---
title: "eMudhra Matsakaici CA daidaitawa: tasiri da jagorar gyarawa Saukewa:"
description: "Yi la'akari da hanyoyin amintattu da abin ya shafa da sabunta tsarin aiki, masu bincike, lokutan gudu, da kwantena, tare da bincika ainihin mai tabbatar da takaddun shaida. Saukewa:"
language: "ha"
url: "https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide"
author: "KeenDigit"
published: "2026-10-22"
---

# eMudhra Matsakaici CA daidaitawa: tasiri da jagorar gyarawa Saukewa:

Yi la'akari da hanyoyin amintattu da abin ya shafa da sabunta tsarin aiki, masu bincike, lokutan gudu, da kwantena, tare da bincika ainihin mai tabbatar da takaddun shaida. Saukewa:

An duba tushen **a ranar 22 ga Oktoba, 2026, lokacin Beijing.** Saukewa: **Masu sauraro: daidaikun masu amfani, ma'aikatan gidan yanar gizo, masu haɓakawa, da masu gudanar da tsarin.** Saukewa:

Mummunan rauni sun sa ƙungiyar eMudhra/emSign matsakaiciyar maɓallai masu zaman kansu CA za a iya dawo dasu. Wannan yana rinjayar abokan ciniki waɗanda ke amfani da tsarin takaddun shaida na jama'a don tantance gidajen yanar gizo, APIs, da software. Amincewar jama'a ta zarce manyan tsarin aiki, amma saitin maɓallan da ba su dace ba da yuwuwar tasirin abokin ciniki daban-daban. Saukewa: [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1)[5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5) Saukewa:

Babban rubutun yana amfani da ɓangarorin murabba'i zuwa maɓuɓɓuka masu dacewa da lamba, kuma duk hanyoyin haɗin kai na waje ana jera su a cikin kari. Sigar da aka jera ita ce tushen sigar da aka tabbatar tana ɗauke da gyaran wannan lamarin har zuwa ranar tabbatarwa. Lokacin turawa, ana ba da fifiko ga ingantaccen juzu'i a cikin reshe mai goyan baya. Saukewa:

## TL;DR

**Matsakaicin takwas CA maɓallai masu zaman kansu an tabbatar da lalata su. Rahotanni na yanzu ba su tabbatar da tushen maɓallan sirri ko HTTPS cryptography gabaɗaya an karye. Sabuntawa sun mamaye yawancin tsarin amintattun jama'a; ragowar hadarin ya dogara da ainihin aikace-aikacen.** [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1) [5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5)

1. **Masu amfani guda ɗaya:** sabunta masu bincike, tsarin aiki, da abubuwan tsaro. A kan Android, kuma sabunta ayyukan Google Play. Yi amfani da Firefox Android 158.0.2 ko kuma daga baya. Saukewa: [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1)[2](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-2) Saukewa:
2. **Servers:** suna sabunta fakitin `ca-certificates`/NSS na rarraba da duba shagunan amintattun aikace-aikace. Sabunta mai watsa shiri kawai bai isa ba. [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7)[8](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-8)[10](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-10) Saukewa:
3. **muhallin haɓakawa:** sabunta Node 24 zuwa 24.22.1 ko sabon saki a waccan reshe kamar yadda ya dace. A cikin mahallin Python, sabuntawa zuwa aƙalla pip 26.2.2, certifi 2026.10.19, da uv 0.13.4. Sami madaidaitan Go binaries ko sake gina su; sabunta Java bisa ga shawarar mai siyarwa. Saukewa: [12](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-12)-[15](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-15) Saukewa:
4. **Kunna sabuntawa:** zata sake farawa ayyukan da abin ya shafa da sake ginawa da sake sake sarrafa kwantena. Don Cloudflare Tunnel, sabunta cloudflared zuwa 2026.10.2 ko kuma daga baya. Saukewa: [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7) Saukewa:
5. **Takaddun shaida na gidan yanar gizo:** yana maye gurbin sarkar da abin ya shafa idan ta ƙunshi matsakaiciyar sokewa ko katange CA, ko ta dogara da tushen da ba a amince da shi ba. Sake fitar da takaddun shaida baya maye gurbin sabunta shagunan amintaccen abokin ciniki. [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1)[5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5)[8](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-8) Saukewa:
6. **Verification:** gwada ainihin hanyar TLS na kowane aikace-aikace. Bambance kin amincewa da takardar shedar daga ƙarewar lokaci da gazawar DNS. A ci gaba da tabbatar da takaddun shaida; kar a yi amfani da `-k` ko tsallake tabbaci don murkushe kurakurai. Saukewa: [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7) Saukewa:

## 1 Gaskiya da musabbabin faruwar lamarin Saukewa:

### tabbatar da gaskiya Saukewa:

Mozilla da Google sun tabbatar da lahani a cikin maɓallai masu zaman kansu guda takwas eMudhra CA. Mai binciken ya ba da tabbacin sarrafa maɓalli na sirri; Mozilla ya dawo da maɓallan kuma ya sake fitar da batun. Matsakaicin CA shida suna hidima ga TLS da sa hannun lambar sabis guda biyu. Saukewa: [2](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-2)[5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5)

Lalacewar ya ta'allaka ne a cikin maɓallan da aka ƙirƙira: waɗannan matsakaitan CAs suna amfani da madaidaicin P-384, amma maɓallan su na sirri lamba ne ƙasa da 256. Wannan yayi nisa daga zaɓin maɓalli amintacce bazuwar daga babban kewayon da aka nufa. Maido da waɗannan maɓallai masu rauni baya nuna cewa ana iya karye maɓallan P-384 da kyau. Saukewa: [2](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-2) Saukewa:

"Takaddun shaida ya fashe" anan yakamata a fahimci shi daidai kamar yadda "ana iya dawo da maɓalli na sirri daidai". Takaddun shaida da maɓalli na jama'a a cikinsa na zahiri na jama'a ne; ainihin abin da ya kamata a ɓoye shi ne maɓalli na sirri wanda zai iya samar da ingantacciyar sa hannu. Saukewa:

### Har yanzu ana gudanar da bincike kan al'amurran da suka shafi tsara tsarawa Saukewa:

Bayanin farko na eMudhra yana gano matsalar zuwa babban bikin tsara tsararraki a cikin Afrilu 2025. Bayanin ya ƙunshi maɓalli na ɓoyewa da matakin yankewa: ban da maɓalli mai ƙarfi na asali, wani saitin maɓallai masu rauni ya bayyana, kuma daga baya ana amfani da maɓallan masu rauni don aikace-aikacen takaddun shaida da bayarwa. Har yanzu dai kamfanin ya ce ba a tantance ainihin musabbabin hakan ba. Saukewa: [6](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-6) Saukewa:

