{"id":72068,"date":"2020-03-01T14:51:16","date_gmt":"2020-03-01T11:51:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/lets-encrypt-vydal-milliard-sertifikatov"},"modified":"2020-03-03T16:14:01","modified_gmt":"2020-03-03T13:14:01","slug":"lets-encrypt-vydal-milliard-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","title":{"rendered":"Let’s Encrypt izsniedza miljardu sertifik\u0101tu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Let's2020. gada 27. febru\u0101r\u012b bezmaksas sertific\u0113\u0161anas centrs Let's Encrypt izsniedza miljardth sertifik\u0101tu<\/a><\/noindex>.<\/p>\n

Svin\u012bgaj\u0101 preses rel\u012bz\u0113 projekta p\u0101rst\u0101vji atceras, ka iepriek\u0161\u0113jais jubilejas atz\u012bm\u0113jums ar 100 miljoniem izsniegto sertifik\u0101tu notika 2017. gada j\u016bnij\u0101<\/a><\/noindex>. Toreiz HTTPS trafika \u012bpatsvars internet\u0101 bija 58 % (ASV \u2014 64 %). Pusotra gada laik\u0101 r\u0101d\u012bt\u0101ji ir b\u016btiski pieaugu\u0161i: \u201e\u0160odien 81 % visu pasaul\u0113 iel\u0101d\u0113jamo lapu izmanto HTTPS, bet Savienotaj\u0101s Valst\u012bs m\u0113s esam sasniegu\u0161i 91 %! \u2014 priec\u0101jas projekta dal\u012bbnieki. \u2014 Neticams sasniegums. Tas ir daudz augst\u0101ks konfidencialit\u0101tes un dro\u0161\u012bbas l\u012bmenis visiem.\u201d <\/p>\n

Let's Encrypt sp\u0113l\u0113ja \u013coti svar\u012bgu lomu, lai HTTPS sertifik\u0101ti k\u013c\u016btu par utilit\u0101ru standartu, bet dro\u0161a trafika \u0161ifr\u0113\u0161ana - par nep\u0101rprotamu normu internet\u0101.
\n<\/a><\/noindex>
\nInov\u0101ciju sertific\u0113\u0161anas centra Let's Encrypt beta test\u0113\u0161ana s\u0101k\u0101s 2015. gada decembr\u012b. Jaun\u0101 centra unik\u0101l\u0101 iez\u012bme bija t\u0101, ka sertifik\u0101tu izsnieg\u0161anas process s\u0101kotn\u0113ji bija piln\u012bb\u0101 automatiz\u0113ts.<\/p>\n

Autom\u0101tisk\u0101 HTTPS iestat\u012b\u0161ana server\u012b notiek divos posmos. Pirmaj\u0101 posm\u0101 a\u0123ents inform\u0113 sertific\u0113\u0161anas centru par administratora ties\u012bb\u0101m uz dom\u0113na nosaukumu. Piem\u0113ram, p\u0101rbaude var ietvert noteikta apak\u0161dom\u0113na izveidi vai HTTP resursa iestat\u012b\u0161anu iek\u0161\u0113j\u0101 dom\u0113n\u0101 ar noteiktu URI.<\/p>\n

\"Let's
\n
\nLet's Encrypt identific\u0113 t\u012bmek\u013ca serveri ar palaistu a\u0123entu p\u0113c publisk\u0101 atsl\u0113ga. Publisk\u0101s un priv\u0101t\u0101s atsl\u0113gas tiek \u0123ener\u0113tas a\u0123enta pirms pirm\u0101 savienojuma ar sertifik\u0101cijas centru. Autom\u0101tisk\u0101s p\u0101rbaudes laik\u0101 a\u0123ents veic virkni testu: piem\u0113ram, paraksta ar publisko atsl\u0113gu ieg\u016bto vienreiz\u0113ju paroli un iesniedz HTTP resursu ar noteiktu URI. Ja digit\u0101lais paraksts ir pareizs un visi testi iztur\u0113ti, a\u0123entam tiek pie\u0161\u0137irtas ties\u012bbas p\u0101rvald\u012bt sertifik\u0101tus dom\u0113nam.<\/p>\n

