{"id":84766,"date":"2020-06-10T13:43:11","date_gmt":"2020-06-10T11:43:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory"},"modified":"2020-06-10T13:43:11","modified_gmt":"2020-06-10T11:43:11","slug":"problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","title":{"rendered":"Probl\u00e9m zastaral\u00fdch ko\u0159enov\u00fdch certifik\u00e1t\u016f. Na \u0159ad\u011b jsou Let's Encrypt a chytr\u00e9 televizory.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Probl\u00e9m
\n
\nAby mohl prohl\u00ed\u017ee\u010d autentizovat webovou str\u00e1nku, mus\u00ed se p\u0159edstavit jako platn\u00fd \u0159et\u011bzec certifik\u00e1t\u016f. Typick\u00fd \u0159et\u011bzec je zn\u00e1zorn\u011bn v\u00fd\u0161e a m\u016f\u017ee obsahovat v\u00edce ne\u017e jeden mezilehl\u00fd certifik\u00e1t. Minim\u00e1ln\u00ed po\u010det certifik\u00e1t\u016f v platn\u00e9m \u0159et\u011bzci je t\u0159i.<\/p>\n

Ko\u0159enov\u00fd certifik\u00e1t je srdcem certifika\u010dn\u00ed autority. Je doslova zabudov\u00e1n do va\u0161eho opera\u010dn\u00edho syst\u00e9mu nebo prohl\u00ed\u017ee\u010de a fyzicky p\u0159\u00edtomen na va\u0161em za\u0159\u00edzen\u00ed. Nelze jej zm\u011bnit ze strany serveru. Je pot\u0159eba vynucen\u00e9 aktualizace opera\u010dn\u00edho syst\u00e9mu nebo vestav\u011bn\u00e9ho softwaru na za\u0159\u00edzen\u00ed.<\/p>\n

Bezpe\u010dnostn\u00ed specialista Scott Helme p\u00ed\u0161e<\/a><\/noindex>, \u017ee hlavn\u00ed probl\u00e9my vzniknou pro certifika\u010dn\u00ed autoritu Let's Encrypt, proto\u017ee dnes je to nejpopul\u00e1rn\u011bj\u0161\u00ed CA na internetu a jeho ko\u0159enov\u00fd certifik\u00e1t brzy \u201evypr\u0161\u00ed\u201c. Zm\u011bna ko\u0159ene Let's Encrypt je napl\u00e1nov\u00e1na na 8. \u010dervence 2020<\/a><\/noindex>.
\n<\/a><\/noindex>
\nKoncov\u00e9 a mezilehl\u00e9 certifik\u00e1ty certifika\u010dn\u00ed autority (CA) jsou doru\u010dov\u00e1ny klientovi ze serveru, zat\u00edmco ko\u0159enov\u00fd certifik\u00e1t je na stran\u011b klienta ji\u017e existuje<\/i>, proto pomoc\u00ed t\u00e9to kolekce certifik\u00e1t\u016f lze vytvo\u0159it \u0159et\u011bzec a autentizovat webovou str\u00e1nku. <\/p>\n

Probl\u00e9m spo\u010d\u00edv\u00e1 v tom, \u017ee ka\u017ed\u00fd certifik\u00e1t m\u00e1 dobu platnosti, po kter\u00e9 je pot\u0159eba jej nahradit. Nap\u0159\u00edklad od 1. z\u00e1\u0159\u00ed 2020 pl\u00e1nuje prohl\u00ed\u017ee\u010d Safari zav\u00e9st omezen\u00ed na dobu platnosti serverov\u00fdch TLS certifik\u00e1t\u016f maxim\u00e1ln\u011b 398 dn\u00ed<\/a><\/noindex>.<\/p>\n

To znamen\u00e1, \u017ee v\u0161ichni budeme muset nahrazovat serverov\u00e9 certifik\u00e1ty alespo\u0148 ka\u017ed\u00fdch 12 m\u011bs\u00edc\u016f. Toto omezen\u00ed se vztahuje pouze na serverov\u00e9 certifik\u00e1ty, vztahuje se ne<\/i> i na ko\u0159enov\u00e9 certifik\u00e1ty CA.<\/p>\n

Certifik\u00e1ty CA podl\u00e9haj\u00ed jin\u00e9mu souboru pravidel, a proto maj\u00ed r\u016fzn\u00e1 omezen\u00ed na dobu platnosti. Velmi \u010dasto se vyskytuj\u00ed mezilehl\u00e9 certifik\u00e1ty s dobou platnosti 5 let a ko\u0159enov\u00e9 certifik\u00e1ty se \u017eivotnost\u00ed dokonce 25 let! <\/p>\n