Don haka, abin da za a iya ƙaddara shi ne cewa waɗannan maɓallan suna da rauni sosai kuma an lalata su; Ba za a iya ƙara bayyana gazawar a matsayin takamaiman tushen lambar bazuwar hardware na HSM an tabbatar da cewa ba shi da lahani, kuma ba za a iya kwatanta shi a matsayin babban ci gaba na sirri na RSA, ECC ko TLS. Saukewa:

### Menene tushen takardar shaidar rashin amincewa yake nufi? Saukewa:

Mai bincike ko tsarin aiki na iya kai tsaye toshe takaddun shaida ko maɓallin jama'a na tsaka-tsakin CA da abin ya shafa, ko kuma yana iya cire tushen amincin da ke jagorantar su. Matakin na ƙarshe kuma zai yi watsi da wasu halaltattun takaddun shaida a ƙarƙashin tushe ɗaya. Saukewa:

Google ya tsara cire `emSign ECC Root CA - G3` don kare masu amfani da tushen tushen Chrome waɗanda ba sa karɓar sabuntawa daga CRLSet. Ana sa ran cire tushen kantin sayar da kayayyaki a cikin daidai lokacin daga 27 ga Oktoba zuwa 28 ga Oktoba, lokacin Beijing; ainihin lokacin Google shine safiyar ranar 27 ga Oktoba, Lokacin Hasken Rana na Amurka. Wannan shirin ya bambanta da toshe maɓallin jama'a na gaggawa wanda aka tura a baya. Saukewa: [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1) Saukewa:

**Rashin amincewa da tushe shine ma'aunin amsawa; shi kansa baya tabbatar da cewa tushen keɓaɓɓen maɓalli ya lalace.** Saukewa:

## 2 Me yasa tasirin tasirin ya shafi tsarin amintattun jama'a Saukewa:

### Maɓallai masu ɓarna da hanyoyin aminci da abin ya shafa Saukewa:

| Abun hukunci Saukewa:                                                       | Fadin wannan lamarin Saukewa:                                                                                                     |
| --------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- |
| An gano maɓallin matsala Saukewa:                                           | 8 matsakaici CA maɓallan sirri na eMudhra Saukewa:                                                                                |
| Matakan da za su buƙaci aiki Saukewa:                                       | Shagon tushen jama'a, mai bincike, tsarin aiki, lokacin aiki na harshe, fakitin software da yanayin yanayin kwantena Saukewa:     |
| Yiwuwa ainihin abin da aka kwaikwayi TLS Saukewa:                           | Shafukan yanar gizo ko ayyuka da abokan ciniki suka ziyarta waɗanda har yanzu suna karɓar sarkar takaddun shaida na jabu Saukewa: |
| Shin yana nufin cewa an lalata duk na'urori? Saukewa:                       | A'a; yanayin aminci, wurin cibiyar sadarwa mai kai hari, da sauran dabarun tabbatarwa sun tabbatar da amfani Saukewa:             |
| Shin yana nufin cewa duk takaddun shaida na doka ba su da inganci? Saukewa: | A'a; Haɗin da ke tattare da ɓarna ya dogara da tushen tushen ko sarƙoƙin takaddun shaida abokin ciniki ba shi da amana. Saukewa:  |

Red Hat yana ƙayyadadden amfani ga yanayin da har yanzu abokin ciniki ke karɓar sarkar da ta dace, maharin ya mallaki maɓallin keɓaɓɓen maɓalli, kuma yana iya tsangwama haɗi a cikin hanyar sadarwa. Ba za a rikita batun haɗarin haɗari da adadin hare-haren da suka faru ba. Saukewa: [10](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-10) Saukewa:

### Shafukan yanar gizo masu amfani da wasu CA kuma ana iya kwaikwayi su

A ce gidan yanar gizon yana amfani da takardar shaidar Let's Encrypt, kuma abokin ciniki mai ziyara ya amince da CA na jama'a da yawa a lokaci guda. Mai hari zai iya ƙoƙarin yin amfani da matsakaicin matsakaicin CA don ƙirƙirar wani takaddun shaida don sunan yanki iri ɗaya. Abokan ciniki yawanci ba sa buƙatar gaba cewa sunan yankin zai iya amfani da Let’s Encrypt kawai; idan har yanzu ana karɓar sarkar karya, wanda CA a zahiri gidan yanar gizon yana amfani da shi bai isa ya kawar da irin waɗannan hare-hare ba. Saukewa: [8](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-8) Saukewa:

Wannan tsarin yana bayani: Maye gurbin wata takardar shaidar CA wadda ta kasance ta al'ada ba za ta gyara amincin abokin ciniki kai tsaye ga CA da aka lalata ba. Abin da ya kamata a yanke shi ne hanyar abokan ciniki don karɓar bayanan karya. Saukewa:

### Ana buƙatar magance tasirin uku daban-daban Saukewa:

**Identity Haɗarin kwaikwaiyo:** Abokan ciniki waɗanda ba su toshe sarkar da ta dace ba na iya karɓar shaidar da maharin ya ƙirƙira, yana haifar da aika buƙatu masu mahimmanci zuwa sabis na karya. Saukewa:

**Haɗarin samun sabis na halal:** cire amintaccen tushe na iya haifar da kurakuran takaddun shaida don in ba haka ba halaltattun gidajen yanar gizo, waɗanda ƙila za su buƙaci ƙaura zuwa wani sarkar da aka karɓa. Saukewa:

**Haddarar ɗaukar aiki:** tsarin aiki na iya daidaitawa yayin da aikace-aikacen da ke kunshe da amintaccen kantin sayar da kayan aiki, yanayin kama-da-wane, tsohon hoton kwantena, ko shirin da aka haɗa yana riƙe tsohon halayen tabbatarwa. Saukewa:

Waɗannan filaye guda uku ba ɗaya ba ne. Martanin Cloudflare ya ƙunshi tabbatarwa na ainihi na nesa, shagunan amana da aka raba, hotunan tushe, da aikace-aikacen mutum ɗaya, yana nuna dalilin da yasa dole ne a gudanar da ayyukan biyu daban. Saukewa: [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7) Saukewa:

