Ukungena kwe-eMudhra ephakathi kwe-CA: uhlu olumnyama lwesiphequluli kanye negebe lokuthembela ngesikhathi sokusebenza

Lokho okuhlanganiswa yile vidiyo

• Izikhiye ezifakiwe zingezabasayinayo abaphakathi. Ukungathembeli okuyisisekelo kunganciphisa uchungechunge ngaphandle kokufakazela ukuthi isikhiye esiyimfihlo esiyisisekelo siphazanyiswe.
• Uhlu olumnyama oluphuthumayo lwesiphequluli kanye nesitolo se-CA esihlanganisiwe sohlelo lokusebenza kungalandela izindlela zokuvuselela ezihlukene. Hlola inqubo esebenzayo nokucushwa kwayo kwangempela kokuthembela.
• IMozilla iqinisekise ngokuzimela izikhiye eziyimfihlo ezilulamekayo. Umbiko awuchazi ukungena kwe-CT kwabaphakathi abathintekile; ukusetshenziswa kabi kwangempela ngokumelene namanye amaklayenti kusalokhu kungaziwa.
• Ukukhishwa okuyinhloko kuqinisekisa i-certifi 2026.10.19 kanye ne-Node 24.22.1 kumagatsha okuxoxwe ngawo. Amabhanela e-CA angokwezifiso namanye amagatsha esikhathi sokusebenza adinga ukuhlolwa kwawo.
• I-akhawunti yocwaningo lwe-Tor engama-relay angu-333 ihlobene nesigameko sokuqala sika-Okthoba esishicilelwe ngo-Okthoba 20. Cishe amaphesenti ayishumi kuyinombolo ye-relay, hhayi isilinganiso sethrafikhi evimbekile.
• Ukuphela kwesikhathi senethiwekhi akukugcini ukuthi ukuqinisekiswa kwesitifiketi kwenqabile uchungechunge olufakiwe. Gcina ukuqinisekiswa futhi uhlukanise amaphutha okuthutha ekuhlulekeni kokugunyaza.

Umbhalo obhaliwe ohunyushwe

Kuhunyushwe kusuka ekulandiseni kokuqala kwesiNgisi. Umsindo namazwibela atholakalayo alawulwa yi-YouTube.

Kungani isiphequluli esilungisiwe singashiya uhlelo lokusebenza lungenakuvikeleka?

0:00 I-eMudhra browser fix izwakala njenge-all-clear. Izikhiye zokusayina eziyisishiyagalombili ezifakiwe zisashiya isofthiwe enezinqumo zokuthembela eziphelelwe isikhathi. Kule vidiyo, ubani ongakwazi ukusayina? Kungani amaklayenti engavumelani? Futhi isiphi isibuyekezo esifinyelela ngempela kuhlelo lwakho lokusebenza? Okuncane okuncane kugcina uhlu lwako lokuthembela. Sizobuyela kunqubo enqumayo ukuthi ilungiselelo lakho lifikile yini. NgoLwesithathu, Okthoba zingamashumi amabili nanye, futhi lena yiThe Daily Diff.

0:22 I-eMudhra iyi-certificate authority. Isayina izitifiketi zedijithali ezisiza isofthiwe ukuqinisekisa amawebhusayithi na amasevisi. Izikhiye ezifakiwe zihlanganisa eziyisithupha ezisetshenziselwa ukuxhumeka kwewebhu nezimbili zoku sayina isofthiwe. Okuphakathi ngumsayini ogunyaziwe ongaphansi kwesisekelo esithembekile. NgoLwesihlanu, intatheli egama layo linguWayne yathumela ubufakazi ezinhlelweni eziyisisekelo. NgoLwesibili, ikhasi lesigameko lomphakathi lalicazela ukuhlanza. Namuhla, abathuthukisi bathola ukuthola ukuthi mangaki amakhophi okuthembela uhlelo lwabo oluhle olujwayelekile aliqoqile.

Siyini isikhiye esiphakathi esigunyazayo?

