Compromised eMudhra Intermediate Certificate Authorities

We are updating the system certificate authority trust store across our fleet. We have not identified any impact to Andromeda customers.

On October 21, security researchers disclosed that the private keys for eight intermediate certificate authority certificates issued by eMudhra, an Indian trust provider, were compromised. Anyone holding those keys can issue TLS certificates that systems will accept as legitimate.

If you use Python, we recommend updating certifi and rebuilding any images that carry their own CA bundle.