## 3 CA ya shafa da masu ba da takaddun shaida Saukewa:

### Nau'in Mai Ba da Tasiri Saukewa:

| mai bayarwa ko tsarin Saukewa:                                                        | Matsayi a cikin wannan lamarin Saukewa:                                                                                           | Iyakokin da ke buƙatar bambanta Saukewa:                                                                                                                                                     |
| ------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| eMudhra／emSign                                                                        | Maɓallin keɓaɓɓen maɓalli na CA an lalata shi kai tsaye. Saukewa:                                                                 | Ba za ku iya rubuta duk tushen eMudhra da duk takaddun shaida kamar fashe ba Saukewa:                                                                                                        |
| Sarkar sa hannu mai alaƙa da Sectigo Saukewa:                                         | A an ba da takardar shedar giciye don rukuni ɗaya na maɓallan jama'a da abin ya shafa, ya samar da wata hanyar amincewa. Saukewa: | Madaidaicin takardar shaidar giciye ko maɓallin jama'a yana buƙatar toshe; Sectigo tushen keɓaɓɓen maɓallin keɓaɓɓen ba a tabbatar da lalacewa ba. Saukewa:                                  |
| Matakan takaddun shaida na Internet2/InCommon Saukewa:                                | Wasu halaltattun takaddun shaida sun dogara da tushen emSign ECC da za a cire, wanda ya haɗa da ƙaura. Saukewa:                   | Yana da tasiri na haɗin kai na tushen rashin amincewa kuma ba za a iya ƙidaya shi a matsayin tsakiyar waɗannan maɓallai masu rauni 8 CA Saukewa:                                             |
| Let’s Encrypt, DigiCert, Google Trust Services, GlobalSign, da dai sauransu. Saukewa: | Ba a lissafa a matsayin ƙungiyar da aka lalata maɓalli na sirri a cikin wannan rahoton ba Saukewa:                                | Takaddun shaida na halal ba su lalace iri ɗaya ba; abokan ciniki masu rauni na iya har yanzu karɓar takaddun shaida na karya waɗanda ke kwaikwayon gidajen yanar gizon da suke aiki Saukewa: |
| CDN, dandamalin girgije, dillalin takaddun shaida Saukewa:                            | Yiwuwar bayar da takaddun shaida masu dacewa ko amfani da wurin ajiyar jama'a lokacin haɗawa zuwa asalin da API Saukewa:          | Don bincika ainihin sarkar takaddun shaida da mai inganci, kar a kalli dandamali ko sunan samfur kawai Saukewa:                                                                              |

Sanarwa ta Mozilla tana tattara maɓallan da aka daidaita da sa hannun sa hannun Sectigo. Tattaunawar jama'a ta Google ta magance ƙaura na halaltaccen matsayi na Internet2/InCommon. [2](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-2)[5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5) Cloudflare sabis ɗin adreshin gyare-gyare da amintaccen abokin ciniki; ba sa nuna sassauci ga maɓallan keɓaɓɓen Cloudflare CA. Saukewa: [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7) Saukewa:

### TLS sarkar takardar shaida da sa hannun giciye

Dangantakar da ke gaba tana bayyana hanyoyin da suka danganci TLS kawai a wannan lokacin. Ba ya haɗa da hanyoyin sa hannu na lamba, kuma baya nufin cewa waɗannan hanyoyin har yanzu an amince da su akan duk dandamali. Saukewa: [17](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-17) Saukewa:

- `emSign ECC Root CA - G3` → `emSign Root TLS CA - G3` → Shafi TLS Maɓalli na jama'a CA ya shafa Saukewa:
- `AAA Certificate Services` → Ya shafa TLS Matsakaicin CA Maɓallin Jama'a Saukewa:

`emSign Root TLS CA - G3` ɗaya ne mai ba da kai tsaye na tsaka-tsakin TLS da abin ya shafa kuma yana iya da kansa ya zama anka amana a wasu shagunan. `emSign ECC Root CA - G3` yana ba da wani Layer mai sa hannu kan giciye. Sectigo's `AAA Certificate Services` yana ƙirƙirar ƙarin hanya zuwa maɓallan jama'a na CA iri ɗaya. Saukewa: [17](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-17) Saukewa:

Saboda haka, akwai nau'i biyu na granularities lokacin gyarawa: Saukewa:

- **Katange ainihin matsakaicin CA ko maɓalli na jama'a:** wannan na iya adana wasu ingantattun mukamai a ƙarƙashin tushe guda, inda mai inganci ke goyan bayan wannan tsarin. Saukewa:
- **Cire amintaccen tushen:** wannan na iya kare abokan ciniki ba tare da matsakaicin damar toshewa na CA ba, amma yana iya shafar dacewa. Duk sauran hanyoyin da abokin ciniki ya yarda kuma dole ne a rufe su. Saukewa: [5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5) Saukewa:

"Goge duk tushen Sectigo/eMudhra" bai kamata a dauki shi azaman babban mataki na gaba ɗaya ba, kuma kada kawai share takaddun shaida mai irin wannan suna yana nufin cewa duk hanyoyin suna rufe. Saukewa:

## 4 Tsarin aiki da ɗaukar hoto Saukewa:

### Babban dandamali Saukewa:

| Dandalin Saukewa:                                            | Halin da aka sani Saukewa:                                                                                                | Iyakar abin da ya kamata a bincika lokacin amfani Saukewa:                                                                                                                   |
| ------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Windows da Windows Server Saukewa:                           | An Katange Rarraba Microsoft ta Sabunta Jerin Amintattun Takaddun Shaida ta atomatik Saukewa:                             | Ko na'urar ta sami sabuntawa; CA bundle ba dole ba ne ya yi amfani da hanyar tabbatarwa na Windows Saukewa:                                                                  |
| macOS, iOS, iPadOS, da dai sauransu Apple dandamali Saukewa: | Mai tsara abin da ya faru ya tabbatar da cewa Apple ya tura shingen da ya dace Saukewa:                                   | Kowane tsohon sigar da ƙa'idar ɓangare na uku ba ta da tabbacin samun ɗaukar hoto iri ɗaya Saukewa:                                                                          |
| Android                                                      | Google yana rarraba daidai shinge ta hanyar sabis ɗin Google Play Saukewa:                                                | ROM ba tare da sabis na Google Play ya kamata a tabbatar da shi bisa ga sanarwar masana'anta; yi amfani da ginanniyar tabbatarwa don ƙarin tabbaci Saukewa:                  |
| Ubuntu                                                       | An samar da gyare-gyaren takaddun takaddun tsarin, gami da rassa iri-iri na yanzu da tsohon sigar Saukewa:                | Tsohuwar sigar ESM tana goyan bayan sharuɗɗa, fakitin satifiket na ciki da aikace-aikacen ginanniyar ɗakin karatu Saukewa:                                                   |
| Debian da Devuan Saukewa:                                    | Debian rikodin ca-certificates gyarawa Saukewa:                                                                           | Dole ne ku bincika ainihin reshe da aka yi amfani da shi da kuma kunshin da aka shigar, kuma ba za ku iya kwafi lambar sigar wani reshe ba. Saukewa:                         |
| RHEL da abubuwan da aka samo asali Saukewa:                  | Lissafin hukuma shine RHEL 6, 7, 8, 9, 10, kuma yana rufe samfuran da hotuna masu alaƙa waɗanda za a iya shafa. Saukewa:  | Har zuwa wannan rajistan, sanarwar ba ta jera cikakken jerin gyare-gyare da gyare-gyare ba; "Ba a sami sabuntawa ba" ba za a iya la'akari da wanda bai shafe shi ba Saukewa: |
| Fedora, Arch, Gentoo, Alpine, da dai sauransu. Saukewa:      | Mai kula da taron ya tattara bayanan gyara daidai Saukewa:                                                                | An tabbatar da kansa ta hanyar fitarwa, reshe na sigar da hoto Saukewa:                                                                                                      |
| FreeBSD                                                      | A bisa hukuma yana lissafin duk nau'ikan da aka goyan baya kuma yana ba da gyare-gyaren kantin amintaccen tsarin Saukewa: | Bayan sabuntawa, sake kunna tsarin daemon mai dacewa bisa ga sanarwar; duba shagon amintaccen aikace-aikacen mai zaman kansa daban.                                          |

