{"id":101490,"date":"2021-10-01T16:22:46","date_gmt":"2021-10-01T14:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust"},"modified":"2021-10-01T16:22:46","modified_gmt":"2021-10-01T14:22:46","slug":"sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","title":{"rendered":"Probleemid OpenBSD, DragonFly BSD ja Electroniga seoses IdenTrusti juuresertifikaadi aegumisega","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>IdenTrust'i (DST Root CA X3) juuresertifikaadi aegumine, mis oli kasutusel Let's Encrypt juuresertifikaadi ristsignimise jaoks, p\u00f5hjustas probleeme Let's Encrypt sertifikaatide kontrollimisel projektides, mis kasutavad vanu OpenSSL ja GnuTLS versioone. Probleemid puudutasid ka LibreSSL'i teeki, mille arendajad ei arvestanud varasemaid kogemusi, millega seoses tekkisid t\u00f5rked p\u00e4rast Sectigo (Comodo) juuresertifikaadi AddTrust aegumist.    <\/p>\n<p>Tuletame meelde, et OpenSSL'i v\u00e4ljaannetes kuni 1.0.2 haruni ja GnuTLS versioonis kuni 3.6.14 oli viga, mis takistas ristsignitud sertifikaatide korrektset t\u00f6\u00f6tlemist, kui \u00fche juuresertifikaadi aegumine, mis osales allkirjastamises, juhtus isegi siis, kui teised kehtivad usaldusketid p\u00fcsisid (Let's Encrypti puhul ei v\u00f5imalda IdenTrust'i juuresertifikaadi aegumine kontrollimist, isegi kui s\u00fcsteemis on Let's Encrypti enda juuresertifikaadi tugi, mis kehtib kuni 2030. aastani). Probleemi yda on see, et vanad versioonid OpenSSL'ist ja GnuTLS'ist k\u00e4sitlesid sertifikaati lineaarse keti n\u00e4ol, samas kui RFC 4158 kohaselt v\u00f5ib sertifikaat esindada suunatud jaotatud ts\u00fcklilist graafikut, kus tuleb arvesse v\u00f5tta mitmeid usaldusankrute.     <\/p>\n<p>\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0431\u043e\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 (\/etc\/ca-certificates.conf \u0438 \/etc\/ssl\/certs) \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 &#171;DST Root CA X3&#187;, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 &#171;update-ca-certificates -f -v&#187;). \u0412 CentOS \u0438 RHEL \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 &#171;DST Root CA X3&#187; \u0432 \u0447\u0451\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a:         trust dump &#8212;filter &#171;pkcs11:id=%c4%a7%b1%a4%7b%2c%71%fa%db%e1%4b%90%75%ff%c4%15%60%85%89%10&#187; | openssl x509 | sudo tee \/etc\/pki\/ca-trust\/source\/blacklist\/DST-Root-CA-X3.pem     sudo update-ca-trust extract      <\/ul>\n<p>M\u00f5ned n\u00e4idetest probleemidest, mis tekkisid p\u00e4rast IdenTrusti juursertifikaadi kehtetuks tunnistamist:  <\/p>\n<ul>\n<li class=\"l\"> OpenBSD-s l\u00f5petas syspatchi utiliit, mida kasutatakse s\u00fcsteemi binaarsete v\u00e4rskenduste paigaldamiseks, t\u00f6\u00f6. OpenBSD projekt vabastas t\u00e4na erakorralised plaastrid harudele 6.8 ja 6.9, mis lahendavad LibreSSL-is rist-allkirjastatud sertifikaatide kontrollimise probleemid, mille juursertifikaadid on aegunud. Probleemi ajutiseks lahenduseks soovitatakse \/etc\/installurl-is vahetada HTTPS HTTP-ks (see ei ohusta turvalisust, kuna v\u00e4rskendusi kontrollitakse digitaalse allkirjaga) v\u00f5i valida alternatiivne peegeldus (ftp.usa.openbsd.org, ftp.hostserver.de, cdn.openbsd.org). Samuti saab eemaldada aegunud juursertifikaadi DST Root CA X3 failist \/etc\/ssl\/cert.pem.\n<li class=\"l\"> DragonFly BSD-s esinevad sarnased probleemid DPortsiga t\u00f6\u00f6tamisel. Paki halduri pkg k\u00e4ivitamisel ilmneb sertifikaadi kontrollimise viga. T\u00e4na lisati parandused harudele master, DragonFly_RELEASE_6_0 ja DragonFly_RELEASE_5_8. Ajutise lahendusena saab eemaldada sertifikaadi DST Root CA X3.\n<li class=\"l\"> Sertifikaatide kontrollimine Let's Encrypt'is on katkenud Electroni platvormi rakendustes. Probleem on lahendatud v\u00e4rskendustes 12.2.1, 13.5.1, 14.1.0, 15.1.0.\n<li class=\"l\"> M\u00f5nedes distributsioonides esinevad paketihalduri APT kasutamisel probleemid pakirepositorite juurde p\u00e4\u00e4semisega, mis on seotud vanade GnuTLS teekide versioonidega. Probleemiga seisis silmitsi Debian 9, kus kasutati parandamata GnuTLS paketti, mis p\u00f5hjustas probleemid deb.debian.org-i juurdep\u00e4\u00e4suga kasutajatel, kes ei olnud ajakohastusi \u00f5igel ajal installinud (parandust gnutls28-3.5.8-5+deb9u6 pakuti v\u00e4lja 17. septembril). Probleemi ajutiseks lahendamiseks soovitatakse eemaldada DST_Root_CA_X3.crt failist \/etc\/ca-certificates.conf.\n<li class=\"l\"> OPNsense-i tulem\u00fc\u00fcri distributsioonis on acme-clienti toimimine katkenud, probleemist teavitati eelnevalt, kuid arendajad ei j\u00f5udnud \u00f5igeaegselt plaastrit v\u00e4lja lasta.