The recent eMudhra certificate issue increases the possibility of a man-in-the-middle attack on IoT devices. On a Linux-based edge device, updating the ca-certificates package fixes this, but a system update can take time to roll out. Apps written in Go have a faster option: rebuild with Go 1.26.10 or 1.27.3, which block the eight eMudhra intermediates regardless of the device’s CA bundle. Many systems update apps quickly and the OS slowly, so this gives a fix that ships on the fast path. I rebuilt Simple IoT with Go 1.27.3 and shipped it as a normal app update in v0.29.1.
This is a companion discussion topic for the original entry at https://bec-systems.com/blog/0363-go-makes-it-easy-to-respond-to-the-emudhra-certificate-issue/