Don taƙaitaccen bayani na Windows, Apple da sakewa, duba [4](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-4); don Android, duba [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1); don Ubuntu, Debian, RHEL, da FreeBSD Ana nuna bayanan mai bayarwa a cikin [8](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-8)–[11](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-11) bi da bi. Saukewa:

Tsarukan da ba su da tallafi, na'urorin layi, NAS, masu amfani da hanyar sadarwa, da sauran wuraren da aka haɗa suna buƙatar tabbatar da ko har yanzu suna dogara da sarkar da ta dace kuma ko suna da tashoshi don karɓar sokewa ko sabunta software. Sunan dandamali da kansa ba madadin duba ainihin halayen tabbatarwa ba. Saukewa:

### Kariyar Browser ya bambanta da kariyar tsarin aiki Saukewa:

Chrome yana amfani da CRLSet don rarraba tubalan gaggawa; Firefox yana amfani da hanyoyi kamar OneCRL. Firefox kuma an sake shi tare da toshe bayanai don samar da ƙarin kariya don daidaitawa waɗanda ba su karɓi saitunan nesa daidai ba. Saukewa: [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1)[3](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-3) Saukewa:

Wasu jeri na Firefox Android ba su yi amfani da lissafin da aka sabunta daidai lokacin farawa ba, wanda Mozilla ya ce za a gyara shi ta 158.0.2. Saboda haka, ba za a iya faɗaɗa matsayin farkon 158.0.1 don haɗa duk tsararrun Android Firefox da aka kiyaye. Saukewa: [2](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-2) Saukewa:

An ɗauki matakai don tabbatar da tsarin Apple da Windows, amma ba yana nufin cewa duk shirye-shiryen layin umarni akan na'ura ɗaya ba za su sami tabbacin tsarin. Mai kula da taron ya tunatar da cewa wasu kayan aikin ginannun macOS suna amfani da fayilolin takaddun shaida masu zaman kansu; ainihin bayanan baya na TLS da CA yakamata a yi rikodin lokacin dubawa. Saukewa: [4](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-4) Saukewa:

### Iyakoki na Kariya don Fahimtar Takaddun Shaida Saukewa:

Google ya tabbatar da cewa kafin aiwatar da toshe, TLS na matsakaicin matsakaicin CA shida bai ba da takardar shaidar TLS wacce ta shigar da log ɗin CT ba. Don haka, abokan cinikin Chrome waɗanda ke tilasta CT suna da ƙarin kariya. Wannan gaskiyar ba ta kawar da yuwuwar cewa wasu abokan cinikin da ba su aiwatar da CT sun karɓi takaddun shaida ba. Saukewa: [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1)[5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5) Saukewa:

"Ya bayyana cewa ana iya danganta shi da tushen amintacce", "sharuɗɗan yin amfani da su akwai" da "harin ya faru" hukunci ne daban-daban guda uku kuma bai kamata a maye gurbinsu da juna ba. Saukewa:

## 5 Yanayin haɓakawa da tushen gyara lokacin aiki Saukewa:

Abin da ke biyo baya shine tushen gyare-gyaren da aka tabbatar kuma ba buƙatu ba ne don haɗa waɗannan abubuwan na dogon lokaci. Distros na iya gyara tsofaffin lambobi ta hanyar motsa facin baya, kuma yakamata a sake duba shawarwarin tsaro. Saukewa:

| aka gyara Saukewa:  | Tabbatar da sigar ko hanyar sabuntawa Saukewa:                                            | Abubuwan la'akari da ƙaddamarwa Saukewa:                                                                                                                                                                       |
| ------------------- | ----------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Node.js 24          | 24.22.1 ko sabunta ingantaccen sigar reshe ɗaya Saukewa:                                  | Ya ƙunshi sabuntawar tushen tushen bayanai da ƙin katange sarƙoƙi na jama'a; duba hanyar Node a zahiri da sabis ɗin ke amfani da shi kuma sake farawa Saukewa:                                                 |
| Python certifi      | 2026.10.19 ko sabon sigar Saukewa:                                                        | Bincika kowane ainihin yanayin gudana; Ba za ku iya sabunta fakiti ɗaya kawai a ƙarƙashin Python na duniya ba Saukewa:                                                                                         |
| pip                 | 26.2.2 ko sabon sigar Saukewa:                                                            | Na dabam sabunta pip a cikin tsohon yanayin kama-da-wane kuma ku sake duba sigar bayan an ƙirƙiri sabon yanayi Saukewa:                                                                                        |
| uv                  | 0.13.4 ko sabon sigar Saukewa:                                                            | Sabunta kwafin kayan aikin kamar yadda aka shigar dashi a zahiri Saukewa:                                                                                                                                      |
| Go                  | 1.27.3 ko 1.26.10, ana samun sabunta sigar reshen da ya dace. Saukewa:                    | Sake ginawa da tura shirye-shiryen da suka dace bayan sabunta sarkar kayan aiki, ko samun binary na gyara mai siyarwa Saukewa:                                                                                 |
| Oracle JDK          | Critical faci don daidaitattun layukan sigar tallafi Saukewa:                             | Masu wallafa JDK daban-daban suna bin sanarwar kansu; babu lambar siga guda ɗaya da ta shafi duk fitowar Java Saukewa:                                                                                         |
| Cloudflare Tunnel   | cloudflared 2026.10.2 ko sabon sigar Saukewa:                                             | Sabunta ayyuka masu gudana; tura kwantena na buƙatar maye gurbin hoton da sake yin aiki                                                                                                                        |
| Cloudflare One／WARP | Tsayayyen sigar abokin ciniki mai dacewa da dandamali ko ingantaccen sigar barga Saukewa: | Ana tabbatar da matakan gefen abokin ciniki da uwar garken daban. Don takamaiman nau'ikan dandamali, duba ƙarin [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7) Saukewa: |

Umarnin asali don Node , Python , Go , Oracle kuma Cloudflare ana samun su a ciki [13](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-13) , [12](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-12) , [14](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-14) , [15](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-15) , [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7) .

