{"id":101490,"date":"2021-10-01T16:22:46","date_gmt":"2021-10-01T14:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust"},"modified":"2021-10-01T16:22:46","modified_gmt":"2021-10-01T14:22:46","slug":"sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","title":{"rendered":"Nyit\u00e1si probl\u00e9m\u00e1k OpenBSD, DragonFly BSD \u00e9s Electron eset\u00e9ben a IdenTrust gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny\u00e1nak elavul\u00e1sa miatt.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Az IdenTrust (DST Root CA X3) gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny \u00e9rv\u00e9nyess\u00e9gi idej\u00e9nek lej\u00e1rata, amelyet a Let's Encrypt gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny\u00e1nak keresztjegyz\u00e9s\u00e9re haszn\u00e1ltak, probl\u00e9m\u00e1kat okozott a Let's Encrypt tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9ben olyan projektek eset\u00e9ben, amelyek r\u00e9gi OpenSSL \u00e9s GnuTLS verzi\u00f3kat haszn\u00e1lnak. A probl\u00e9m\u00e1k a LibreSSL k\u00f6nyvt\u00e1rat is \u00e9rintett\u00e9k, amelynek fejleszt\u0151i nem vett\u00e9k figyelembe a gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny AddTrust (Sectigo, kor\u00e1bbi nev\u00e9n Comodo) lej\u00e1rat\u00e1val kapcsolatos kor\u00e1bbi tapasztalatokat.    <\/p>\n<p>Eml\u00e9keztet\u00fcnk arra, hogy az OpenSSL 1.0.2 \u00e9s kor\u00e1bbi verzi\u00f3iban, valamint a GnuTLS 3.6.14 \u00e9s kor\u00e1bbi kiad\u00e1saiban hiba volt, amely megakad\u00e1lyozta a keresztjegyzett tan\u00fas\u00edtv\u00e1nyok helyes feldolgoz\u00e1s\u00e1t, ha az al\u00e1\u00edr\u00e1shoz haszn\u00e1lt egyik gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny lej\u00e1rt, m\u00e9g akkor is, ha m\u00e1s \u00e9rv\u00e9nyes bizalmi l\u00e1ncok megmaradtak (a Let's Encrypt eset\u00e9ben az IdenTrust gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny\u00e1nak lej\u00e1rata megakad\u00e1lyozza az ellen\u0151rz\u00e9st, m\u00e9g akkor is, ha a rendszer rendelkezik egy saj\u00e1t Let\u2019s Encrypt gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1nnyal, amely 2030-ig \u00e9rv\u00e9nyes). A hiba l\u00e9nyege, hogy a r\u00e9gi OpenSSL \u00e9s GnuTLS verzi\u00f3k line\u00e1ris l\u00e1nck\u00e9nt \u00e9rtelmezt\u00e9k a tan\u00fas\u00edtv\u00e1nyt, m\u00edg az RFC 4158 szerint a tan\u00fas\u00edtv\u00e1ny ir\u00e1ny\u00edtott el\u00e1gaz\u00f3 ciklikus gr\u00e1fk\u00e9nt t\u00f6bb bizalmi gy\u00f6k\u00e9rrel is rendelkezhetett.     <\/p>\n<p>Alternat\u00edv megold\u00e1sk\u00e9nt aj\u00e1nlott elt\u00e1vol\u00edtani a rendszerszem\u00e9tb\u0151l (\\\/etc\\\/ca-certificates.conf \u00e9s \\\/etc\\\/ssl\\\/certs) a \"DST Root CA X3\" tan\u00fas\u00edtv\u00e1nyt, majd futtassa a \"update-ca-certificates -f -v\" parancsot. CentOS \u00e9s RHEL eset\u00e9n a \"DST Root CA X3\" tan\u00fas\u00edtv\u00e1nyt letilthatja: trust dump \u2014filter \"pkcs11:id=\" | openssl x509 | sudo tee \\\/etc\\\/pki\\\/ca-trust\\\/source\\\/blacklist\\\/DST-Root-CA-X3.pem sudo update-ca-trust extract      <\/ul>\n<p>N\u00e9h\u00e1ny a gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny IdenTrust hat\u00e1ly\u00e1nak megsz\u0171n\u00e9s\u00e9vel kapcsolatos probl\u00e9m\u00e1k k\u00f6z\u00fcl, amelyeket \u00e9szleltek:  <\/p>\n<ul>\n<li class=\"l\"> Az OpenBSD-ben le\u00e1llt a syspatch seg\u00e9dprogram m\u0171k\u00f6d\u00e9se, amely a rendszeren bel\u00fcli bin\u00e1ris friss\u00edt\u00e9sek telep\u00edt\u00e9s\u00e9re szolg\u00e1l. Az OpenBSD projekt s\u00fcrg\u0151ss\u00e9ggel kiadta a 6.8 \u00e9s 6.9 \u00e1gakhoz sz\u00fcks\u00e9ges jav\u00edt\u00e1sokat, amelyek megsz\u00fcntetik a LibreSSL \u00e1ltal okozott probl\u00e9m\u00e1kat a kereszt\u00fcl al\u00e1\u00edrt tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9ben, mivel az egyik gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny a bizalmi l\u00e1ncban lej\u00e1rt. A probl\u00e9ma megker\u00fcl\u00e9s\u00e9re javasolt, hogy a \\\/etc\\\/installurl f\u00e1jlban v\u00e1ltson HTTPS-r\u0151l HTTP-ra (ez nem vesz\u00e9lyezteti a biztons\u00e1got, mivel a friss\u00edt\u00e9seket digit\u00e1lis al\u00e1\u00edr\u00e1s alapj\u00e1n tov\u00e1bbi ellen\u0151rz\u00e9snek vetik al\u00e1) vagy v\u00e1lassza az alternat\u00edv t\u00fck\u00f6rszervert (ftp.usa.openbsd.org, ftp.hostserver.de, cdn.openbsd.org). Ezen k\u00edv\u00fcl elt\u00e1vol\u00edthatja a lej\u00e1rt gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1nyt, a DST Root CA X3-t a \\\/etc\\\/ssl\\\/cert.pem f\u00e1jlb\u00f3l.\n<li class=\"l\"> A DragonFly BSD-ben hasonl\u00f3 probl\u00e9m\u00e1k mer\u00fclnek fel a DPorts haszn\u00e1lata sor\u00e1n. A pkg csomagkezel\u0151 ind\u00edt\u00e1sakor tan\u00fas\u00edtv\u00e1nyellen\u0151rz\u00e9si hiba l\u00e9p fel. A jav\u00edt\u00e1s ma ker\u00fclt bevezet\u00e9sre a master, DragonFly_RELEASE_6_0 \u00e9s DragonFly_RELEASE_5_8 \u00e1gakba. A probl\u00e9ma megker\u00fcl\u00e9s\u00e9re elt\u00e1vol\u00edthatja a DST Root CA X3 tan\u00fas\u00edtv\u00e1nyt.\n<li class=\"l\"> A Let's Encrypt tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9si folyamata megszakadt az Electron alap\u00fa alkalmaz\u00e1sokban. A probl\u00e9ma orvosolva lett a 12.2.1, 13.5.1, 14.1.0 \u00e9s 15.1.0 verzi\u00f3k friss\u00edt\u00e9seivel.\n<li class=\"l\"> N\u00e9h\u00e1ny disztrib\u00faci\u00f3ban probl\u00e9m\u00e1k l\u00e9ptek fel a csomagok rep\u00f3inak el\u00e9r\u00e9s\u00e9vel a r\u00e9gi GnuTLS k\u00f6nyvt\u00e1rhoz kapcsol\u00f3d\u00f3 APT csomagkezel\u0151 haszn\u00e1lata sor\u00e1n. A probl\u00e9ma a Debian 9-et \u00e9rintette, amelyben a hib\u00e1s GnuTLS csomagot haszn\u00e1lt\u00e1k, ami a felhaszn\u00e1l\u00f3k sz\u00e1m\u00e1ra probl\u00e9m\u00e1kat okozott a deb.debian.org el\u00e9rhet\u0151s\u00e9g\u00e9vel, akik nem telep\u00edtett\u00e9k idej\u00e9ben a friss\u00edt\u00e9seket (a gnutls28-3.5.8-5+deb9u6 jav\u00edt\u00e1st szeptember 17-\u00e9n aj\u00e1nlott\u00e1k). A probl\u00e9ma megker\u00fcl\u00e9s\u00e9re javasolt elt\u00e1vol\u00edtani a DST_Root_CA_X3.crt-t a \\\/etc\\\/ca-certificates.conf f\u00e1jlb\u00f3l.