Problem Description:
eMudhra generated several of its TLS intermediate CA certificates
with trivially small private keys, which have since been recovered
and publicly disclosed. Those intermediates are signed by the
"emSign ECC Root CA - G3" root certificate, which this port installs
as part of its trusted bundle up to and including version 3.131.
NSS 3.131.1 removes the root certificate.
The intermediates have been revoked, but OpenSSL does not check
certificate revocation by default.
FreeBSD-SA-26:73.caroot addresses the base system trust store by
marking the root certificate as untrusted. That only affects the
store generated by certctl(8), never the bundle installed by this
port. On FreeBSD 14 the port owns /etc/ssl/cert.pem by default, and
software reading the bundle directly, such as programs built with Go
or Rust, uses /usr/local/etc/ssl/cert.pem or /usr/local/share/certs
on every version of FreeBSD. Such configurations keep trusting the
root certificate until the package is updated.
Impact:
An attacker able to intercept network traffic can use the
compromised keys to issue a certificate that impersonates any TLS
server, allowing the traffic to be read or modified without
detection.