### Python matsala database mai zaman kanta Saukewa:

Jami'an Python sun nuna cewa tsohuwar pip za ta yi amfani da haɗin gwiwar tsarin dogara da ginanniyar certifi. Kawai gyaggyara kantin sayar da takardar shaidar tsarin ko ƙara fayil ɗin CA zuwa pip ba zai iya dogaro da gaske keɓance tsohuwar amintaccen gininsa ba. Saboda haka, `PIP_CERT`, `REQUESTS_CA_BUNDLE` ko `--cert` ba za a iya amfani da su azaman maye gurbin gyare-gyare na duniya don tsofaffi pip. Saukewa: [12](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-12) Saukewa:

Bincika mahallin kama-da-wane da ke akwai bayan an ɗaukaka. Hakanan duba sigar pip da aka shigar a zahiri a cikin sabbin mahalli da aka ƙirƙira ta yadda tsofaffin abubuwan haɗin bootstrap kar su sake gabatar da kayan aiki masu rauni. Don haɓakawa na farko, bi hanyoyin zazzagewa da matakan tabbatarwa na SHA-256 a cikin shawarar Python kafin sabunta wasu fakiti. Saukewa: [12](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-12) Saukewa:

### Go da sauran shirye-shiryen da aka haɗa Saukewa:

Gyara don Go ya canza ma'anar tabbatarwa don `crypto/x509`. [14](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-14) Daga hangen nesa na tsarin turawa, sabunta mai tarawa akan injin haɓakawa ba zai sake rubuta binary ɗin da aka riga aka tura ba. Don samun sabon toshe layin lambar, yakamata a sake gina aikace-aikacen kuma a maye gurbinsa, ko kuma a yi amfani da sabon sigar da mai siyarwa ya bayar. Ko tsohon shirin kuma zai iya amfana daga sabunta tushen tsarin ya dogara da ainihin hanyar tabbatarwa da yake amfani da shi. Saukewa:

### Kwantena da aikace-aikace kunshe Saukewa:

Fakitin takardar shedar tsarin, dogaro da aikace-aikace da lokacin aiki a cikin akwati yawanci abun ciki na hoto ne ke ƙayyade shi. Sabuntawa mai watsa shiri baya daidai da sabunta abun ciki na hoto; ainihin hoton da abin dogara yana buƙatar sabuntawa, kuma ainihin misalin da ke gudana yana buƙatar sake ginawa, turawa, da bincika. Fakitin aikace-aikace da shirye-shiryen tebur waɗanda suka zo tare da lokacin aikin su kuma yakamata a sabunta su bisa ga tashoshi na sakin dillali. Saukewa: [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7)[10](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-10) Saukewa:

## 6 Gyara umarnin aiwatarwa Saukewa:

### Ƙayyade abin dubawa da farko Saukewa:

Ana ba da shawarar yin rikodin bayanan masu zuwa don ayyukan da ke buƙatar kariya, sannan zaɓi hanyar gyara daidai. Wannan jerin abubuwan dubawa ne kuma baya buƙatar duk abubuwan da aka haɗa su kasance akan kowane tsari. Saukewa:

| Aikin Saukewa:                   | Abin da ake buƙatar rubutawa Saukewa:                                                                                 |
| -------------------------------- | --------------------------------------------------------------------------------------------------------------------- |
| Aikace-aikace da amfani Saukewa: | Browser, biyan API abokin ciniki, sabis na aika imel, kayan aikin saukewa, wakili na baya, da sauransu. Saukewa:      |
| matsayin aiki Saukewa:           | Mai watsa shiri, kwantena, injin kama-da-wane, aikace-aikacen tebur ko na'urar hannu Saukewa:                         |
| Tabbatar da aiwatarwa Saukewa:   | Mai ingancin tsarin aiki, OpenSSL, Node, Python laburaren karatu, Java ko aiwatar da al'ada na aikace-aikace Saukewa: |
| amintaccen tushe Saukewa:        | Kunshin tsarin CA, certifi, JDK kantin dogara, ginanniyar CA bundle ko tsarin kasuwanci Saukewa:                      |
| Matsayin gyarawa Saukewa:        | Sigar da aka shigar, tushen faci, ko za a sake farawa ko sake turawa Saukewa:                                         |
| Sakamakon karbuwa Saukewa:       | Ko an ƙi sarkar da abin ya shafa, ko haɗin kasuwanci na yau da kullun ya yi nasara, da lokacin dubawa Saukewa:        |

Jagoran haɓakawa na Cloudflare yana faɗi musamman cewa SDK na iya ba da tabbaci ga wasu abubuwan haɗin gwiwa; kawai sabunta babban matakin SDK ba lallai ba ne ya canza ainihin manufar amincewa. Saukewa: [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7) Saukewa:

### Tsarukan aiki da masu bincike

**Windows:** kunna da tabbatar da sabuntawar lissafin amintaccen takaddun shaida ta atomatik. Rarraba sabuntawa ta hanyar kafaffun manufofin gudanarwa. Na'urori ko na'urori marasa layi tare da naƙasassun sabuntawa ta atomatik suna buƙatar toshe da aka yi amfani da shi ta tsarin gudanarwa da ya dace. Bincika shirye-shiryen da basa amfani da ingantaccen tsarin Windows daban. Saukewa: [4](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-4) Saukewa:

**Apple Platform:** Cikakken tsarin, bangaren tsaro da sabunta aikace-aikace. Don kayan aikin haɓakawa akan macOS, kuma duba baya TLS, fayilolin takaddun shaida da tushen shigarwa. Ba za a iya yanke hukunci cewa an gyara na'urar gabaɗaya ba saboda Safari ya ƙi saƙar gwajin. Saukewa: [4](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-4) Saukewa:

**Android:** sabunta ayyukan Google Play akan na'urorin da ke da shi. Google ya furta cewa sake kunna na'ura na iya haifar da sabuntawa nan take. Don na'urori ba tare da waɗannan ayyukan ba, bi mai siyarwa ko shawarwarin ROM; Bayanin ɗaukar hoto na Google baya aiki kai tsaye ga kowace na'urar Android. Saukewa: [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1) Saukewa:

**Ubuntu / Debian :** sabunta fakitin takaddun shaida daga ma'ajiyar da aka goyan baya kuma duba shawara don rarrabawar da aka shigar. Misali, an APT - tushen tsarin iya amfani da:

```bash
sudo apt update
sudo apt install --only-upgrade ca-certificates
dpkg-query -W -f='${Package} ${Version}\n' ca-certificates
```

Sabuntawa masu dacewa don Ubuntu 22.04, 24.04, 26.04, da 26.10 daidaitattun tallafi ne; sigogin farko yakamata su duba goyon bayan ESM da matsayin sito. Bayan umarnin ya ƙare cikin nasara, yakamata ku gwada fasalin fakitin gyara a cikin sanarwar. Saukewa: [8](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-8)[9](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-9) Saukewa:

