A Let’s Encrypt k\u00f6z\u00f6ss\u00e9gi ir\u00e1ny\u00edt\u00e1s\u00fa, nonprofit tan\u00fas\u00edtv\u00e1nykibocs\u00e1t\u00f3 k\u00f6zpont k\u00f6zel k\u00e9tmilli\u00f3 TLS-tan\u00fas\u00edtv\u00e1ny visszavon\u00e1s\u00e1t jelentette be, ami a k\u00f6zpont \u00f6sszes akt\u00edv tan\u00fas\u00edtv\u00e1ny\u00e1nak k\u00f6r\u00fclbel\u00fcl 1%-\u00e1t jelenti. A tan\u00fas\u00edtv\u00e1nyok visszavon\u00e1s\u00e1t a Let’s Encrypt k\u00f3dj\u00e1ban felfedezett, a TLS-ALPN-01 (RFC 7301, Application-Layer Protocol Negotiation) kiterjeszt\u00e9s v\u00e9grehajt\u00e1s\u00e1ra vonatkoz\u00f3 specifik\u00e1ci\u00f3s k\u00f6vetelm\u00e9nyeknek val\u00f3 megfelel\u00e9s hi\u00e1nya indokolta. Ez a probl\u00e9ma az ALPN TLS-kiterjeszt\u00e9s haszn\u00e1lat\u00e1val, amely az HTTP\/2-ben van jelen, kapcsolatok egyeztet\u00e9se sor\u00e1n elv\u00e9gzett bizonyos ellen\u0151rz\u00e9sek hi\u00e1ny\u00e1val \u00e1llt \u00f6sszef\u00fcgg\u00e9sben. Az incidens r\u00e9szletes inform\u00e1ci\u00f3i a probl\u00e9m\u00e1s tan\u00fas\u00edtv\u00e1nyok visszavon\u00e1s\u00e1nak befejez\u00e9se ut\u00e1n ker\u00fclnek k\u00f6zz\u00e9t\u00e9telre. <\/p>\n
Janu\u00e1r 26-\u00e1n 03:48 (MSK) a probl\u00e9ma megold\u00e1sra ker\u00fclt, de minden tan\u00fas\u00edtv\u00e1nyt, amelynek kibocs\u00e1t\u00e1s\u00e1hoz a TLS-ALPN-01 m\u00f3dszert haszn\u00e1lt\u00e1k az ellen\u0151rz\u00e9shez, \u00e9rv\u00e9nytelennek nyilv\u00e1n\u00edtanak. A tan\u00fas\u00edtv\u00e1nyok visszavon\u00e1sa janu\u00e1r 28-\u00e1n 19:00 (MSK) kezd\u0151dik. Eddig a felhaszn\u00e1l\u00f3knak, akik a TLS-ALPN-01 ellen\u0151rz\u00e9si m\u00f3dszert haszn\u00e1lj\u00e1k, javasolt a tan\u00fas\u00edtv\u00e1nyok friss\u00edt\u00e9se, k\u00fcl\u00f6nben azok el\u0151re \u00e9rv\u00e9nytelenn\u00e9 v\u00e1lnak. <\/p>\n
A sz\u00fcks\u00e9ges tan\u00fas\u00edtv\u00e1nyfriss\u00edt\u00e9si \u00e9rtes\u00edt\u00e9seket e-mailben k\u00fcldt\u00e9k el. Azokat a felhaszn\u00e1l\u00f3kat, akik a Certbot \u00e9s dehydrated eszk\u00f6z\u00f6ket haszn\u00e1lj\u00e1k tan\u00fas\u00edtv\u00e1ny megszerz\u00e9s\u00e9re, a default be\u00e1ll\u00edt\u00e1sok mellett nem \u00e9rintette a probl\u00e9ma. A TLS-ALPN-01 m\u00f3dszert t\u00e1mogatj\u00e1k a Caddy, Traefik, apache mod_md \u00e9s autocert csomagok. A tan\u00fas\u00edtv\u00e1nyok \u00e9rv\u00e9nyess\u00e9g\u00e9t az azonos\u00edt\u00f3k, sorozatsz\u00e1mok keres\u00e9se r\u00e9v\u00e9n ellen\u0151rizhetik, vagy domainok<\/a> a probl\u00e9m\u00e1s tan\u00fas\u00edtv\u00e1nyok list\u00e1j\u00e1ban. <\/p>\n Mivel a v\u00e1ltoz\u00e1sok \u00e9rintik a TLS-ALPN-01 m\u00f3dszer szerinti ellen\u0151rz\u00e9s m\u0171k\u00f6d\u00e9s\u00e9t, az ACME-\u00fcgyf\u00e9l friss\u00edt\u00e9se vagy a be\u00e1ll\u00edt\u00e1sok m\u00f3dos\u00edt\u00e1sa (Caddy, bitnami\/bn-cert, autocert, apache mod_md, Traefik) sz\u00fcks\u00e9ges lehet a folytat\u00e1shoz. A v\u00e1ltoz\u00e1sok abban \u00e1llnak, hogy a TLS verzi\u00f3knak legal\u00e1bb 