Release2 sources
Ubuntu 26.10 Begins Rolling Out upki Support For Certificate Revocation
Phoronix · By Michael Larabel ·
The Brief · written from 2 sources
- Ubuntu 26.10 ships curl with certificate revocation checking built in, using upki, a project from the rustls developers.
- The upki revocation check was enabled only for Ubuntu 26.10's curl package because of a late change, with more plans ahead.
- In Ubuntu's test, the same curl command accepted a revoked certificate on 26.04 but refused it on 26.10.
Why it matters
curl on Ubuntu 26.10 can now reject servers presenting revoked certificates that older releases accepted, which may break scripts or workflows that depend on those connections.
Who’s affected
- Ubuntu 26.10 users
- Anyone running curl on Ubuntu 26.10
- Ubuntu 26.10
- Ubuntu 26.04
- #ubuntu
- #curl
- #certificate-revocation
- #tls
- #upki
With Ubuntu 26.10 that shipped in October there is a little talked about feature with upki revocation support beginning to roll out. Due to the late change, upki for certificate revocation was only enabled for Ubuntu 26.10's curl package but with more plans ahead...
Timeline
Full coverage · 2 sources
- 2h ago ↗
Help Net Security
Ubuntu certificate revocation checks arrive in curl, OpenSSL is next - 10h ago ↗
Phoronix
Ubuntu 26.10 Begins Rolling Out upki Support For Certificate Revocation