**RHEL da samfuran alaƙa:** Bincika fakitin takaddun shaida da errata tsaro ta tashar samfur. Ana iya bincika sigar ta amfani da: Saukewa:

```bash
rpm -q ca-certificates
```

Yi amfani da injin sabunta DNF/YUM mai goyan bayan don samun facin dillali; idan tashar ba ta ba da gyara ba tukuna, kar a ɗauki "babu kunshin da za a sabunta" a matsayin mai lafiya. Lokacin da ya wajaba don cire amana na ɗan lokaci, ɗauki matakan da masana'anta suka jera a sarari kuma kimanta dacewa da halaltattun takaddun kasuwanci. Saukewa: [10](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-10) Saukewa:

**FreeBSD:** sabunta reshen tsarin da ya dace kamar yadda shawarar hukuma ta ba da umarni, sannan a sake kunna daemons ta amfani da tsarin amintaccen OpenSSL da abin ya shafa ko sake kunna tsarin. Saukewa: [11](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-11) Saukewa:

### Aikace-aikace da hotuna Saukewa:

Bayan kammala daidai lokacin aiki da sabuntawar dogaro da takaddun shaida, duba hanyar fayil ɗin da za a iya aiwatarwa inda a zahiri sabis ɗin ke gudana don guje wa cewa tashar ta canza zuwa sabon sigar kuma har yanzu daemon yana amfani da tsohon littafin shigarwa. Don mahalli da yawa Python, kwantena sabis da aikace-aikacen da suka zo tare da nasu lokacin aiki, yakamata a duba su daban. Saukewa:

Don abubuwan da ake buƙatar sake ginawa, adana sigar ginin, sigar dogaro, da ID ɗin hoto na turawa. Abun karɓa shine ainihin misali mai gudana kuma ba zai iya duba sabon alamar kawai a cikin injin gini ko rajistar hoto ba. [7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7)[12](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-12)[14](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-14) Saukewa:

### ƙaura takardar shaidar yanar gizo Saukewa:

Idan sarkar gidan yanar gizo ta ƙunshi sokewa ko katange matsakaiciyar CA, ko kuma a ƙarshe ta dogara da tushen da ba a amince da shi ba, sami wata sarkar da har yanzu abokan ciniki ke karɓa. Shigar da cikakkiyar sarkar satifiket ɗin uwar garken kuma duba kowane shiga, gami da ma'auni masu ɗaukar nauyi, wakilai na baya, wuraren ƙarshen CDN, da tushen samun dama kai tsaye. Saukewa: [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1)[5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5) Saukewa:

Ko ana buƙatar ƙaura yana dogara ne akan ainihin sarkar. Tace kawai ta alamar tallace-tallace na takaddun shaida na iya rasa sake siyarwa ko alaƙar sa hannu; jira kawai sabuntawar ƙarewa na yau da kullun na iya zama ba lallai ba ne ya kammala ƙaura kafin a sabunta tushen kantin. Saukewa:

Don sauran takaddun shaida na gidan yanar gizo na yau da kullun da CA ya bayar waɗanda ba su dogara ga tushen abin da ya shafa ba, babu buƙatar sake sanya hannu a kansu saboda wannan lamarin. A lokaci guda, uwar garken gidan yanar gizon kanta yakamata ya kasance yana yin binciken gyaran gefen abokin ciniki yayin kiran sabis na waje. Saukewa:

## 7 Tabbatar cewa gyara yana aiki da gaske

### Ana yin duban sigar da duba ɗabi'a daban Saukewa:

Ana amfani da duban sigar don tabbatar da cewa an tura faci ko ƙayyadaddun abubuwan gyara; Ana amfani da duban ɗabi'a don tabbatar da cewa aikace-aikacen a zahiri yana amfani da hanyar tabbatarwa da ake tsammanin. Biyu cak suna magance matsaloli daban-daban, kuma ba ɗayansu da za'a iya maye gurbinsu da "Umurnin Sabuntawa cikin nasara". Saukewa:

Mai kula da taron yana ba da wurin gwaji da kayan sarkar takardar shaida, kuma ƙofar an tattara shi cikin kari [4](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-4). Ya kamata a tabbatar da shi a cikin ainihin yanayin aiki na aikace-aikacen da aka yi niyya, yana kiyaye daidaitattun takaddun shaida na al'ada. Saukewa: [4](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-4)[7](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-7) Saukewa:

| Duba sakamakon Saukewa:                                                                       | Ƙarshen da za a iya zana Saukewa:                                                                   |
| --------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
| Ƙi a sarari saboda ba a amince da sarkar da abin ya shafa ba Saukewa:                         | Yana nuna cewa hanyar tabbatarwa da ake gwadawa ta ƙi sarkar Saukewa:                               |
| Karɓi sarkar da abin ya shafa akai-akai Saukewa:                                              | Yana nuna cewa wannan hanyar tana buƙatar ci gaba da gyarawa ko kuma a duba yanayin tsari. Saukewa: |
| Kuskuren DNS, ƙarewar haɗin kai, kin amincewar wakili ko sabis ɗin da ba a iya kaiwa Saukewa: | Ba za a iya kammala cewa an kawar da haɗarin takardar shaidar bisa ga wannan ba. Saukewa:           |
| Mai lilo ya ƙi, amma ba a duba kiran app Saukewa:                                             | Yana iya tabbatar da mai binciken ne kawai, ba shirin baya ba. Saukewa:                             |
| An ƙi sarkar A Saukewa:                                                                       | Har yanzu kuna buƙatar yin la'akari ko abokin ciniki ya karɓi wata hanyar sa hannu Saukewa:         |

Jarabawar kuma yakamata ta rufe hanyoyin haɗin gwiwar kasuwanci na yau da kullun don guje wa kuskuren duk gazawar buƙatu azaman gyare-gyaren nasara bayan faɗuwar kasuwanci ta haifar da cire amana da yawa. Saukewa:

### Sharuɗɗan ƙarewar da aka ba da shawarar Saukewa:

- An rubuta tushen sabuntawa da sigar abubuwan abubuwan da abin ya shafa. Saukewa:
- An sake kunna misalan gudu mai kama da shi, sake ginawa, ko sake fasalta shi. Saukewa:
- Ainihin aikace-aikacen ya ƙi sarkar da abin ya shafa, kuma tabbatarwa TLS don kasuwancin al'ada yana ci gaba da aiki. Saukewa:
- Babu saitin don kashe tabbatar da takaddun shaida na ɗan lokaci don maido da haɗin. Saukewa:
- Idan ƙaura takardar shaidar gidan yanar gizo ta shafi, duk mashigai na waje an canza kuma an tabbatar dasu. Saukewa:

