80
PSA: eMudhra Intermediate CA Compromise (emudhra.we-have-a-problem.com)
submitted 16 hours ago by to c/selfhosted@lemmy.world
24 comments fedilink hide all child comments
 

Update your stuff, folks. I've had a fun day at work.

you are viewing a single comment's thread
view the rest of the comments
[–] 8 points 14 hours ago (2 children)

Four... Fucking... Pixels?

The working hypothesis is that this was some sort of debug or test key that was never meant to be used in production, being used in production.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 12 hours ago (1 child)

    I'm honestly skeptical about even this. I tried to generate an 8 bit key and got rsa_gen_set_params:key size too small.

    And like, you need to go deliberately out of your way to not use OpenSSL.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •