Ubuntu certificate revocation checks arrive in curl, OpenSSL is next

Help Net SecurityNovember 11, 2026

Ubuntu 26.10 ships curl with certificate revocation checking built in. The check comes from upki, a project from the rustls developers. Ubuntu’s developers ran the same curl command on both releases: Ubuntu 26.04 accepted a revoked certificate and connected, while 26.10 refused it. A certificate authority revokes a certificate when it should stop being trusted before it expires.

Summary from Help Net Security.

Read the full article at Help Net Security

Explained

The technology and terms in this story. Learn more

TechnologyOpenSSLThe open-source library that much of the internet uses to speak TLS and do cryptography.
ConceptCertificate authorityAn organisation trusted to vouch for a website's identity by signing its certificate.