{"id":170634,"date":"2026-05-12T00:24:49","date_gmt":"2026-05-11T22:24:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pervyj-vypusk-realizaczii-protokola-tls-1-3-na-java-s-algoritmami-gost-v-sootvetstvii-s-rfc-9367"},"modified":"2026-05-12T00:24:49","modified_gmt":"2026-05-11T22:24:49","slug":"pervyj-vypusk-realizaczii-protokola-tls-1-3-na-java-s-algoritmami-gost-v-sootvetstvii-s-rfc-9367","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/pervyj-vypusk-realizaczii-protokola-tls-1-3-na-java-s-algoritmami-gost-v-sootvetstvii-s-rfc-9367","title":{"rendered":"Il primo rilascio dell'implementazione del protocollo TLS 1.3 in Java con algoritmi GOST secondo RFC 9367","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Modulo <em>crypto-gost-tls13<\/em> contiene l'implementazione <em>TLS 1.3 (RFC 8446 + RFC 9367)<\/em> con crittografia GOST. Questa versione \u00e8 una versione iniziale della libreria ed \u00e8 pronta per l'uso interno.<\/p>\n<p>Una caratteristica della libreria \u00e8 l'implementazione in Java puro. Tutte le operazioni crittografiche vengono eseguite con i mezzi integrati della libreria - senza dipendenze esterne.<\/p>\n<p>Questo \u00e8 in un certo senso uno dei primi esempi di implementazione open source di TLS 1.3 con GOST in Java, quindi i test di interop sono stati eseguiti in una misura minima.<\/p>\n<p>Di seguito sono riportate le funzionalit\u00e0 della libreria.<\/p>\n<ol>\n<li><em>Protocolli:<\/em><\/li>\n<\/ol>\n<ul>\n<li>Handshake: completo (client\/server), ridotto (PSK), mutuo (mTLS).<\/li>\n<li>ALPN (RFC 7301) - negoziazione del protocollo di livello applicativo (HTTP\/2, HTTP\/1.1).<\/li>\n<li>SNI (RFC 6066) - indicazione del nome <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/server\/dts-los-angeles\/\" title=\"server\" data-wpil-keyword-link=\"linked\">server<\/a> per implementazioni multi-tenant.<\/li>\n<li>KeyUpdate (RFC 8446 \u00a74.6.3) - aggiornamento delle chiavi di crittografia del traffico.<\/li>\n<li>Suite di cifratura: TLS_KUZNYECHIK_MGM_STREEBOG_256_L\/S.<\/li>\n<li>ECDHE: CryptoPro-A (256 bit), CryptoPro-B (512 bit)<\/li>\n<li>TLSTREE re-keying per ogni record - cambio della chiave di crittografia per ogni record TLS.<\/li>\n<li>Frammentazione e assemblaggio degli handshake e dei record (RFC 8446 \u00a75.1).<\/li>\n<li>Ripristino della sessione: PSK tramite NewSessionTicket (PskStore in-memory, uso singolo).<\/li>\n<li>OCSP stapling: <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/it\/server\/\"   title=\"un server\" data-wpil-keyword-link=\"linked\">un server<\/a> allega la risposta OCSP al certificato.<\/li>\n<li>Messaggi post-handshake: NewSessionTicket (salvataggio per PSK).<\/li>\n<\/ul>\n<ol start=\"2\">\n<li><em>Criptografia:<\/em><\/li>\n<\/ol>\n<ul>\n<li>Piano chiave: HKDF-Streebog (RFC 5869) secondo lo schema TLS 1.3 (RFC 8446 \u00a77.1).<\/li>\n<li>Protezione dei record: MGM-AEAD (Kuznyechik) con nonce come da RFC 8446 \u00a75.3.<\/li>\n<li>Le chiavi effimere vengono cancellate dopo l'uso.<\/li>\n<\/ul>\n<ol start=\"3\">\n<li><em>Certificazioni:<\/em><\/li>\n<\/ol>\n<ul>\n<li>Parsing X.509v3 (GOST R 34.10-2012) \u2014 parser DER integrato.<\/li>\n<li>Validazione della catena: firme, DN (issuer \u2192 subject), Basic Constraints, Key Usage, Extended Key * Usage (serverAuth \/ clientAuth), pathLen.<\/li>\n<li>Controllo dell'hostname: dNSName + iPAddress (RFC 6125).<\/li>\n<li>Verifica delle risposte OCSP (RFC 6960).<\/li>\n<\/ul>\n<p>4.<em>Trasporto:<\/em><\/p>\n<ul>\n<li>TlsTransport \u2014 interfaccia.<\/li>\n<li>InMemoryTlsTransport \u2014 per test e scenari mono-processo (coda in-memory).<\/li>\n<li>SocketTlsTransport \u2014 I\/O bloccante tramite java.net.Socket.<\/li>\n<li>ChannelTlsTransport \u2014 trasporto basato su NIO SocketChannel (modalit\u00e0 bloccante, interrompibile).<\/li>\n<\/ul>\n<ol start=\"5\">\n<li><em>Handshake passo dopo passo:<\/em><\/li>\n<\/ol>\n<ul>\n<li>TlsHandshakeEngine \u2014 macchina a stati per l'handshake (indipendente da I\/O). Usa TlsSession come orchestratore; adatto per l'integrazione con JSSE (SSLEngine).<\/li>\n<\/ul>\n<ol start=\"6\">\n<li><em>API ByteBuffer:<\/em><\/li>\n<\/ol>\n<ul>\n<li>TlsRecord.protect\/unprotect \u2014 sovraccarichi ByteBuffer per integrazione zero-copy con NIO. Caricamento delle chiavi:<\/li>\n<li>Pkcs12Loader \u2014 lettura PFX (PKCS#12) con PBKDF2-HMAC-SHA256 + AES-256-CBC.<\/li>\n<\/ul>\n<ol start=\"7\">\n<li><em>Chiusura della sessione:<\/em><\/li>\n<\/ol>\n<ul>\n<li>close_notify \u2014 chiusura corretta secondo il protocollo.