{"id":86701,"date":"2020-06-28T19:42:14","date_gmt":"2020-06-28T17:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition"},"modified":"2020-06-28T19:42:14","modified_gmt":"2020-06-28T17:42:14","slug":"uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition","title":{"rendered":"Poprawa parametr\u00f3w bezpiecze\u0144stwa po\u0142\u0105czenia SSL w Zimbra Collaboration Suite Open-Source Edition","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Niezawodno\u015b\u0107 szyfrowania jest jednym z najwa\u017cniejszych wska\u017anik\u00f3w podczas korzystania z system\u00f3w informacyjnych w biznesie, poniewa\u017c codziennie bior\u0105 one udzia\u0142 w przesy\u0142aniu ogromnych ilo\u015bci poufnych informacji. Powszechnie uznawanym \u015brodkiem oceny jako\u015bci po\u0142\u0105czenia SSL jest niezale\u017cny test od Qualys SSL Labs. Poniewa\u017c test ten mo\u017ce uruchomi\u0107 ka\u017cdy, dla dostawc\u00f3w SaaS szczeg\u00f3lnie wa\u017cne jest, aby ocena w tym te\u015bcie by\u0142a maksymalna. O jako\u015b\u0107 po\u0142\u0105czenia SSL dbaj\u0105 nie tylko dostawcy SaaS, ale r\u00f3wnie\u017c zwyk\u0142e przedsi\u0119biorstwa. Dla nich ten test stanowi doskona\u0142\u0105 okazj\u0119 do wykrycia potencjalnych luk i zlikwidowania wszystkich mo\u017cliwo\u015bci dla cyberprzest\u0119pc\u00f3w.<\/p>\n<p><img decoding=\"async\" alt=\"Poprawa parametr\u00f3w bezpiecze\u0144stwa po\u0142\u0105czenia SSL w Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/d6303075bad0b206deb6a75d812aefd8.png\" style=\"display:block;margin: 0 auto;\" \/><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nW Zimbra OSE dozwolone jest u\u017cycie dw\u00f3ch rodzaj\u00f3w <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pl\/ssl-sertifikat\/\"   title=\"certyfikat\u00f3w SSL\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"344\">certyfikat\u00f3w SSL<\/a>. Pierwszy to certyfikat self-signed, kt\u00f3ry automatycznie dodawany jest podczas instalacji. Certyfikat ten jest darmowy i nie ma ogranicze\u0144 czasowych, co czyni go idealnym do testowania Zimbra OSE lub do u\u017cytku wy\u0142\u0105cznie w ramach sieci wewn\u0119trznej. Jednak przy logowaniu do klienta webowego u\u017cytkownicy zobacz\u0105 ostrze\u017cenie z przegl\u0105darki, \u017ce ten certyfikat jest niepewny, a test od Qualys SSL Labs jednoznacznie obleje tw\u00f3j serwer.<\/p>\n<p>Drugi to komercyjny certyfikat SSL, podpisany przez centrum certyfikacji. Takie certyfikaty s\u0105 bezproblemowo akceptowane przez przegl\u0105darki i zazwyczaj s\u0105 wykorzystywane w komercyjnej eksploatacji Zimbra OSE. Zaraz po poprawnej instalacji komercyjnego certyfikatu Zimbra OSE 8.8.15 pokazuje ocen\u0119 A w te\u015bcie od Qualys SSL Labs. To doskona\u0142y wynik, ale naszym celem jest osi\u0105gni\u0119cie wyniku A+.<\/p>\n<p><img decoding=\"async\" alt=\"Poprawa parametr\u00f3w bezpiecze\u0144stwa po\u0142\u0105czenia SSL w Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/d8788ca0b826e1b7c63e0a487745484b.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<img decoding=\"async\" alt=\"Poprawa parametr\u00f3w bezpiecze\u0144stwa po\u0142\u0105czenia SSL w Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/f9c8e0435491a5ab5abe2500978ac7f9.