eMudhra certificate break forces fixes across Ethereum clients

A security failure at Indian certificate issuer eMudhra, whose digital certificates vouch for the authenticity of websites, had eight secret signing keys compromised because they were generated too weakly to withstand cracking. The exposure is now biting the Ethereum ecosystem: some Teku and Besu client configurations trusted forged certificates as a result, and Ethereum developers are rushing out patches to close a flaw that could let attackers redirect ETH rewards. Default mainnet nodes were not exposed.

• The compromise undercuts the trust browsers and software place in eMudhra's website authentication, with clients and software makers shipping fixes in response.
• The Ethereum angle follows the earlier disclosure that the keys were cracked, extending the incident beyond web trust into blockchain client infrastructure.