{"id":55146,"date":"2020-01-13T00:00:00","date_gmt":"2020-01-12T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov"},"modified":"2020-02-18T14:03:13","modified_gmt":"2020-02-18T11:03:13","slug":"mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","title":{"rendered":"A Mozilla bevezeti a CRLite-t a probl\u00e9m\u00e1s TLS tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9re","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>A Mozilla v\u00e1llalat <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2020\/01\/09\/crlite-part-1-all-web-pki-revocations-compressed\/\">bejelentette<\/a><\/noindex> A Firefox \u00faj tan\u00fas\u00edtv\u00e1ny-visszavon\u00e1si mechanizmus\u00e1nak tesztel\u00e9s\u00e9r\u0151l az \u00e9jszakai kiad\u00e1sokban. <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2020\/01\/09\/crlite-part-2-end-to-end-design\/\">CRLite<\/a><\/noindex>. A CRLite hat\u00e9kony tan\u00fas\u00edtv\u00e1ny-visszah\u00edv\u00e1s ellen\u0151rz\u00e9st tesz lehet\u0151v\u00e9 a felhaszn\u00e1l\u00f3 rendszer\u00e9n t\u00e1rolt adatb\u00e1zis alapj\u00e1n. A Mozilla \u00e1ltal fejlesztett CRLite megval\u00f3s\u00edt\u00e1s <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/crlite\/\">kiad\u00e1sra ker\u00fclt<\/a><\/noindex> MPL 2.0 szabad licenc alatt \u00e1ll. Az adatb\u00e1zis gener\u00e1l\u00e1s\u00e1hoz \u00e9s a szerveroldali komponensekhez haszn\u00e1lt k\u00f3d <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/filter-cascade\">Python<\/a><\/noindex> Go nyelven \u00edr\u00f3dott. A Firefoxhoz hozz\u00e1adott kliensoldali r\u00e9szek az adatb\u00e1zisb\u00f3l sz\u00e1rmaz\u00f3 adatok olvas\u00e1s\u00e1ra <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/mozilla\/rust-cascade\">kiad\u00e1sok<\/a><\/noindex> Rust nyelven k\u00e9sz\u00fcltek.<\/p>\n<p>A tan\u00fas\u00edtv\u00e1nyok eddig haszn\u00e1lt ellen\u0151rz\u00e9se k\u00fcls\u0151 szolg\u00e1ltat\u00e1sok bevon\u00e1s\u00e1val, az <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/OCSP\">OCSP<\/a><\/noindex> (Online Certificate Status Protocol) garant\u00e1lt h\u00e1l\u00f3zati el\u00e9rhet\u0151s\u00e9get ig\u00e9nyel, \u00e9s jelent\u0151s k\u00e9sleltet\u00e9st okoz a k\u00e9rd\u00e9s feldolgoz\u00e1s\u00e1ban (\u00e1tlagosan 350 ms), emellett adatv\u00e9delmi probl\u00e9m\u00e1i is vannak (az OCSP-k\u00e9rd\u00e9sekre v\u00e1laszol\u00f3 szerverek inform\u00e1ci\u00f3kat kapnak a konkr\u00e9t tan\u00fas\u00edtv\u00e1nyokr\u00f3l, amelyek alapj\u00e1n meg\u00edt\u00e9lhet\u0151, hogy a felhaszn\u00e1l\u00f3 mely weboldalakat l\u00e1togatja). L\u00e9tezik lehet\u0151s\u00e9g helyi ellen\u0151rz\u00e9sre is a <noindex><a rel=\"nofollow\" href=\"http:\/\/en.wikipedia.org\/wiki\/Certificate_revocation_list\">CRL<\/a><\/noindex> (Certificate Revocation List), de ennek a m\u00f3dszernek a h\u00e1tr\u00e1nya, hogy az \u00e1tkonvert\u00e1lt adatok m\u00e9rete nagyon nagy - jelenleg a visszavont tan\u00fas\u00edtv\u00e1nyok adatb\u00e1zisa k\u00f6r\u00fclbel\u00fcl 300 MB, \u00e9s tov\u00e1bbra is n\u00f6vekszik.