{"id":86701,"date":"2020-06-28T19:42:14","date_gmt":"2020-06-28T17:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition"},"modified":"2020-06-28T19:42:14","modified_gmt":"2020-06-28T17:42:14","slug":"uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition","title":{"rendered":"Zlep\u0161en\u00ed parametr\u016f zabezpe\u010den\u00ed SSL spojen\u00ed v Zimbra Collaboration Suite Open-Source Edition","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Spolehlivost \u0161ifrov\u00e1n\u00ed je jedn\u00edm z nejd\u016fle\u017eit\u011bj\u0161\u00edch ukazatel\u016f p\u0159i pou\u017e\u00edv\u00e1n\u00ed informa\u010dn\u00edch syst\u00e9m\u016f pro podnik\u00e1n\u00ed, proto\u017ee ka\u017ed\u00fd den se pod\u00edlej\u00ed na p\u0159enosu obrovsk\u00e9ho mno\u017estv\u00ed d\u016fv\u011brn\u00fdch informac\u00ed. Obvykl\u00fdm prost\u0159edkem hodnocen\u00ed kvality SSL spojen\u00ed je nez\u00e1visl\u00fd test od Qualys SSL Labs. Vzhledem k tomu, \u017ee tento test m\u016f\u017ee spustit kdokoliv, je pro poskytovatele SaaS zvl\u00e1\u0161t\u011b d\u016fle\u017eit\u00e9, aby hodnocen\u00ed v tomto testu bylo maxim\u00e1ln\u00ed. O kvalitu SSL spojen\u00ed se zaj\u00edmaj\u00ed nejen poskytovatel\u00e9 SaaS, ale tak\u00e9 b\u011b\u017en\u00e9 podniky. Pro n\u011b je tento test vynikaj\u00edc\u00ed p\u0159\u00edle\u017eitost\u00ed k odhalen\u00ed potenci\u00e1ln\u011b zraniteln\u00fdch m\u00edst a k v\u010dasn\u00e9mu uzav\u0159en\u00ed v\u0161ech mezer pro kybernetick\u00e9 zlo\u010dince.<\/p>\n<p><img decoding=\"async\" alt=\"Zlep\u0161en\u00ed parametr\u016f zabezpe\u010den\u00ed SSL spojen\u00ed v Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/d6303075bad0b206deb6a75d812aefd8.png\" style=\"display:block;margin: 0 auto;\" \/><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nVe Zimbra OSE je povoleno pou\u017e\u00edvat dva typy <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/ssl-sertifikat\/\"   title=\"SSL certifik\u00e1t\u016f\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"344\">SSL certifik\u00e1t\u016f<\/a>. Prvn\u00ed je self-signed certifik\u00e1t, kter\u00fd je automaticky p\u0159id\u00e1n p\u0159i instalaci. Tento certifik\u00e1t je bezplatn\u00fd a neomezen\u00fd v \u010dasov\u00e9m pou\u017eit\u00ed, co\u017e znamen\u00e1, \u017ee je ide\u00e1ln\u011b vhodn\u00fd pro testov\u00e1n\u00ed Zimbra OSE nebo jej\u00ed pou\u017e\u00edv\u00e1n\u00ed v\u00fdhradn\u011b v r\u00e1mci intern\u00ed s\u00edt\u011b. P\u0159i p\u0159ihl\u00e1\u0161en\u00ed do webov\u00e9ho klienta v\u0161ak u\u017eivatel\u00e9 uvid\u00ed varov\u00e1n\u00ed od prohl\u00ed\u017ee\u010de, \u017ee tento certifik\u00e1t nen\u00ed d\u016fv\u011bryhodn\u00fd, a test od Qualys SSL Labs v\u00e1\u0161 server jednozna\u010dn\u011b neobstoj\u00ed.<\/p>\n<p>Druh\u00fd typ je komer\u010dn\u00ed SSL certifik\u00e1t podepsan\u00fd certifika\u010dn\u00ed autoritou. Takov\u00e9 certifik\u00e1ty bez probl\u00e9m\u016f akceptuj\u00ed prohl\u00ed\u017ee\u010de a obvykle se pou\u017e\u00edvaj\u00ed p\u0159i komer\u010dn\u00edm vyu\u017eit\u00ed Zimbra OSE. Ihned po spr\u00e1vn\u00e9 instalaci komer\u010dn\u00edho certifik\u00e1tu Zimbra OSE 8.8.15 vykazuje hodnocen\u00ed A v testu od Qualys SSL Labs. To je vynikaj\u00edc\u00ed v\u00fdsledek, ale na\u0161\u00edm c\u00edlem je dos\u00e1hnout v\u00fdsledku A+.