra intermediate CA keys compromised; browsers block them
Chrome and Firefox blocked the TLS intermediates within hours of an October 17 report, and no website certificate chaining to them was in Certificate Transparency beforehand.
86
Related CVEs
by mentions- Cryptographic issue in the Security Block-lists, Allow-lists, and other State component
- CVE-2026-111943<1%—On most platforms, Go uses the given system root certificates
Appears with
- eMudhravendor · 3
- pipproduct · 2
- eMudhraorganization · 2
- Pythonproduct · 2
- Applevendor · 1
- Chromeproduct · 1
- Microsoftvendor · 1
- Firefoxproduct · 1
- Chrome Root Programorganization · 1
- Appleorganization · 1
- Microsoftorganization · 1
- emSignproduct · 1
- truststoreproduct · 1
- Googlevendor · 1
- Mozillavendor · 1
- emSignvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.