S mezilehl\u00fdmi certifik\u00e1ty obvykle nejsou probl\u00e9my, proto\u017ee jsou dod\u00e1v\u00e1ny klientovi serverem, kter\u00fd mnohem \u010dast\u011bji m\u011bn\u00ed sv\u016fj vlastn\u00ed certifik\u00e1t, tak\u017ee b\u011bhem t\u00e9to procedury jednodu\u0161e nahrad\u00ed i mezilehl\u00fd certifik\u00e1t. Je docela snadn\u00e9 jej vym\u011bnit spolu se serverov\u00fdm certifik\u00e1tem, na rozd\u00edl od ko\u0159enov\u00e9ho certifik\u00e1tu CA.<\/p>\n

Jak jsme ji\u017e zm\u00ednili, ko\u0159enov\u00fd CA je integrov\u00e1n p\u0159\u00edmo do samotn\u00e9ho klientsk\u00e9ho za\u0159\u00edzen\u00ed, do opera\u010dn\u00edho syst\u00e9mu, prohl\u00ed\u017ee\u010de nebo jin\u00e9ho softwaru. Zm\u011bnu ko\u0159enov\u00e9ho CA nem\u016f\u017ee webov\u00e1 str\u00e1nka kontrolovat. Je nutn\u00e1 aktualizace na klientovi, a\u0165 u\u017e jde o aktualizaci opera\u010dn\u00edho syst\u00e9mu nebo softwaru.<\/p>\n

N\u011bkter\u00e9 ko\u0159enov\u00e9 CA existuj\u00ed ji\u017e velmi dlouho, mluv\u00edme o 20-25 letech. Brzy se n\u011bkter\u00e9 z nejstar\u0161\u00edch ko\u0159enov\u00fdch CA bl\u00ed\u017e\u00ed ke konci sv\u00e9ho p\u0159irozen\u00e9ho \u017eivotn\u00edho cyklu, jejich \u010das t\u00e9m\u011b\u0159 vypr\u0161el. Pro v\u011bt\u0161inu z n\u00e1s to nebude probl\u00e9m, proto\u017ee CA vytvo\u0159ily nov\u00e9 ko\u0159enov\u00e9 certifik\u00e1ty, kter\u00e9 se ji\u017e mnoho let \u0161\u00ed\u0159\u00ed po cel\u00e9m sv\u011bt\u011b v aktualizac\u00edch opera\u010dn\u00edho syst\u00e9mu a prohl\u00ed\u017ee\u010d\u016f. Ale pokud n\u011bkdo dlouho neaktualizoval opera\u010dn\u00ed syst\u00e9m nebo prohl\u00ed\u017ee\u010d, m\u016f\u017ee to b\u00fdt probl\u00e9m.<\/p>\n

Takov\u00e1 situace nastala 30. kv\u011btna 2020 v 10:48:38 GMT. To je p\u0159esn\u00fd \u010das, kdy vypr\u0161el ko\u0159enov\u00fd certifik\u00e1t AddTrust<\/a><\/noindex> od certifika\u010dn\u00ed autority Comodo (Sectigo).<\/p>\n

Byl pou\u017e\u00edv\u00e1n k p\u0159ek\u0159\u00ed\u017en\u00e9mu podepisov\u00e1n\u00ed, aby zajistil kompatibilitu se zastaral\u00fdmi za\u0159\u00edzen\u00edmi, jejich\u017e \u00falo\u017ei\u0161t\u011b neobsahuje nov\u00fd ko\u0159enov\u00fd certifik\u00e1t USERTrust.<\/p>\n

Bohu\u017eel, probl\u00e9my vznikly nejen v zastaral\u00fdch prohl\u00ed\u017ee\u010d\u00edch, ale tak\u00e9 v neprohl\u00ed\u017ee\u010dov\u00fdch klientech na b\u00e1zi OpenSSL 1.0.x, LibreSSL a GnuTLS<\/a><\/noindex>. Nap\u0159\u00edklad v televizn\u00edch p\u0159ij\u00edma\u010d\u00edch Roku<\/a><\/noindex>, slu\u017eb\u011b Heroku<\/a><\/noindex>, v aplikac\u00edch Fortinet, Chargify, na platform\u011b .NET Core 2.0 pod Linuxem a mnoha dal\u0161\u00edch.<\/a><\/noindex>.<\/p>\n

