{"id":33503,"date":"2019-10-31T21:52:58","date_gmt":"2019-10-31T18:52:58","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-dnscrypt-reshil-problemu-prosrochennyh-sertifikatov-vvedya-srok-dejstviya-24-chasa\/"},"modified":"2019-10-31T21:52:58","modified_gmt":"2019-10-31T18:52:58","slug":"kak-dnscrypt-reshil-problemu-prosrochennyh-sertifikatov-vvedya-srok-dejstviya-24-chasa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-dnscrypt-reshil-problemu-prosrochennyh-sertifikatov-vvedya-srok-dejstviya-24-chasa","title":{"rendered":"Jak DNSCrypt vy\u0159e\u0161il probl\u00e9m s vypr\u0161en\u00fdmi certifik\u00e1ty zaveden\u00edm 24hodinov\u00e9 platnosti","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Jak DNSCrypt vy\u0159e\u0161il probl\u00e9m s vypr\u0161en\u00fdmi certifik\u00e1ty zaveden\u00edm 24hodinov\u00e9 platnosti\" src=\"\/wp-content\/uploads\/2019\/05\/29ae4c0e42182af8b53ae619c67e2387.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nD\u0159\u00edve certifik\u00e1ty \u010dasto vypr\u0161ely, proto\u017ee je bylo t\u0159eba aktualizovat ru\u010dn\u011b. Lid\u00e9 na to jednodu\u0161e zapom\u00ednali. S p\u0159\u00edchodem Let\u2019s Encrypt a automatizovan\u00fdch aktualiza\u010dn\u00edch postup\u016f by se probl\u00e9m m\u011bl zd\u00e1t vy\u0159e\u0161en\u00fd. Av\u0161ak ned\u00e1vn\u00e1 <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/450478\/\">historie s Firefoxem<\/a><\/noindex> ukazuje, \u017ee situace je st\u00e1le aktu\u00e1ln\u00ed. Bohu\u017eel certifik\u00e1ty st\u00e1le vypr\u0161\u00ed.<\/p>\n<p>Pokud n\u011bkdo tuto historku zme\u0161kal, v p\u016flnoci 4. kv\u011btna 2019 n\u00e1hle p\u0159estala fungovat t\u00e9m\u011b\u0159 v\u0161echna roz\u0161\u00ed\u0159en\u00ed Firefoxu.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nJak se uk\u00e1zalo, masivn\u00ed v\u00fdpadek byl zp\u016fsoben t\u00edm, \u017ee Mozille <noindex><a rel=\"nofollow\" href=\"https:\/\/bugzilla.mozilla.org\/show_bug.cgi?id=1548973\">vypr\u0161el platnost certifik\u00e1tu<\/a><\/noindex>, kter\u00fd byl pou\u017eit k podepisov\u00e1n\u00ed roz\u0161\u00ed\u0159en\u00ed. Proto byla ozna\u010dena jako \u201eneplatn\u00e9\u201c a nepro\u0161la ov\u011b\u0159en\u00edm (<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/451220\/\">technick\u00e9 detaily<\/a><\/noindex>). Na f\u00f3rech byla jako obvykle doporu\u010dena metoda, jak obej\u00edt ov\u011b\u0159ov\u00e1n\u00ed podpis\u016f roz\u0161\u00ed\u0159en\u00ed v <i>about:config<\/i> nebo \u00fapravou syst\u00e9mov\u00e9ho \u010dasu.<\/p>\n<p>Mozilla rychle vydala patch Firefox 66.0.4, kter\u00fd probl\u00e9m s neplatn\u00fdm certifik\u00e1tem vy\u0159e\u0161il, a v\u0161echna roz\u0161\u00ed\u0159en\u00ed se vr\u00e1tila k norm\u00e1ln\u00edmu stavu. V\u00fdvoj\u00e1\u0159i doporu\u010duj\u00ed jeho instalaci a <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/addons\/2019\/05\/04\/update-regarding-add-ons-in-firefox\/\">nepou\u017e\u00edvat<\/a><\/noindex> \u017e\u00e1dn\u00e9 obchvaty pro obch\u00e1zen\u00ed ov\u011b\u0159ov\u00e1n\u00ed podpis\u016f, proto\u017ee by mohly kolidovat s patchem.