CA eMudhra blocks curl/wget User-Agents from CRL endpoints, Mozilla bug filed

kingslyj · x · 2026-10-27

A Mozilla Bugzilla report (#2085612) documents that eMudhra's servers block requests to their CRL/OCSP endpoints (crl.emsign.com, ocsp.emsign.com, etc.) when using default curl, wget, or Python urllib User-Agent headers. Access with curl/8.7.1 is rejected while check/1 is accepted; independently confirmed. Filed under Mozilla's CA Certificate Compliance program, the filtering potentially breaks automated revocation checking across the TLS ecosystem and may violate CA baseline requirements.

Original post →

More from Infra

Infra channel →