{"id":72068,"date":"2020-03-01T14:51:16","date_gmt":"2020-03-01T11:51:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-vydal-milliard-sertifikatov"},"modified":"2020-03-03T16:14:01","modified_gmt":"2020-03-03T13:14:01","slug":"lets-encrypt-vydal-milliard-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","title":{"rendered":"A Let’s Encrypt egymilli\u00e1rd tan\u00fas\u00edtv\u00e1nyt adott ki","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"A2020. febru\u00e1r 27-\u00e9n indult a Let’s Encrypt ingyenes tan\u00fas\u00edtv\u00e1nyk\u00f6zpontja kiadta az egymilliomodik tan\u00fas\u00edtv\u00e1nyt<\/a><\/noindex>.<\/p>\n

Az \u00fcnnepi sajt\u00f3k\u00f6zlem\u00e9nyben a projekt k\u00e9pvisel\u0151i felid\u00e9zik, hogy a kor\u00e1bbi jubileumot, a 100 milli\u00f3 kiadott tan\u00fas\u00edtv\u00e1nyt, 2017 j\u00fanius\u00e1ban \u00fcnnepelt\u00e9k<\/a><\/noindex>. Akkoriban a HTTPS-forgalom ar\u00e1nya az interneten 58% volt (az Egyes\u00fclt \u00c1llamokban 64%). K\u00e9t \u00e9s f\u00e9l \u00e9v alatt a mutat\u00f3k jelent\u0151sen megn\u0151ttek: \u201eMa a vil\u00e1g \u00f6sszes weboldal\u00e1nak 81%-a haszn\u00e1l HTTPS-t, m\u00edg az Egyes\u00fclt \u00c1llamokban 91%-n\u00e1l tartunk! \u2013 \u00f6rvendenek a projekt fiataljai. \u2013 Hihetetlen teljes\u00edtm\u00e9ny. Ez sokkal magasabb szint\u0171 adatv\u00e9delmet \u00e9s biztons\u00e1got jelent mindenkinek.\u201d <\/p>\n

A Let’s Encrypt nagyon fontos szerepet j\u00e1tszott abban, hogy a HTTPS tan\u00fas\u00edtv\u00e1nyok gyakorlati standardd\u00e1 v\u00e1ljanak, \u00e9s a forgalom biztons\u00e1gos titkos\u00edt\u00e1sa teljesen norm\u00e1lisnak sz\u00e1m\u00edtson az interneten.
\n<\/a><\/noindex>
\nA Let’s Encrypt innovat\u00edv tan\u00fas\u00edtv\u00e1nyk\u00f6zpontj\u00e1nak b\u00e9ta tesztel\u00e9se 2015 december\u00e9ben kezd\u0151d\u00f6tt. Az \u00faj k\u00f6zpont egyed\u00fcl\u00e1ll\u00f3 jellemz\u0151je, hogy a tan\u00fas\u00edtv\u00e1nyok kiad\u00e1si folyamata eredetileg teljesen automatiz\u00e1lt volt.<\/p>\n

A HTTPS automatikus be\u00e1ll\u00edt\u00e1sa a szerveren k\u00e9t l\u00e9p\u00e9sben t\u00f6rt\u00e9nik. Az els\u0151 l\u00e9p\u00e9sben az \u00fcgyn\u00f6k \u00e9rtes\u00edti a tan\u00fas\u00edtv\u00e1nykiad\u00f3 k\u00f6zpontot a szerver adminisztr\u00e1tor\u00e1nak domainjogosults\u00e1gair\u00f3l. P\u00e9ld\u00e1ul az ellen\u0151rz\u00e9s mag\u00e1ban foglalhatja egy adott aldomain l\u00e9trehoz\u00e1s\u00e1t vagy egy adott URI-val rendelkez\u0151 HTTP-er\u0151forr\u00e1s meghat\u00e1roz\u00e1s\u00e1t a tartom\u00e1nyon bel\u00fcl.<\/p>\n

\"A
\n
\nA Let\u2019s Encrypt az \u00fcgyn\u00f6k \u00e1ltal futtatott webszervert nyilv\u00e1nos kulcs alapj\u00e1n azonos\u00edtja. A nyilv\u00e1nos \u00e9s a priv\u00e1t kulcsot az \u00fcgyn\u00f6k gener\u00e1lja az els\u0151 csatlakoz\u00e1s el\u0151tt a tan\u00fas\u00edtv\u00e1nykiad\u00f3 k\u00f6zponthoz. Az automatikus ellen\u0151rz\u00e9s sor\u00e1n az \u00fcgyn\u00f6k sz\u00e1mos tesztet v\u00e9gez: p\u00e9ld\u00e1ul a nyilv\u00e1nos kulccsal al\u00e1\u00edrja a kapott egyszer haszn\u00e1latos jelsz\u00f3t, \u00e9s bemutat egy adott URI-val rendelkez\u0151 HTTP-er\u0151forr\u00e1st. Ha a digit\u00e1lis al\u00e1\u00edr\u00e1s helyes, \u00e9s az \u00f6sszes teszt sikeres, az \u00fcgyn\u00f6k jogosults\u00e1got kap a tan\u00fas\u00edtv\u00e1nyok kezel\u00e9s\u00e9re a domainek eset\u00e9ben.<\/p>\n