\n<li class=\"l\"> Megszakadt acme-client m\u0171k\u00f6d\u00e9se az OPNsense t\u0171zfal disztrib\u00faci\u00f3j\u00e1ban, a probl\u00e9m\u00e1r\u00f3l el\u0151zetesen t\u00e1j\u00e9koztattak, de a fejleszt\u0151k nem tudt\u00e1k id\u0151ben kiadni a jav\u00edt\u00e1st.\n<li class=\"l\"> A probl\u00e9ma az OpenSSL 1.0.2k csomagot \u00e9rintette a RHEL\/CentOS 7 eset\u00e9ben, de egy h\u00e9ttel ezel\u0151tt friss\u00edt\u00e9st adtak ki a ca-certificates-2021.2.50-72.el7_9.noarch csomaghoz RHEL 7 \u00e9s CentOS 7 rendszerekhez, amelyb\u0151l elt\u00e1vol\u00edtott\u00e1k az IdenTrust tan\u00fas\u00edtv\u00e1nyt, teh\u00e1t a probl\u00e9ma megjelen\u00e9s\u00e9t el\u0151re blokkolt\u00e1k. Hasonl\u00f3 friss\u00edt\u00e9st adtak ki egy h\u00e9ttel ezel\u0151tt az Ubuntu 16.04, Ubuntu 14.04, Ubuntu 21.04, Ubuntu 20.04 \u00e9s Ubuntu 18.04 rendszerekhez is. Mivel a friss\u00edt\u00e9sek id\u0151ben megt\u00f6rt\u00e9ntek, a Let&#8217;s Encrypt tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9vel kapcsolatos probl\u00e9ma csak a r\u00e9gi RHEL\/CentOS \u00e9s Ubuntu verzi\u00f3k felhaszn\u00e1l\u00f3it \u00e9rintette, akik nem telep\u00edtettek rendszeresen friss\u00edt\u00e9seket.\n<li class=\"l\"> Megs\u00e9r\u00fclt a tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9si folyamata a grpc-ben.\n<li class=\"l\"> Hiba t\u00f6rt\u00e9nt a Cloudflare Pages platform \u00f6ssze\u00e1ll\u00edt\u00e1sa sor\u00e1n.\n<li class=\"l\"> Probl\u00e9m\u00e1k az Amazon Web Services (AWS) szolg\u00e1ltat\u00e1saiban.\n<li class=\"l\"> Probl\u00e9m\u00e1k a DigitalOcean felhaszn\u00e1l\u00f3i adatb\u00e1zis-kapcsolat\u00e1val.\n<li class=\"l\"> Hiba l\u00e9pett fel a Netlify felh\u0151platform m\u0171k\u00f6d\u00e9s\u00e9ben.\n<li class=\"l\">  Probl\u00e9m\u00e1k a Xero szolg\u00e1ltat\u00e1sok el\u00e9r\u00e9s\u00e9ben.\n<li class=\"l\"> Hiba t\u00f6rt\u00e9nt a TLS-kapcsolat l\u00e9trehoz\u00e1sakor a MailGun Web API-j\u00e1hoz.\n<li class=\"l\"> Hib\u00e1k tapasztalhat\u00f3k a macOS \u00e9s iOS (11, 13, 14) verzi\u00f3iban, amelyeket elm\u00e9letileg a probl\u00e9ma nem \u00e9rintett volna.\n<li class=\"l\"> Hiba a Catchpoint szolg\u00e1ltat\u00e1saiban.\n<li class=\"l\"> Tan\u00fas\u00edtv\u00e1ny-ellen\u0151rz\u00e9si hiba a PostMan API el\u00e9r\u00e9s\u00e9n\u00e9l.\n<li class=\"l\"> Hiba t\u00f6rt\u00e9nt a Guardian Firewall m\u0171k\u00f6d\u00e9s\u00e9ben.\n<li class=\"l\"> Hiba a monday.com t\u00e1mogat\u00e1si oldal\u00e1n.\n<li class=\"l\"> Hiba a Cerb platform m\u0171k\u00f6d\u00e9s\u00e9ben.\n<li class=\"l\"> Hiba az uptime ellen\u0151rz\u00e9s\u00e9n\u00e9l a Google Cloud Monitoring-ban.\n<li class=\"l\"> Probl\u00e9ma a tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9vel a Cisco Umbrella Secure Web Gateway-ben.\n<li class=\"l\"> Probl\u00e9m\u00e1k a Bluecoat \u00e9s Palo Alto proxy kapcsol\u00f3d\u00e1ssal.\n<li class=\"l\"> Az OVHcloud-n\u00e1l probl\u00e9m\u00e1k l\u00e9ptek fel az OpenStack API-hoz val\u00f3 kapcsol\u00f3d\u00e1skor.\n<li class=\"l\"> Probl\u00e9m\u00e1k a Shopify jelent\u00e9sek gener\u00e1l\u00e1s\u00e1val.