Apple blocks eMudhra CA certificates, but some tools are still vulnerable

Apple blocks eMudhra CA certificates, but some tools are still vulnerable

Git, curl do not follow revocation lists

Danis Tazetdinov

Oct 30

Apple blocks recently discovered weak web CA certificate from eMudhra. However, certificate revocation lists are not followed by all macOS tools.

Some utilities such as git or curl still trust these certificates. Developers could follow a workaround to block these certificates manually.

References:

• Apple blocks web certificates that could be used by scammers, but Mac vulnerability remains

• Apple’s git still trusts the compromised eMudhra certificates

• eMudhra Intermediate CA Compromise

© 2026 Danis Tazetdinov
N/A