Sharuɗɗan kammalawar da ke sama shawarwari ne don aiki da karɓar kulawa don wannan zubar; ba daidai ba ne don tabbatar da cewa kayan aiki ba su da wasu matsalolin tsaro. Saukewa:

## 8 Tarihi HTTPS zirga-zirga da iyakokin haɗari Saukewa:

### Nau'ukan maɓalli uku suna da amfani daban-daban Saukewa:

| key Saukewa:                                  | Babban manufar Saukewa:                                                                     |
| --------------------------------------------- | ------------------------------------------------------------------------------------------- |
| CA maɓalli na sirri Saukewa:                  | Sa hannu kan ainihi da maɓalli na jama'a a cikin takaddun shaida Saukewa:                   |
| Maɓalli na sirri na gidan yanar gizo Saukewa: | Tabbatar da shaidar uwar garken a cikin ingantacciyar takardar shedar musafaha TLS Saukewa: |
| makullin zaman Saukewa:                       | Kare ainihin bayanan da aka watsa akan haɗin gwiwa Saukewa:                                 |

Samun maɓallin keɓaɓɓen CA baya daidai da samun maɓallin keɓaɓɓen gidan yanar gizon ko duk maɓallan zama. A haɗi na yau da kullun tare da sirrin gaba ta amfani da musayar maɓalli na wucin gadi ba za ta fallasa zaman tarihi ta atomatik ba saboda kawai maɓallin sa hannu na dogon lokaci ya lalace. Don abubuwan tsaro masu dacewa na TLS 1.3, duba RFC 8446. Saukewa: [16](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-16) Saukewa:

Babban haɗarin wannan lokacin yana faruwa yayin lokacin tantancewa: idan abokin ciniki ya karɓi takaddun sabar sabar na jabu, yana iya kafa haɗi tare da maharin da har yanzu ke rufaffen asiri. TLS 1.3 kuma yana buƙatar ingantaccen tabbaci; kawai haɓaka sigar yarjejeniya ba ta zama madadin toshe CA ba. Saukewa:

### Hukunce-hukuncen da za su iya kuma ba za a iya yanke su a halin yanzu ba

**Tabbatar:** takamaiman maɓalli na sirri na CA an lalata su; hanyoyin amincewar jama'a da abin ya shafa suna da fa'ida; manyan dandamali da na'urori da yawa na software sun dauki mataki. [1](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-1)[4](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-4)[5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5) Saukewa:

**Ba a kafa ta da wannan lamarin ba:** cewa duk masu amfani sun fuskanci hare-haren mutum-a-tsakiyar, cewa sauran maɓallan CA an lalata su, cewa duk zirga-zirgar HTTPS na tarihi ba za a iya ɓoyewa ba, ko kuma sabunta na'urar bincike ɗaya yana kare kowane aikace-aikacen. Saukewa:

Hukuncin ƙarshe game da takamaiman sabis ɗin yakamata ya dogara ne akan sarkar takardar shaidar sa, manufar tabbatarwa, ainihin abubuwan da ke gudana da matsayi na sabuntawa, ba kawai ko sandar adireshin ta karanta HTTPS ba. Saukewa:

## Karin Bayani A Matsakaici Sunan CA ya shafa Saukewa:

Sunaye masu zuwa suna taimakawa tantance kadari. Sunaye ba sa maye gurbin takaddun takaddun yatsu ko masu gano maɓalli na jama'a. Daidaitawa ta atomatik ya kamata a yi amfani da ainihin masu gano abubuwan da masu kula da abin ya faru ko dillalai suka buga, gami da takaddun shaida masu rattaba hannu. Saukewa: [5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5) Saukewa:

| Tsakiyar CA Saukewa: | Manufar Saukewa:       | Ƙungiyoyi masu alaƙa Saukewa: |
| -------------------- | ---------------------- | ----------------------------- |
| EM EV TLS CA - G3B   | TLS                    | eMudhra BV                    |
| EM OV TLS CA - G3B   | TLS                    | eMudhra BV                    |
| EM DV TLS CA - G3B   | TLS                    | eMudhra BV                    |
| EM EV TLS CA - G3C   | TLS                    | eMudhra Inc                   |
| EM OV TLS CA - G3C   | TLS                    | eMudhra Inc                   |
| EM DV TLS CA - G3C   | TLS                    | eMudhra Inc                   |
| EM OV CS CA - G3B    | code sa hannu Saukewa: | eMudhra BV                    |
| EM OV CS CA - G3C    | code sa hannu Saukewa: | eMudhra Inc                   |

TLS ba daidai yake mai inganci da tsarin sokewa ba kamar sa hannu na lamba. Manufar wannan labarin shine HTTPS/TLS; Yanayin sa hannu na lambar ya kamata ya ɗauki Microsoft, JDK ko masu siyar da software masu alaƙa don wannan dalili, kuma bai kamata a ɗauki sakamakon gwajin burauza a matsayin karɓar sa hannun lamba ba. Saukewa: [5](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-5)[15](https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide#source-15) Saukewa:

## Bayanin Bayanin Bayani na B Saukewa:

An tabbatar da waɗannan maɓuɓɓuka masu zuwa a ranar 22 ga Oktoba, 2026. Ana iya ci gaba da sabunta sanarwar naɗawa, kuma ya kamata a fahimci matsayi da sigar da ke cikin rubutun bisa ranar wannan takarda. Saukewa:

### Gaskiyar lamarin da kuma kula da dandamali Saukewa:

**\[1] Google Chrome da Android Sanarwa ta hukuma** Saukewa: Yana bayyana kuskuren maɓalli na sirri, toshe SPKI, rarraba sabis na Google Play, kariya ta CT, da Chrome tsare-tsaren cire tushen ma'aji. Saukewa: [Protecting Chrome and Android Users from Compromised eMudhra Intermediate CA Certificates](https://blog.google/security/protecting-chrome-and-android-users-from-compromised-emudhra-intermediate-ca-certificates/)

**\[ 2 ] Mozilla Bugzilla 2083449 rikodin aukuwa** Ya ƙunshi rahotanni na asali, tabbatarwa mai zaman kansa, binciken tsarin tsara tsarawa, gyare-gyare na gaba don Firefox Android, da tattaunawar ƙaura na takardar shaidar doka; mayar da hankali ga sharhi 5, 11, 29, da 30. Saukewa: [eMudhra Private key compromise of Intermediate Certificates](https://bugzilla.mozilla.org/show_bug.cgi?id=2083449)

**\[3] Mozilla Firefox Sanarwa Tsaro** Saukewa: Bayanin rarraba gaggawa na OneCRL da zubar Firefox/NSS na gaba. Saukewa: [Protecting Firefox users following the compromise of eMudhra intermediate certificates](https://blog.mozilla.org/security/2026/10/20/protecting-firefox-users-following-the-compromise-of-emudhra-intermediate-certificates/)

