Skip to content

Releases: inductiveautomation/ignition-emudhra-mitigation

Release list

v2.0.0

v2.0.0 Latest
Latest

Choose a tag to compare

View all tags
@jspechts jspechts released this 28 Oct 18:04
v2.0.0
331f406

Scripts that protect the Java runtimes bundled with Ignition against the compromised eMudhra intermediate CAs. On every Ignition Java runtime on a machine, they remove eMudhra's root certificates and Sectigo's AAA Certificate Services root from cacerts. These are the four roots Oracle lists, plus eMudhra's emSign Root CA - C1 and emSign ECC Root CA - C3, which only older runtimes have. README.md explains how to run them, how to apply the fix by hand, and how to undo it.

This is the first public release. It's numbered v2.0.0 because v1.0.0 was an earlier version we only used internally.

Downloads

File What it is
remove-emudhra-roots.ps1 The script for Windows, signed by Inductive Automation, LLC
remove-emudhra-roots.sh The script for Linux and macOS
README.md The instructions
LICENSE The MIT license
SHA256SUMS SHA-256 checksums of the four files above

The "Source code" archives GitHub adds to every release contain the unsigned Windows script. Use the signed remove-emudhra-roots.ps1 attached here.

Windows script signature

  • The signed file is remove-emudhra-roots.ps1 at v2.0.0 (331f406), unchanged, followed by the signature block.
  • Signer: Inductive Automation, LLC, issued by DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1.
  • Certificate serial 0819029F3AE8E4501A4841BAD09C4BBA, SHA-1 thumbprint 88338069EB9C3F2D46A4BAF701E4FA71BF073293.
  • Timestamped by DigiCert on 28 October 2026 at 15:40 UTC, while the certificate was valid. The signature stays valid after the certificate expires on 15 July 2027.

On Windows, Get-AuthenticodeSignature .\remove-emudhra-roots.ps1 should report Valid. Don't open and save the script in an editor: any change, even to its line endings, breaks the signature.

Checksums

be118fb10181d992151db0574842ef01a1ebb6fed84d755c2d7b485b7c834506  remove-emudhra-roots.ps1
206012700fab964ccd5c2b034c9bc13654aedc0177223cba7e8cb2ea17dd0b21  remove-emudhra-roots.sh
95abca74c02df8ecdb153b95b8bc0be909de9dab1353f328cc6e01688f7d2bff  README.md
9b2cc270152df1930eb1abeb2ddc98f99586ab0e452e096c8d39a1fec7d26988  LICENSE
Assets 7
Loading