\"A
\n
\nA m\u00e1sodik l\u00e9p\u00e9sben az \u00fcgyn\u00f6k k\u00e9rheti a tan\u00fas\u00edtv\u00e1nyok kiad\u00e1s\u00e1t, friss\u00edt\u00e9s\u00e9t \u00e9s visszavon\u00e1s\u00e1t. A tan\u00fas\u00edtv\u00e1ny automatikus kiad\u00e1s\u00e1hoz egy \u201echallenge-response\u201d (k\u00e9rdez\u00e9s-v\u00e1lasz) t\u00edpus\u00fa hiteles\u00edt\u00e9si protokollt, az Automated Certificate Management Environment (ACME) n\u00e9ven haszn\u00e1lnak. Mindezek a tan\u00fas\u00edtv\u00e1nyokkal kapcsolatos m\u0171veletek a webszerver le\u00e1ll\u00edt\u00e1sa n\u00e9lk\u00fcl, ACME-\u00fcgyfelekkel val\u00f3sulnak meg. Certbot<\/a><\/noindex>. Egyszer\u0171en haszn\u00e1lhat\u00f3, a legt\u00f6bb oper\u00e1ci\u00f3s rendszeren m\u0171k\u00f6dik \u00e9s j\u00f3l dokument\u00e1lt. Van szak\u00e9rt\u0151i m\u00f3d kiterjedt be\u00e1ll\u00edt\u00e1si lehet\u0151s\u00e9gekkel. A Certbot mellett sz\u00e1mos m\u00e1s ACME-kliense l\u00e9tezik<\/a><\/noindex>. <\/p>\n

A Let’s Encrypt fontos szerepe<\/h1>\n

\nA Let’s Encrypt val\u00f3di forradalmat id\u00e9zett el\u0151 a piacon, ahol kor\u00e1bban a kereskedelmi tan\u00fas\u00edtv\u00e1nyk\u00f6zpontok uralkodtak. Mostanra gyakorlatilag kiszorultak a DV-tan\u00fas\u00edtv\u00e1nyok (Domain Validation, azaz domain-ellen\u0151rz\u00e9s) kiad\u00e1s\u00e1b\u00f3l, b\u00e1r tov\u00e1bbra is \u00e9rt\u00e9kes\u00edtik az OV-tan\u00fas\u00edtv\u00e1nyokat (Organization Validation, azaz szervezeti ellen\u0151rz\u00e9s) \u00e9s az EV-tan\u00fas\u00edtv\u00e1nyokat (Extended Validation, azaz kib\u0151v\u00edtett ellen\u0151rz\u00e9s), amelyeket a Let’s Encrypt nem ad ki, mivel ezek nem automatiz\u00e1lhat\u00f3k. Ez viszont egy niche term\u00e9k, \u00e9s a t\u00f6meges piacon kiz\u00e1r\u00f3lag a Let’s Encrypt ingyenes tan\u00fas\u00edtv\u00e1nyai domin\u00e1lnak.<\/p>\n

A Let’s Encrypt standardiz\u00e1lta a tan\u00fas\u00edtv\u00e1nyok automatikus meg\u00faj\u00edt\u00e1s\u00e1t. Annak ellen\u00e9re, hogy \u00e9lettartamuk r\u00f6vid (90 nap), az automatikus elj\u00e1r\u00e1s megsz\u00fcnteti azokat az \u201eemberi t\u00e9nyez\u0151ket\u201d, amelyek hagyom\u00e1nyosan a biztons\u00e1g f\u0151 sebezhet\u0151s\u00e9g\u00e9nek sz\u00e1m\u00edtanak. A domainadminisztr\u00e1torok gyakran egyszer\u0171en elfelejtik meg\u00faj\u00edtani a tan\u00fas\u00edtv\u00e1nyokat, aminek k\u00f6vetkezt\u00e9ben a szolg\u00e1ltat\u00e1sok offline \u00e1llapotba ker\u00fclnek. Az utols\u00f3 ilyen eset a Microsoft Teams-szel t\u00f6rt\u00e9nt. 2020. febru\u00e1r 3-\u00e1n ez a k\u00f6z\u00f6ss\u00e9gi munkaeszk\u00f6z offline \u00e1llapotba ker\u00fclt. a lej\u00e1rt tan\u00fas\u00edtv\u00e1ny miatt<\/a><\/noindex>.<\/p>\n

Az ACME protokollon kereszt\u00fcli tan\u00fas\u00edtv\u00e1nyok automatikus cser\u00e9je kik\u00fcsz\u00f6b\u00f6li az ilyen incidensek lehet\u0151s\u00e9g\u00e9t.<\/p>\n