<\/p>\n<p>P\u0159esto tato historie znovu ukazuje, \u017ee vypr\u0161en\u00ed platnosti certifik\u00e1t\u016f z\u016fst\u00e1v\u00e1 aktu\u00e1ln\u00edm probl\u00e9mem i dnes.<\/p>\n<p>V t\u00e9to souvislosti stoj\u00ed za to pod\u00edvat se na pom\u011brn\u011b origin\u00e1ln\u00ed zp\u016fsob, jak s touto situac\u00ed nalo\u017eili v\u00fdvoj\u00e1\u0159i protokolu <noindex><a rel=\"nofollow\" href=\"https:\/\/dnscrypt.info\/\">DNSCrypt<\/a><\/noindex>. Jejich \u0159e\u0161en\u00ed lze rozd\u011blit na dv\u011b \u010d\u00e1sti. Za prv\u00e9, kr\u00e1tkodob\u00e9 certifik\u00e1ty. Za druh\u00e9 varov\u00e1n\u00ed u\u017eivatel\u016f o bl\u00ed\u017e\u00edc\u00edm se vypr\u0161en\u00ed dlouhodob\u00fdch certifik\u00e1t\u016f.<\/p>\n<h1>DNSCrypt<\/h1>\n<p>\n<img decoding=\"async\" alt=\"Jak DNSCrypt vy\u0159e\u0161il probl\u00e9m s vypr\u0161en\u00fdmi certifik\u00e1ty zaveden\u00edm 24hodinov\u00e9 platnosti\" src=\"\/wp-content\/uploads\/2019\/05\/f488766f2747f097c85a95842a9b8010.jpeg\" style=\"display:block;margin: 0 auto;\" \/>DNSCrypt je protokol pro \u0161ifrov\u00e1n\u00ed DNS provozu. Chr\u00e1n\u00ed DNS komunikaci p\u0159ed odposlechem a MiTM a tak\u00e9 umo\u017e\u0148uje obej\u00edt blokace na \u00farovni DNS dotaz\u016f.<\/p>\n<p>Protokol obklopuje DNS provoz mezi klientem a serverem do kryptografick\u00e9 konstrukce a pracuje na transportn\u00edch protokolech UDP a TCP. K jeho pou\u017eit\u00ed mus\u00ed jak klient, tak DNS resolver podporovat DNSCrypt. Nap\u0159\u00edklad od b\u0159ezna 2016 jej za\u0159adila na sv\u00e9 DNS servery a do prohl\u00ed\u017ee\u010de \u201eYandex\u201c. O podpo\u0159e ozn\u00e1mily i n\u011bkter\u00e9 dal\u0161\u00ed poskytovatele, v\u010detn\u011b Googlu a Cloudflare. Bohu\u017eel jich nen\u00ed tolik (na ofici\u00e1ln\u00ed str\u00e1nce je uvedeno 152 ve\u0159ejn\u00fdch DNS server\u016f). Ale program <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jedisct1\/dnscrypt-proxy\">dnscrypt-proxy<\/a><\/noindex> m\u016f\u017ee b\u00fdt ru\u010dn\u011b nainstalov\u00e1n na klientech pod Linuxem, Windows a MacOS. Existuj\u00ed tak\u00e9 <noindex><a rel=\"nofollow\" href=\"https:\/\/dnscrypt.info\/implementations\">serverov\u00e9 implementace<\/a><\/noindex>.<\/p>\n<p><img decoding=\"async\" alt=\"Jak DNSCrypt vy\u0159e\u0161il probl\u00e9m s vypr\u0161en\u00fdmi certifik\u00e1ty zaveden\u00edm 24hodinov\u00e9 platnosti\" src=\"\/wp-content\/uploads\/2019\/05\/35e062558be302df07114c0ad7691657.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nJak funguje DNSCrypt? Ve zkratce, klient z\u00edsk\u00e1v\u00e1 ve\u0159ejn\u00fd kl\u00ed\u010d vybran\u00e9ho poskytovatele a pomoc\u00ed n\u011bj ov\u011b\u0159uje jeho certifik\u00e1ty. Ji\u017e tam jsou kr\u00e1tkodob\u00e9 ve\u0159ejn\u00e9 kl\u00ed\u010de pro relaci a identifik\u00e1tor sad \u0161ifrov\u00e1n\u00ed. Klient\u016fm se doporu\u010duje generovat nov\u00fd kl\u00ed\u010d pro ka\u017ed\u00fd po\u017eadavek, zat\u00edmco servery by m\u011bly m\u011bnit kl\u00ed\u010de <b>ka\u017ed\u00fdch 24 hodin<\/b>. P\u0159i v\u00fdm\u011bn\u011b kl\u00ed\u010d\u016f se pou\u017e\u00edv\u00e1 algoritmus X25519, pro podepisov\u00e1n\u00ed \u2014 EdDSA, pro blokov\u00e9 \u0161ifrov\u00e1n\u00ed \u2014 XSalsa20-Poly1305 nebo XChaCha20-Poly1305.