Dear MOSIP Community,
We have published a security advisory regarding the recent eMudhra Intermediate CA key compromise, which may impact country deployments that have trusted certificates issued under the affected CA hierarchy.
Recommended Action:
We advise all MOSIP adopters and implementation partners to review their deployments for affected eMudhra CA certificates and associated certificate chains in the MOSIP CA certificate stores.
If affected certificates are identified, please follow the advisory’s prescribed procedures to remove the compromised certificates and their dependent certificates, taking the required backups before performing any cleanup.
Read the full advisory for detailed validation queries, mitigation steps, and precautions:
MOSIP Security Advisory – GHSA-4x92-qxww-jf6c
We encourage all MOSIP adopters and implementation partners to review the advisory and take appropriate action based on their deployment configurations.
For any further queries or clarifications, please reach out to us here through the MOSIP Community Forum.
Best regards,
Team MOSIP