GoAhead TLS Flaws Let Revoked Client Certificates Slip Through and Expose Sessions to Decryption
RedSide Security October 27, 2026 Vulnerability 24 views
GoAhead's OpenSSL-backed mutual-TLS path loaded certificate revocation lists without enabling revocation checking, letting revoked client certificates authenticate, while related weaknesses enable session decryption.
Continue reading: GoAhead TLS Flaws Let Revoked Client Certificates …