Python users urged toward truststore after eMudhra CA incident
Original title: Re: Information for Python users regarding eMudhra / emSign CA certificate security incident
A short oss-security reply says the CA incident should raise priority for replacing certifi with truststore.
Sam Bull posted on oss-security that the Python ecosystem is moving toward the truststore package instead of solutions such as certifi. The reply says the eMudhra / emSign CA certificate security incident will likely raise the priority of that transition. The snippet gives no technical details of the certificate incident, affected versions, or remediation steps.
Unconfirmed: This reply does not describe the eMudhra or emSign incident, its scope, or any confirmed exploitation.
- Posted by Sam Bull on October 23.
- truststore is identified at pypi.org/project/truststore/.
- certifi is named as the approach being moved away from.
- Vendors
- eMudhra
- Products
- truststorecertifiemSign
From the original article
Posted by Sam Bull on Oct 23 The Python ecosystem is pushing towards using https://pypi. org/project/truststore/ rather than solutions like certifi. This incident will likely help increase the priority of that transition.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.