Tag: client certificate vulnerability

GoAhead TLS Flaw Exposes Revoked Client Certificates

A critical TLS flaw in the GoAhead embedded web server could let revoked client certificates slip through, allowing unauthorized access on hundreds of millions of devices. This security gap occurs when certain builds using the OpenSSL backend mistakenly fail to check for revoked certificates, despite loading a certificate revocation list at startup.