{"id":30372,"date":"2019-10-31T21:35:13","date_gmt":"2019-10-31T18:35:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows\/"},"modified":"2019-10-31T21:35:13","modified_gmt":"2019-10-31T18:35:13","slug":"firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","title":{"rendered":"Firefox on hakanud importima Windowsist juurtunnistusi.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Firefox
\nFirefoxi sertifika salvestus<\/i> <\/p>\n

Mozilla Firefox 65 v\u00e4ljalaskmisega veebruaris 2019 hakkasid m\u00f5ned kasutajad HTTPS-lehtedele \u00fchendust luues t\u00e4heldama vigu<\/a><\/noindex> t\u00fc\u00fcpi \u201cTeie \u00fchendus ei ole turvaline\u201d v\u00f5i \u201cSEC_ERROR_UNKNOWN_ISSUER\u201d. P\u00f5hjus osutus sellistes viiruset\u00f5rjedes nagu Avast, Bitdefender ja Kaspersky, mis installivad oma juuresertifikaadid kasutaja arvutisse, et MiTM-sissetungimist HTTPS liikluses teostada. Kuna Firefoxil on oma sertifikaatide salvestus, \u00fcritavad nad ka sellesse siseneda.
\n<\/a><\/noindex>
\nBrahvli arendajad on pikka aega kutsunud<\/a><\/noindex> kasutajaid loobuma kolmandate osapoolte viiruset\u00f5rjemoodulitest, mis takistavad brauserite ja muude programmide t\u00f6\u00f6d, kuid massiline publik ei kuula veel nende kutseid. Kahjuks t\u00f6\u00f6tades l\u00e4bipaistva vahendina, paljud viiruset\u00f5rjed v\u00e4hendavad kr\u00fcptograafilise kaitse kvaliteeti kliendi arvutites. Selle eesm\u00e4rgi saavutamiseks arendatakse HTTPS-peatuse tuvastamise t\u00f6\u00f6riistu<\/a><\/noindex>, mis serveripoolselt m\u00e4\u00e4ravad MiTM-i olemasolu, nagu viiruset\u00f5rje, kliendi ja serveri vahelise kanali sees.<\/p>\n

T\u00f5epoolest, antud juhul takistasid viiruset\u00f5rjed taas brauseri t\u00f6\u00f6d ning Firefoxil ei j\u00e4\u00e4nud muud v\u00f5imalust, kui probleemi ise lahendada. Brauseri seadetes on olemas valik security.enterprise_roots.enabled<\/b>. Kui see lipp aktiveerida, hakkab Firefox kasutama Windowsi sertifikaatide salvestust SSL-\u00fchenduste valideerimiseks. Kui HTTPS-i veebilehtede k\u00fclastamisel tekivad \u00fclaltoodud t\u00f5rked, saab SSL-\u00fchenduste skaneerimise viiruset\u00f5rjes v\u00e4lja l\u00fclitada v\u00f5i selle lipu manuaalselt brauseri seadetes sisse l\u00fclitada.<\/p>\n

Probleem arutelu all<\/a><\/noindex> Mozilla veaparanduste j\u00e4lgimisse. Arendajad otsustasid eksperimendi m\u00f5ttes aktiveerida lipu security.enterprise_roots.enabled<\/b> vaikimisi, et Windowsi sertifikaatide salvestust saaks kasutada ilma kasutaja t\u00e4iendavate toiminguteta. See juhtub Firefoxi versioonis 66 Windows 8 ja Windows 10 s\u00fcsteemides, kus on installitud kolmandate osapoolte viiruset\u00f5rjed (antud API v\u00f5imaldab tuvastada viiruset\u00f5rje olemasolu s\u00fcsteemis alates Windows 8).
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Firefox \u0421 \u0432\u044b\u0445\u043e\u0434\u043e\u043c Mozilla Firefox 65 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2019 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0441\u0430\u0439\u0442\u0430\u043c HTTPS \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 \u201cYour Connection is not secure\u201d or \u201cSEC_ERROR_UNKNOWN_ISSUER\u201d. \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430\u0445 \u0442\u0438\u043f\u0430 Avast, Bitdefender \u0438 Kaspersky, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043b\u044f MiTM-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441\u0432\u043e\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0410 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443 Firefox […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22375,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-30372","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Firefox alustas juure sertifikaatide importimist Windowsist | ProHoster","description":"Firefoxi sertifika salvestamine. Mozilla Firefox 65 v\u00e4ljaandmisega veebruarist 2019 on m\u00f5ned kasutajad m\u00e4rganud vigu, nagu \"Teie \u00fchendus ei ole turvaline\" v\u00f5i \"SEC_ERROR_UNKNOWN_ISSUER\". Probleemi p\u00f5hjuseks on viiruset\u00f5rjeprogrammid, nagu Avast, Bitdefender ja Kaspersky, mis installivad oma juure sertifikaadid arvutisse, et MiTM-i sekkuda HTTPS-i liiklusesse. Ja kuna Firefoxi...","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Firefox \u043d\u0430\u0447\u0430\u043b \u0438\u043c\u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0438\u0437 Windows | ProHoster","og:description":"\u0425\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Firefox \u0421 \u0432\u044b\u0445\u043e\u0434\u043e\u043c Mozilla Firefox 65 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 2019 \u0433\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u0441\u0430\u0439\u0442\u0430\u043c HTTPS \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u0438 \u0442\u0438\u043f\u0430 \u201cYour Connection is not secure\u201d or \u201cSEC_ERROR_UNKNOWN_ISSUER\u201d. \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u0430\u0445 \u0442\u0438\u043f\u0430 Avast, Bitdefender \u0438 Kaspersky, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043b\u044f MiTM-\u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0432 HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044e\u0442 \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441\u0432\u043e\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b. \u0410 \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443 Firefox","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/firefox-nachal-importirovat-kornevye-sertifikaty-iz-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:35:13+00:00","article:modified_time":"2019-10-31T18:35:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30372","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 00:55:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 17:30:03","updated":"2026-01-21 00:55:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30372","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30372"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30372\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/22375"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30372"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30372"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30372"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}