{"id":184233,"date":"2026-11-12T11:41:15","date_gmt":"2026-11-12T09:41:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/udostoveryayushhij-czentr-emudhra-otozval-eshhyo-8-promezhutochnyh-kornevyh-sertifikatov"},"modified":"2026-11-12T11:41:21","modified_gmt":"2026-11-12T09:41:21","slug":"emudhra-certificate-authority-revokes-8-more-intermediate-root-certificates","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/emudhra-certificate-authority-revokes-8-more-intermediate-root-certificates","title":{"rendered":"Apstiprin\u0101\u0161anas centrs eMudhra atsauca v\u0113l 8 starpposma sak\u0146u sertifik\u0101tus","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Uz\u0146\u0113mums eMudhra ir atkl\u0101jis papildu deta\u013cas par incidentu, kur\u0101 asto\u0146iem sak\u0146u sertifik\u0101tiem izsniedz\u0113ja centr\u0101 bija viegli uzminami sl\u0113gtie atsl\u0113gas, kam bija tikai 1 baits entropijas, nevis 48. Papildus s\u0101kotn\u0113ji identific\u0113tajiem probl\u0113mu starpsertifik\u0101tiem tiek zi\u0146ots par v\u0113l 8 atceltiem, bet ne t\u0101p\u0113c, ka tie rad\u012btu entropijas probl\u0113mas. Izmekl\u0113\u0161ana par\u0101d\u012bja, ka probl\u0113mu avots ar entropiju bija pa\u0161u izstr\u0101d\u0101ts Python skripts, kas tika izmantots sl\u0113gto atsl\u0113gu p\u0101rs\u016bt\u012b\u0161anai starp da\u017e\u0101du ra\u017eot\u0101ju aparat\u016bras atsl\u0113gu glab\u0101tav\u0101m (HSM). Atsl\u0113gu p\u0101rs\u016bt\u012b\u0161ana bija saist\u012bta ar aizkav\u0113\u0161anos pieg\u0101d\u0113 uzlabot\u0101m HSM mode\u013ciem, kas atbilst jaun\u0101m pras\u012bb\u0101m izsniedz\u0113jiem centriem. <\/p>\n

D\u0113\u013c k\u013c\u016bdas ECDSA sl\u0113gto atsl\u0113gu izm\u0113rs tika samazin\u0101ts l\u012bdz 1 baitam. Turkl\u0101t, atsleigu p\u0101rs\u016bt\u012b\u0161anas proces\u0101 starp HSM skripts apstr\u0101d\u0101ja sl\u0113gt\u0101s atsl\u0113gas neaizsarg\u0101taj\u0101 operat\u012bvaj\u0101 atmi\u0146\u0101, kur\u0101 tas tika palaists, kam\u0113r darb\u012bbas ar sl\u0113gtaj\u0101m atsl\u0113g\u0101m b\u016btu j\u0101veic tikai HSM iek\u0161ien\u0113. HSM \u017eurn\u0101li apstiprin\u0101ja, ka aparat\u016bras glab\u0101tavas darboj\u0101s pareizi, bet probl\u0113ma rad\u0101s, izmantojot pa\u0161izstr\u0101d\u0101tu skriptu. <\/p>\n

Papildus ECDSA atsl\u0113g\u0101m skripts tika izmantots ar\u012b 8 RSA-4096 atsl\u0113gu p\u0101rs\u016bt\u012b\u0161anai, ar kur\u0101m nerad\u0101s entropijas probl\u0113mas, bet atsl\u0113gu apstr\u0101de parastaj\u0101 atmi\u0146\u0101 p\u0101rk\u0101pj dro\u0161\u012bbas pras\u012bbas, kuras j\u0101iev\u0113ro izsniedz\u0113jiem centriem, t\u0101d\u0113\u013c ar\u012b RSA sertifik\u0101ti tagad ir atsaukti.
\n
Avots: opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f eMudhra \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0432\u043e\u0441\u044c\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438 \u0432\u043c\u0435\u0441\u0442\u043e 48. \u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e\u0431 \u043e\u0442\u0437\u044b\u0432\u0435 \u0435\u0449\u0451 8, \u043d\u043e \u043d\u0435 \u0438\u0437-\u0437\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0435\u0439. \u0420\u0430\u0437\u0431\u043e\u0440 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0435\u0439 \u0441\u0442\u0430\u043b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184233","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Izsniedz\u0113ja centrs eMudhra ir atsaucis v\u0113l 8 starpsertifik\u0101tus | ProHoster","description":"Uz\u0146\u0113mums eMudhra ir atkl\u0101jis papildu deta\u013cas par incidentu, kur\u0101 asto\u0146iem sak\u0146u sertifik\u0101tiem izsniedz\u0113ja centr\u0101 bija viegli uzminami sl\u0113gti atsl\u0113gas, kam bija tikai 1 baits.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/emudhra-certificate-authority-revokes-8-more-intermediate-root-certificates","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 eMudhra \u043e\u0442\u043e\u0437\u0432\u0430\u043b \u0435\u0449\u0451 8 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f eMudhra \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u043c, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0443 \u0432\u043e\u0441\u044c\u043c\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0431\u0438\u0440\u0430\u0435\u043c\u044b\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/emudhra-certificate-authority-revokes-8-more-intermediate-root-certificates","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-12T09:41:15+00:00","article:modified_time":"2026-11-12T09:41:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184233","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=184233"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184233\/revisions"}],"predecessor-version":[{"id":184234,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/184233\/revisions\/184234"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=184233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=184233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=184233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}