This mitmproxy commit adds an `--emudhra` option to the project, tracked as pull request #8500. The change introduces a new constant, EMUDHRA_CHAIN_PEM, containing a PEM bundle with a private key and two certificates tied to the eMudhra TLS certificate hierarchy.
The code comment flags the intermediate CA (eMudhra OV TLS CA - G3C) and the cross-signed root (eMudhra Sign Root TLS CA - G3) as compromised, and links to a public write-up at emudhra.we-have-a-problem.com for details. The inclusion of this material signals that the option is aimed at reproducing or testing behavior associated with that compromised chain.
The diff also updates the dummy_cert function so its private key parameter accepts either an RSA or an elliptic curve private key. This broadens the range of keys mitmproxy can use when generating certificates on the fly.
The commit is listed on Hacker News, which points to wider developer interest in the change. Because the chain is described as compromised, readers should treat the bundled material as a security-sensitive test fixture rather than a trusted certificate source.
Source: Hacker News · Summarized by HeadlinesBriefing