\n<li class=\"l\"> Probl\u00e9m\u00e1k tapasztalhat\u00f3k a Heroku API h\u00edv\u00e1sakor.\n<li class=\"l\"> Hiba a Ledger Live Manager m\u0171k\u00f6d\u00e9s\u00e9ben.\n<li class=\"l\"> Tan\u00fas\u00edtv\u00e1ny-ellen\u0151rz\u00e9si hiba a Facebook alkalmaz\u00e1sfejleszt\u0151i eszk\u00f6z\u00f6kben.\n<li class=\"l\"> Probl\u00e9m\u00e1k a Sophos SG UTM-ben.\n<li class=\"l\"> Probl\u00e9m\u00e1k a cPanel tan\u00fas\u00edtv\u00e1nyainak ellen\u0151rz\u00e9s\u00e9vel.  <\/ul>\n<p>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55897\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#8217;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&#8217;s Encrypt \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSL \u0438 GnuTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 LibreSSL, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0443\u0447\u043b\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u043e\u043f\u044b\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441\u043e \u0441\u0431\u043e\u044f\u043c\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u043c\u0438 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101490","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#039;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0431\u043e\u0438 \u0432 OpenBSD, DragonFly BSD \u0438 Electron \u0438\u0437-\u0437\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 IdenTrust | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#039;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-10-01T14:22:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-10-01T14:22:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hib\u00e1k az OpenBSD, DragonFly BSD \u00e9s Electron rendszerekben az IdenTrust gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny elavul\u00e1sa miatt | ProHoster","description":"Az IdenTrust (DST Root CA X3) v\u00e1llalat gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny\u00e1nak \u00e9rv\u00e9nyess\u00e9gi ideje lej\u00e1rt, amelyet a Let's Encrypt gy\u00f6k\u00e9rtan\u00fas\u00edtv\u00e1ny\u00e1nak keresztny\u00fajt\u00e1s\u00e1hoz haszn\u00e1ltak, probl\u00e9m\u00e1kat okozva az ellen\u0151rz\u00e9s sor\u00e1n.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0431\u043e\u0438 \u0432 OpenBSD, DragonFly BSD \u0438 Electron \u0438\u0437-\u0437\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 IdenTrust | ProHoster","og:description":"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let's Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-01T14:22:46+00:00","article:modified_time":"2021-10-01T14:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-01 14:46:38","updated":"2022-09-27 21:37:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/101490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=101490"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/101490\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=101490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=101490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=101490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}