**\[4] Manajan taron Dennis Jackson Takaitaccen bayanin kulawa da tashar ganowa** Saukewa: Yana ba da ƙarin umarni akan dandamali da matsayin gyara software, ƙofar gwaji, kayan sarkar takardar shaidar jama'a, da mahalli kamar Windows/macOS. Sakamakon gwaji yana wakiltar ainihin hanyoyin tabbatarwa da aka gwada. Saukewa: [eMudhra Intermediate CA Compromise](https://emudhra.we-have-a-problem.com/)

**\[5] Mozilla Sanarwa ga rarrabawa da masu kula da amintacce** Saukewa: Yana bayyana 6 TLS da 2 lamba rattaba hannu matsakaita CA, Sectigo giciye-sa hannu, sokewa, da tushen amintaccen sarrafa iyakoki, kuma ya jera ainihin takaddun shaida da gano maɓalli na jama'a. Saukewa: [oss-security eMudhra Intermediates Compromise](https://www.openwall.com/lists/oss-security/2026/10/20/1)

**\[ 6 ] eMudhra Bayanin Taron Aiki** Bayar da bayanin farko na masana'anta game da mahimman tsari na tsara; ainihin tushen dalilin har yanzu zai kasance ƙarƙashin ƙarshen binciken da aka kammala. Saukewa: [eMudhra Statement on Recent Certificate Security Incident](https://emudhra.com/en/post/certificate-security-incident)

**\[7] Cloudflare Haƙiƙanin abin da ya faru da umarnin gyara** Saukewa: Yana rufe WARP, Cloudflare Tunnel, tabbatarwar wurin asali, dogaron lokacin aiki, sabunta hoto da hanyoyin tabbatarwa. Saukewa: [8 eMudhra certificates are compromised Here is what you need to know](https://blog.cloudflare.com/emudhra-certificate-compromise/)

### Tsarin aiki da rarrabawa

**\[8] Ubuntu Sanarwa Gyaran Hukuma** Saukewa: Ya lissafa fakitin gyara ca-certificates, tashoshi masu goyan baya da matakan sabuntawa da aka yi niyya don kowane sigar. Saukewa: [eMudhra CA compromise fixes available](https://ubuntu.com/blog/emudhra-ca-compromise-fixes-available)

**\[9] Debian Matsalar hukuma da rikodin gyara** Saukewa: Ya kamata a ɗauki rikodin gyara mai kula da kunshin sakin da ya dace a matsayin ma'auni, kuma ba za a ɗauki shawarwarin wucin gadi na farko a cikin tattaunawar matsala a matsayin mafita ta ƙarshe ba. Saukewa: [Debian bug 1151413 eMudhra Intermediate CA key compromise](https://bugs.debian.org/1151413)

**\[ 10 ] Red Hat Bulletin Tsaro na hukuma RHSB 2026 012** Ya lissafa RHEL 6 zuwa 10, samfuri masu alaƙa da tasirin kwantena, da gyara sakin da shigarwar zubarwa na wucin gadi. Saukewa: [Certificate compromise eMudhra](https://access.redhat.com/security/vulnerabilities/RHSB-2026-012)

**\[11] FreeBSD Bayanan Tsaro na Jami'a** Saukewa: Samar da rassan tsarin da abin ya shafa, sigar gyara da buƙatun sake farawa sabis. Saukewa: [FreeBSD SA 26 73 caroot](https://www.freebsd.org/security/advisories/FreeBSD-SA-26:73.caroot.asc)

### Lokacin aiki da ka'idoji Saukewa:

**\[12] Python Bayanin taron na hukuma** Saukewa: Yana ba da ginshiƙan gyara don pip, certifi, uv, da sauransu, yana bayyana matsalar tsohuwar shagon amintaccen pip, kuma yana ba da hanyar haɓakawa ta farko tare da tabbatarwa SHA-256. Saukewa: [Information for Python users regarding eMudhra emSign CA certificate security incident](https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576)

**\[13] Node.js 24.22.1 Saki na hukuma** Saukewa: Ya ƙunshi sabuntawar tushen tushen NSS kuma ya ƙi sauye-sauye mai ɗauke da katange sarƙoƙi na takaddun maɓalli na jama'a. Saukewa: [Node.js 24.22.1 security release](https://github.com/nodejs/node/releases/tag/v24.22.1)

**\[14] Go Sakin tsaro na hukuma** Saukewa: Bayanin crypto/x509 sabunta sarkar tace takardar shedar don Go 1.27.3/1.26.10. Saukewa: [Go 1.27.3 and Go 1.26.10 are released](https://groups.google.com/g/golang-announce/c/66pojueaQek)

**\[15] Oracle JDK Umarnin zubar da Aiki** Saukewa: Yi bayanin faci mai mahimmanci na JDK da matakan daidaitawa masu alaƙa lokacin da ba za a iya haɓaka shi nan da nan ba. Saukewa: [Distrusting eMudhra Intermediate Certificates in Oracle JDK](https://ops.java/emudhra)

**\[ 16 ] TLS 1.3 Matsayin yarjejeniya RFC 8446** Duba karin bayani E.1 don umarni kan tabbatar da ainihi, musayar maɓalli na wucin gadi da sirrin turawa. Saukewa: [The Transport Layer Security Protocol Version 1.3](https://www.rfc-editor.org/rfc/rfc8446.html)

**\[17] tushen takardar shaidar da ke da alaƙa da bayarwa bayanan dangantaka** Saukewa: An yi amfani da shi don fahimtar mai bayarwa kai tsaye da alaƙar sa hannu; Matsayin haɗa tushen shagon ba zai iya maye gurbin sabon sokewa ko matsayin tarewa na abokin ciniki ba. Saukewa: [Root certificate relationships JSON](https://emudhra.we-have-a-problem.com/roots.json)

## Shawarar tabbatar da tsaro
Saukewa:

Ba ku da tabbacin yadda canje-canjen amincewar takaddun shaida ke shafar tsarin ku? Za mu iya taimakawa wajen tantance abokan cinikin da abin ya shafa da tsara sabunta tsaro.
Saukewa:

[Tattauna sabunta tsaro Saukewa:](<https://keendigit.com/ha/contact?service=security-remediation#form>)

[Shafin asali Saukewa:](<https://keendigit.com/ha/insights/emudhra-ca-incident-remediation-guide>) · [Fihirisar abun ciki](<https://keendigit.com/ha/llms.txt>)

KeenDigit LLC · Wyoming Shiga ID
Saukewa:: 2026-002106155

[Tabbatar da Sakataren Gwamnati na Wyoming Saukewa:](<https://wyobiz.wyo.gov/Business/filingSearch.aspx>)

© 2026 KeenDigit LLC · Sheridan, Wyoming, Amurika · An kiyaye duk haƙƙoƙi.
Saukewa: