{"id":55146,"date":"2020-01-13T00:00:00","date_gmt":"2020-01-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov"},"modified":"2020-02-18T14:03:13","modified_gmt":"2020-02-18T11:03:13","slug":"mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","title":{"rendered":"Mozilla problemli TLS sertifikatlar\u0131n\u0131n yoxlanmas\u0131 \u00fc\u00e7\u00fcn CRLite t\u0259tbiq edir","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Mozilla \u015eirk\u0259ti <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2020\/01\/09\/crlite-part-1-all-web-pki-revocations-compressed\/\">elan etdi<\/a><\/noindex> Firefox-un yeni lisenziya sertifikatlar\u0131n\u0131n geri \u00e7a\u011fr\u0131lmas\u0131 mexanizmini s\u0131naqdan ke\u00e7irm\u0259y\u0259 ba\u015flamas\u0131 bar\u0259d\u0259, <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2020\/01\/09\/crlite-part-2-end-to-end-design\/\">CRLite<\/a><\/noindex>. CRLite, istifad\u0259\u00e7i sistemind\u0259 yerl\u0259\u015f\u0259n m\u0259lumat bazas\u0131 vasit\u0259sil\u0259 effektiv sertifikat l\u0259\u011fvini yoxlama\u011f\u0131 t\u0259\u015fkil etm\u0259y\u0259 imkan verir. Mozilla-da inki\u015faf etdiril\u0259n CRLite-nin icras\u0131 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/crlite\/\">tam olaraq<\/a><\/noindex> MPL 2.0 a\u00e7\u0131q lisenziya alt\u0131nda haz\u0131rlan\u0131r. M\u0259lumat bazas\u0131n\u0131n yarad\u0131lmas\u0131 \u00fc\u00e7\u00fcn kod v\u0259 server komponentl\u0259ri <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/filter-cascade\">Python<\/a><\/noindex> Go dilind\u0259 yaz\u0131lm\u0131\u015fd\u0131r. Firefox-a m\u0259lumat bazas\u0131ndan m\u0259lumatlar\u0131 oxumaq \u00fc\u00e7\u00fcn \u0259lav\u0259 edilmi\u015f m\u00fc\u015ft\u0259ri hiss\u0259l\u0259ri <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/rust-cascade\">haz\u0131rlanm\u0131\u015fd\u0131r<\/a><\/noindex> Rust dilind\u0259dir.<\/p>\n<p>H\u0259l\u0259 d\u0259 xarici xidm\u0259tl\u0259rl\u0259 birlikd\u0259 h\u0259yata ke\u00e7iril\u0259n sertifikatlar\u0131n yoxlanmas\u0131 <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/OCSP\">OCSP<\/a><\/noindex> (Onlayn Sertifikat Status Protokolu) m\u00fctl\u0259q \u015f\u0259b\u0259k\u0259 giri\u015finin olmas\u0131n\u0131 t\u0259l\u0259b edir, sor\u011funun i\u015fl\u0259nm\u0259si zaman\u0131 \u0259h\u0259miyy\u0259tli gecikm\u0259l\u0259r\u0259 (orta hesabla 350 ms) s\u0259b\u0259b olur v\u0259 m\u0259xfilikl\u0259 ba\u011fl\u0131 probleml\u0259r yarad\u0131r (OCSP sor\u011fular\u0131na cavab ver\u0259n serverl\u0259r istifad\u0259\u00e7inin a\u00e7d\u0131\u011f\u0131 spesifik sertifikatlar haqq\u0131nda m\u0259lumat al\u0131r). Eyni zamanda, sertifikatlar\u0131n l\u0259\u011fv edilm\u0259si \u00fc\u00e7\u00fcn siyah\u0131larla yerli yoxlama imkan\u0131 da var <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Certificate_revocation_list\">CRL<\/a><\/noindex> (Sertifikatlar\u0131n Geri \u00c7a\u011f\u0131r\u0131lma Siyah\u0131s\u0131), lakin bu metodun m\u0259nfi c\u0259h\u0259ti \u00e7ox b\u00f6y\u00fck y\u00fckl\u0259n\u0259n m\u0259lumat \u00f6l\u00e7\u00fcs\u00fcd\u00fcr - haz\u0131rda geri \u00e7a\u011f\u0131r\u0131lan sertifikatlar\u0131n m\u0259lumat bazas\u0131 t\u0259xmin\u0259n 300 MB-dir v\u0259 bu, artmaqdad\u0131r.<\/p>\n<p>Firefox-da 2015-ci ild\u0259n etibar\u0259n m\u0259rk\u0259zl\u0259\u015fdirilmi\u015f qara siyah\u0131dan istifad\u0259 olunur <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/CA:RevocationPlan#OneCRL\">OneCRL<\/a><\/noindex> Google Safe Browsing xidm\u0259ti il\u0259 birlikd\u0259, m\u00fcmk\u00fcn z\u0259r\u0259rli f\u0259aliyy\u0259tl\u0259ri m\u00fc\u0259yy\u0259n etm\u0259k \u00fc\u00e7\u00fcn. <noindex><a rel=\"nofollow\" href=\"https:\/\/safebrowsing.google.com\/\">OneCRL, el\u0259c\u0259 d\u0259<\/a><\/noindex> CRLSets <noindex><a rel=\"nofollow\" href=\"https:\/\/dev.chromium.org\/Home\/chromium-security\/crlsets\">Chrome-da, sertifikat l\u0259\u011fv siyah\u0131lar\u0131n\u0131 toplayan v\u0259 l\u0259\u011fv edilmi\u015f sertifikatlar\u0131 yoxlamaq \u00fc\u00e7\u00fcn m\u0259rk\u0259zl\u0259\u015fdirilmi\u015f OCSP xidm\u0259ti t\u0259qdim ed\u0259n ara\u015fd\u0131rma s\u0259viyy\u0259sind\u0259 \u00e7\u0131x\u0131\u015f edir, bu, birba\u015fa sertifikat ver\u0259n orqanlara sor\u011fular g\u00f6nd\u0259rm\u0259y\u0259 ehtiyac qalm\u0131r. Sertifikatlar\u0131n onlayn yoxlama xidm\u0259tinin etibarl\u0131l\u0131\u011f\u0131n\u0131 art\u0131rmaq \u00fc\u00e7\u00fcn h\u0259r hans\u0131 bir i\u015f g\u00f6r\u00fclm\u0259sin\u0259 baxmayaraq, telemetriya m\u0259lumatlar\u0131 g\u00f6st\u0259rir ki, OCSP sor\u011fular\u0131n\u0131n 7%-d\u0259n \u00e7oxu vaxt a\u015f\u0131m\u0131 il\u0259 n\u0259tic\u0259l\u0259nir (bir ne\u00e7\u0259 il \u0259vv\u0259l bu g\u00f6st\u0259rici 15% idi).<\/a><\/noindex> \u018fg\u0259r OCSP vasit\u0259sil\u0259 yoxlama aparmaq m\u00fcmk\u00fcn deyils\u0259, brauzer sertifikat\u0131 d\u00fczg\u00fcn hesab edir. Xidm\u0259t, \u015f\u0259b\u0259k\u0259 probleml\u0259ri v\u0259 daxili \u015f\u0259b\u0259k\u0259l\u0259rd\u0259ki m\u0259hdudiyy\u0259tl\u0259rl\u0259 yana\u015f\u0131, h\u00fccum\u00e7\u0131lar t\u0259r\u0259find\u0259n bloklana bil\u0259r \u2014 MITM h\u00fccumlar\u0131 zaman\u0131 OCSP yoxlamas\u0131n\u0131 a\u015fmaq \u00fc\u00e7\u00fcn sad\u0259c\u0259 yoxlama xidm\u0259tin\u0259 giri\u015fin mane\u0259 t\u00f6r\u0259dilm\u0259si kifay\u0259tdir. Bel\u0259 h\u00fccumlar\u0131 m\u00fc\u0259yy\u0259n d\u0259r\u0259c\u0259d\u0259 qar\u015f\u0131s\u0131n\u0131 almaq \u00fc\u00e7\u00fcn <\/p>\n<p>Standart olaraq, OCSP vasit\u0259sil\u0259 yoxlama m\u00fcmk\u00fcn olmad\u0131qda, brauzer sertifikat\u0131 d\u00fczg\u00fcn hesab edir. Xidm\u0259t, h\u0259m \u015f\u0259b\u0259k\u0259 probleml\u0259ri, h\u0259m d\u0259 daxili \u015f\u0259b\u0259k\u0259l\u0259rd\u0259 m\u0259hdudiyy\u0259tl\u0259r s\u0259b\u0259bind\u0259n \u0259l\u00e7atmaz ola bil\u0259r, habel\u0259 h\u00fccum\u00e7ular t\u0259r\u0259find\u0259n bloklana bil\u0259r - MITM h\u00fccumlar\u0131 zaman\u0131 OCSP yoxlamas\u0131n\u0131 a\u015fmaq \u00fc\u00e7\u00fcn yaln\u0131z yoxlama xidm\u0259tin\u0259 giri\u015fin bloklanmas\u0131 kifay\u0259tdir. Bu c\u00fcr h\u00fccumlar\u0131n qar\u015f\u0131s\u0131n\u0131 almaq \u00fc\u00e7\u00fcn qism\u0259n bir texnika h\u0259yata ke\u00e7irilmi\u015fdir. <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2015\/11\/23\/improving-revocation-ocsp-must-staple-and-short-lived-certificates\/\">texnikas\u0131 h\u0259yata ke\u00e7irilmi\u015fdir, bu da OCSP-y\u0259 m\u00fcraci\u0259t etm\u0259 x\u0259tas\u0131n\u0131 v\u0259 ya OCSP-nin \u0259l\u00e7atan olmamas\u0131n\u0131 sertifikatla ba\u011fl\u0131 bir problem kimi qiym\u0259tl\u0259ndirm\u0259y\u0259 imkan verir, lakin bu imkan m\u00fctl\u0259q deyil v\u0259 sertifikat\u0131n x\u00fcsusi t\u0259rtibat\u0131n\u0131 t\u0259l\u0259b edir.<\/a><\/noindex>, bu, OCSP-y\u0259 m\u00fcraci\u0259t etm\u0259 s\u0259hvinin v\u0259 ya OCSP-nin \u0259l\u00e7atan olmamas\u0131n\u0131n sertifikatla ba\u011fl\u0131 problem oldu\u011funu \u015f\u0259rh etm\u0259y\u0259 imkan verir, lakin bu imkan\u0131 istifad\u0259 etm\u0259k \u00fc\u00e7\u00fcn x\u00fcsusi sertifikat t\u0259rtibi t\u0259l\u0259b olunur. <\/p>\n<p>CRLite, m\u00fc\u015ft\u0259ri t\u0259r\u0259find\u0259 tam CRL bazas\u0131n\u0131 saxlama\u011fa imkan ver\u0259n, \u00f6l\u00e7\u00fcs\u00fc c\u0259mi 1 MB olan asanl\u0131qla yenil\u0259n\u0259n strukturdur.<br \/>\nBrauzer, h\u0259r g\u00fcn l\u0259\u011fv edilmi\u015f sertifikatlarla ba\u011fl\u0131 m\u0259lumatlar\u0131n \u00f6z sur\u0259tini sinxronla\u015fd\u0131racaq, bu veril\u0259nl\u0259r bazas\u0131 is\u0259 h\u0259r hans\u0131 bir \u015f\u0259raitd\u0259 \u0259l\u00e7atan olacaq. <\/p>\n<p>CRLite m\u0259lumatlar\u0131 bir araya g\u0259tirir <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48159\">Sertifikat \u015eaffafl\u0131\u011f\u0131<\/a><\/noindex>, b\u00fct\u00fcn verilmi\u015f v\u0259 l\u0259\u011fv edilmi\u015f sertifikatlar\u0131n ictimai jurnal\u0131n\u0131 v\u0259 internetd\u0259ki sertifikat hiss\u0259l\u0259rinin skan edilm\u0259si n\u0259tic\u0259l\u0259rini (m\u00fcxt\u0259lif CRL siyah\u0131lar\u0131 toplan\u0131r, etibarnam\u0259l\u0259rin f\u0259rdi m\u0259lumatlar\u0131 agregasiya olunur). M\u0259lumatlar kaskadl\u0131 <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A4%D0%B8%D0%BB%D1%8C%D1%82%D1%80_%D0%91%D0%BB%D1%83%D0%BC%D0%B0\">Bloom filtrl\u0259ri<\/a><\/noindex>, itkin elementi yanl\u0131\u015fl\u0131qla m\u00fc\u0259yy\u0259n etm\u0259y\u0259 icaz\u0259 ver\u0259n, lakin m\u00f6vcud elementi qa\u00e7\u0131rma\u011f\u0131 istisna ed\u0259n ehtimal strukturu il\u0259 y\u0131\u011f\u0131l\u0131r (y\u0259ni, m\u00fc\u0259yy\u0259n bir ehtimal il\u0259 d\u00fczg\u00fcn sertifikat \u00fcz\u0259rind\u0259 yanl\u0131\u015f s\u0131naq yarana bil\u0259r, lakin l\u0259\u011fv edilmi\u015f sertifikatlar t\u0259minatl\u0131 olaraq a\u015fkar edil\u0259c\u0259k). <\/p>\n<p>CRLite-d\u0259 yanl\u0131\u015f s\u0131naqlar\u0131 aradan qald\u0131rmaq \u00fc\u00e7\u00fcn \u0259lav\u0259 d\u00fcz\u0259li\u015f s\u0259viyy\u0259l\u0259ri t\u0259tbiq olunur. Strukturu yarad\u0131ld\u0131qdan sonra, b\u00fct\u00fcn ilkin qeydl\u0259r yoxlan\u0131l\u0131r v\u0259 meydana g\u0259lmi\u015f yanl\u0131\u015f s\u0131naqlar m\u00fc\u0259yy\u0259n edilir. Bu yoxlama n\u0259tic\u0259l\u0259rin\u0259 \u0259sas\u0259n, ilk struktura kaskadl\u0131 olaraq \u0259lav\u0259 edil\u0259n ba\u015fqa bir struktur yarad\u0131l\u0131r v\u0259 meydana g\u0259lmi\u015f yanl\u0131\u015f s\u0131naqlar d\u00fcz\u0259ldilir. \u0130\u015fl\u0259m\u0259, yoxlama zaman\u0131 yanl\u0131\u015f s\u0131naqlar tam olaraq aradan qald\u0131r\u0131lana q\u0259d\u0259r davam edir. Ad\u0259t\u0259n, b\u00fct\u00fcn m\u0259lumatlar\u0131 tamamil\u0259 \u0259hat\u0259 etm\u0259k \u00fc\u00e7\u00fcn 7-10 qat yaratmaq kifay\u0259tdir. Brauzer veril\u0259nl\u0259r bazas\u0131n\u0131n v\u0259ziyy\u0259ti m\u00fct\u0259madi sinxronizasiya s\u0259b\u0259bind\u0259n CRL-in aktual v\u0259ziyy\u0259tind\u0259n bir az geri qal\u0131b, CRLite veril\u0259nl\u0259r bazas\u0131 il\u0259 son yenil\u0259m\u0259 sonras\u0131 verilmi\u015f yeni sertifikatlar\u0131n yoxlan\u0131lmas\u0131 OCSP protokolu vasit\u0259sil\u0259 h\u0259yata ke\u00e7irilir, o c\u00fcml\u0259d\u0259n <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/OCSP_stapling\">OCSP Stapling<\/a><\/noindex> (etibarnam\u0259 m\u0259rk\u0259zi t\u0259r\u0259find\u0259n t\u0259sdiql\u0259nmi\u015f OCSP cavab\u0131 TLS ba\u011flant\u0131s\u0131 h\u0259yata ke\u00e7iril\u0259rk\u0259n xidm\u0259t ed\u0259n veb serveri il\u0259 \u00f6t\u00fcr\u00fcl\u00fcr).<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/ffp4g1ylyit3jdyti1hqcvtb-wpengine.netdna-ssl.com\/security\/files\/2020\/01\/figure3-filter-structure.png\"><img decoding=\"async\" alt=\"Mozilla problemli TLS sertifikatlar\u0131n\u0131n yoxlanmas\u0131 \u00fc\u00e7\u00fcn CRLite t\u0259tbiq edir\" src=\"\/wp-content\/uploads\/2020\/01\/3c95db6392aa8f2170a7c6e2697c4043.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>Bloom filtrl\u0259ri vasit\u0259sil\u0259 100 milyon aktiv sertifikat v\u0259 750 min l\u0259\u011fv edilmi\u015f sertifikat\u0131 \u0259hat\u0259 ed\u0259n WebPKI m\u0259lumatlar\u0131n\u0131n dekabr k\u0259simi 1.3 MB \u00f6l\u00e7\u00fcs\u00fcnd\u0259 bir struktura y\u0131\u011f\u0131lm\u0131\u015fd\u0131r. Strukturun yarad\u0131lmas\u0131 prosesi kifay\u0259t q\u0259d\u0259r resurs t\u0259l\u0259b ed\u0259n, lakin Mozilla serverind\u0259 icra olunan v\u0259 istifad\u0259\u00e7iy\u0259 haz\u0131r yenil\u0259m\u0259 t\u0259qdim edil\u0259n bir prosesdir. M\u0259s\u0259l\u0259n, yarad\u0131lma zaman\u0131 istifad\u0259 edil\u0259n ilkin m\u0259lumatlar 16 GB yadda\u015f t\u0259l\u0259b edir, Redis DB-d\u0259 saxlan\u0131ld\u0131\u011f\u0131nda, b\u00fct\u00fcn sertifikat seriya n\u00f6mr\u0259l\u0259rinin hexadecimala \u00e7evrilmi\u015f dump-\u0131 t\u0259xmin\u0259n 6.7 GB yer tutur. L\u0259\u011fv edilmi\u015f v\u0259 aktiv sertifikatlar\u0131n toplanmas\u0131 prosesi t\u0259xmin\u0259n 40 d\u0259qiq\u0259, Bloom filtri \u0259sas\u0131nda y\u0131\u011f\u0131lm\u0131\u015f strukturun yarad\u0131lmas\u0131 prosesi is\u0259 20 d\u0259qiq\u0259 t\u0259l\u0259b edir.