Ndinapeza zomwe zimayambitsa vuto lakusowa madzi m'thupi ndi ma seva a ACME kupatula LetsEncrypt

Sebastian Krause wotsimikiza gwero la kusagwirizana kwachilendo ndi utumiki kulambalala script wopanda madzi, yomwe imagwiritsidwa ntchito kusinthira kulandila kwa ziphaso za TLS pogwiritsa ntchito protocol ya ACME. Onse ogwiritsira ntchito kasitomala ndi uacme amagwira ntchito ndi Bypass, koma osataya madzi m'thupi (molondola, adagwiranso ntchito ndi ma workaround, koma mu dns-1 mode).

Chifukwa chake chidakhala chaching'ono: m'malo mopereka mayankho mumtundu wa JSON zenizeni, wolemba wa dehydrated adagwiritsa ntchito mawonekedwe amtundu wina wa JSON kuchokera ku ntchito ya Let's Encrypt ndikuyigawa pogwiritsa ntchito mawu okhazikika. Koma Bypass imabwereranso osati yopangidwa bwino, koma JSON yosinthidwa, ndi yogwiritsidwa ntchito mawu okhazikika sizinagwire ntchito. Njirayi siyikupatulapo mavuto ndi LetsEncrypt ngati ntchitoyi isintha mawonekedwe operekera mtsogolo popanda chenjezo, ikukhalabe mkati mwa dongosolo la protocol yovomerezeka.

Pokambirana za vutoli, adalangizidwa kuti agwiritse ntchito chofotokozera chakunja cha JSON monga json_pp kapena jq (onjezani 'jq -r ".authorizations | .[]"' ku chitoliro kuti musanthule bwino).
Kuipa kwa njirayi ndikusintha kwa lingaliro logwiritsa ntchito njira zochepa komanso zotsimikizika mosavuta, komanso zovuta pakuwongolera zolakwika.

Mlembi wa projekiti yopanda madzi m'thupi (ntchitoyi idachitika posachedwa zatha Apilayer GmbH) anavomera, kuti kugawa JSON ndivuto lalikulu, koma saganiziranso kuwonjezera ma parsers akunja lingaliro labwino, chifukwa chimodzi mwazabwino za script ndi kusowa kwa kumangiriza kudalira kwakunja. Pakali pano ali wotanganidwa, koma akuyembekeza kudzipereka kuti athetse vutoli m'masiku angapo otsatira. Mapulaniwo akuphatikizanso kukonzanso JSON parser kapena kuphatikiza chojambula chokonzekera muchilankhulo cha chipolopolo - JSON.sh.

Source: opennet.ru