danj
Some root certs are compromised, updates are needed to maintain TLS security.
As reported by Mozilla the eMudhra intermediate CA private keys have been compromised. These CA records can only be excluded by either enabling CRL (Certificate Revocation Lists) checking or by installing updated root CA certificate stores.
CRL checking is not enabled by default. Without active CRL checking, CA records can only be eliminated by installing new root CA certificates that do not include them. An advanced alternative is to create a certificate deny.
Do the following:
- System CA certificate store (update OS or container images/packages) to include new Mozilla records
- Update ca-store package at least 1.0.22
- Update certifi when it is updated past 2.17.0
- Update hex
Full details:
Where Next?
Trending in News & Updates
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Courses that'll move you from confusion to "Aha, now I get it!"
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #ai
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #blog-post
- #elixirconf-us
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #elixirconf-eu
- #api
- #forms
- #security
- #hex
Our Sponsors
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Bringing learning, work and compliance together since 1987.
**Building the future of software with AI, trust, and human connection.**
The deployment platform built for Elixir: PaaS ease, VPS control.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 1- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
realcorvus
Thanks Dan, this is extremely important, I’ve also published an article on the Paraxial.io blog and linked to your post on it - What the eMudhra CA Compromise Means for Elixir Developers