Remix.run Logo
▲ dcrazy 5 hours ago

iOS absolutely uses a CRL, and Apple has revoked the eMudhra certs as of this morning: https://www.macrumors.com/2026/10/22/apple-blocks-certificat...

▲cowsandmilk 5 hours ago | parent | next [-]

> Apple introduced the blocks on October 19

So actually 3 days ago.

▲Arbortheus 5 hours ago | parent | prev | next [-]

It must be broken/buggy then.

▲dcrazy 5 hours ago | parent | next [-]

For your own sake and the sake of anyone else who might be hitting this bug, I suggest you open applefeedback:// in Safari, file a bug, and post the FB number here or on the Apple Developer Forums.

▲robrain 3 hours ago | parent | next [-]

I also posted to security.apple.com, but they say they typically look at reports "within a week".

Report OE11044088569486, but currently it's just under review and invisible.

▲Arbortheus 5 hours ago | parent | prev | next [-]

Done, it's FB25286974 if anyone from Apple is reading.

▲dpkirchner 5 hours ago | parent | prev [-]

I've reported it (I can verify the CRL check either failed or the CRL does not include the CA certs). No FB number was provided.

▲Arbortheus 5 hours ago | parent | next [-]

For me I had to go back to the feedback assistant home page, refresh (swipe down), then it showed up under 'Recent activity'.

▲dcrazy 5 hours ago | parent | prev [-]

How did you report it? If you used Feedback Assistant then it would have given you an FB number. That’s the only way to be sure anyone at Apple sees it.

▲dpkirchner 5 hours ago | parent [-]

I selected the applefeedback:// url you shared and used "look up" (there's no "open link" option). That sent me to the official Apple feedback site. Are you saying that site's submissions aren't checked or something else?

▲dcrazy 4 hours ago | parent [-]

No, that’s the right path. Your report should have an FB number.

▲dpkirchner 4 hours ago | parent [-]

Ah well. Guess it's as broken as the CRL, or I just clicked the buttons wrong or something. I just saw a thank you screen. I checked my email in case they sent something there, but nah.

▲alfiedotwtf 5 hours ago | parent | prev [-]

… or you’re on a list

▲what 4 hours ago | parent | prev [-]

My phone still accepts 3 of the 14 chains. So something is broken.

▲what an hour ago | parent [-]

Too old to edit… after restarting my phone all chains are rejected.