<\/p>\n<p>Jeden z v\u00fdvoj\u00e1\u0159\u016f protokolu Frank Denis <noindex><a rel=\"nofollow\" href=\"https:\/\/00f.net\/2019\/05\/04\/fixing-expired-certificates\/\">p\u00ed\u0161e<\/a><\/noindex>, \u017ee automatick\u00e1 v\u00fdm\u011bna ka\u017ed\u00fdch 24 hodin vy\u0159e\u0161ila probl\u00e9m s pro\u0161l\u00fdmi certifik\u00e1ty. V z\u00e1sad\u011b referen\u010dn\u00ed klient dnscrypt-proxy p\u0159ij\u00edm\u00e1 certifik\u00e1ty s jakoukoli dobou platnosti, ale vyd\u00e1v\u00e1 varov\u00e1n\u00ed 'Doba platnosti kl\u00ed\u010d\u016f dnscrypt-proxy pro tento server je p\u0159\u00edli\u0161 dlouh\u00e1', pokud je platn\u00fd d\u00e9le ne\u017e 24 hodin. Sou\u010dasn\u011b byl vyd\u00e1n obraz Docker, ve kter\u00e9m byla realizov\u00e1na rychl\u00e1 v\u00fdm\u011bna kl\u00ed\u010d\u016f (a certifik\u00e1t\u016f).<\/p>\n<p>Za prv\u00e9, je to mimo\u0159\u00e1dn\u011b u\u017eite\u010dn\u00e9 pro bezpe\u010dnost: pokud je server kompromitov\u00e1n nebo kl\u00ed\u010d unikl, v\u010derej\u0161\u00ed traffic nem\u016f\u017ee b\u00fdt de\u0161ifrov\u00e1n. Kl\u00ed\u010d se u\u017e zm\u011bnil. Pravd\u011bpodobn\u011b to bude probl\u00e9m pro prov\u00e1d\u011bn\u00ed 'Z\u00e1kona Jarovoj', kter\u00fd nut\u00ed poskytovatele uchov\u00e1vat ve\u0161ker\u00fd traffic, v\u010detn\u011b \u0161ifrovan\u00e9ho. P\u0159edpokl\u00e1d\u00e1 se, \u017ee pozd\u011bji by ho bylo mo\u017en\u00e9 de\u0161ifrovat v p\u0159\u00edpad\u011b pot\u0159eby, po\u017e\u00e1d\u00e1n\u00edm o kl\u00ed\u010d od webov\u00e9 str\u00e1nky. Ale v tomto p\u0159\u00edpad\u011b webov\u00e1 str\u00e1nka prost\u011b nebude schopna to poskytnout, proto\u017ee pou\u017e\u00edv\u00e1 kr\u00e1tkodob\u00e9 kl\u00ed\u010de, p\u0159i\u010dem\u017e star\u00e9 odstra\u0148uje.<\/p>\n<p>Ale hlavn\u00ed v\u011bc, p\u00ed\u0161e Denis, je, \u017ee kr\u00e1tkodob\u00e9 kl\u00ed\u010de nut\u00ed servery od prvn\u00edho dne nastavit automatizaci. Pokud se server p\u0159ipojuje k s\u00edti a skripty pro v\u00fdm\u011bnu kl\u00ed\u010d\u016f nejsou nastavena nebo nefunguj\u00ed, bude to okam\u017eit\u011b zji\u0161t\u011bno.<\/p>\n<p>Kdy\u017e automatizace m\u011bn\u00ed kl\u00ed\u010de jednou za n\u011bkolik let, nelze na ni spol\u00e9hat, lid\u00e9 mohou zapomenout na vypr\u0161en\u00ed platnosti certifik\u00e1tu. P\u0159i ka\u017edodenn\u00ed v\u00fdm\u011bn\u011b kl\u00ed\u010d\u016f to bude okam\u017eit\u011b zji\u0161t\u011bno.<\/p>\n<p>Pokud je v\u0161ak automatizace nastavena spr\u00e1vn\u011b, pak nez\u00e1le\u017e\u00ed na tom, jak \u010dasto se kl\u00ed\u010de m\u011bn\u00ed: ka\u017ed\u00fd rok, ka\u017ed\u00e9 \u010dtvrtlet\u00ed nebo t\u0159ikr\u00e1t denn\u011b. Pokud syst\u00e9m funguje d\u00e9le ne\u017e 24 hodin, m\u011bl by fungovat nav\u017edy, uv\u00e1d\u00ed Frank Denis. Podle n\u011bj doporu\u010den\u00ed denn\u00ed v\u00fdm\u011bny kl\u00ed\u010d\u016f v druh\u00e9 verzi protokolu spolu s obrazem Docker, kter\u00fd toto realizuje, efektivn\u011b sn\u00ed\u017eilo po\u010det server\u016f s vypr\u0161en\u00fdmi certifik\u00e1ty a z\u00e1rove\u0148 zlep\u0161ilo bezpe\u010dnost.