<\/p>\n<p>A Firefoxban a 2015 \u00f3ta haszn\u00e1lt k\u00f6zpontos\u00edtott fekete lista <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.mozilla.org\/CA:RevocationPlan#OneCRL\">OneCRL<\/a><\/noindex> kombin\u00e1lva a <noindex><a rel=\"nofollow\" href=\"https:\/\/safebrowsing.google.com\/\">Google Safe Browsing<\/a><\/noindex> szolg\u00e1ltat\u00e1ssal a potenci\u00e1lis rosszindulat\u00fa aktivit\u00e1s meghat\u00e1roz\u00e1s\u00e1ra. Az OneCRL, ak\u00e1rcsak <noindex><a rel=\"nofollow\" href=\"https:\/\/dev.chromium.org\/Home\/chromium-security\/crlsets\">CRLSets<\/a><\/noindex> a Chrome-ban, egy k\u00f6ztes elem, amely aggreg\u00e1lja a hiteles\u00edt\u0151 hat\u00f3s\u00e1gok CRL-list\u00e1it, \u00e9s egy k\u00f6zpontos\u00edtott OCSP-szolg\u00e1ltat\u00e1st biztos\u00edt a visszavont tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9re, lehet\u0151v\u00e9 t\u00e9ve ezzel, hogy k\u00f6zvetlen\u00fcl ne kelljen k\u00e9rd\u00e9seket k\u00fcldeni a hiteles\u00edt\u0151 hat\u00f3s\u00e1goknak. A tan\u00fas\u00edtv\u00e1nyok online ellen\u0151rz\u00e9si szolg\u00e1ltat\u00e1s\u00e1nak megb\u00edzhat\u00f3s\u00e1g\u00e1nak jav\u00edt\u00e1sa \u00e9rdek\u00e9ben v\u00e9gzett nagy er\u0151fesz\u00edt\u00e9sek ellen\u00e9re a telemetriai adatok azt mutatj\u00e1k, hogy az OCSP-k\u00e9rd\u00e9sek t\u00f6bb mint 7%-a id\u0151t\u00fall\u00e9p\u00e9ssel z\u00e1rul (n\u00e9h\u00e1ny \u00e9vvel ezel\u0151tt ez az ar\u00e1ny 15% volt). <\/p>\n<p>Alap\u00e9rtelmez\u00e9s szerint, ha a OCSP-n kereszt\u00fcli ellen\u0151rz\u00e9s nem lehets\u00e9ges, a b\u00f6ng\u00e9sz\u0151 \u00e9rv\u00e9nyesnek tekinti a tan\u00fas\u00edtv\u00e1nyt. A szolg\u00e1ltat\u00e1s el\u00e9rhetetlen lehet h\u00e1l\u00f3zati probl\u00e9m\u00e1k vagy bels\u0151 h\u00e1l\u00f3zati korl\u00e1toz\u00e1sok miatt, valamint t\u00e1mad\u00f3k \u00e1ltal blokkolva is - a OCSP ellen\u0151rz\u00e9s kiker\u00fcl\u00e9s\u00e9hez a MITM-t\u00e1mad\u00e1s sor\u00e1n egyszer\u0171en el\u00e9g a hiteles\u00edt\u00e9si szolg\u00e1ltat\u00e1s hozz\u00e1f\u00e9r\u00e9s\u00e9t blokkolni. R\u00e9szben az ilyen t\u00e1mad\u00e1sok megel\u0151z\u00e9se \u00e9rdek\u00e9ben a technik\u00e1t megval\u00f3s\u00edtott\u00e1k. <noindex><a rel=\"nofollow\" href=\"https:\/\/blog.mozilla.org\/security\/2015\/11\/23\/improving-revocation-ocsp-must-staple-and-short-lived-certificates\/\">Must-Staple<\/a><\/noindex>, amely lehet\u0151v\u00e9 teszi az OCSP-val kapcsolatos hiba vagy az OCSP el\u00e9rhetetlens\u00e9g\u00e9nek mint tan\u00fas\u00edtv\u00e1nyprobl\u00e9m\u00e1nak val\u00f3 \u00e9rtelmez\u00e9s\u00e9t, azonban ez az opci\u00f3 opcion\u00e1lis, \u00e9s speci\u00e1lis tan\u00fas\u00edtv\u00e1nyt ig\u00e9nyel. <\/p>\n<p>A CRLite lehet\u0151v\u00e9 teszi, hogy a visszavont tan\u00fas\u00edtv\u00e1nyokr\u00f3l teljes inform\u00e1ci\u00f3t k\u00f6nnyen friss\u00edthet\u0151 strukt\u00far\u00e1ban t\u00e1roljunk, amely mind\u00f6ssze 1 MB m\u00e9ret\u0171, \u00edgy lehet\u0151v\u00e9 teszi a teljes CRL t\u00e1rol\u00e1s\u00e1t a kliens oldal\u00e1n.