TL;DR: eMudhra is a certificate authority - one of those companies whose entire job is to be the trustworthy one. This month the private keys of eight of its intermediate CAs got compromised. Six of them issue TLS certificates, which means somebody out there can now mint a perfectly valid-looking cert for, well, any website. Yours. Your bank's. GitHub's. Fun times.

Good news: Apple jumped on it and blocks the bad certs in Safari, Mail and most apps.

Less good news: your terminal didn't get the memo. Turns out curl, git, python3 and openssl on macOS don't care about Apple's block - they just trust whatever is sitting in /etc/ssl/cert.pem. Apple says it'll fix that in "a future software update". When? Who knows.

Apple was kind enough to publish a fix in the meantime. It involves sudo, awk one-liners and a fair amount of copy-paste-and-pray. I'm lazy, so I turned it into an agent skill instead. It checks your Mac, backs up the file, applies the fix, verifies it and rolls back if anything looks weird. Intel and Apple silicon.

Get it here: https://github.com/vaiden/macos-emudhra-cert-fix

npx skills add vaiden/macos-emudhra-cert-fix

Then type /macos-emudhra-cert-fix in Claude Code and go grab a coffee. Well, a short one - it never runs sudo by itself, so you still get to type your password like a boss.