Repository navigation
v0.11.1: distrust the compromised eMudhra intermediate CAs - #516
Merged
Merged
Conversation
…ates The private keys of eight eMudhra intermediate CAs can be recomputed from their public certificates. rustls-webpki 0.103.16 rejects any certificate path that contains one of them, including their Sectigo cross-signs. webpki-roots 1.0.11 drops emSign ECC Root CA - G3, which issued them, and two more eMudhra roots Mozilla has since removed. Before this, relay connections and the header stream accepted a certificate issued with those keys. Also updates rustls to 0.23.46. Clears RUSTSEC-2026-0346, 0347, 0348, 0349, 0381, 0382 and 0383.
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hotfix for the v0.11 line.
release/v0.11.xis the v0.11.0 commit (02cca17); the v0.11.1 release request will point at this commit once CI passes.The keys of eight eMudhra intermediate CAs can be recomputed from their public certificates, so anyone can issue a certificate through them. v0.11.0 accepts such a certificate on relay HTTP connections and on the header stream.
This changes only the lockfile and the version:
rustls-webpki0.103.15 → 0.103.16 rejects any chain that contains one of the eight keys, including their Sectigo cross-signs (RUSTSEC-2026-0382).webpki-rootsandwebpki-root-certs1.0.9 → 1.0.11 drop emSign ECC Root CA - G3, which issued them, and two more eMudhra roots Mozilla has since removed (RUSTSEC-2026-0381, RUSTSEC-2026-0383).rustls0.23.45 → 0.23.46 clears RUSTSEC-2026-0346 to 0349. Main already has it.The same dependency versions go to main in #515. These crates are younger than the 14-day publish-age cooldown on purpose. Security Audit will still report RUSTSEC-2026-0387 (
crypto-bigint0.5.5, through alloy'sk256). That advisory is unrelated, is already in v0.11.0, and has no fix on the 0.5 line.Tested
Commit-Boost was pointed at the four public eMudhra test hosts: emSign-rooted and Sectigo cross-signed, each with and without CT logging. Each host was configured once as an HTTP relay and once as a stream relay, using a CA store that still trusts the eMudhra root.
CertDistrusted.rustls-webpkiandwebpki-roots, completes TLS on six of them in the same setup.cargo test --workspace --exclude cb-bench-micro: 360 passed.