OpenJDK randomly(?) removes all eMudhra root CAs

Well you've somehow missed the news this week (key=4) but, this is week-long at this point. OpenJDK is doing the right thing.. about 4 days late. eMudhra is so badly burned no one trusts them anymore (and they've quit TLS)

eMudhra ignored Mozilla Root investigation deadline; blames social media (209 points, 1 day ago, 161 comments) https://news.ycombinator.com/item?id=50210067

eMudhra to exit global SSL/TLS certificate business (1152 points, 3 days ago, 743 comments) https://news.ycombinator.com/item?id=50195110

mitmproxy adds --emudhra option (620 points, 3 days ago, 146 comments) https://news.ycombinator.com/item?id=50189232

Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds (951 points, 4 days ago, 461 comments) https://news.ycombinator.com/item?id=50177916

eMudhra intermediate CA compromise (1280 points, 5 days ago, 504 comments) https://news.ycombinator.com/item?id=50166579

There's a corresponding CVE: https://www.oracle.com/security-alerts/alert-cve-2026-114820...

I'm not sure if Oracle is trying to send a message here, but this seems like it could be quite disruptive...