{"id":30372,"date":"2019-10-31T21:35:13","date_gmt":"2019-10-31T18:35:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows\/"},"modified":"2019-10-31T21:35:13","modified_gmt":"2019-10-31T18:35:13","slug":"firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","title":{"rendered":"Firefox hakkas importima juuresertifikaate Windowsist","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Firefox
\nFirefoxi sertifika salvestus<\/i> <\/p>\n

Firefoxi versiooni 65 v\u00e4ljaandmisega veebruaris 2019 m\u00e4rkisid m\u00f5ned kasutajad HTTPS-iga \u00fchendatud veebisaitide k\u00fclastamisel vigu<\/a><\/noindex> nagu \"Teie \u00fchendus ei ole turvaline\" v\u00f5i \"SEC_ERROR_UNKNOWN_ISSUER\". Probleemiks olid viiruset\u00f5rjed nagu Avast, Bitdefender ja Kaspersky, mis paigaldavad kasutaja arvutisse oma juurika sertifikaate, et teha MiTM-sissetungi HTTPS-i liiklusesse. Kuna Firefoxil on oma sertifikaatide salvestus, proovivad nad ka sinna sisestuda.
\n<\/a><\/noindex>
\nVeebibrauserite arendajad on juba ammu kutsunud<\/a><\/noindex> kasutajaid \u00fcles loobuma kolmandate osapoolte viiruset\u00f5rjetest, mis takistavad brauserite ja muude programmide t\u00f6\u00f6d, kuid massiline auditoorium ei ole seni kutsetele vastanud. Kahjuks alandavad paljud viiruset\u00f5rjed, toimides l\u00e4bipaistva proksina, klientide arvutites kr\u00fcptograafilise kaitse kvaliteeti. Seet\u00f5ttu arendatakse HTTPS-i peegelduse tuvastamise t\u00f6\u00f6riistu<\/a><\/noindex>, mis m\u00e4\u00e4ravad serveri poolel MiTM-i olemasolu, nagu viiruset\u00f5rje, kliendi ja serveri vahelises kanalisse.<\/p>\n

Nii v\u00f5i teisiti, sel juhul takistasid viiruset\u00f5rjed j\u00e4lle brauseri t\u00f6\u00f6d, ja Firefoxil ei j\u00e4\u00e4nud muud \u00fcle, kui lahendada probleem oma poolt. Brauseri konfigureerimisse on lisatud seade security.enterprise_roots.enabled<\/b>. Kui see lipp aktiveeritakse, hakkab Firefox kasutama Windowsi sertifikaatide salvestust SSL-\u00fchenduste valideerimiseks. Kui kellelgi tekivad HTTPS-i veebisaitide k\u00fclastamisel \u00fclaltoodud vead, v\u00f5ib SSL-\u00fchenduste skaneerimise viiruset\u00f5rjes v\u00e4lja l\u00fclitada v\u00f5i selle lipu brauseri seadetes k\u00e4sitsi aktiveerida.<\/p>\n

Probleem arutatakse<\/a><\/noindex> Mozilla veavihikus. Arendajad otsustasid eksperimentaalsetel eesm\u00e4rkidel lipp security.enterprise_roots.enabled<\/b> vaikimisi aktiveerida, et Windowsi sertifikaatide salvestust saaks kasutada ilma kasutaja t\u00e4iendavate toiminguteta. See juhtub Firefoxi versioonis 66 Windows 8 ja Windows 10 s\u00fcsteemides, kus on installitud kolmandate osapoolte viiruset\u00f5rjed (viiruset\u00f5rje olemasolu s\u00fcsteemis v\u00f5imaldab API m\u00e4\u00e4rata alates Windows 8 versioonist).
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Firefox \u0421 \u0432\u044b\u0445\u043e\u0434\u043e\u043c Mozilla Firefox 65 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2019 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0441\u0430\u0439\u0442\u0430\u043c HTTPS \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 \u201cYour Connection is not secure\u201d or \u201cSEC_ERROR_UNKNOWN_ISSUER\u201d. \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430\u0445 \u0442\u0438\u043f\u0430 Avast, Bitdefender \u0438 Kaspersky, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043b\u044f MiTM-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441\u0432\u043e\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0410 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443 Firefox […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22375,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-30372","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firefox hakkas importima Windowsi juurika sertifikaate | ProHoster","description":"Sertifikaatide salvestus.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Firefox \u043d\u0430\u0447\u0430\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438\u0437 Windows | ProHoster","og:description":"\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:13+00:00","article:modified_time":"2019-10-31T18:35:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30372","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:55:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:30:03","updated":"2026-01-21 00:55:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30372"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30372\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/22375"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}