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAby uzyska\u0107 maksymaln\u0105 ocen\u0119 w te\u015bcie od Qualys SSL Labs przy korzystaniu z Zimbra Collaboration Suite Open-Source Edition, nale\u017cy wykona\u0107 szereg krok\u00f3w:<\/p>\n<p><b>1. Zwi\u0119kszenie parametr\u00f3w protoko\u0142u Diffiego-Hellmana<\/b><\/p>\n<p>Domy\u015blnie we wszystkich komponentach Zimbra OSE 8.8.15, kt\u00f3re korzystaj\u0105 z OpenSSL, warto\u015b\u0107 parametr\u00f3w protoko\u0142u Diffiego-Hellmana wynosi 2048 bit\u00f3w. W zasadzie jest to wi\u0119cej ni\u017c wystarczaj\u0105ce, aby uzyska\u0107 ocen\u0119 A+ w te\u015bcie Qualys SSL Labs. Jednak w przypadku aktualizacji z wcze\u015bniejszych wersji, warto\u015b\u0107 parametr\u00f3w mo\u017ce by\u0107 ni\u017csza. Zaleca si\u0119 wi\u0119c po zako\u0144czeniu aktualizacji wykona\u0107 polecenie zmdhparam set -new 2048, co podniesie parametry protoko\u0142u Diffiego-Hellmana do akceptowalnych 2048 bit\u00f3w, a je\u015bli zajdzie potrzeba, za pomoc\u0105 tego samego polecenia mo\u017cna zwi\u0119kszy\u0107 warto\u015b\u0107 parametr\u00f3w do 3072 lub 4096 bit\u00f3w, co z jednej strony wyd\u0142u\u017cy czas generacji, jednak z drugiej strony pozytywnie wp\u0142ynie na poziom bezpiecze\u0144stwa serwera pocztowego.<\/p>\n<p><b>2. W\u0142\u0105czenie zalecanej listy u\u017cywanych szyfr\u00f3w<\/b><\/p>\n<p>Domy\u015blnie Zimbra Collaboration Suite Edition Open-Source obs\u0142uguje szeroki zakres silnych i s\u0142abych szyfr\u00f3w, kt\u00f3re maj\u0105 na celu szyfrowanie danych przesy\u0142anych przez zabezpieczone po\u0142\u0105czenie. Jednak korzystanie z s\u0142abych szyfr\u00f3w jest powa\u017cnym minusem podczas sprawdzania bezpiecze\u0144stwa po\u0142\u0105czenia SSL. Aby tego unikn\u0105\u0107, konieczne jest skonfigurowanie listy u\u017cywanych szyfr\u00f3w.<\/p>\n<p>Aby to zrobi\u0107, nale\u017cy skorzysta\u0107 z polecenia <code>zmprov mcf zimbraReverseProxySSLCiphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128:AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4'<\/code><\/p>\n<p>Do tego polecenia od razu dodano zestaw zalecanych szyfr\u00f3w, dzi\u0119ki czemu mo\u017cna od razu w\u0142\u0105czy\u0107 do listy zaufane szyfry i wykluczy\u0107 te niebezpieczne. Teraz wystarczy tylko zrestartowa\u0107 w\u0119z\u0142y z odwrotnym proxy za pomoc\u0105 polecenia zmproxyctl restart. Po restarcie wprowadzone zmiany wejd\u0105 w \u017cycie.<\/p>\n<p>W przypadku, gdy ta lista z jakich\u015b wzgl\u0119d\u00f3w ci nie odpowiada, mo\u017cna usun\u0105\u0107 z niej kilka s\u0142abych szyfr\u00f3w za pomoc\u0105 polecenia <code>zmprov mcf +zimbraSSLExcludeCipherSuites<\/code>. Na przyk\u0142ad polecenie <code>zmprov mcf +zimbraSSLExcludeCipherSuites TLS_RSA_WITH_RC4_128_MD5 +zimbraSSLExcludeCipherSuites TLS_RSA_WITH_RC4_128_SHA +zimbraSSLExcludeCipherSuites SSL_RSA_WITH_RC4_128_MD5 +zimbraSSLExcludeCipherSuites SSL_RSA_WITH_RC4_128_SHA +zimbraSSLExcludeCipherSuites TLS_ECDHE_RSA_WITH_RC4_128_SHA<\/code>, kt\u00f3ra ca\u0142kowicie wykluczy u\u017cycie szyfr\u00f3w RC4. Mo\u017cna r\u00f3wnie\u017c post\u0105pi\u0107 w ten spos\u00f3b z szyframi AES i 3DES.<\/p>\n<p><b>3. W\u0142\u0105czenie HSTS<\/b><\/p>\n<p>W\u0142\u0105czone mechanizmy wymuszaj\u0105ce szyfrowanie po\u0142\u0105czenia i przywracanie sesji TLS s\u0105 r\u00f3wnie\u017c obowi\u0105zkowymi warunkami uzyskania najwy\u017cszej oceny w te\u015bcie od Qualys SSL Labs. Aby je w\u0142\u0105czy\u0107, nale\u017cy wpisa\u0107 komend\u0119 <code>zmprov mcf +zimbraResponseHeader \"Strict-Transport-Security: max-age=31536000\"<\/code>. Ta komenda doda niezb\u0119dny nag\u0142\u00f3wek do konfiguracji, a nowe ustawienia wejd\u0105 w \u017cycie po ponownym uruchomieniu Zimbra OSE za pomoc\u0105 komendy <b>zmcontrol restart<\/b>.