{"id":87101,"date":"2020-07-03T19:42:00","date_gmt":"2020-07-03T17:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt"},"modified":"2020-07-03T19:42:00","modified_gmt":"2020-07-03T17:42:00","slug":"najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","title":{"rendered":"De oorzaak van problemen met dehydrated bij ACME-servers, anders dan LetsEncrypt, is gevonden","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sebastian Krause bepaalde<\/a><\/noindex> de bron van een vreemde incompatibiliteit met de service Bypass<\/a><\/noindex> script dehydrated<\/a><\/noindex>, gebruikt voor de automatisering van het verkrijgen van TLS-certificaten via het ACME-protocol. Met Bypass werken zowel de referentieklant als uacme, maar niet dehydrated (meer precies, deze werkte ook met enkele omzeilmanoeuvres, maar uitsluitend in de dns-1 modus).<\/p>\n

De oorzaak bleek eenvoudig: in plaats van de reactie in JSON-formaat echt te parseren, gebruikte de auteur dehydrated een kenmerk van de specifieke JSON-uitvoer van de Let's Encrypt-service en parseerde hij deze met behulp van reguliere expressies. Maar Bypass geeft geen mooi opgemaakte, maar gecomprimeerde JSON terug, en het gebruikte reguliere expressie<\/a><\/noindex> werkte niet. De genoemde aanpak sluit ook het ontstaan van problemen met LetsEncrypt niet uit, als deze service in de toekomst zonder waarschuwing het uitvoerformaat verandert, terwijl het nog steeds binnen de offici\u00eble protocolvoorwaarden blijft.<\/p>\n

Tijdens de discussie over het probleem werd voorgesteld om een externe JSON-parser te gebruiken, zoals json_pp<\/a><\/noindex> of jq<\/a><\/noindex> (voeg in de pipe 'jq -r \u00ab.authorizations | .[]\u00bb' toe voor een correcte parsing).
\nEen nadeel van deze aanpak is de verwatering van het idee om met minimale en gemakkelijk te verifi\u00ebren middelen te werken, evenals problemen met foutafhandeling.<\/p>\n

De auteur van het dehydrated-project (het project is onlangs verkocht<\/a><\/noindex> aan Apilayer GmbH) stemde ermee in<\/a><\/noindex>, wat erop wijst dat JSON-parsing een groot probleem is, maar hij vindt het geen goed idee om externe parsers toe te voegen, aangezien een van de belangrijkste voordelen van het script is dat het geen afhankelijkheden van derden heeft. Momenteel is hij bezig, maar hoopt in de komende dagen aandacht aan de oplossing van het probleem te kunnen besteden. In de planning staat het herontwerp van de JSON-parser of de integratie van een kant-en-klare parser in shell-taal \u2014 JSON.sh<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Bron: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Sebastian Krause \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0439 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c Bypass \u0441\u043a\u0440\u0438\u043f\u0442\u0430 dehydrated, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 ACME. \u0421 Bypass \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442, \u0438 uacme, \u043d\u043e \u043d\u0435 dehydrated (\u0442\u043e\u0447\u043d\u0435\u0435, \u043e\u043d \u0442\u043e\u0436\u0435 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u043c\u0430\u043d\u0451\u0432\u0440\u0430\u043c\u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b, \u043d\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 dns-1). \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430: \u0432\u043c\u0435\u0441\u0442\u043e \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON \u043f\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-87101","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Oorzaak van problemen met dehydrated op ACME-servers, anders dan LetsEncrypt, gevonden | ProHoster","description":"Sebastian Krause bepaalde de bron van een vreemde incompatibiliteit met de service","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0439\u0434\u0435\u043d\u0430 \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c dehydrated \u0441 ACME-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043e\u0442 LetsEncrypt | ProHoster","og:description":"Sebastian Krause \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0439 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-03T17:42:00+00:00","article:modified_time":"2020-07-03T17:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87101","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:58:52","updated":"2022-10-02 21:29:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/87101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=87101"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/87101\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=87101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=87101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=87101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}