With today's certificate leak <https://emudhra.we-have-a-problem.com/>,
it is shown how important it is to implement proper certificate
revocation. I believe that a auto updating system-wide trust store
should be implemented, ideally one that allows for specifying a custom
server that serves from upstream for datacenter wide updating of custom
roots along with public roots.
In the meantime, revoke the certificate:
sudo trust extract --format=pem-bundle \
--filter='pkcs11:object=emSign%20ECC%20Root%20CA%20-%20G3;type=cert' \
/etc/ca-certificates/trust-source/blocklist/emSign_ECC_Root_CA_-_G3.pem &&
sudo update-ca-trust
--
George truly, 𝕍𝕖𝕝𝕠𝕔𝕚𝕗𝕪𝕖𝕣
Improve your wifi reception for free
<https://www.youtube.com/watch?v=LY8Wi7XRXCA> (Libre JS version
<https://redirect.invidious.io/watch?v=LY8Wi7XRXCA>)
This email does not constitute a legally binding contract
My OpenPGP key is 1BA0 FC4B 80E0 F21B 0269 8CEE 634E BF87 40C7 48BE
<https://blog.velocifyer.com/pgp-certificate.asc>. Please sign it!
Remember to reply all on mailing lists (this is here so i don't forget
to use reply all)(If you are reading this i forgot to remove it)