<\/li>\n<li>Cancellazione del materiale chiave alla chiusura o in caso di errore.<\/li>\n<li>Gestione degli alert: fatal \u2014 chiusura immediata + cancellazione.<\/li>\n<\/ul>\n<ol start=\"8\">\n<li><em>Sicurezza dell'implementazione:<\/em><\/li>\n<\/ol>\n<ul>\n<li>Confronto a tempo costante per verify_data e binders PSK (protezione contro attacchi di timing)<\/li>\n<li>Stripping del materiale chiave: destroy() su tutti gli oggetti con chiavi (TlsKeySchedule, TlsTrafficKeys, TlsRecord, HandshakeContext) durante la chiusura, alert fatale, eccezione nella handshake<\/li>\n<li>Protezione contro DoS: limiti sulla lunghezza della catena di certificati (10), messaggi post-handshake, dimensione delle registrazioni.<\/li>\n<li>MGM nonce: il MSB del primo byte viene azzerato per ICN (RFC 9058 \u00a73, RFC 9367 \u00a73.3).<\/li>\n<li>La chiave privata ECDHE e il transcript della handshake vengono distrutti dopo il completamento della handshake.<\/li>\n<li>Il materiale chiave HMAC viene azzerato dopo l'uso (HkdfStreebog, KdfGostR3411_2012_256).<\/li>\n<\/ul>\n<ol start=\"9\">\n<li><em>Limitazioni:<\/em><\/li>\n<\/ol>\n<ul>\n<li>Solo resumption PSK (0-RTT ed external PSK non supportati).<\/li>\n<li>Solo psk_dhe_ke (pure PSK senza ECDHE non supportato).<\/li>\n<li>HelloRetryRequest (RFC 8446 \u00a74.1.4) non supportato \u2014 viene utilizzato solo un gruppo nominato (GC256A per impostazione predefinita).<\/li>\n<li>Solo GOST (non-GOST cipher suites non supportati).<\/li>\n<\/ul>\n<ol start=\"10\">\n<li><em>Testing:<\/em><\/li>\n<\/ol>\n<ul>\n<li>La libreria contiene Known Answer Tests da RFC 9367 Appendix A.1 (varianti L e S) \u2014 pianificazione completa delle chiavi, TLSTREE, AEAD, ECDHE. E supera l'intero spettro dei test KAT.<\/li>\n<li>4 test di integrazione (self-interop) attraverso socket TCP reali.<\/li>\n<li>Test di fuzzing per i parser: TlsMessageParser (8 metodi), TlsDerParser (3 metodi), TlsOcspVerifier (1 metodo), per garantire la sicurezza e ridurre i vettori di attacco sui parser.<\/li>\n<\/ul>\n<ol start=\"11\">\n<li><em>Soluzioni architettoniche:<\/em><\/li>\n<\/ol>\n<ul>\n<li>TlsHandshakeEngine \u2014 macchina a stati, scollegata da I\/O (per il futuro modulo JSSE).<\/li>\n<li>ByteBuffer sovraccarichi TlsRecord.protect\/unprotect per NIO\/JSSE.<\/li>\n<li>Cache TLSTREE (TlsTreeCache) \u2014 ricompilazione solo dei livelli modificati (RFC 9367).<\/li>\n<li>InMemoryTlsTransport.Pair \u2014 coppia bidirezionale per test e interazione su un singolo processo.<\/li>\n<\/ul>\n<p>La libreria \u00e8 distribuita sotto licenza libera.<\/p>\n<p>Fonte: <a rel=\"nofollow\" href=\"https:\/\/www.linux.org.ru\/news\/java\/18287174\">linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041c\u043e\u0434\u0443\u043b\u044c crypto-gost-tls13 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e TLS 1.3 (RFC 8446 + RFC 9367) \u0441 \u0413\u041e\u0421\u0422-\u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0435\u0439. \u0414\u0430\u043d\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438 \u0433\u043e\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0447\u0438\u0441\u0442\u043e\u0439 Java. \u0412\u0441\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u2014 \u0431\u0435\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u042d\u0442\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u043e\u0434\u0435 \u043e\u0434\u043d\u0430 \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 TLS 1.3 \u0441 \u0413\u041e\u0421\u0422 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":8,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-170634","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041c\u043e\u0434\u0443\u043b\u044c crypto-gost-tls13 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e TLS 1.3 (RFC 8446 + RFC 9367) \u0441 \u0413\u041e\u0421\u0422-\u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0435\u0439. \u0414\u0430\u043d\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438 \u0433\u043e\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0447\u0438\u0441\u0442\u043e\u0439 Java. \u0412\u0441\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u2014 \u0431\u0435\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u042d\u0442\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u043e\u0434\u0435 \u043e\u0434\u043d\u0430 \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 TLS 1.3 \u0441 \u0413\u041e\u0421\u0422\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Erik