{"id":86929,"date":"2020-07-01T19:42:02","date_gmt":"2020-07-01T17:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami"},"modified":"2020-07-01T19:42:02","modified_gmt":"2020-07-01T17:42:02","slug":"chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","title":{"rendered":"Chrome piirab ka TLS-sertifikaatide kehtivusaega 13 kuuni.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"ChromeChromiumi projekti arendajad tehti muudatus<\/a><\/noindex>, millega kehtestatakse TLS-sertifikaatide maksimaalne kehtivusaeg 398 p\u00e4eva (13 kuud).<\/p>\n

See tingimus kehtib k\u00f5igi avalike serveri sertifikaatide kohta, mis on v\u00e4lja antud p\u00e4rast 1. septembrit 2020. Kui sertifikaat ei vasta sellele reegli, siis brauser l\u00fckkab selle tagasi ja n\u00e4itab spetsiifilist viga ERR_CERT_VALIDITY_TOO_LONG<\/code>.<\/p>\n

1. septembrist 2020. aastast saadud sertifikaatide usaldus s\u00e4ilib ja on piiratud 825 p\u00e4evaga<\/a><\/noindex> (2,2 aastat), nagu praegu.
\n<\/a><\/noindex>
\nVarem kehtestas sertifikaatide maksimaalset kehtivusaega Firefoxi ja Safari arendajad. Muudatus j\u00f5ustub samuti 1. septembril.<\/a><\/noindex>.<\/p>\n

See t\u00e4hendab, et veebisaidid, mis kasutavad pika kehtivusajaga SSL\/TLS sertifikaate, mis on v\u00e4lja antud p\u00e4rast l\u00f5ppkuup\u00e4eva, toovad brauserites v\u00e4lja privaatsusvead.<\/p>\n

\"Chrome
\n
\nEsimese uue poliitika teatas Apple CA\/Brauseri foorumi koosolekul 2020. aasta veebruaris.<\/a><\/noindex>. Uue reegli rakendamisel lubas Apple seda rakendada k\u00f5igil iOS ja macOS seadmetel. See avaldab survet veebisaidi administraatoritele ja arendajatele, et nende sertifikaadid vastaksid n\u00f5uetele.<\/p>\n

Sertifikaatide kehtivusaja l\u00fchenemine on olnud Apple'i, Google'i ja teiste CA\/Brauseri osalejate seas arutelu teemaks juba mitu kuud. Selle poliitikaga on kaasas nii eelised kui ka puudused.<\/p>\n

Selle sammuga p\u00fc\u00fctakse t\u00f5sta veebisaitide turvalisust, tagades, et arendajad kasutavad uusimate kr\u00fcptograafiliste standarditega sertifikaate, ning v\u00e4hendada vana ja unustatud sertifikaatide arvu, mis v\u00f5ivad potentsiaalselt olla varastatud ja neid saab kasutada kalastamise ja pahavara r\u00fcnnakute jaoks. Kui r\u00fcndajad suudavad SSL\/TLS kr\u00fcptograafiat murda, tagavad l\u00fchiajalised sertifikaadid turvalisematele sertifikaatidele \u00fclemineku umbes aasta p\u00e4rast.<\/p>\n

Sertifikaatide kehtivusaja l\u00fchendamisel on m\u00f5ningaid puudusi. On m\u00e4rgitud, et sertifikaatide vahetamise sageduse suurendamine muudab Apple'ile ja teistele ettev\u00f5tetele veidi keerulisemaks alt webisaidi omanikud ja ettev\u00f5tted, kes peavad sertifikaate haldama ja n\u00f5uetele vastavust tagama.<\/p>\n

Teiselt poolt motiveerivad Let’s Encrypt ja teised sertifitseerimiskeskused veebimeistreid rakendama automatiseeritud protseduure sertifikaatide uuendamiseks. See v\u00e4hendab inimeste t\u00f6\u00f6koormust ja vigade riski, kuna sertifikaatide asendamise sagedus suureneb.<\/p>\n

Nagu teada, v\u00e4ljastab Let’s Encrypt tasuta HTTPS-sertifikaate, mille kehtivusaeg on 90 p\u00e4eva, ja pakub t\u00f6\u00f6riistu pikendamise automatiseerimiseks. Seega sobivad need sertifikaadid n\u00fc\u00fcd veel paremini \u00fcldisesse infrastruktuuri \u2014 kuna brauserid seavad piirangu maksimaalsele kehtivusajale.<\/p>\n