<\/p>\n<p><img decoding=\"async\" alt=\"Zlep\u0161en\u00ed parametr\u016f zabezpe\u010den\u00ed SSL spojen\u00ed v Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/d8788ca0b826e1b7c63e0a487745484b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Zlep\u0161en\u00ed parametr\u016f zabezpe\u010den\u00ed SSL spojen\u00ed v Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/f9c8e0435491a5ab5abe2500978ac7f9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAby bylo dosa\u017eeno maxim\u00e1ln\u00edho hodnocen\u00ed v testu od Qualys SSL Labs p\u0159i pou\u017e\u00edv\u00e1n\u00ed Zimbra Collaboration Suite Open-Source Edition, je nutn\u00e9 splnit \u0159adu krok\u016f:<\/p>\n<p><b>1. Zv\u00fd\u0161en\u00ed parametr\u016f protokolu Diffie-Hellman<\/b><\/p>\n<p>Ve v\u00fdchoz\u00edm nastaven\u00ed maj\u00ed v\u0161echny komponenty Zimbra OSE 8.8.15, kter\u00e9 pou\u017e\u00edvaj\u00ed OpenSSL, hodnotu parametr\u016f protokolu Diffie-Hellman 2048 bit\u016f. To je na z\u00edsk\u00e1n\u00ed hodnocen\u00ed A+ v testu od Qualys SSL Labs v\u00edce ne\u017e dostate\u010dn\u00e9. Pokud v\u0161ak aktualizujete z star\u0161\u00edch verz\u00ed, m\u016f\u017ee b\u00fdt hodnota parametr\u016f ni\u017e\u0161\u00ed. Proto se doporu\u010duje po dokon\u010den\u00ed aktualizace prov\u00e9st p\u0159\u00edkaz zmdhparam set -new 2048, kter\u00fd zv\u00fd\u0161\u00ed hodnoty parametr\u016f protokolu Diffie-Hellman na p\u0159ijateln\u00fdch 2048 bit\u016f, a pokud si p\u0159ejete, pomoc\u00ed tohoto p\u0159\u00edkazu m\u016f\u017eete zv\u00fd\u0161it hodnotu parametr\u016f na 3072 nebo 4096 bit\u016f, co\u017e na jedn\u00e9 stran\u011b povede k del\u0161\u00ed dob\u011b generov\u00e1n\u00ed, ale na druh\u00e9 stran\u011b pozitivn\u011b ovlivn\u00ed \u00farove\u0148 zabezpe\u010den\u00ed po\u0161tovn\u00edho serveru.<\/p>\n<p><b>2. Aktivace doporu\u010den\u00e9ho seznamu pou\u017e\u00edvan\u00fdch \u0161ifrovac\u00edch algoritm\u016f<\/b><\/p>\n<p>Ve v\u00fdchoz\u00edm nastaven\u00ed Zimbra Collaboration Suite Open-Source Edition podporuje \u0161irok\u00e9 spektrum siln\u00fdch a slab\u00fdch \u0161ifrovac\u00edch algoritm\u016f, kter\u00e9 \u0161ifruj\u00ed data proch\u00e1zej\u00edc\u00ed chr\u00e1n\u011bn\u00fdm spojen\u00edm. Pou\u017e\u00edv\u00e1n\u00ed slab\u00fdch \u0161ifrovac\u00edch algoritm\u016f v\u0161ak p\u0159edstavuje z\u00e1sadn\u00ed nev\u00fdhodu p\u0159i kontrole zabezpe\u010den\u00ed SSL spojen\u00ed. Aby se tomu zabr\u00e1nilo, je t\u0159eba nakonfigurovat seznam pou\u017e\u00edvan\u00fdch \u0161ifrovac\u00edch algoritm\u016f.<\/p>\n<p>K tomu byste m\u011bli pou\u017e\u00edt p\u0159\u00edkaz <code>zmprov mcf zimbraReverseProxySSLCiphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128:AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4'<\/code><\/p>\n<p>Tento p\u0159\u00edkaz okam\u017eit\u011b zahrnuje soubor doporu\u010den\u00fdch \u0161ifrovac\u00edch algoritm\u016f a d\u00edky n\u011bmu lze okam\u017eit\u011b zahrnout do seznamu d\u016fv\u011bryhodn\u00e9 \u0161ifry a vylou\u010dit ned\u016fv\u011bryhodn\u00e9. Nyn\u00ed zb\u00fdv\u00e1 jen restartovat uzly s reverzn\u00edm proxy pomoc\u00ed p\u0159\u00edkazu zmproxyctl restart. Po restartu nabudou proveden\u00e9 zm\u011bny \u00fa\u010dinnosti.<\/p>\n<p>Pokud v\u00e1m tento seznam z n\u011bjak\u00fdch d\u016fvod\u016f nevyhovuje, m\u016f\u017eete z n\u011bj odstranit n\u011bkolik slab\u00fdch \u0161ifrovac\u00edch algoritm\u016f pomoc\u00ed p\u0159\u00edkazu <code>zmprov mcf +zimbraSSLExcludeCipherSuites<\/code>. Nap\u0159\u00edklad p\u0159\u00edkaz <code>zmprov mcf +zimbraSSLExcludeCipherSuites TLS_RSA_WITH_RC4_128_MD5 +zimbraSSLExcludeCipherSuites TLS_RSA_WITH_RC4_128_SHA +zimbraSSLExcludeCipherSuites SSL_RSA_WITH_RC4_128_MD5 +zimbraSSLExcludeCipherSuites SSL_RSA_WITH_RC4_128_SHA +zimbraSSLExcludeCipherSuites TLS_ECDHE_RSA_WITH_RC4_128_SHA<\/code>, kter\u00e1 zcela vylou\u010d\u00ed pou\u017eit\u00ed \u0161ifrov\u00e1n\u00ed RC4. Stejn\u011b lze postupovat i se \u0161iframi AES a 3DES.