cert-manager
Easy
Security
Which root certificate did cert-manager v1.21.3 remove from its container images after the eMudhra CA compromise?
Select your answer:
Show answer and explanation
Answer: emSign ECC Root CA - G3
Explanation
The v1.21.3 release notes say the updated distroless base images no longer include the "emSign ECC Root CA - G3" root certificate. The release also moves to Go 1.26.10, whose crypto/x509 package rejects chains that pass through the compromised intermediates.
More easy cert-manager questions
- Which status field on a trust-manager Bundle shows the version of the default CA package it was built from?
- Which trust-manager Helm value pins the tag of the default CA package image?
- What is cert-manager?
- Which Custom Resource Definition (CRD) is used to define a certificate in cert-manager?
- What is an Issuer in cert-manager?
- Which command is used to install cert-manager using Helm?