eMudhra CA compromise: check whether your servers still trust the bad certificates

#!/usr/bin/env node
// emudhra-check.mjs: does this Node.js still trust the eight compromised
// eMudhra intermediate CAs (October 2026)? It connects to the disclosure
// site's test hosts, whose certificates chain through those intermediates,
// using this Node.js trust store. A patched runtime must refuse all of them.
//   node emudhra-check.mjs            # Node's bundled CA store
//   node --use-system-ca emudhra-check.mjs   # the operating system's store
// Exit code: 0 = all refused, 1 = at least one trusted, 2 = could not test.
import https from "node:https";
import path from "node:path";
import { fileURLToPath } from "node:url";

export const TEST_HOSTS = [
  { host: "dv-g3b-emudhra.we-have-a-problem.com", what: "compromised intermediate, logged in CT" },
  { host: "dv-g3b-aaa-emudhra.we-have-a-problem.com", what: "same, via the AAA Certificate Services cross-sign" },
  { host: "dv-g3b-noct-emudhra.we-have-a-problem.com", what: "compromised intermediate, not in CT" },
  { host: "dv-g3b-aaa-noct-emudhra.we-have-a-problem.com", what: "cross-signed, not in CT" },
];
const CONTROL = "www.google.com";

/** Connects with the default trust store; resolves to { ok, code }. Never rejects. */
export function probe(host, timeoutMs = 10_000) {
  return new Promise((resolve) => {
    const req = https.get({ host, path: "/", timeout: timeoutMs, agent: false }, (res) => {
      res.resume();
      resolve({ ok: true, code: `HTTP ${res.statusCode}` });
    });
    req.on("timeout", () => req.destroy(Object.assign(new Error("timeout"), { code: "ETIMEDOUT" })));
    req.on("error", (err) => resolve({ ok: false, code: err.code ?? err.message }));
  });
}

const TLS_REJECTIONS = new Set([
  "CERT_REVOKED",
  "UNABLE_TO_GET_ISSUER_CERT",
  "UNABLE_TO_GET_ISSUER_CERT_LOCALLY",
  "UNABLE_TO_VERIFY_LEAF_SIGNATURE",
  "SELF_SIGNED_CERT_IN_CHAIN",
  "CERT_UNTRUSTED",
  "CERT_HAS_EXPIRED",
]);

/** Classifies one probe: trusted (bad), refused (good) or unknown (network problem). */
export function classify(result) {
  if (result.ok) return "TRUSTED";
  if (TLS_REJECTIONS.has(result.code) || /CERT|ISSUER|SIGNATURE/.test(result.code)) return "refused";
  return "unknown";
}

export function verdict(classes) {
  if (classes.includes("TRUSTED")) return 1;
  if (classes.includes("unknown")) return 2;
  return 0;
}

if (process.argv[1] && fileURLToPath(import.meta.url) === path.resolve(process.argv[1])) {
  const systemCa = process.execArgv.includes("--use-system-ca");
  console.log("eMudhra intermediate CA check (October 2026)");
  console.log(`node:   ${process.version} (${systemCa ? "operating system CA store" : "bundled CA store"})`);
  const control = await probe(CONTROL);
  console.log(`control ${CONTROL}: ${control.ok ? "reachable" : `FAILED (${control.code})`}`);
  if (!control.ok) {
    console.log("No working HTTPS connection, so the results below would mean nothing.");
    process.exit(2);
  }
  const classes = [];
  for (const t of TEST_HOSTS) {
    const r = await probe(t.host);
    const c = classify(r);
    classes.push(c);
    console.log(`${c.padEnd(8)} ${r.code.padEnd(34)} ${t.host}  (${t.what})`);
  }
  const v = verdict(classes);
  console.log("");
  console.log(
    v === 0
      ? "OK: this runtime refuses the compromised intermediates."
      : v === 1
        ? "ACTION NEEDED: this runtime trusts at least one compromised chain. Update Node.js (26.12.1, 24.22.1, 22.23.4) and the system ca-certificates."
        : "Could not decide: some test hosts failed for network reasons. Retry, or open them in a browser.",
  );
  process.exit(v);
}

node emudhra-check.mjs                    # Node's bundled store
node --use-system-ca emudhra-check.mjs    # the operating system's store
echo "exit code: $?"                       # 0 refused, 1 trusted, 2 network problem

eMudhra intermediate CA check (October 2026)
node:   v24.22.1 (bundled CA store)
control www.google.com: reachable
refused  CERT_REVOKED   dv-g3b-emudhra.we-have-a-problem.com
refused  CERT_REVOKED   dv-g3b-aaa-emudhra.we-have-a-problem.com
refused  CERT_REVOKED   dv-g3b-noct-emudhra.we-have-a-problem.com
refused  CERT_REVOKED   dv-g3b-aaa-noct-emudhra.we-have-a-problem.com

OK: this runtime refuses the compromised intermediates.

node:   v24.22.0 (bundled CA store)
TRUSTED  HTTP 200   dv-g3b-emudhra.we-have-a-problem.com
TRUSTED  HTTP 200   dv-g3b-aaa-emudhra.we-have-a-problem.com
TRUSTED  HTTP 200   dv-g3b-noct-emudhra.we-have-a-problem.com
TRUSTED  HTTP 200   dv-g3b-aaa-noct-emudhra.we-have-a-problem.com

ACTION NEEDED: this runtime trusts at least one compromised chain.

# Any tool that uses your trust store: a certificate error is the good result
curl https://dv-g3b-emudhra.we-have-a-problem.com/
curl https://dv-g3b-aaa-noct-emudhra.we-have-a-problem.com/

# Python: which certifi does this environment use?
python -c "import certifi; print(certifi.__version__)"   # want 2026.10.19 or later

# Debian / Ubuntu
sudo apt-get update && sudo apt-get install --only-upgrade ca-certificates

# Alpine (also in Dockerfiles)
apk update && apk upgrade ca-certificates ca-certificates-bundle

# Python
pip install -U "certifi>=2026.10.19"

# Node.js: 26.12.1, 24.22.1 or 22.23.4 (see the Node.js guide), then restart

# Which CA issued the certificate your site serves?
openssl s_client -connect www.example.com:443 -servername www.example.com </dev/null 2>/dev/null \
  | openssl x509 -noout -issuer -enddate