P\u0159edpokl\u00e1dalo se, \u017ee probl\u00e9m zas\u00e1hne pouze zastaral\u00e9 syst\u00e9my (Android 2.3, Windows XP, Mac OS X 10.11, iOS 9 atd.), proto\u017ee modern\u00ed prohl\u00ed\u017ee\u010de mohou pou\u017e\u00edt druh\u00fd ko\u0159enov\u00fd certifik\u00e1t USERTrust. Ve skute\u010dnosti v\u0161ak za\u010daly v\u00fdpadky v stovk\u00e1ch webov\u00fdch slu\u017eeb, kter\u00e9 pou\u017e\u00edvaly voln\u00e9 knihovny OpenSSL 1.0.x a GnuTLS. Bezpe\u010dn\u00e9 p\u0159ipojen\u00ed p\u0159estalo b\u00fdt nav\u00e1z\u00e1no s chybov\u00fdm hl\u00e1\u0161en\u00edm o zastar\u00e1n\u00ed certifik\u00e1tu.<\/p>\n

Dal\u0161\u00ed je Let's Encrypt<\/h1>\n

\nDal\u0161\u00ed dobr\u00fd p\u0159\u00edklad nadch\u00e1zej\u00edc\u00ed zm\u011bny ko\u0159enov\u00e9ho CA \u2014 certifika\u010dn\u00ed autorita Let's Encrypt. Dal\u0161\u00ed v dubnu 2019<\/a><\/noindex> pl\u00e1novali p\u0159ej\u00edt z \u0159et\u011bzce Identrust na vlastn\u00ed \u0159et\u011bzec ISRG Root, ale to se nestalo.<\/a><\/noindex>.<\/p>\n

\"Probl\u00e9m
\n
\n\u201eZ d\u016fvodu obav o nedostate\u010dn\u00e9 roz\u0161\u00ed\u0159en\u00ed ko\u0159ene ISRG na za\u0159\u00edzen\u00edch Android jsme se rozhodli posunout datum p\u0159echodu na vlastn\u00ed ko\u0159en z 8. \u010dervence 2019 na 8. \u010dervence 2020,\u201c uvedli v ofici\u00e1ln\u00edm prohl\u00e1\u0161en\u00ed Let's Encrypt.<\/p>\n

Datum muselo b\u00fdt p\u0159esunuto kv\u016fli probl\u00e9mu zn\u00e1m\u00e9mu jako \u201epropagace ko\u0159en\u016f\u201c (root propagation), konkr\u00e9tn\u011b nedostatku t\u00e9to propagace, kdy ko\u0159enov\u00fd CA nen\u00ed p\u0159\u00edli\u0161 \u0161iroce roz\u0161\u00ed\u0159en mezi v\u0161emi klienty. <\/p>\n

Nyn\u00ed Let's Encrypt pou\u017e\u00edv\u00e1 k\u0159\u00ed\u017eov\u011b podepsan\u00fd mezilehl\u00fd certifik\u00e1t s \u0159et\u011bzcem a\u017e po ko\u0159en IdenTrust DST Root CA X3. Tento ko\u0159enov\u00fd certifik\u00e1t byl vyd\u00e1n ji\u017e v z\u00e1\u0159\u00ed 2000 a vypr\u0161\u00ed 30. z\u00e1\u0159\u00ed 2021. Do t\u00e9 doby pl\u00e1nuje Let's Encrypt p\u0159ej\u00edt na vlastn\u00ed samoupisovan\u00fd ko\u0159en ISRG Root X1.<\/p>\n

\"Probl\u00e9m
\n
\nKo\u0159en ISRG byl vyd\u00e1n 4. \u010dervna 2015. Po tom za\u010dal proces jeho schvalov\u00e1n\u00ed jako certifika\u010dn\u00edho \u00fa\u0159adu, kter\u00fd byl dokon\u010den 6. srpna 2018.<\/a><\/noindex>Od tohoto okam\u017eiku byl ko\u0159enov\u00fd CA dostupn\u00fd v\u0161em klient\u016fm prost\u0159ednictv\u00edm aktualizace opera\u010dn\u00edho syst\u00e9mu nebo softwaru. V\u0161echno, co bylo pot\u0159eba ud\u011blat, bylo nainstalovat aktualizaci. <\/p>\n