<br \/>\nA b\u00f6ng\u00e9sz\u0151 naponta szinkroniz\u00e1lhatja a visszavont tan\u00fas\u00edtv\u00e1nyok adatait, \u00e9s ez az adatb\u00e1zis minden k\u00f6r\u00fclm\u00e9nyek k\u00f6z\u00f6tt el\u00e9rhet\u0151 lesz. <\/p>\n<p>A CRLite \u00f6sszegy\u0171jti az inform\u00e1ci\u00f3kat <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=48159\">Certificate Transparency<\/a><\/noindex>, a kiadott \u00e9s visszavont tan\u00fas\u00edtv\u00e1nyok nyilv\u00e1nos napl\u00f3j\u00e1b\u00f3l, valamint az interneten v\u00e9gzett tan\u00fas\u00edtv\u00e1ny-ellen\u0151rz\u00e9s eredm\u00e9nyeib\u0151l (k\u00fcl\u00f6nf\u00e9le CA CRL-list\u00e1it gy\u0171jtj\u00fck \u00f6ssze, \u00e9s \u00f6sszegy\u0171jtj\u00fck az \u00f6sszes ismert tan\u00fas\u00edtv\u00e1nyra vonatkoz\u00f3 inform\u00e1ci\u00f3t). Az adatokat kaszk\u00e1dos <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A4%D0%B8%D0%BB%D1%8C%D1%82%D1%80_%D0%91%D0%BB%D1%83%D0%BC%D0%B0\">Bloom sz\u0171r\u0151kkel<\/a><\/noindex>, val\u00f3sz\u00edn\u0171s\u00e9gi strukt\u00far\u00e1val csomagolj\u00e1k, amely lehet\u0151v\u00e9 teszi a hi\u00e1nyz\u00f3 elem t\u00e9ves azonos\u00edt\u00e1s\u00e1t, de kiz\u00e1rja a megl\u00e9v\u0151 elem kihagy\u00e1s\u00e1t (azaz bizonyos val\u00f3sz\u00edn\u0171s\u00e9ggel el\u0151fordulhat, hogy egy \u00e9rv\u00e9nyes tan\u00fas\u00edtv\u00e1nyra t\u00e9vesen reag\u00e1l, de a visszavont tan\u00fas\u00edtv\u00e1nyok garant\u00e1ltan azonos\u00edt\u00e1sra ker\u00fclnek). <\/p>\n<p>A hamis riaszt\u00e1sok elker\u00fcl\u00e9se \u00e9rdek\u00e9ben a CRLite-ban tov\u00e1bbi korrekci\u00f3s szintet vezettek be. A strukt\u00fara gener\u00e1l\u00e1sa ut\u00e1n az \u00f6sszes forr\u00e1startalmat \u00e1tvizsg\u00e1lj\u00e1k, \u00e9s meghat\u00e1rozz\u00e1k a felmer\u00fclt hamis riaszt\u00e1sokat. A tesztel\u00e9s eredm\u00e9nyei alapj\u00e1n egy kieg\u00e9sz\u00edt\u0151 strukt\u00fara j\u00f6n l\u00e9tre, amely kaszk\u00e1dosan r\u00e1ker\u00fcl az els\u0151re, \u00e9s korrig\u00e1lja a felmer\u00fclt hamis riaszt\u00e1sokat. Ez a folyamat addig ism\u00e9tl\u0151dik, am\u00edg a fel\u00fcgyeleti ellen\u0151rz\u00e9s sor\u00e1n a hamis riaszt\u00e1sok teljesen ki nem z\u00e1r\u00f3dnak. \u00c1ltal\u00e1ban a teljes adatk\u00f6r lefed\u00e9s\u00e9hez elegend\u0151 7-10 r\u00e9teg l\u00e9trehoz\u00e1sa. Mivel az adatb\u00e1zis (DB) \u00e1llapota a peri\u00f3dikus szinkroniz\u00e1l\u00e1s miatt kiss\u00e9 elmarad a CRL aktu\u00e1lis \u00e1llapot\u00e1t\u00f3l, az \u00faj tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9t, amelyeket az utols\u00f3 DB CRLite friss\u00edt\u00e9se ut\u00e1n \u00e1ll\u00edtottak ki, OCSP protokollal v\u00e9gzik, bele\u00e9rtve a technik\u00e1t. <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/OCSP_stapling\">OCSP Stapling<\/a><\/noindex> (a hiteles\u00edt\u0151 hat\u00f3s\u00e1g \u00e1ltal al\u00e1\u00edrt OCSP v\u00e1lasz a webhelyet kiszolg\u00e1l\u00f3 szerver \u00e1ltal ker\u00fcl \u00e1tad\u00e1sra a TLS kapcsolat egyeztet\u00e9sekor).