<\/p>\n<p>Nicm\u00e9n\u011b n\u011bkte\u0159\u00ed poskytovatel\u00e9 se rozhodli z n\u011bjak\u00fdch technick\u00fdch d\u016fvod\u016f nastavit lh\u016ftu platnosti certifik\u00e1tu na v\u00edce ne\u017e 24 hodin. Tento probl\u00e9m byl v\u011bt\u0161inou vy\u0159e\u0161en pomoc\u00ed n\u011bkolika \u0159\u00e1dk\u016f k\u00f3du v dnscrypt-proxy: u\u017eivatel\u00e9 dost\u00e1vaj\u00ed informa\u010dn\u00ed upozorn\u011bn\u00ed 30 dn\u00ed p\u0159ed vypr\u0161en\u00edm certifik\u00e1tu, dal\u0161\u00ed zpr\u00e1vu s vy\u0161\u0161\u00edmi d\u016fsledky 7 dn\u00ed p\u0159ed vypr\u0161en\u00edm a kritick\u00e9 upozorn\u011bn\u00ed, pokud zb\u00fdv\u00e1 m\u00e9n\u011b ne\u017e 24 hodin. To se t\u00fdk\u00e1 pouze certifik\u00e1t\u016f, kter\u00e9 maj\u00ed od za\u010d\u00e1tku dlouhou platnost.<\/p>\n<p>Takov\u00e1 upozorn\u011bn\u00ed d\u00e1vaj\u00ed u\u017eivatel\u016fm mo\u017enost informovat oper\u00e1tory DNS o bl\u00ed\u017e\u00edc\u00edm se vypr\u0161en\u00ed platnosti certifik\u00e1tu, dokud nen\u00ed p\u0159\u00edli\u0161 pozd\u011b. <\/p>\n<p>Kdyby v\u0161ichni u\u017eivatel\u00e9 Firefoxu dostali takov\u00e9 upozorn\u011bn\u00ed, ur\u010dit\u011b by n\u011bkdo informoval v\u00fdvoj\u00e1\u0159e a ti by nedopustili vypr\u0161en\u00ed platnosti certifik\u00e1tu. \u201eNepamatuji si \u017e\u00e1dn\u00fd DNSCrypt server ze seznamu ve\u0159ejn\u00fdch DNS server\u016f, jeho\u017e certifik\u00e1t by vypr\u0161el v posledn\u00edch dvou nebo t\u0159ech letech,\u201c p\u00ed\u0161e Frank Denis. V ka\u017ed\u00e9m p\u0159\u00edpad\u011b je lep\u0161\u00ed nejprve varovat u\u017eivatele a ne vyp\u00ednat roz\u0161\u00ed\u0159en\u00ed bez upozorn\u011bn\u00ed.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/clck.ru\/FiAb5\"><img decoding=\"async\" alt=\"Jak DNSCrypt vy\u0159e\u0161il probl\u00e9m s vypr\u0161en\u00fdmi certifik\u00e1ty zaveden\u00edm 24hodinov\u00e9 platnosti\" src=\"\/wp-content\/uploads\/2019\/05\/5f14141bd47e171aca59ba8efb8a2845.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/a><\/noindex><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/globalsign\/blog\/451506\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u043d\u044c\u0448\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0447\u0430\u0441\u0442\u043e \u0438\u0441\u0442\u0435\u043a\u0430\u043b\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0438\u0445 \u043d\u0443\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0432\u0440\u0443\u0447\u043d\u0443\u044e. \u041b\u044e\u0434\u0438 \u043f\u0440\u043e\u0441\u0442\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u043b\u0438 \u044d\u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c. \u0421 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c Let\u2019s Encrypt \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0446\u0435\u0434\u0443\u0440\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0440\u043e\u0434\u0435 \u0431\u044b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0434\u043e\u043b\u0436\u043d\u0430 \u0431\u044b\u0442\u044c \u0440\u0435\u0448\u0435\u043d\u0430. \u041d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u044f\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u0441 