Go will reject certificate chains with eight distrusted SPKIs
Original title: Go will reject certificate chains containing eight distrusted SPKIs
A reader of the change says 16 certificates, all from eMudhra, appear to match.
A Go commit will reject certificate chains that contain eight distrusted subject public key identifiers. A commenter who downloaded CA data from CCADB says the change appears to affect 16 certificates, all from eMudhra, and posted that list as a gist. The feed names no Go version, CVE, or the SPKIs themselves.
Unconfirmed: The count of 16 eMudhra certificates is one commenter's reading of CCADB data, not a Go project statement.
- The commenter counted 16 certificates, all issued by eMudhra.
- CA certificate data was taken from ccadb.org.
- The compiled list is published as a GitHub gist.
Impact: Chains with eight distrusted SPKIs will be rejected
| Product | Affected |
|---|---|
| Go | — |
- 1.Check whether chains include the eMudhra certificates listed in the gist.
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| md5 | ff7a9fd00339260b4d2dbdcb0f489b57 | a. I complied the list here https://gist.github.com/mendymm/ff7a9fd00339260b4d2dbdcb0f489b57 Comments |
From the original article
I downloaded the CA cert data from https://www. ccadb. org/resources and it seems to be affecting 16 certs, all from eMudhra.
By github.com via mendy · github.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.