AM3351: Certificate Store update for eMudhra CA key problem

We're checking internally, and will get back.

Any decision on releasing a certificate store update for the SDKs?

Hi Glen,

Here is the feedback from the Linux SDK team:
We plan to release 12.x SDK release which is based on Yocto Wrynose and 6.18 LTS as baseline .
Please provide more details on what specific to Certificate store update or eMudhra CA key problem that we can address related to AM335x SW drivers.

Best,
-Hong

The latest CICD of AM335x 

Ref : https://software-dl.ti.com/cicd-report/linux/index.html?section=platform&platform=am335x 

Also shows the relevant sources and tag information on how the SDK is built from Wrynose and 6.18 LTS based baseline . 

Eight intermediate certificate authority (CA) certificates operated by the India-based CA eMudhra have private keys so weak that anyone can derive them from the public certificates. Anyone holding these keys can mint certificates for any website or service that clients chaining to the affected roots would accept. 

The compromised keys are distributed in /usr/share/ca-certificates/

eMudhra Intermediate CA Private Key Compromise - Kudelski Security Research Center

Potentially Affected Platforms

Clients and trust stores that trust these chains and do not consume revocation or Certificate Transparency (CT) data:

• Non-browser TLS clients
• Developer tools
• Software packages bundling their own trust stores
• Python ecosystem packages
• Containers
• Linux distributions not yet updated
• Embedded devices
• IoT devices
• VPN clients

What to do: Linux

Apply:

• ca-certificates
• Equivalent trust-store updates

once made available by your vendor.