<\/p>\n<p>Haz\u0131rda Mozilla, CRLite m\u0259lumat bazas\u0131n\u0131 g\u00fcnd\u0259 d\u00f6rd d\u0259f\u0259 yenil\u0259yir (b\u00fct\u00fcn yenil\u0259m\u0259l\u0259r m\u00fc\u015ft\u0259ril\u0259r\u0259 \u00e7atd\u0131r\u0131lm\u0131r). Delta yenil\u0259m\u0259l\u0259rinin yarad\u0131lmas\u0131 h\u0259l\u0259 h\u0259yata ke\u00e7irilm\u0259yib - delta yenil\u0259m\u0259l\u0259rinin yarad\u0131lmas\u0131 \u00fc\u00e7\u00fcn istifad\u0259 olunan bsdiff4, CRLite \u00fc\u00e7\u00fcn uy\u011fun s\u0259m\u0259r\u0259liliyi t\u0259min etmir v\u0259 yenil\u0259m\u0259l\u0259r \u0259skikliyi il\u0259 \u00e7ox b\u00f6y\u00fck olur. Bu \u00e7at\u0131\u015fmazl\u0131\u011f\u0131n aradan qald\u0131r\u0131lmas\u0131 \u00fc\u00e7\u00fcn saxlanma strukturunun format\u0131n\u0131 yenid\u0259n i\u015fl\u0259m\u0259yi planla\u015fd\u0131r\u0131l\u0131r.<\/p>\n<p>CRLite haz\u0131rda Firefox-da passiv rejimd\u0259 i\u015fl\u0259yir v\u0259 OCSP il\u0259 paralel olaraq i\u015fl\u0259m\u0259 statistikalar\u0131n\u0131 toplamaq \u00fc\u00e7\u00fcn istifad\u0259 olunur. CRLite-i \u0259sas yoxlama rejimin\u0259 ke\u00e7irm\u0259k m\u00fcmk\u00fcnd\u00fcr, bunun \u00fc\u00e7\u00fcn about:config-d\u0259 security.pki.crlite_mode = 2 parametrini t\u0259yin etm\u0259k laz\u0131md\u0131r.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/ffp4g1ylyit3jdyti1hqcvtb-wpengine.netdna-ssl.com\/security\/files\/2020\/01\/figure2-filter-process.png\"><img decoding=\"async\" alt=\"Mozilla problemli TLS sertifikatlar\u0131n\u0131n yoxlanmas\u0131 \u00fc\u00e7\u00fcn CRLite t\u0259tbiq edir\" src=\"\/wp-content\/uploads\/2020\/01\/004ea3876f93c92b2ca059eebd62d1ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>M\u0259nb\u0259: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52175\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 &#8212; CRLite. CRLite \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u0432 Mozilla \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f CRLite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MPL 2.0. \u041a\u043e\u0434 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0411\u0414 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 Python \u0438 Go. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55146","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/az\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"az_AZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/az\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-12T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mozilla, problemli TLS sertifikatlar\u0131n\u0131 yoxlamaq \u00fc\u00e7\u00fcn CRLite t\u0259tbiq edir | ProHoster","description":"Mozilla Firefox-un gec\u0259 y\u0131\u011f\u0131ncaqlar\u0131nda s\u0131naq prosesini ba\u015flad\u0131\u011f\u0131n\u0131 elan etdi.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.","og:url":"https:\/\/prohoster.info\/az\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55146","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:50:02","updated":"2022-10-10 06:24:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/55146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=55146"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/55146\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=55146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=55146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=55146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}