<\/p>\n<p><b>3. Zahrnut\u00ed HSTS<\/b><\/p>\n<p>Zapnut\u00e9 mechanismy pro povinn\u00e9 \u0161ifrov\u00e1n\u00ed spojen\u00ed a obnoven\u00ed relace TLS jsou tak\u00e9 povinn\u00e9 podm\u00ednky pro z\u00edsk\u00e1n\u00ed nejvy\u0161\u0161\u00edho hodnocen\u00ed v testu od Qualys SSL Labs. Pro jejich aktivaci je nutn\u00e9 zadat p\u0159\u00edkaz <code>zmprov mcf +zimbraResponseHeader \"Strict-Transport-Security: max-age=31536000\"<\/code>. Tento p\u0159\u00edkaz p\u0159id\u00e1 pot\u0159ebn\u00fd z\u00e1hlav\u00ed do konfigurace a pro uveden\u00ed nov\u00fdch nastaven\u00ed do v\u00fdkonu je nutn\u00e9 restartovat Zimbra OSE pomoc\u00ed p\u0159\u00edkazu <b>zmcontrol restart<\/b>.<\/p>\n<p>Ji\u017e v t\u00e9to f\u00e1zi test od Qualys SSL Labs bude ukazovat hodnocen\u00ed A+, av\u0161ak pokud chcete d\u00e1le zv\u00fd\u0161it bezpe\u010dnost va\u0161eho serveru, m\u016f\u017eete podniknout je\u0161t\u011b n\u011bkolik krok\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Zlep\u0161en\u00ed parametr\u016f zabezpe\u010den\u00ed SSL spojen\u00ed v Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/ca77c335df2de2378b991d8a345dc9ae.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNap\u0159\u00edklad m\u016f\u017eete povolit povinn\u00e9 \u0161ifrov\u00e1n\u00ed meziprocesov\u00fdch spojen\u00ed a tak\u00e9 povolit povinn\u00e9 \u0161ifrov\u00e1n\u00ed p\u0159i p\u0159ipojen\u00ed k slu\u017eb\u00e1m Zimbra OSE. Pro zkontrolov\u00e1n\u00ed meziprocesov\u00fdch spojen\u00ed zadejte n\u00e1sleduj\u00edc\u00ed p\u0159\u00edkazy:<\/p>\n<pre><code class=\"plaintext\">zmlocalconfig -e ldap_starttls_supported=1\nzmlocalconfig -e zimbra_require_interprocess_security=1\nzmlocalconfig -e ldap_starttls_required=true<\/code><\/pre>\n<p>\nPro povolen\u00ed povinn\u00e9ho \u0161ifrov\u00e1n\u00ed je pot\u0159eba zadat:<\/p>\n<pre><code class=\"plaintext\">zmprov gs `zmhostname` zimbraReverseProxyMailMode\nzmprov ms `zmhostname` zimbraReverseProxyMailMode https\n\nzmprov gs `zmhostname` zimbraMailMode\nzmprov ms `zmhostname` zimbraMailMode https\n\nzmprov gs `zmhostname` zimbraReverseProxySSLToUpstreamEnabled\nzmprov ms `zmhostname` zimbraReverseProxySSLToUpstreamEnabled TRUE<\/code><\/pre>\n<p>D\u00edky t\u011bmto p\u0159\u00edkaz\u016fm budou \u0161ifrov\u00e1na v\u0161echna spojen\u00ed s proxy-<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/cs\/server\/dts-dusseldorf\/\"   title=\"servery\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3435\">servery<\/a> a po\u0161tovn\u00edmi servery, stejn\u011b jako bude prob\u00edhat proxy pro v\u0161echna tato spojen\u00ed.<\/p>\n<p><img decoding=\"async\" alt=\"Zlep\u0161en\u00ed parametr\u016f zabezpe\u010den\u00ed SSL spojen\u00ed v Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/e129b3fda82417414c2b284f7b4bea94.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTakto, pokud budete dodr\u017eovat na\u0161e doporu\u010den\u00ed, m\u016f\u017eete dos\u00e1hnout nejen nejvy\u0161\u0161\u00edho hodnocen\u00ed v testu na bezpe\u010dnost SSL spojen\u00ed, ale tak\u00e9 v\u00fdrazn\u011b zv\u00fd\u0161it bezpe\u010dnost cel\u00e9 infrastruktury Zimbra OSE.