{"id":103111,"date":"2022-01-27T15:36:56","date_gmt":"2022-01-27T13:36:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01"},"modified":"2022-01-27T15:36:56","modified_gmt":"2022-01-27T13:36:56","slug":"lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01","title":{"rendered":"Let's Encrypt ritira 2 milioni di certificati a causa di problemi di implementazione TLS-ALPN-01","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

L'autorit\u00e0 di certificazione non profit Let's Encrypt, gestita dalla comunit\u00e0 e che fornisce certificati gratuitamente a chiunque lo desideri, ha annunciato il ritiro anticipato di circa due milioni di certificati TLS, corrispondenti a circa l'1% di tutti i certificati attivi di questo ente certificatore. Il ritiro dei certificati \u00e8 stato avviato a causa della scoperta di non conformit\u00e0 ai requisiti di specifica nel codice utilizzato da Let's Encrypt riguardo all'implementazione dell'estensione TLS-ALPN-01 (RFC 7301, Application-Layer Protocol Negotiation). La non conformit\u00e0 era legata all'assenza di alcune verifiche effettuate durante la negoziazione delle connessioni basate sull'estensione ALPN TLS, utilizzata in HTTP\/2. Maggiori dettagli sull'incidente saranno pubblicati dopo il completamento del ritiro dei certificati problematici. <\/p>\n

Il 26 gennaio alle 03:48 (MSK) il problema \u00e8 stato risolto, ma tutti i certificati, per i quali durante la convalida \u00e8 stato utilizzato il metodo TLS-ALPN-01, sono stati dichiarati non validi. Il ritiro dei certificati inizier\u00e0 il 28 gennaio alle 19:00 (MSK). Prima di tale data, si consiglia agli utenti che utilizzano il metodo di verifica TLS-ALPN-01 di aggiornare i propri certificati, altrimenti verranno riconosciuti come non validi in anticipo. <\/p>\n

Le relative notifiche sull'adeguamento dei certificati sono state inviate via email. Gli utenti che utilizzano il toolkit Certbot e dehydrated non sono stati interessati dal problema se utilizzano le impostazioni predefinite. Il metodo TLS-ALPN-01 \u00e8 supportato nei pacchetti Caddy, Traefik, apache mod_md e autocert. \u00c8 possibile controllare la correttezza dei propri certificati cercando identificatori, numeri di serie o dei domini<\/a> nella lista dei certificati problematici. <\/p>\n

Poich\u00e9 le modifiche riguardano il comportamento durante la verifica con il metodo TLS-ALPN-01, potrebbe essere necessario aggiornare il client ACME o modificare le impostazioni (Caddy, bitnami\/bn-cert, autocert, apache mod_md, Traefik). Le modifiche comportano l'uso di versioni TLS non inferiori alla 1.2 (i client non potranno pi\u00f9 utilizzare TLS 1.1) e la cessazione del supporto per OID 1.3.6.1.5.5.7.1.30.1, che identifica l'estensione obsoleta acmeIdentifier, supportata solo nelle prime bozze della specifica RFC 8737 (ora durante la creazione del certificato \u00e8 consentito solo OID 1.3.6.1.5.5.7.1.31, e i client che usano OID 1.3.6.1.5.5.7.1.30.1 non potranno ottenere certificati).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043e\u0442\u0437\u044b\u0432\u0435 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0447\u0442\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 1% \u043e\u0442 \u0432\u0441\u0435\u0445 \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430. \u041e\u0442\u0437\u044b\u0432 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d \u0438\u0437-\u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u044f \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0432 Let’s Encrypt \u043a\u043e\u0434\u0435 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f TLS-ALPN-01 (RFC 7301, Application-Layer Protocol Negotiation). […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103111","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let's Encrypt ritira 2 milioni di certificati a causa di problemi con l'implementazione di TLS-ALPN-01 | ProHoster","description":"Il centro di certificazione non commerciale Let's Encrypt, controllato dalla comunit\u00e0 e che fornisce certificati gratuitamente a chiunque ne faccia richiesta, ha annunciato il ritiro anticipato di circa due milioni di certificati TLS.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let&apos;s Encrypt \u043e\u0442\u0437\u044b\u0432\u0430\u0435\u0442 2 \u043c\u043b\u043d \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 TLS-ALPN-01 | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0434\u043e\u0441\u0440\u043e\u0447\u043d\u043e\u043c \u043e\u0442\u0437\u044b\u0432\u0435 \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432, \u0447\u0442\u043e \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-27T13:36:56+00:00","article:modified_time":"2022-01-27T13:36:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103111","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-27 13:38:03","updated":"2026-02-11 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/103111","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=103111"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/103111\/revisions"}],"predecessor-version":[{"id":160564,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/103111\/revisions\/160564"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=103111"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=103111"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=103111"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}