Firefox \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435 \u043e\u043d\u0430 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u0430. \u041a \u0441\u043e\u0436\u0430\u043b\u0435\u043d\u0438\u044e, \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u0442\u0435\u043a\u0430\u0442\u044c. \u0415\u0441\u043b\u0438 \u043a\u0442\u043e-\u0442\u043e \u043f\u0440\u043e\u043f\u0443\u0441\u0442\u0438\u043b \u044d\u0442\u0443 \u0438\u0441\u0442\u043e\u0440\u0438\u044e, \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25203,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33503","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u043d\u044c\u0448\u0435.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-dnscrypt-reshil-problemu-prosrochennyh-sertifikatov-vvedya-srok-dejstviya-24-chasa\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a DNSCrypt \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0432\u0432\u0435\u0434\u044f \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f 24 \u0447\u0430\u0441\u0430 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u043d\u044c\u0448\u0435.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-dnscrypt-reshil-problemu-prosrochennyh-sertifikatov-vvedya-srok-dejstviya-24-chasa\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:52:58+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:52:58+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jak DNSCrypt vy\u0159e\u0161il probl\u00e9m s vypr\u0161en\u00fdmi certifik\u00e1ty zaveden\u00edm platnosti 24 hodin | ProHoster","description":"D\u0159\u00edve.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-dnscrypt-reshil-problemu-prosrochennyh-sertifikatov-vvedya-srok-dejstviya-24-chasa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a DNSCrypt \u0440\u0435\u0448\u0438\u043b \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043f\u0440\u043e\u0441\u0440\u043e\u0447\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0432\u0432\u0435\u0434\u044f \u0441\u0440\u043e\u043a \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f 24 \u0447\u0430\u0441\u0430 | ProHoster","og:description":"\u0420\u0430\u043d\u044c\u0448\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-dnscrypt-reshil-problemu-prosrochennyh-sertifikatov-vvedya-srok-dejstviya-24-chasa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:52:58+00:00","article:modified_time":"2019-10-31T18:52:58+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33503","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 15:31:39","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:39:23","updated":"2026-01-21 15:31:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33503","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=33503"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/33503\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/25203"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=33503"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=33503"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=33503"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}