<\/p>\n<p>Na v\u0161echny ot\u00e1zky t\u00fdkaj\u00edc\u00ed se Zextras Suite se m\u016f\u017eete obr\u00e1tit na z\u00e1stupce spole\u010dnosti \u201eZextras\u201c Ekaterinu Triandafilidi na e-mailu katerina@zextras.com<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zimbra\/blog\/508372\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0432\u0435\u0434\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u043e\u043d\u0438 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041e\u0431\u0449\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043e\u0446\u0435\u043d\u043a\u0438 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 SSL-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0442\u0435\u0441\u0442 \u043e\u0442 Qualys SSL Labs. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u0435\u0441\u0442 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u0442\u043e \u0443\u0433\u043e\u0434\u043d\u043e, \u0434\u043b\u044f SaaS-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u0430\u0436\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0446\u0435\u043d\u043a\u0430 \u0432 \u044d\u0442\u043e\u043c \u0442\u0435\u0441\u0442\u0435 \u0431\u044b\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439. \u041e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86702,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86701","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0432\u0435\u0434\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u043e\u043d\u0438 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SSL-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0432 Zimbra Collaboration Suite Open-Source Edition | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0432\u0435\u0434\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u043e\u043d\u0438 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-28T17:42:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-28T17:42:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zlep\u0161en\u00ed parametr\u016f bezpe\u010dnosti SSL spojen\u00ed v Zimbra Collaboration Suite Open-Source Edition | ProHoster","description":"Spolehlivost \u0161ifrov\u00e1n\u00ed je jedn\u00edm z nejd\u016fle\u017eit\u011bj\u0161\u00edch ukazatel\u016f p\u0159i pou\u017eit\u00ed informa\u010dn\u00edch syst\u00e9m\u016f pro podnik\u00e1n\u00ed, proto\u017ee denn\u011b se pod\u00edlej\u00ed na p\u0159enosu obrovsk\u00e9ho mno\u017estv\u00ed d\u016fv\u011brn\u00fdch informac\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SSL-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0432 Zimbra Collaboration Suite Open-Source Edition | ProHoster","og:description":"\u041d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0432\u0435\u0434\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u043e\u043d\u0438 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-28T17:42:14+00:00","article:modified_time":"2020-06-28T17:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86701","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:09:18","updated":"2026-02-19 09:14:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/86701","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=86701"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/86701\/revisions"}],"predecessor-version":[{"id":161810,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/86701\/revisions\/161810"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/86702"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=86701"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=86701"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=86701"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}