Ubuntu 26.10 curl checks certificate revocation; OpenSSL is next
The check uses local CRLite data via upki, so curl no longer waits on a network revocation lookup.
Stories per day · 30 days
2 RSS
Relatedtls3certificate-authority2crlite2curl2godaddy2openssl2ubuntu2upki2embedded1embedthis1emsign1emudhra1goahead1graalvm1india1java1jsse1mozilla1
7 stories, newest first · one card per story
Stories tagged #certificate-revocation
GoAhead CRL check skip lets revoked client certificates pass mutual TLS
CVE-2026-115881 scores 9.1 on GoAhead 3.4.5–6.1.0 with mutual TLS and a loaded CRL; 6.1.1 fixes it.
Indian government sites still serve revoked eMudhra certificates
Of 8,947 IGOD hosts checked on October 23, 156 still presented certificates revoked on October 19.
GoDaddy revokes 404,607 SSL certificates after profile mismatch
Revocation took effect October 21, 2026, and sites still serving those certificates can fail browser TLS checks.
GoDaddy revokes 404,607 TLS certificates after policy mismatch
Revocation finished on October 21 after a missed deadline; reports describe no confirmed private-key theft.
Oracle alerts on unauthenticated Java JSSE flaw CVE-2026-91403
The CVSS 9.1 issue affects named Java SE and GraalVM builds and can be reached through JSSE APIs without credentials.
CVE-2026-73581: Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore
Moderate Tomcat CVE-2026-73581 makes OpenSSL TLS stacks ignore CRLs for keystore certificates.