1.2-nek kell lenni\u00fck (az \u00fcgyfelek mostant\u00f3l nem haszn\u00e1lhatj\u00e1k a TLS 1.1-et), valamint az OID 1.3.6.1.5.5.7.1.30.1 t\u00e1mogat\u00e1s\u00e1nak megsz\u00fcntet\u00e9s\u00e9ben, amely az elavult acmeIdentifier kiterjeszt\u00e9st az RFC 8737 specifik\u00e1ci\u00f3 korai tervezetei \u00e1ltal t\u00e1mogatta (a tan\u00fas\u00edtv\u00e1nyok kiad\u00e1sakor mostant\u00f3l csak az OID 1.3.6.1.5.5.7.1.31 enged\u00e9lyezett, \u00e9s azok az \u00fcgyfelek, akik az OID 1.3.6.1.5.5.7.1.30.1-et haszn\u00e1lj\u00e1k, nem kaphatnak tan\u00fas\u00edtv\u00e1nyt). \u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043e\u0442\u0437\u044b\u0432\u0435 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0447\u0442\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 1% \u043e\u0442 \u0432\u0441\u0435\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430. \u041e\u0442\u0437\u044b\u0432 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d \u0438\u0437-\u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0432 Let’s Encrypt \u043a\u043e\u0434\u0435 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f TLS-ALPN-01 (RFC 7301, Application-Layer Protocol Negotiation). […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103111","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Let's Encrypt 2 milli\u00f3 tan\u00fas\u00edtv\u00e1nyt von vissza a TLS-ALPN-01 megval\u00f3s\u00edt\u00e1si probl\u00e9m\u00e1i miatt | ProHoster","description":"A k\u00f6z\u00f6ss\u00e9g \u00e1ltal ir\u00e1ny\u00edtott, ingyenes tan\u00fas\u00edtv\u00e1nyokat biztos\u00edt\u00f3 Let's Encrypt nonprofit tan\u00fas\u00edtv\u00e1nykiad\u00f3 el\u0151rehaladott visszavon\u00e1s\u00e1t jelentette be k\u00f6zel k\u00e9tmilli\u00f3 TLS-tan\u00fas\u00edtv\u00e1ny eset\u00e9ben.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let's Encrypt \u043e\u0442\u0437\u044b\u0432\u0430\u0435\u0442 2 \u043c\u043b\u043d \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 TLS-ALPN-01 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043e\u0442\u0437\u044b\u0432\u0435 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0447\u0442\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-27T13:36:56+00:00","article:modified_time":"2022-01-27T13:36:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103111","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-27 13:38:03","updated":"2026-02-11 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/103111","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=103111"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/103111\/revisions"}],"predecessor-version":[{"id":160564,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/103111\/revisions\/160564"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=103111"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=103111"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=103111"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"