Apple Blocks Compromised eMudhra Certificates

Apple has revoked trust for eight intermediate certificate authority (CA) certificates from eMudhra due to weak private cryptographic keys.

Impacted Systems

• Safari, Mail, and Networking Frameworks: These have been blocking the certificates automatically since October 19, 2026, without requiring a system update.
• Command-Line Tools: macOS command-line utilities may continue to trust these certificates until a future macOS update is released.

Remediation for SysAdmins

Until the official patch is released, administrators can manually remove the compromised root CA certificates from /etc/ssl/cert.pem. For detailed instructions and specific certificate identifiers, refer to the official Apple support documentation.

---

Source: https://www.macrumors.com/2026/10/25/apple-blocks-compromised-emudhra-certificates/