Skip to content
NewA calmer, faster ZeroHour
Vulnerabilityinfo

eMudhra thread: root CA notAfter period is 25 years

Original title: Re: eMudhra Intermediates Compromise

oss-security ()1 · 1 read
Read at seclists.org
Part of a story covered by 7 sourcesBrowsers distrust eMudhra G3 root after weak intermediate keysMerged summary & timeline
AI summary · x-ai/grok-4.7Summaries by Vani AI

Jeffrey Walton corrects himself and cites CA/Browser Forum baseline requirements for root CA validity.

On the oss-security thread titled "eMudhra Intermediates Compromise," Jeffrey Walton posted a correction on October 24. He says root CA notAfter is specified in CA/Browser Forum Baseline Requirements Section 7.1.2.1.1 and is 25 years. The snippet does not describe what was compromised or which certificates were affected.

Unconfirmed: The snippet only corrects a certificate-lifetime detail and does not confirm or describe the claimed eMudhra compromise.

Key facts
  • The cited rule is CA/B BR Section 7.1.2.1.1, Root CA Validity.
  • Walton says the allowed root CA notAfter period is 25 years.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
emudhracertificate-authoritycab-forumroot-ca
Vendors
eMudhra

From the original article

Posted by Jeffrey Walton on Oct 24 Yes, you're correct. My bad. Ugh...

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.