B\u00e1r a Let’s Encrypt projekt a vil\u00e1g internet\u00e9nek fel\u00e9t szolg\u00e1lja ki, a fizik\u00e1lis vil\u00e1gban ez egy kis nonprofit szervezet: \u201eEzekben a k\u00e9t \u00e9s f\u00e9l \u00e9vben a szervezet\u00fcnk n\u0151tt, de nagyon kicsit! - \u00edrj\u00e1k. - 2017 j\u00fanius\u00e1ban k\u00f6r\u00fclbel\u00fcl 46 milli\u00f3 weboldalt szolg\u00e1ltunk ki 11 alkalmazottal \u00e9s \u00e9vente 2,61 milli\u00f3s k\u00f6lts\u00e9gvet\u00e9ssel. Ma m\u00e1r k\u00f6zel 192 milli\u00f3 weboldalt szolg\u00e1lunk ki 13 alkalmazottal \u00e9s k\u00f6r\u00fclbel\u00fcl 3,35 milli\u00f3s \u00e9ves k\u00f6lts\u00e9gvet\u00e9ssel. Ez azt jelenti, hogy t\u00f6bb mint n\u00e9gyszer annyi weboldalt szolg\u00e1lunk ki mind\u00f6ssze k\u00e9t tov\u00e1bbi munkat\u00e1rssal \u00e9s 28%-os k\u00f6lts\u00e9gvet\u00e9s-n\u00f6veked\u00e9ssel.\u201d<\/p>\n

A projekt t\u00e1mogat\u00e1sa a adom\u00e1nyok<\/a><\/noindex> \u00e9s szponzor\u00e1ci\u00f3k \u00e1ltal t\u00f6rt\u00e9nik<\/a><\/noindex>.<\/p>\n

Napjainkban a HTTPS m\u00e1r a legelterjedtebb szabv\u00e1ny az interneten. Tavaly \u00f3ta a f\u0151bb b\u00f6ng\u00e9sz\u0151k figyelmeztetik a felhaszn\u00e1l\u00f3kat a vesz\u00e9lyre, ha olyan oldalakra csatlakoznak, amelyek nem titkos\u00edtj\u00e1k a forgalmat HTTPS-en kereszt\u00fcl. Ebben a biztons\u00e1gi t\u00e1jk\u00e9pet \u00e9rint\u0151 v\u00e1ltoz\u00e1sban jelent\u0151s szerepe van a Let\u2019s Encrypt-nek.<\/p>\n

R\u00e1ad\u00e1sul a Let\u2019s Encrypt sz\u00f3 szerint \u00fajj\u00e1\u00e9lesztette a nyilv\u00e1nos XMPP-szerverek infrastrukt\u00far\u00e1j\u00e1t<\/a><\/noindex>. Mostant\u00f3l a Jabber megb\u00edzhat\u00f3 titkos\u00edt\u00e1ssal m\u0171k\u00f6dik mind a kliens-szerver, mind a szerver-szerver szinten, \u00e9s a legt\u00f6bb tan\u00fas\u00edtv\u00e1nyt a Let\u2019s Encrypt adott ki.<\/p>\n

\"A
\n
\n\u201eK\u00f6z\u00f6ss\u00e9gk\u00e9nt hihetetlen dolgokat csin\u00e1ltunk, hogy v\u00e9dj\u00fck az embereket az interneten, - \u00e1ll a sajt\u00f3k\u00f6zlem\u00e9nyben<\/a><\/noindex>. - Az egymilli\u00e1rd tan\u00fas\u00edtv\u00e1ny kiad\u00e1sa a k\u00f6z\u00f6ss\u00e9g\u00fcnk \u00e1ltal el\u00e9rt el\u0151rel\u00e9p\u00e9s meger\u0151s\u00edt\u00e9se.\u201d
\n
Forr\u00e1s: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442. \u0412 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u043c \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u044e\u0431\u0438\u043b\u0435\u0439 \u0432 100\u00a0\u043c\u043b\u043d \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438 \u0432 \u0438\u044e\u043d\u0435 2017 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0434\u043e\u043b\u044f HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 58% (\u0432 \u0421\u0428\u0410\u00a0\u2014 64%). \u0417\u0430 \u0434\u0432\u0430 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u0433\u043e\u0434\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0438: \u00ab\u0421\u0435\u0433\u043e\u0434\u043d\u044f 81% \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72069,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72068","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Let\u2019s Encrypt egymilli\u00e1rd tan\u00fas\u00edtv\u00e1nyt adott ki | ProHoster","description":"2020. febru\u00e1r 27-\u00e9n ingyenes tan\u00fas\u00edtv\u00e1nykiad\u00f3 k\u00f6zpont.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let\u2019s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/hu\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:16+00:00","article:modified_time":"2020-03-03T13:14:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72068","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-09-30 13:26:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/72068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=72068"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/72068\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/72069"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=72068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=72068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=72068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}