ai_ml_operations/url_shortening_service
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Drop compromised eMudhra roots from the image CA store #13

Merged
westfarn merged 1 commits from security/emudhra-ca-2026-10 into master 2026-10-23 09:01:38 -07:00
Conversation 0 Commits 1 Files Changed 1
+2 -1
westfarn commented 2026-10-23 08:51:57 -07:00
Owner
Copy link
Copy source

This app does not depend on certifi. Python still uses the image trust store for outbound TLS, and python:3.12-slim does not yet install the patched ca-certificates package.

The image install now upgrades ca-certificates and regenerates the bundle so emSign ECC Root CA - G3 and Comodo AAA Services are not trusted.

Merge this, then redeploy beta and prod.

This app does not depend on `certifi`. Python still uses the image trust store for outbound TLS, and `python:3.12-slim` does not yet install the patched `ca-certificates` package. The image install now upgrades `ca-certificates` and regenerates the bundle so `emSign ECC Root CA - G3` and `Comodo AAA Services` are not trusted. Merge this, then redeploy beta and prod.
westfarn added 1 commit 2026-10-23 08:51:57 -07:00
Drop compromised eMudhra roots from the image CA store.
CI / test (pull_request) Successful in 4s
Details
eff8c54fe8 
Install the patched ca-certificates package so outbound TLS rejects emSign ECC Root CA - G3.

Co-authored-by: Cursor <cursoragent@cursor.com>
westfarn merged commit e448a7728c into master 2026-10-23 09:01:38 -07:00
westfarn deleted branch security/emudhra-ca-2026-10 2026-10-23 09:01:38 -07:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
twestfall westfarn (Ryan Westfall)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: ai_ml_operations/url_shortening_service#13