0:49 Nakhu uchungechunge olujwayelekile. Isiza sethula isitifiketi, ophakathi usisayina, futhi iklayenti lakho lilandela uchungechunge kuya kwisisekelo eselivele lithembekile. Isisekelo yindawo yakho yokuqala yendawo. Noma ubani olawula isikhiye esiyimfihlo sika-intermediate angasayina ngaphansi kwaleso gunya. Ukusayina okuqinisekisiwe ngokwezibalo kungaba nomsainayo ongathembekile nhlobo. I-validator idinga indlela yokuhoxisa ukuthembela ngemuva kokungena. UWayne wasayina umyalezo, Sinenkinga lapha, Wayne,

1:12 ngesikhiye ngasinye. IMozilla iqinisekise ukulawulwa kwezikhiye, yabe isithola izikhiye ngokuzimela. Impendulo ephuthumayo yaqala ngomusho ozwakala sengathi othile uqaphele iphrinta yehhovisi yayibhema.

Yini efakazelwe, futhi yini engaziwa?

1:22 Umbiko womphakathi uthi izikhiye zakhiqizwa ngokungafanele futhi zazitholakala kusuka ezitifiketini, ezakhiwe ngo-April ngonyaka odlule. Ukusetshenziswa kabi kwangempela ngokumelene nenye isofthiwe kusalokhu kungaziwa. Amandla okusayina alulamekayo aphuthuma ngokwanele ngaphandle kohlu lwezisulu oluqanjiwe. Kukhona umkhawulo obalulekile lapha. Umbiko awutholanga zitifiketi ukuphathelene nokungena kwalabo abaphakathi ngaleso sikhathi.

1:42 Uthi iziphequluli eziqinisa ukungena bezingeke zahlaselwa ngale ndlela. Lokho kuhlolwa okwengeziwe kwesiphequluli kusiza ukuchaza ukuthi kungani isihloko kuphela sidlulisa isithombe. I-eMudhra yatshela i-Mozilla ukuthi cishe izitifiketi ezingamashumi amathathu ezidinga ukufuduswa ziya kolunye uchungechunge. Leyo yimisebenzi esebenzayo abanikazi bayo okumele bashintshe izitifiketi ngesikhathi sokuhlanza. Kukhona lapho, isimemo sekhalenda sisanda kuba yi-production dependency.

Kungani isiphequluli nesikhathi sokusebenza kungavumelani?

2:03 Abathengisi besiphequluli basakaza izinhlu ezimnyama eziphuthumayo. Umbiko urekhoda isenzo se-Firefox ne-Chrome ngoLwesihlanu, kulandelwa yi-Apple ne-Microsoft. Lawa maklayenti anganqaba okuphakathi okungcolisiwe ngenkathi ebona umsuka wawo. Lowo mthetho uhamba ngokuhlukile kubhande lesicelo sakho. Amanye amaklayenti ahlola uchungechunge ngokumelene nezisekelo ezithembekile ngaphandle kokusebenzisa ulwazi oluphuthumayo loku hoxiswa. Igunya lingashicilela ukuhoxiswa, futhi lelo klayenti lingaqhubeka nokwamukela uchungechunge.

2:27 Ukubeka uphawu emnyango kusebenza kangcono uma isivakashi sifunda izimpawu. IMozilla ithi amanye amaphrofayili e-Android ahlulekile ukusebenzisa uhlu olumnyama olubuyekeziwe ku ukuqalisa. Ilungiselelo lashintshwa ku-Firefox eyodwa amashumi amahlanu nesishiyagalombili zero mbili. Ngakho-ke gcina isiphequluli sisisha futhi. Isimemezelo asikwazi ukufaka ohlwini ifoni yakho. Abanikazi bangasusa i-trust anchor lapho amaklayenti engenakuvimbela okuncane. Intambo ye-Mozilla ichaza ukungathembeli okuphuthumayo kwe-emSign ECC root, isizukulwane sesithathu. Ukususa isisekelo esitolo sokuthembela kuvimbela amaketanga athembele ku

2:54 kona, ngisho noma isikhiye esiyimfihlo sesisekelo ngokwaso singaphazanyiswanga. I-Python yakamuva ye-certifi release ingesinye isibuyekezo esingezansi.

Yiziphi izibuyekezo ezifinyelele ku-Python naku-Node?

