{"id":87101,"date":"2020-07-03T19:42:00","date_gmt":"2020-07-03T17:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt"},"modified":"2020-07-03T19:42:00","modified_gmt":"2020-07-03T17:42:00","slug":"najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","title":{"rendered":"Une raison des probl\u00e8mes de dehydrated avec les serveurs ACME, autres que LetsEncrypt, a \u00e9t\u00e9 trouv\u00e9e.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sebastian Krause a d\u00e9fini<\/a><\/noindex> la source d'une \u00e9trange incompatibilit\u00e9 avec le service Bypass<\/a><\/noindex> du script dehydrated<\/a><\/noindex>, utilis\u00e9 pour automatiser l'obtention des certificats TLS via le protocole ACME. Avec Bypass, le client de r\u00e9f\u00e9rence et uacme fonctionnent, mais pas dehydrated (en fait, il a \u00e9galement fonctionn\u00e9 avec quelques man\u0153uvres de contournement, mais uniquement en mode dns-1).<\/p>\n

La raison s'est av\u00e9r\u00e9e banale : au lieu d'analyser r\u00e9ellement la r\u00e9ponse au format JSON, l'auteur dehydrated a utilis\u00e9 une particularit\u00e9 de formatage de la sortie JSON sp\u00e9cifique du service Let\u2019s Encrypt et a effectu\u00e9 l'analyse \u00e0 l'aide d'expressions r\u00e9guli\u00e8res. Cependant, Bypass renvoie un JSON non format\u00e9, mais minifi\u00e9, et celui utilis\u00e9 r\u00e9guli\u00e8re<\/a><\/noindex> n\u2019a pas fonctionn\u00e9. L'approche indiqu\u00e9e ne pr\u00e9vient pas les probl\u00e8mes avec LetsEncrypt si ce service change son format de sortie \u00e0 l'avenir sans pr\u00e9avis, tout en restant dans le cadre du protocole officiel.<\/p>\n

Lors de la discussion du probl\u00e8me, il a \u00e9t\u00e9 propos\u00e9 d'utiliser un parser JSON externe, tel que json_pp<\/a><\/noindex> ou jq<\/a><\/noindex> (ajouter dans le pipe 'jq -r \u00ab.authorizations | .[]\u00bb' pour un bon parsing).
\nL'inconv\u00e9nient de cette approche est d'effacer l'id\u00e9e de se contenter d'outils minimaux et facilement v\u00e9rifiables, ainsi que des probl\u00e8mes de gestion des erreurs.<\/p>\n

L'auteur du projet dehydrated (le projet a r\u00e9cemment \u00e9t\u00e9 vendu<\/a><\/noindex> \u00e0 la soci\u00e9t\u00e9 Apilayer GmbH) a convenu<\/a><\/noindex>, ce qui rend l'analyse JSON un gros probl\u00e8me, mais il ne pense pas que l'ajout de parseurs externes soit une bonne id\u00e9e, car l'un des principaux atouts du script est l'absence de d\u00e9pendances externes. En ce moment, il est occup\u00e9, mais esp\u00e8re pouvoir consacrer du temps \u00e0 la solution du probl\u00e8me dans les prochains jours. Il envisage la refonte du parser JSON ou l'int\u00e9gration d'un parser pr\u00eat \u00e0 l'emploi en langage shell \u2014 JSON.sh<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Sebastian Krause \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0439 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c Bypass \u0441\u043a\u0440\u0438\u043f\u0442\u0430 dehydrated, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 ACME. \u0421 Bypass \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442, \u0438 uacme, \u043d\u043e \u043d\u0435 dehydrated (\u0442\u043e\u0447\u043d\u0435\u0435, \u043e\u043d \u0442\u043e\u0436\u0435 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u043c\u0430\u043d\u0451\u0432\u0440\u0430\u043c\u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b, \u043d\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 dns-1). \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430: \u0432\u043c\u0435\u0441\u0442\u043e \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON \u043f\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-87101","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Raison des probl\u00e8mes de dehydrated avec les serveurs ACME autres que LetsEncrypt trouv\u00e9e | ProHoster","description":"Sebastian Krause a d\u00e9fini la source d'une \u00e9trange incompatibilit\u00e9 avec le service","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0439\u0434\u0435\u043d\u0430 \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c dehydrated \u0441 ACME-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043e\u0442 LetsEncrypt | ProHoster","og:description":"Sebastian Krause \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0439 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-03T17:42:00+00:00","article:modified_time":"2020-07-03T17:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87101","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:58:52","updated":"2022-10-02 21:29:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/87101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=87101"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/87101\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=87101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=87101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=87101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}