\"Let's
\n
\nOtraj\u0101 posm\u0101 a\u0123ents var piepras\u012bt, atjaunin\u0101t un atsaukt sertifik\u0101tus. Autom\u0101tiskai sertifik\u0101ta izsnieg\u0161anai tiek izmantots izaicin\u0101juma-atbildes autentifik\u0101cijas protokols, kas paz\u012bstams k\u0101 Automated Certificate Management Environment (ACME). Visas manipul\u0101cijas ar sertifik\u0101tu tiek veiktas, neapturot t\u012bmek\u013ca serveri, izmantojot ACME klientu. Certbot<\/a><\/noindex>. Tas ir viegli lietojams, darbojas liel\u0101kaj\u0101 da\u013c\u0101 oper\u0113t\u0101jsist\u0113mu un ir lieliski dokument\u0113ts. Ir ekspertu re\u017e\u012bms ar papla\u0161in\u0101tiem iestat\u012bjumiem. Turkl\u0101t, bez Certbot, ir daudz citu ACME klientu<\/a><\/noindex>. <\/p>\n

Svar\u012bga loma Let’s Encrypt<\/h1>\n

\nLet’s Encrypt ir \u012bstenojis patiesu revol\u016bciju tirg\u016b, kur iepriek\u0161 vald\u012bja komerci\u0101lie sertifik\u0101cijas centri. Tagad tie praktiski ir izg\u0101ju\u0161i no DV sertifik\u0101tu (sertifik\u0101ti ar dom\u0113na apstiprin\u0101jumu, Domain Validation) izdo\u0161anas biznesa, lai gan turpina p\u0101rdot organiz\u0101cijas apstiprin\u0101\u0161anas (Organization Validation, OV) un augstas uzticam\u012bbas (Extended Validation, EV) sertifik\u0101tus, kurus Let’s Encrypt nepie\u0161\u0137ir, jo tos nevar automatiz\u0113t. Tom\u0113r tas ir ni\u0161as produkts, bet masveida tirg\u016b nep\u0101rprotami valda bezmaksas sertifik\u0101ti Let’s Encrypt.<\/p>\n

Let’s Encrypt ir padar\u012bjis sertifik\u0101tu autom\u0101tisko atk\u0101rtotu izsnieg\u0161anu par standartu. Neskatoties uz \u012bso to dz\u012bves ilgumu (90 dienas), autom\u0101tisk\u0101 proced\u016bra nov\u0113r\u0161 \"cilv\u0113cisko faktoru\", kas tradicion\u0101li ir galvenais dro\u0161\u012bbas v\u0101jums. Dom\u0113nu administratori bie\u017ei vien vienk\u0101r\u0161i aizmirst pagarin\u0101t sertifik\u0101tus, k\u0101 rezult\u0101t\u0101 pakalpojumi p\u0101rtrauc darb\u012bbu. P\u0113d\u0113jais \u0161\u0101ds incidents notika ar Microsoft Teams. 2020. gada 3. febru\u0101r\u012b \u0161is koplieto\u0161anas pakalpojums dev\u0101s offline sakar\u0101 ar beigu termi\u0146a sertifik\u0101tu<\/a><\/noindex>.<\/p>\n

Sertifik\u0101tu autom\u0101tiska nomai\u0146a, izmantojot ACME protokolu, izsl\u0113dz l\u012bdz\u012bgu incidentu iesp\u0113jam\u012bbu.<\/p>\n