\n<li class=\"l\"> Probleem puudutas OpenSSL 1.0.2k paketti RHEL\/CentOS 7-s, kuid n\u00e4dal tagasi anti v\u00e4lja RHEL 7 ja CentOS 7 jaoks v\u00e4rskendus paketi ca-certificates-2021.2.50-72.el7_9.noarch, milles eemaldati IdenTrust'i sertifikaat, st probleemi ilmnemine oli varakult blokeeritud. Samuti avaldati n\u00e4dal tagasi sarnane v\u00e4rskendus Ubuntu 16.04, Ubuntu 14.04, Ubuntu 21.04, Ubuntu 20.04 ja Ubuntu 18.04 jaoks. Kuna v\u00e4rskendused ilmusid ette, m\u00f5jutas Let's Encrypt sertifikaatide kontrollimise probleem ainult vanade RHEL\/CentOS ja Ubuntu versioonide kasutajaid, kes ei paigaldanud v\u00e4rskendusi regulaarselt.\n<li class=\"l\"> Sertifikaatide kontrollimise protsess on eba\u00f5nnestunud gRPC-s.\n<li class=\"l\"> Cloudflare Pages platvormi kokkuleppimise t\u00f5rge.\n<li class=\"l\"> Probleemid Amazon Web Services (AWS) teenustes.\n<li class=\"l\"> Kasutajatel DigitalOceanis on probleeme andmebaasi \u00fchendusega.\n<li class=\"l\"> Netlify pilveteenuse t\u00f6\u00f6 eba\u00f5nnestumine.\n<li class=\"l\">  Probleemid Xero teenuste juurde p\u00e4\u00e4semisega.\n<li class=\"l\"> Probleem TLS-\u00fchenduse loomisel Web API teenusele MailGun.\n<li class=\"l\"> macOS ja iOS (11, 13, 14) versioonides esinevad vead, mis teoreetiliselt ei peaks probleemi m\u00f5jutama.\n<li class=\"l\"> Catchpointi teenustes esinenud t\u00f5rge.\n<li class=\"l\"> T\u00f5rge sertifikaatide kontrollimisel API PostMan'i juures.\n<li class=\"l\"> Guardian Firewall'i t\u00f6\u00f6 t\u00f5rge.\n<li class=\"l\"> monday.com tugilehe t\u00f6\u00f6 katkemine.\n<li class=\"l\"> Cerb platvormi t\u00f5rge.\n<li class=\"l\"> Uptime'i kontrollimise t\u00f5rge Google Cloud Monitoring'is.\n<li class=\"l\"> Sertifikaatide kontrolliga seotud probleem Cisco Umbrella Secure Web Gateway'is.\n<li class=\"l\"> Probleemid Bluecoat ja Palo Alto proksi\u00fchendusega.\n<li class=\"l\"> OVHcloud'is esines probleeme OpenStack API'le \u00fchendusega.\n<li class=\"l\"> Probleemid raportite genereerimisega Shopify's.\n<li class=\"l\"> Probleemid API Heroku'ga suhtlemisel.\n<li class=\"l\"> Ledger Live Manager'i t\u00f6\u00f6 t\u00f5rge.\n<li class=\"l\"> Sertifikaadi kontrollimise t\u00f5rge Facebooki rakenduste arendajate t\u00f6\u00f6riistades.\n<li class=\"l\"> Probleemid Sophos SG UTM-is.\n<li class=\"l\"> Sertifikaatide kontrollimise probleemid cPanel'is.  <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55897\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#8217;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&#8217;s Encrypt \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSL \u0438 GnuTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 LibreSSL, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0443\u0447\u043b\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u043e\u043f\u044b\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441\u043e \u0441\u0431\u043e\u044f\u043c\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u043c\u0438 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101490","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#039;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0431\u043e\u0438 \u0432 OpenBSD, DragonFly BSD \u0438 Electron \u0438\u0437-\u0437\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 IdenTrust | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#039;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-10-01T14:22:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-10-01T14:22:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u00f5rked OpenBSD, DragonFly BSD ja Electron'is seoses IdenTrust'i juurikaserveri sertifikaadi aegumisega | ProHoster","description":"IdenTrusti (DST Root CA X3) juursertifikaadi kehtivuse l\u00f5petamine, mida kasutatakse Let's Encrypti juursertifikaadi ristallkirjastamiseks, on p\u00f5hjustanud t\u00f5endamisprobleeme.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0431\u043e\u0438 \u0432 OpenBSD, DragonFly BSD \u0438 Electron \u0438\u0437-\u0437\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 IdenTrust | ProHoster","og:description":"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let's Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-01T14:22:46+00:00","article:modified_time":"2021-10-01T14:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-01 14:46:38","updated":"2022-09-27 21:37:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=101490"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/101490\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=101490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=101490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=101490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}