An gano dalilin rashin ruwa tare da sabar ACME ban da LetsEncrypt

Sebastian Krause ayyana tushen m rashin jituwa tare da sabis Tazarar rubutun bushewa, An yi amfani da shi don sarrafa sarrafa karɓar takaddun shaida na TLS ta amfani da ka'idar ACME. Dukansu abokin ciniki na tunani da uacme suna aiki tare da Bypass, amma ba bushewa ba (mafi daidai, kuma yayi aiki tare da wasu hanyoyin aiki, amma na musamman a yanayin dns-1).

Dalilin ya zama maras muhimmanci: maimakon yin la'akari da amsa a cikin tsarin JSON na gaske, marubucin rashin ruwa ya yi amfani da fasalin tsarawa ta takamaiman fitowar JSON daga sabis ɗin Mu Encrypt kuma ya rarraba ta ta amfani da magana ta yau da kullun. Amma Bypass ba a tsara shi da kyau ba, amma an rage JSON, kuma an yi amfani da shi magana akai-akai bai yi aiki ba. Wannan hanyar ba ta ware matsaloli tare da LetsEncrypt idan wannan sabis ɗin ya canza tsarin bayarwa a nan gaba ba tare da faɗakarwa ba, yayin da ya kasance gaba ɗaya a cikin tsarin ƙa'idar hukuma.

Lokacin tattaunawa akan matsalar, an ba da shawarar yin amfani da jigon JSON na waje kamar json_pp ko jq (ƙara 'jq -r ". izini | .[]"' zuwa bututu don daidaitawa daidai).
Rashin hasara na wannan tsarin shine dilution na ra'ayin yin amfani da ƙananan hanyoyi masu sauƙi da sauƙi, da kuma matsaloli tare da kurakurai.

Marubucin aikin rashin ruwa (aikin ya kasance kwanan nan an sayar duka Apilayer GmbH) amince, cewa ƙaddamarwa JSON babbar matsala ce, amma bai yi la'akari da ƙara masu nazarin waje ba kyakkyawan ra'ayi, tun da ɗayan mahimman fa'idodin rubutun shine rashin ɗaure ga dogaro na waje. A halin yanzu yana cikin aiki, amma yana fatan ya ba da hankalinsa don magance matsalar nan da 'yan kwanaki masu zuwa. Tsare-tsaren sun haɗa da sake yin aikin jigon JSON ko haɗa abin da aka shirya a cikin harshen harsashi - JSON.sh.

source: budenet.ru