Lai gan Let’s Encrypt projekts apkalpo pusi interneta, fiziskaj\u0101 pasaul\u0113 t\u0101 ir maza bezpe\u013c\u0146as organiz\u0101cija: \"P\u0113d\u0113jo divu ar pusi gadu laik\u0101 m\u016bsu organiz\u0101cija ir augusi, bet \u013coti maz! \u2013 vi\u0146i raksta. \u2013 2017. gada j\u016bnij\u0101 m\u0113s apkalpoj\u0101m aptuveni 46 miljonus t\u012bmek\u013ca viet\u0146u ar 11 darbiniekiem un ar gada bud\u017eetu 2,61 miljonu ASV dol\u0101ru. \u0160odien m\u0113s apkalpojam gandr\u012bz 192 miljonus t\u012bmek\u013ca viet\u0146u ar 13 darbiniekiem un gada bud\u017eetu aptuveni 3,35 miljonus ASV dol\u0101ru. Tas noz\u012bm\u0113, ka m\u0113s apkalpojam vair\u0101k nek\u0101 \u010detras reizes vair\u0101k viet\u0146u, izmantojot tikai divus papildus darbiniekus un 28% bud\u017eeta pieaugumu.\"<\/p>\n

Projektu atbalsta ziedojumi<\/a><\/noindex> un sponsori<\/a><\/noindex>.<\/p>\n

\u0160obr\u012bd HTTPS ir k\u013cuvis par de facto standartu internet\u0101. Kop\u0161 pag\u0101ju\u0161\u0101 gada galvenie p\u0101rl\u016bkprogrammas br\u012bdina lietot\u0101jus par briesm\u0101m, piek\u013c\u016bstot vietn\u0113m, kas nesniedz datu \u0161ifr\u0113\u0161anu, izmantojot HTTPS. \u0160aj\u0101 dro\u0161\u012bbas ainav\u0101 b\u016btiska loma ir bijusi Let's Encrypt.<\/p>\n

Turkl\u0101t Let's Encrypt faktiski atz\u012bvida publisko XMPP serveru infrastrukt\u016bru<\/a><\/noindex>. Tagad Jabber darbojas ar uzticamu \u0161ifr\u0113\u0161anu gan klienta-servera, gan servera-servera l\u012bmen\u012b, un absol\u016btais vair\u0101kums sertifik\u0101tu ir izsniegti no Let's Encrypt.<\/p>\n

\"Let's
\n
\n\"K\u0101 kopiena m\u0113s esam paveiku\u0161i neticamas lietas, lai aizsarg\u0101tu cilv\u0113kus internet\u0101, - teikts preses rel\u012bz\u0113<\/a><\/noindex>. - Viena miljard sertifik\u0101tu izsnieg\u0161ana ir apliecin\u0101jums visam progresam, ko m\u0113s esam sasniegu\u0161i k\u0101 kopiena.\"
\n
Avots: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442. \u0412 \u043f\u0440\u0430\u0437\u0434\u043d\u0438\u0447\u043d\u043e\u043c \u043f\u0440\u0435\u0441\u0441-\u0440\u0435\u043b\u0438\u0437\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432\u0441\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u044e\u0431\u0438\u043b\u0435\u0439 \u0432 100\u00a0\u043c\u043b\u043d \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438 \u0432 \u0438\u044e\u043d\u0435 2017 \u0433\u043e\u0434\u0430. \u0422\u043e\u0433\u0434\u0430 \u0434\u043e\u043b\u044f HTTPS-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 58% (\u0432 \u0421\u0428\u0410\u00a0\u2014 64%). \u0417\u0430 \u0434\u0432\u0430 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u0433\u043e\u0434\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0438: \u00ab\u0421\u0435\u0433\u043e\u0434\u043d\u044f 81% \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u043c\u044b\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":72069,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-72068","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Let\u2019s Encrypt izsniedza miljardu sertifik\u0101tu | ProHoster","description":"2020. gada 27. febru\u0101r\u012b bezmaksas sertifik\u0101cijas centrs.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Let\u2019s Encrypt \u0432\u044b\u0434\u0430\u043b \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"27 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2020 \u0433\u043e\u0434\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u0439 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/lets-encrypt-vydal-milliard-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-01T11:51:16+00:00","article:modified_time":"2020-03-03T13:14:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72068","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:51:22","updated":"2022-09-30 13:26:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/72068","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=72068"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/72068\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/72069"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=72068"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=72068"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=72068"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}