Release2 sources
Ubuntu certificate revocation checks arrive in curl, OpenSSL is next
Help Net Security · By Anamarija Pogorelec ·
The Brief · written from 2 sources
- Ubuntu 26.10 ships curl with certificate revocation checking built in, using upki, a project from the rustls developers.
- The upki revocation check was enabled only for Ubuntu 26.10's curl package because of a late change, with more plans ahead.
- In Ubuntu's test, the same curl command accepted a revoked certificate on 26.04 but refused it on 26.10.
Why it matters
curl on Ubuntu 26.10 can now reject servers presenting revoked certificates that older releases accepted, which may break scripts or workflows that depend on those connections.
Who’s affected
- Ubuntu 26.10 users
- Anyone running curl on Ubuntu 26.10
- Ubuntu 26.10
- Ubuntu 26.04
- #ubuntu
- #curl
- #certificate-revocation
- #tls
- #upki
Ubuntu 26.10 ships curl with certificate revocation checking built in. The check comes from upki, a project from the rustls developers. Ubuntu’s developers ran the same curl command on both releases: Ubuntu 26.04 accepted a revoked certificate and connected, while 26.10 refused…