Ale v tom je probl\u00e9m.<\/p>\n

Pokud v\u00e1\u0161 mobiln\u00ed telefon, televizor nebo jin\u00e9 za\u0159\u00edzen\u00ed nebylo aktualizov\u00e1no dva roky \u2014 jak se dozv\u00ed o nov\u00e9m ko\u0159enov\u00e9m certifik\u00e1tu ISRG Root X1? A pokud nen\u00ed nainstalov\u00e1n v syst\u00e9mu, v\u0161echny serverov\u00e9 certifik\u00e1ty Let's Encrypt budou va\u0161e za\u0159\u00edzen\u00ed pova\u017eovat za neplatn\u00e9, jakmile Let's Encrypt p\u0159ejde na nov\u00fd ko\u0159en. A v ekosyst\u00e9mu Android je mnoho zastaral\u00fdch za\u0159\u00edzen\u00ed, kter\u00e1 ji\u017e dlouho nebyla aktualizov\u00e1na.<\/p>\n

\"Probl\u00e9m
\nEkosyst\u00e9m Android<\/i><\/p>\n

Proto Let's Encrypt odlo\u017eil p\u0159echod na vlastn\u00ed ko\u0159en ISRG a st\u00e1le pou\u017e\u00edv\u00e1 mezilehl\u00fd \u0159et\u011bzec, kter\u00fd vede k ko\u0159enu IdenTrust. Ale p\u0159echod bude v ka\u017ed\u00e9m p\u0159\u00edpad\u011b nutn\u00fd. A datem zm\u011bny ko\u0159ene je stanoveno 8. \u010dervence 2020.<\/a><\/noindex>.<\/p>\n

Pro ov\u011b\u0159en\u00ed, zda je na va\u0161em za\u0159\u00edzen\u00ed (televizor, set-top box nebo jin\u00fd klient) nainstalov\u00e1n ko\u0159en ISRG X1, nav\u0161tivte testovac\u00ed web. https:\/\/valid-isrgrootx1.letsencrypt.org\/<\/a><\/noindex>Pokud se nezobraz\u00ed varov\u00e1n\u00ed o bezpe\u010dnosti, obvykle je v\u0161e v po\u0159\u00e1dku. <\/p>\n

Let's Encrypt nen\u00ed jedin\u00fd, kdo mus\u00ed \u0159e\u0161it probl\u00e9m s p\u0159echodem na nov\u00fd ko\u0159en. Kryptografie na internetu byla zah\u00e1jena p\u0159ed v\u00edce ne\u017e 20 lety, tak\u017ee pr\u00e1v\u011b nyn\u00ed nast\u00e1v\u00e1 doba, kdy skon\u010d\u00ed platnost mnoha ko\u0159enov\u00fdch certifik\u00e1t\u016f.<\/p>\n

S t\u00edmto probl\u00e9mem se mohou setkat vlastn\u00edci chytr\u00fdch televizor\u016f, kte\u0159\u00ed u\u017e l\u00e9ta neaktualizovali software Smart TV. Nap\u0159\u00edklad nov\u00fd ko\u0159en GlobalSign R5 Root<\/a><\/noindex> byl vyd\u00e1n v roce 2012, a po n\u011bjak\u00e9 dob\u011b n\u011bkter\u00e9 star\u00e9 Smart TV nemohou vytvo\u0159it \u0159et\u011bzec k n\u011bmu, proto\u017ee tento ko\u0159enov\u00fd CA tam prost\u011b chyb\u00ed. Zejm\u00e9na ti klienti nemohli nav\u00e1zat zabezpe\u010den\u00e9 p\u0159ipojen\u00ed k webu bbc.co.uk. Aby probl\u00e9m vy\u0159e\u0161ili, spr\u00e1vci BBC museli pou\u017e\u00edt trik: oni vytvo\u0159ili pro tyto klienty alternativn\u00ed \u0159et\u011bzec<\/a><\/noindex> p\u0159es dal\u0161\u00ed mezilehl\u00e9 certifik\u00e1ty, zapojuj\u00edce star\u00e9 ko\u0159eny R3 Root<\/a><\/noindex> a R1 Root<\/a><\/noindex>, kter\u00e9 je\u0161t\u011b nepropadly.<\/p>\n

