2026 年 10 月 20 日20th October 2026

eMudhra 的八份中间 CA 证书的私钥已经泄露。这些证书链至被 Mozilla、Microsoft、Apple 和 Chrome 根证书计划以及众多下游信任库所信任的根证书。The private keys of eight eMudhra intermediate CA certificates have been compromised. They chain to roots trusted by the Mozilla, Microsoft, Apple and Chrome root programs and by many downstream trust stores.

我们是如何得知的？How do we know?

为证明私钥已泄露，首位报告者 Wayne 于 10 月 17 日用这八份中间 CA 的私钥分别签署了以下消息，并报告给了各根证书计划团队：To demonstrate that the keys are compromised, the original reporter Wayne signed the following message with the private key of each of the eight intermediate CAs and reported it to the Root Program Teams on the 17th of October:

我们出了一个麻烦——WayneWe have a problem here - Wayne

proof.zip 中包含该消息，以及针对每个中间 CA 的证书、其公钥和该消息的签名。使用 OpenSSL 验证的方法如下：proof.zip contains the message, and for each intermediate the certificate, its public key and a signature on the message. To verify with OpenSSL:

openssl x509 -in EM-DV-TLS-CA-G3B.crt.pem -noout -pubkey | diff - EM-DV-TLS-CA-G3B.pub.pem
openssl dgst -sha384 -verify EM-DV-TLS-CA-G3B.pub.pem -signature EM-DV-TLS-CA-G3B.sig message.txt

已采取了哪些行动？What actions have been taken?

各根证书计划和许多下游信任库已采取行动保护其用户。相关证书自 10 月 17 日起在 Firefox 和 Chrome 中被封锁，自 10 月 19 日起在 Apple 设备上被封锁，自 10 月 20 日起在 Microsoft 上被封锁。The root programs and many downstream trust stores have taken action to protect their users. The certificates have been blocked in Firefox and Chrome since the 17th of October, in Apple devices since the 19th and in Microsoft since the 20th.

该问题已于 10 月 19 日负责任地向各下游信任库披露。许多信任库已发布更新，或正在发布更新的过程中。The issue was responsibly disclosed to downstream trust stores on the 19th of October. Many have already released updates or are in the process of releasing updates.

有哪些后果？What are the consequences?

持有任何一份被泄露中间 CA 私钥的攻击者都可以冒充任何网站或服务。An attacker with the private key of any of the compromised intermediate CAs could impersonate any website or service.

Mozilla、Microsoft、Apple 和 Chrome 已通过其分发吊销信息的工具（如 OneCRL、CRLite 和 CRLSets）为其用户完成了补救。This has already been remediated by Mozilla, Microsoft, Apple, and Chrome for their users through their tools for distributing revocation information such as OneCRL, CRLite and CRLSets.

该 CA 也已吊销了被泄露的中间证书。然而，许多其他客户端不消费吊销信息，需要通过软件更新才能确保不再信任这些被泄露的中间 CA。The CA has also revoked the compromised intermediate certificates. However, many other clients do not consume revocation information and require software updates to ensure they no longer trust the compromised intermediates.

你的客户端是否仍然信任这些被泄露的中间 CA？Does your client still trust the compromised intermediates?

Run again Your browser connected to 12 of 12 hosts.

用户可以采取哪些行动？What actions can users take?

用户应尽快将浏览器和操作系统更新到最新版本。Users should update their browsers and operating systems to the latest versions as soon as possible.

开发者和软件包方面的情况如何？What about developer software and packages?

请在 github.com/galadran/we-have-a-problem.com 添加更多内容。Add more at github.com/galadran/we-have-a-problem.com.

Linux 上有变通方法吗？Are there workarounds for Linux?

在发行版发布更新后的 ca-certificates 软件包之前，有经验的用户可以在系统信任库中不信任受影响的根证书。不推荐普通用户这样做。Until a distribution ships an updated ca-certificates package, expert users can distrust the affected roots in the system trust store. This is NOT recommended for ordinary users.

在 Debian 和 Ubuntu 上，以 root 身份运行：On Debian and Ubuntu, run as root:

sed -i \
  -e 's|^mozilla/emSign_ECC_Root_CA_-_G3.crt|!&|' \
  -e 's|^mozilla/Comodo_AAA_Services_root.crt|!&|' \
  /etc/ca-certificates.conf && update-ca-certificates

在 Alpine 上，以 root 身份运行：On Alpine, run as root:

apk add ca-certificates &&
sed -i -e 's|^mozilla/emSign_ECC_Root_CA_-_G3.crt|!&|' \
  /etc/ca-certificates.conf && update-ca-certificates

在 Fedora、RHEL、CentOS Stream、Rocky Linux、AlmaLinux 和 Amazon Linux 2023 上，以 root 身份运行：On Fedora, RHEL, CentOS Stream, Rocky Linux, AlmaLinux and Amazon Linux 2023, run as root:

d=/etc/pki/ca-trust/source/blocklist; [ -d $d ] || d=/etc/pki/ca-trust/source/blacklist
trust extract --overwrite --format=pem-bundle \
  --filter='pkcs11:object=Comodo%20AAA%20Services%20root;type=cert' \
  $d/Comodo_AAA_Services_root.pem &&
trust extract --overwrite --format=pem-bundle \
  --filter='pkcs11:object=emSign%20ECC%20Root%20CA%20-%20G3;type=cert' \
  $d/emSign_ECC_Root_CA_-_G3.pem &&
update-ca-trust

在 openSUSE 和 SLES 上，以 root 身份运行：On openSUSE and SLES, run as root:

d=/etc/pki/trust/blocklist; [ -d $d ] || d=/etc/pki/trust/blacklist
trust extract --format=pem-bundle \
  --filter='pkcs11:object=Comodo%20AAA%20Services%20root;type=cert' \
  $d/Comodo_AAA_Services_root.pem &&
trust extract --format=pem-bundle \
  --filter='pkcs11:object=emSign%20ECC%20Root%20CA%20-%20G3;type=cert' \
  $d/emSign_ECC_Root_CA_-_G3.pem &&
update-ca-certificates

在 Arch Linux 上，以 root 身份运行：On Arch Linux, run as root:

trust extract --format=pem-bundle \
  --filter='pkcs11:object=emSign%20ECC%20Root%20CA%20-%20G3;type=cert' \
  /etc/ca-certificates/trust-source/blocklist/emSign_ECC_Root_CA_-_G3.pem &&
update-ca-trust

信任库运营方可以采取哪些行动？What actions can trust store operators take?

请参阅 Mozilla dev-security-policy 论坛中的这个帖子。Please see this thread in Mozilla's dev-security-policy forum.

哪些中间 CA 被泄露了？Which intermediates were compromised?

这八个中间 CA（包括 Sectigo 交叉签名）的指纹、SPKI 哈希、序列号和 CCADB 记录 ID 见 affected-certificates.json。Fingerprints, SPKI hashes, serial numbers and CCADB record IDs for the eight intermediates, including the Sectigo cross-signs, are in affected-certificates.json.

本网站由 Dennis Jackson 发布。源代码托管在 GitHub 上，欢迎提交 PR。Site published by Dennis Jackson. The source is on GitHub and PRs are welcome.