Conversation

TELL 1: Fixes that don’t hold.

2025: six CRLs with invalid signatures. Closed as fixed: automated signing, mandatory verification.

14 Oct 2026: another invalid CRL signature reported on another CA. Cause not established.

So: what failure was the fix actually tested against?

TELL 2: Containment comes second.

Bug 2073581: after the key-size problem was reported, 11 more non-conforming certificates were issued before issuance stopped. eMudhra’s own report says it should have stopped sooner.