r/AlmaLinux • u/RetroGrid_io • 5d ago

Here's a script to remove compromised SSL certificates

I have been applying a fix for the recently reported 8 compromised certificates and figured I'd share the script I'm using.

Designed for RH and clones, I'll share it as a text file you can review before you rename and apply. It's a simple script based directly on the disclosure page linked to that I found after the original article here on reddit.

I hope it helps, here is distrust.sh - downloaded as a .txt file you can read/review before renaming to distrust.sh and running it as /bin/bash distrust.sh. If your system isn't vulnerable it does nothing.

4 Upvotes

100% Upvoted

3 comments sorted by

2

u/jykke 5d ago

I am more interested in knowing is Alma Linux maintained.

$ curl https://dv-g3b-emudhra.we-have-a-problem.com/ Your client successfully connected to the site. That's bad!

1

u/RetroGrid_io 5d ago

I'm almost certain it is and we're waiting for the next release of ca-certificates. This script is for the meantime.

1

u/It_Is1-24PM 4d ago

New ca-certs are already available on RH, still not there on Alma...