www.bbc.co.uk (Leaf)\nGlobalSign ECC OV SSL CA 2018 (Intermediate)\nGlobalSign Root CA - R5 (Intermediate)\nGlobalSign Root CA - R3 (Intermediate)<\/pre>\n
\nToto je do\u010dasn\u00e9 \u0159e\u0161en\u00ed. Probl\u00e9m nezmiz\u00ed, pokud se neaktualizuje klientsk\u00fd software. Smart TV je v podstat\u011b omezen\u00fd po\u010d\u00edta\u010d s Linuxem. A bez aktualizac\u00ed jeho ko\u0159enov\u00e9 certifik\u00e1ty nevyhnuteln\u011b propadnou.<\/p>\n
To plat\u00ed pro v\u0161echna za\u0159\u00edzen\u00ed, nejen pro televize. Pokud m\u00e1te jak\u00e9koli za\u0159\u00edzen\u00ed, kter\u00e9 je p\u0159ipojeno k internetu a kter\u00e9 bylo inzerov\u00e1no jako \u201echytr\u00fd\u201c p\u0159\u00edstroj, pak se probl\u00e9m s propadl\u00fdmi certifik\u00e1ty t\u00e9m\u011b\u0159 ur\u010dit\u011b t\u00fdk\u00e1 i jeho. Pokud se za\u0159\u00edzen\u00ed neaktualizuje, ko\u0159enov\u00e9 \u00falo\u017ei\u0161t\u011b CA se \u010dasem zastar\u00e1, a nakonec se probl\u00e9m projev\u00ed. Jak brzy se probl\u00e9m objev\u00ed, z\u00e1vis\u00ed na datu posledn\u00ed aktualizace ko\u0159enov\u00e9ho \u00falo\u017ei\u0161t\u011b. To m\u016f\u017ee b\u00fdt n\u011bkolik let p\u0159ed datem skute\u010dn\u00e9ho vyd\u00e1n\u00ed za\u0159\u00edzen\u00ed.<\/p>\n
Mimochodem, to je v tom probl\u00e9m, pro\u010d n\u011bkter\u00e9 velk\u00e9 medi\u00e1ln\u00ed platformy nemohou pou\u017e\u00edvat modern\u00ed automatizovan\u00e9 certifika\u010dn\u00ed autority jako Let's Encrypt, p\u00ed\u0161e Scott Helme. Pro inteligentn\u00ed TV nejsou vhodn\u00e9 a po\u010det ko\u0159en\u016f je p\u0159\u00edli\u0161 mal\u00fd na zaji\u0161t\u011bn\u00ed podpory certifik\u00e1tu na zastaral\u00fdch za\u0159\u00edzen\u00edch. V opa\u010dn\u00e9m p\u0159\u00edpad\u011b TV jednodu\u0161e nebude moci spustit modern\u00ed streamovac\u00ed slu\u017eby.<\/p>\n
Posledn\u00ed incident s AddTrust uk\u00e1zal, \u017ee i velk\u00e9 IT spole\u010dnosti nejsou p\u0159ipraveny na to, \u017ee platnost ko\u0159enov\u00e9ho certifik\u00e1tu kon\u010d\u00ed.<\/p>\n
\u0158e\u0161en\u00ed probl\u00e9mu je pouze jedno \u2013 aktualizace. V\u00fdvoj\u00e1\u0159i chytr\u00fdch za\u0159\u00edzen\u00ed by m\u011bli p\u0159edem zajistit mechanismus pro aktualizaci softwaru a ko\u0159enov\u00fdch certifik\u00e1t\u016f. Na druhou stranu, v\u00fdrobc\u016fm se nevypl\u00e1c\u00ed zaji\u0161\u0165ovat provoz sv\u00fdch za\u0159\u00edzen\u00ed po uplynut\u00ed z\u00e1ruky.<\/p>\n
\n\"Probl\u00e9m
\n<\/a><\/noindex>
\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0427\u0442\u043e\u0431\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043c\u043e\u0433 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442, \u0442\u043e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0431\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u0422\u0438\u043f\u0438\u0447\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u0441\u0432\u0435\u0440\u0445\u0443, \u0432 \u043d\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u041c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0440\u0430\u0432\u043d\u043e \u0442\u0440\u0451\u043c. \u041a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u2014 \u0441\u0435\u0440\u0434\u0446\u0435 \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u043d \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432 \u0432\u0430\u0448\u0443 \u041e\u0421 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043e\u043d \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0415\u0433\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u043d\u044f\u0435\u0448\u044c \u0441\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84767,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Probl\u00e9m zastaral\u00fdch ko\u0159enov\u00fdch certifik\u00e1t\u016f. Na \u0159ad\u011b je Let\u2019s Encrypt a chytr\u00e9 televize | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 Let\u2019s Encrypt \u0438 \u0443\u043c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-10T11:43:11+00:00","article:modified_time":"2020-06-10T11:43:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84766","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:51:43","updated":"2022-09-29 06:39:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/84766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=84766"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/84766\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/84767"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=84766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=84766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=84766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}