{"id":87101,"date":"2020-07-03T19:42:00","date_gmt":"2020-07-03T17:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt"},"modified":"2020-07-03T19:42:00","modified_gmt":"2020-07-03T17:42:00","slug":"najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","title":{"rendered":"Identificata la causa dei problemi di dehydrated con server ACME diversi da LetsEncrypt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sebastian Krause ha identificato<\/a><\/noindex> la fonte di una strana incompatibilit\u00e0 con il servizio Bypass<\/a><\/noindex> di uno script dehydrated<\/a><\/noindex>, utilizzato per automatizzare l'ottenimento dei certificati TLS tramite il protocollo ACME. Con Bypass funzionano sia il client di riferimento che uacme, ma non dehydrated (in effetti, anche lui ha funzionato con alcune manovre, ma esclusivamente in modalit\u00e0 dns-1).<\/p>\n

La ragione si \u00e8 rivelata banale: invece di analizzare realmente la risposta in formato JSON, l'autore dehydrated ha utilizzato una peculiarit\u00e0 del formato di output JSON fornito dal servizio Let's Encrypt e ha eseguito l'analisi tramite espressioni regolari. Tuttavia, Bypass restituisce un JSON minificato, non ben formattato, e l'uso di non ha funzionato. L'approccio specificato non esclude l'insorgere di problemi anche con LetsEncrypt, se in futuro questo servizio dovesse cambiare il formato di emissione senza preavviso, rimanendo tuttavia perfettamente nei limiti del protocollo ufficiale.<\/a><\/noindex> non ha funzionato. L'approccio indicato non esclude la possibilit\u00e0 di problemi con LetsEncrypt, se questo servizio in futuro cambiasse senza preavviso il formato di emissione, rimanendo comunque entro i limiti del protocollo ufficiale.<\/p>\n

Durante la discussione del problema \u00e8 stato proposto di utilizzare un parser JSON esterno, come json_pp<\/a><\/noindex> o jq<\/a><\/noindex> (aggiungere nel pipe 'jq -r \u00ab.authorizations | .[]\u00bb' per un'analisi corretta).
\nUn limite di questo approccio \u00e8 la confusione sull'idea di utilizzare strumenti minimi e facilmente verificabili, oltre ai problemi di gestione degli errori.<\/p>\n

L'autore del progetto dehydrated (il progetto \u00e8 stato recentemente venduto<\/a><\/noindex> all'azienda Apilayer GmbH) ha riconosciuto<\/a><\/noindex>, quindi l'analisi del JSON \u00e8 un grande problema, ma non considera una buona idea aggiungere parser esterni, poich\u00e9 uno dei principali pregi dello script \u00e8 l'assenza di dipendenze esterne. Attualmente \u00e8 occupato, ma spera di dedicare attenzione alla risoluzione del problema nei prossimi giorni. Nei piani \u00e8 prevista la riprogettazione del parser JSON o l'integrazione di un parser gi\u00e0 pronto in linguaggio shell \u2014 JSON.sh<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Sebastian Krause \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0439 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c Bypass \u0441\u043a\u0440\u0438\u043f\u0442\u0430 dehydrated, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 ACME. \u0421 Bypass \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442, \u0438 uacme, \u043d\u043e \u043d\u0435 dehydrated (\u0442\u043e\u0447\u043d\u0435\u0435, \u043e\u043d \u0442\u043e\u0436\u0435 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u043c\u0430\u043d\u0451\u0432\u0440\u0430\u043c\u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b, \u043d\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 dns-1). \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430: \u0432\u043c\u0435\u0441\u0442\u043e \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON \u043f\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-87101","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Trovata la causa dei problemi di dehydrated con i server ACME differenti da LetsEncrypt | ProHoster","description":"Sebastian Krause ha identificato la fonte della strana incompatibilit\u00e0 con il servizio Bypass dello script dehydrated, utilizzato per automatizzare l'ottenimento di certificati TLS tramite il protocollo ACME. Con Bypass funzionano sia il client di riferimento che uacme, ma non dehydrated (in realt\u00e0, anche questo ha funzionato con alcuni workaround, ma esclusivamente in modalit\u00e0 dns-1). La causa si \u00e8 rivelata banale: anzich\u00e9 analizzare la risposta in formato JSON secondo","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0439\u0434\u0435\u043d\u0430 \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c dehydrated \u0441 ACME-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043e\u0442 LetsEncrypt | ProHoster","og:description":"Sebastian Krause \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0439 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c Bypass \u0441\u043a\u0440\u0438\u043f\u0442\u0430 dehydrated, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 ACME. \u0421 Bypass \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442, \u0438 uacme, \u043d\u043e \u043d\u0435 dehydrated (\u0442\u043e\u0447\u043d\u0435\u0435, \u043e\u043d \u0442\u043e\u0436\u0435 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u043c\u0430\u043d\u0451\u0432\u0440\u0430\u043c\u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b, \u043d\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 dns-1). \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430: \u0432\u043c\u0435\u0441\u0442\u043e \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON \u043f\u043e","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-03T17:42:00+00:00","article:modified_time":"2020-07-03T17:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87101","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:58:52","updated":"2022-10-02 21:29:06"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/87101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=87101"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/87101\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=87101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=87101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=87101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}