<\/p>\n<p>Ju\u017c na tym etapie test od Qualys SSL Labs poka\u017ce ocen\u0119 A+, jednak je\u015bli chcesz dodatkowo poprawi\u0107 bezpiecze\u0144stwo swojego serwera, mo\u017cna podj\u0105\u0107 jeszcze kilka dzia\u0142a\u0144.<\/p>\n<p><img decoding=\"async\" alt=\"Poprawa parametr\u00f3w bezpiecze\u0144stwa po\u0142\u0105czenia SSL w Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/ca77c335df2de2378b991d8a345dc9ae.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNa przyk\u0142ad, mo\u017cna w\u0142\u0105czy\u0107 wymuszone szyfrowanie po\u0142\u0105cze\u0144 mi\u0119dzyprocesowych oraz wymusi\u0107 szyfrowanie przy \u0142\u0105czeniu si\u0119 z us\u0142ugami Zimbra OSE. Aby sprawdzi\u0107 po\u0142\u0105czenia mi\u0119dzyprocesowe, nale\u017cy wpisa\u0107 nast\u0119puj\u0105ce komendy:<\/p>\n<pre><code class=\"plaintext\">zmlocalconfig -e ldap_starttls_supported=1\nzmlocalconfig -e zimbra_require_interprocess_security=1\nzmlocalconfig -e ldap_starttls_required=true<\/code><\/pre>\n<p>\nAby w\u0142\u0105czy\u0107 wymuszone szyfrowanie, nale\u017cy wpisa\u0107:<\/p>\n<pre><code class=\"plaintext\">zmprov gs `zmhostname` zimbraReverseProxyMailMode\nzmprov ms `zmhostname` zimbraReverseProxyMailMode https\n\nzmprov gs `zmhostname` zimbraMailMode\nzmprov ms `zmhostname` zimbraMailMode https\n\nzmprov gs `zmhostname` zimbraReverseProxySSLToUpstreamEnabled\nzmprov ms `zmhostname` zimbraReverseProxySSLToUpstreamEnabled TRUE<\/code><\/pre>\n<p>Dzi\u0119ki tym komendom wszystkie po\u0142\u0105czenia z proxy-<a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/pl\/server\/dts-dusseldorf\/\"   title=\"serwerami\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3435\">serwerami<\/a> oraz serwerami pocztowymi b\u0119d\u0105 szyfrowane, a tak\u017ce nast\u0105pi proxy wszystkich tych po\u0142\u0105cze\u0144.<\/p>\n<p><img decoding=\"async\" alt=\"Poprawa parametr\u00f3w bezpiecze\u0144stwa po\u0142\u0105czenia SSL w Zimbra Collaboration Suite Open-Source Edition\" src=\"\/wp-content\/uploads\/2020\/06\/e129b3fda82417414c2b284f7b4bea94.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nW ten spos\u00f3b, stosuj\u0105c si\u0119 do naszych wskaz\u00f3wek, mo\u017cna nie tylko osi\u0105gn\u0105\u0107 najwy\u017csz\u0105 ocen\u0119 w te\u015bcie bezpiecze\u0144stwa SSL, ale tak\u017ce znacznie zwi\u0119kszy\u0107 bezpiecze\u0144stwo ca\u0142ej infrastruktury Zimbra OSE.<\/p>\n<p>Wszelkie pytania dotycz\u0105ce Zextras Suite mo\u017cna kierowa\u0107 do przedstawiciela firmy \u201eZextras\u201d Ekateriny Triandafiliidi pod adresem e-mail katerina@zextras.com<br \/>\n<br \/>\u0179r\u00f3d\u0142o: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/zimbra\/blog\/508372\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0432\u0435\u0434\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u043e\u043d\u0438 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041e\u0431\u0449\u0435\u043f\u0440\u0438\u043d\u044f\u0442\u044b\u043c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043e\u0446\u0435\u043d\u043a\u0438 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0430 SSL-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0439 \u0442\u0435\u0441\u0442 \u043e\u0442 Qualys SSL Labs. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0439 \u0442\u0435\u0441\u0442 \u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u0442\u043e \u0443\u0433\u043e\u0434\u043d\u043e, \u0434\u043b\u044f SaaS-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u0430\u0436\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043e\u0446\u0435\u043d\u043a\u0430 \u0432 \u044d\u0442\u043e\u043c \u0442\u0435\u0441\u0442\u0435 \u0431\u044b\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439. \u041e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":86702,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-86701","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0432\u0435\u0434\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u043e\u043d\u0438 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SSL-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0432 Zimbra Collaboration Suite Open-Source Edition | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0432\u0435\u0434\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u043e\u043d\u0438 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-28T17:42:14+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-28T17:42:14+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Poprawa parametr\u00f3w bezpiecze\u0144stwa po\u0142\u0105czenia SSL w Zimbra Collaboration Suite Open-Source Edition | ProHoster","description":"Niezawodno\u015b\u0107 szyfrowania jest jednym z najwa\u017cniejszych wska\u017anik\u00f3w przy korzystaniu z system\u00f3w informacyjnych dla biznesu, poniewa\u017c codziennie bior\u0105 one udzia\u0142 w przekazywaniu ogromnej ilo\u015bci poufnych informacji.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 SSL-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u0432 Zimbra Collaboration Suite Open-Source Edition | ProHoster","og:description":"\u041d\u0430\u0434\u0435\u0436\u043d\u043e\u0441\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043b\u044f \u0431\u0438\u0437\u043d\u0435\u0441\u0430, \u0432\u0435\u0434\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u043e\u043d\u0438 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435 \u043e\u0433\u0440\u043e\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/pl\/blog\/administrirovanie\/uluchshenie-parametrov-bezopasnosti-ssl-soedineniya-v-zimbra-collaboration-suite-open-source-edition","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-28T17:42:14+00:00","article:modified_time":"2020-06-28T17:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"86701","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:09:18","updated":"2026-02-19 09:14:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/86701","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=86701"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/86701\/revisions"}],"predecessor-version":[{"id":161810,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/86701\/revisions\/161810"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/86702"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=86701"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=86701"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=86701"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}