See muudatus pandi CA\/Browser Foreumi liikmete seas h\u00e4\u00e4letusele, kuid otsus ei leidnud kinnitust sertifitseerimiskeskuste erimeelsuste t\u00f5ttu.<\/a><\/noindex>.<\/p>\n

Tulemused<\/h1>\n

<\/p>\n

Sertifikaatide v\u00e4ljaandjate h\u00e4\u00e4letus<\/h4>\n

Jah (11 h\u00e4\u00e4lt)<\/b>: Amazon, Buypass, Certigna (DHIMYOTIS), certSIGN, Sectigo (endine Comodo CA), eMudhra, Kamu SM, Let’s Encrypt, Logius, PKIoverheid, SHECA, SSL.com<\/p>\n

Vastu (20)<\/b>: Camerfirma, Certum (Asseco), CFCA, Chunghwa Telecom, Comsign, D-TRUST, DarkMatter, Entrust Datacard, Firmaprofesional, GDCA, GlobalSign, GoDaddy, Izenpe, Network Solutions, OATI, SECOM, SwissSign, TWCA, TrustCor, SecureTrust (endine Trustwave)<\/p>\n

V\u00e4\u00e4ratas (2)<\/b>: HARICA, TurkTrust<\/p><\/blockquote>\n

<\/p>\n

Tarbijate sertifikaatide h\u00e4\u00e4letus<\/h4>\n

Jah (7)<\/b>: Apple, Cisco, Google, Microsoft, Mozilla, Opera, 360<\/p>\n

Vastu<\/b>: 0<\/p>\n

Olen vaikimisi<\/b>: 0<\/p><\/blockquote>\n

\nN\u00fc\u00fcd rakendavad brauserid seda poliitikat sunniviisiliselt sertifitseerimiskeskuste n\u00f5usolekuta.
\n
Allikas: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium \u0432\u043d\u0435\u0441\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 398 \u0434\u043d\u0435\u0439 (13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432). \u0423\u0441\u043b\u043e\u0432\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0430\u0432\u0438\u043b\u0443, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u0432\u0435\u0440\u0433\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u043e\u0439 ERR_CERT_VALIDITY_TOO_LONG. \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043e 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e\u0432\u0435\u0440\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86930,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86929","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Chrome piirab ka TLS-sertifikaatide kehtivust 13 kuuga | ProHoster","description":"Chromium projekti arendajad on teinud muudatuse, mis seab TLS-sertifikaatide maksimaalse kehtivusaja 398 p\u00e4eva (13 kuud). Tingimus kehtib k\u00f5ikide avalike serveri sertifikaatide kohta, mis on v\u00e4ljastatud p\u00e4rast 1. septembrit 2020. Kui sertifikaat ei vasta sellele reeglile, l\u00fckkab brauser selle kehtetuks, andes konkreetse vea ERR_CERT_VALIDITY_TOO_LONG. Sertifikaatide puhul, mis on saadud enne 1. septembrit 2020, usaldus.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Chrome \u0442\u043e\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 13 \u043c\u0435\u0441\u044f\u0446\u0430\u043c\u0438 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Chromium \u0432\u043d\u0435\u0441\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u0440\u043e\u043a \u0436\u0438\u0437\u043d\u0438 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 398 \u0434\u043d\u0435\u0439 (13 \u043c\u0435\u0441\u044f\u0446\u0435\u0432). \u0423\u0441\u043b\u043e\u0432\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u043b\u0435 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430. \u0415\u0441\u043b\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u043d\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u0430\u0432\u0438\u043b\u0443, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u0432\u0435\u0440\u0433\u0430\u0442\u044c \u0435\u0433\u043e \u043a\u0430\u043a \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439, \u0430 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c \u043e\u0448\u0438\u0431\u043a\u043e\u0439 ERR_CERT_VALIDITY_TOO_LONG. \u0414\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043e 1 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u043e\u0432\u0435\u0440\u0438\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/chrome-tozhe-ogranichivaet-vremya-zhizni-tls-sertifikatov-13-mesyaczami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-01T17:42:02+00:00","article:modified_time":"2020-07-01T17:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86929","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:02:56","updated":"2022-10-03 00:14:10"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86929","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=86929"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/86929\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/86930"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=86929"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=86929"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=86929"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}