3:01 Ukunikezela kwayo kubuyisela nezisekelo ze-emSign ezingathinteki ngemuva kokususa kwangaphambili. Ukukhipha konke okune gama lenkampani kuyisisekelo esibi kakhulu ku iphakheji egcinwe. Ufuna uchungechunge oluyingozi lunqatshwe futhi abaqotho amakhasimende asasebenza. Umlando wokukhishwa ugcina zombili izinqumo. Ukuhlanza kwezokuphepha kunomsebenzi okhangayo wokuba ophuthumayo, ukunemba, futhi okubiwa nganoma yimuphi umsebenzi ophazamiseka ngesikhathi sokudla kwasemini. Inguqulo ye-Node yamashumi amabili nane namashumi amabili nambili nangoyedwa ishintswe namuhla nge

3:26 izisekelo ezibuyekeziwe. Hlola iseluleko segatsha lakho kanye nokucushwa kwe-CA yangempela. Ibhantshi elenziwe ngokwezifiso lingashintsha ukuthi yisiphi isitolo sokuthembela esisetshenziswa inqubo. Ku-Tor, umcwaningi washicilela i-akhawunti izolo yamakhulu amathathu namashumi amathathu

Yini eyabanjwa yisixwayiso sesikhiye somshini we-Tor?

3:36 amathathu ama-relay aphumayo afakiwe. Ukuvimbela kwaqala ekuqaleni kwale nyanga. Ama-relay afakwe umaka futhi avalwa ezinsukwini ezimbalwa kamuva, ngaphambi kokuba kufike ukubhala. I-SSH yaxwayisa umcwaningi ukuthi ubuwena beseva bushintshile. Wakubika eqenjini lezempilo lenethiwekhi ye-Tor. Isaziso sabo sokusebenza siqinisekisa imibiko yokuvimbela. Leso sixwayiso sasenza ngqo into engahlelekile okufanele ukugunyazwa

3:57 ikwenze. Cishe amaphesenti ayishumi abalwe ama-relay anezinhlobo ezahlukene zamandla, kushiya isabelo sethrafikhi singakalwa. Ukuqondisa kwe-Tor kanye nobuwena beseva ye-SSH kunemisebenzi ehlukene. Qinisekisa isikhiye somshini esishintshile nge isiteshi esithembekile ngaphambi kokuba usamukele bese ungena ku. Buyela kuhlelo lwakho lokusebenza, qala ngesiqukathi esisebenzayo noma indawo ebonakalayo.

Ulihlola kanjani ilungiselelo elisetshenzisiwe?

4:12 Thola ibhande le-CA elisisebenzisayo ngempela bese usebenzisa isibuyekezo esifanele esigcinwe. Yakha kabusha bese uqalisa kabusha inqubo esetshenzisiwe ukuze ikwazi ukulayisha ukuthembela okushintshile into. Sebenzisa amaketanga okuhlola omphakathi abanikazi endaweni yangempela yeklayenti. Gcina iphutha lesitifiketi lihlukile kusuka esikhathini sokuphela kwenethiwekhi. Ukuxhumeka okuhlulekile ku-Wi-Fi yehhotela kuyisivivinyo esihle kakhulu se-Wi-Fi yehhotela. Ukuncika okuncane kuyisitolo sokuthembela esihlukanisiwe, njenge-certifi. Isiphequluli sakho sedeski asilokothi sihlele leyo ncikelelo ngaphakathi kwesiqukathi esidala. Inqubo esetshenzisiwe kanye nokucushwa kwayo kunquma ukuthi ilungiselelo lifikile yini.

4:42 Yileyo indawo yokuqinisekisa isibuyekezo sakho. Uma ungathanda ukufunda lokhu kunokuzwa ngikushoyo, i-diff ifika ebhokisini lakho le-imeyili njalo ekuseni, mahhala ku-the daily diff dot dev, isixhumanisi esingezansi.

Yini ethola isitembu esithi NEEDS REVIEW?

4:51 Ngakho-ke isahlulelo sanamuhla yi-NEEDS REVIEW. Ngifuna ukuhlolwa kokuthembela kweklayenti elisetshenzisiwe ngaphambi kokuba noma ubani avale lesi sigameko. Bhalisa, shaya insimbi, futhi ungitshele kumazwana uma ubungasishicilela ngokuhlukile. Futhi yilokho okuhlukile kwanamuhla. NginguNiko ovela e-Axrisi. Hlanganisa ngokuzibophezela.

Imithombo

1. eMudhra Intermediate CA CompromiseDennis Jackson
2. Private key compromise of eMudhra Intermediate CertificatesMozilla Bugzilla
3. certifi 2026.10.19 releasecertifi
4. Restore unaffected emSign rootscertifi
5. Node 24.22.1 security releaseNode.js
6. Update root certificates to NSS 3.131.1Node.js
7. How I got over 300 Tor exit nodes removedKABA
8. Security incident affecting some relay operatorsTor Project network health