<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/ffp4g1ylyit3jdyti1hqcvtb-wpengine.netdna-ssl.com\/security\/files\/2020\/01\/figure3-filter-structure.png\"><img decoding=\"async\" alt=\"A Mozilla bevezeti a CRLite-t a probl\u00e9m\u00e1s TLS tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9re\" src=\"\/wp-content\/uploads\/2020\/01\/3c95db6392aa8f2170a7c6e2697c4043.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p>A Bloom-sz\u0171r\u0151k seg\u00edts\u00e9g\u00e9vel a WebPKI decemberi adatszelet\u00e9t, amely 100 milli\u00f3 akt\u00edv tan\u00fas\u00edtv\u00e1nyt \u00e9s 750 ezer visszavont tan\u00fas\u00edtv\u00e1nyt \u00f6lel fel, 1,3 MB m\u00e9ret\u0171 strukt\u00far\u00e1ba siker\u00fclt csomagolni. A strukt\u00fara gener\u00e1l\u00e1s\u00e1nak folyamata rendk\u00edv\u00fcl er\u0151forr\u00e1sig\u00e9nyes, de a Mozilla szerver\u00e9n hajtj\u00e1k v\u00e9gre, \u00e9s a felhaszn\u00e1l\u00f3nak m\u00e1r k\u00e9sz friss\u00edt\u00e9st adnak \u00e1t. P\u00e9ld\u00e1ul a gener\u00e1l\u00e1shoz haszn\u00e1lt alapadatok bin\u00e1ris form\u00e1ban k\u00f6r\u00fclbel\u00fcl 16 GB mem\u00f3ri\u00e1t ig\u00e9nyelnek Redis adatb\u00e1zisban t\u00e1rolva, a tan\u00fas\u00edtv\u00e1nyok \u00f6sszes sorozatsz\u00e1m\u00e1nak hexadecim\u00e1lis form\u00e1tumban v\u00e9gzett dumpja pedig k\u00f6r\u00fclbel\u00fcl 6,7 GB terjedelm\u0171. A visszavont \u00e9s akt\u00edv tan\u00fas\u00edtv\u00e1nyok aggreg\u00e1l\u00e1s\u00e1nak folyamata k\u00f6r\u00fclbel\u00fcl 40 percet vesz ig\u00e9nybe, m\u00edg a Bloom-sz\u0171r\u0151 alap\u00fa csomagolt strukt\u00fara gener\u00e1l\u00e1sa tov\u00e1bbi 20 percet ig\u00e9nyel.<\/p>\n<p>A Mozilla jelenleg naponta n\u00e9gyszer friss\u00edti a CRLite adatb\u00e1zist (nem minden friss\u00edt\u00e9st k\u00fcldenek el az \u00fcgyfeleknek). A delta-friss\u00edt\u00e9sek gener\u00e1l\u00e1sa m\u00e9g nem val\u00f3sult meg - a bsdiff4 alkalmaz\u00e1sa, amelyet a kiad\u00e1sok delta-friss\u00edt\u00e9seinek l\u00e9trehoz\u00e1s\u00e1ra haszn\u00e1lnak, nem biztos\u00edt megfelel\u0151 hat\u00e9konys\u00e1got a CRLite sz\u00e1m\u00e1ra, \u00e9s a friss\u00edt\u00e9sek indokolatlanul nagyok. Ennek a probl\u00e9m\u00e1nak a megold\u00e1s\u00e1ra a t\u00e1rol\u00e1si strukt\u00fara form\u00e1tum\u00e1nak \u00e1tdolgoz\u00e1s\u00e1t tervezik, hogy elker\u00fclj\u00e9k a felesleges \u00fajj\u00e1\u00e9p\u00edt\u00e9st \u00e9s a r\u00e9tegek elt\u00e1vol\u00edt\u00e1s\u00e1t.<\/p>\n<p>A CRLite a Firefox b\u00f6ng\u00e9sz\u0151ben passz\u00edv m\u00f3dban m\u0171k\u00f6dik, \u00e9s p\u00e1rhuzamosan haszn\u00e1latos az OCSP-vel a m\u0171k\u00f6d\u00e9s helyess\u00e9g\u00e9r\u0151l gy\u0171jt\u00f6tt statisztik\u00e1khoz. A CRLite-t a f\u0151 ellen\u0151rz\u00e9si m\u00f3dra is \u00e1t lehet \u00e1ll\u00edtani, ehhez az about:config men\u00fcben a security.pki.crlite_mode = 2 param\u00e9tert kell be\u00e1ll\u00edtani.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/ffp4g1ylyit3jdyti1hqcvtb-wpengine.netdna-ssl.com\/security\/files\/2020\/01\/figure2-filter-process.png\"><img decoding=\"async\" alt=\"A Mozilla bevezeti a CRLite-t a probl\u00e9m\u00e1s TLS tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9re\" src=\"\/wp-content\/uploads\/2020\/01\/004ea3876f93c92b2ca059eebd62d1ad.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Forr\u00e1s: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52175\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 &#8212; CRLite. CRLite \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043e\u0442\u0437\u044b\u0432\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u043c\u043e\u0439 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u0432 Mozilla \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f CRLite \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430 \u043f\u043e\u0434 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0439 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 MPL 2.0. \u041a\u043e\u0434 \u0434\u043b\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u0438 \u0411\u0414 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u0430 Python \u0438 Go. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55146","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-01-12T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:03:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Mozilla bevezeti a CRLite-t a probl\u00e9m\u00e1s TLS-tan\u00fas\u00edtv\u00e1nyok ellen\u0151rz\u00e9s\u00e9re | ProHoster","description":"A Mozilla bejelentette a Firefox \u00e9jszakai kiad\u00e1saiban t\u00f6rt\u00e9n\u0151 tesztel\u00e9s kezdet\u00e9t.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Mozilla \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442 CRLite \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0447\u043d\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445 Firefox.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/mozilla-vnedryaet-crlite-dlya-proverki-problemnyh-tls-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-12T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55146","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:50:02","updated":"2022-10-10 06:24:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/55146","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=55146"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/55146\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=55146"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=55146"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=55146"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}