Peterson\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/pervyj-vypusk-realizaczii-protokola-tls-1-3-na-java-s-algoritmami-gost-v-sootvetstvii-s-rfc-9367\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 TLS 1.3 \u043d\u0430 Java \u0441 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430\u043c\u0438 \u0413\u041e\u0421\u0422 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 RFC 9367 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041c\u043e\u0434\u0443\u043b\u044c crypto-gost-tls13 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e TLS 1.3 (RFC 8446 + RFC 9367) \u0441 \u0413\u041e\u0421\u0422-\u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0435\u0439. \u0414\u0430\u043d\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438 \u0433\u043e\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0447\u0438\u0441\u0442\u043e\u0439 Java. \u0412\u0441\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u2014 \u0431\u0435\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u042d\u0442\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u043e\u0434\u0435 \u043e\u0434\u043d\u0430 \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 TLS 1.3 \u0441 \u0413\u041e\u0421\u0422\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/pervyj-vypusk-realizaczii-protokola-tls-1-3-na-java-s-algoritmami-gost-v-sootvetstvii-s-rfc-9367\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-05-11T22:24:49+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-05-11T22:24:49+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Prima release dell'implementazione del protocollo TLS 1.3 su Java con algoritmi GOST in conformit\u00e0 a RFC 9367 | ProHoster","description":"Il modulo crypto-gost-tls13 contiene un'implementazione di TLS 1.3 (RFC 8446 + RFC 9367) con crittografia GOST. Questa release \u00e8 la versione iniziale della libreria ed \u00e8 pronta per l'uso interno. La particolarit\u00e0 della libreria \u00e8 l'implementazione in pura Java. Tutte le operazioni crittografiche sono eseguite tramite strumenti integrati della libreria \u2014 senza dipendenze esterne. \u00c8 una delle prime implementazioni aperte di TLS 1.3 con GOST.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/pervyj-vypusk-realizaczii-protokola-tls-1-3-na-java-s-algoritmami-gost-v-sootvetstvii-s-rfc-9367","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0432\u044b\u0439 \u0432\u044b\u043f\u0443\u0441\u043a \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 TLS 1.3 \u043d\u0430 Java \u0441 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430\u043c\u0438 \u0413\u041e\u0421\u0422 \u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0438 \u0441 RFC 9367 | ProHoster","og:description":"\u041c\u043e\u0434\u0443\u043b\u044c crypto-gost-tls13 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e TLS 1.3 (RFC 8446 + RFC 9367) \u0441 \u0413\u041e\u0421\u0422-\u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0435\u0439. \u0414\u0430\u043d\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u0438 \u0433\u043e\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0447\u0438\u0441\u0442\u043e\u0439 Java. \u0412\u0441\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0442\u0441\u044f \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u043c\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 \u2014 \u0431\u0435\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u042d\u0442\u043e \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u043e\u0434\u0435 \u043e\u0434\u043d\u0430 \u0438\u0437 \u043f\u0435\u0440\u0432\u044b\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0439 TLS 1.3 \u0441 \u0413\u041e\u0421\u0422","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/pervyj-vypusk-realizaczii-protokola-tls-1-3-na-java-s-algoritmami-gost-v-sootvetstvii-s-rfc-9367","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-05-11T22:24:49+00:00","article:modified_time":"2026-05-11T22:24:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/170634","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=170634"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/170634\/revisions"}],"predecessor-version":[{"id":173162,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/170634\/revisions\/173162"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=170634"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=170634"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=170634"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}