{"id":84766,"date":"2020-06-10T13:43:11","date_gmt":"2020-06-10T11:43:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory"},"modified":"2020-06-10T13:43:11","modified_gmt":"2020-06-10T11:43:11","slug":"problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","title":{"rendered":"Problema certificatelor r\u0103d\u0103cin\u0103 \u00eenvechite. \u00cen curs de rezolvare Let&#8217;s Encrypt \u0219i televizoarele inteligente","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Problema certificatelor r\u0103d\u0103cin\u0103 \u00eenvechite. Urmeaz\u0103 Let&#039;s Encrypt \u0219i televizoarele inteligente\" src=\"\/wp-content\/uploads\/2020\/06\/662b2b855f327f8d1a1f5bf99ca6fcef.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPentru ca browserul s\u0103 poat\u0103 autentifica site-ul web, acesta trebuie s\u0103 se prezinte cu un lan\u021b valid de certificate. Un lan\u021b tipic este prezentat mai sus, \u0219i poate con\u021bine mai mult de un certificat intermediar. Num\u0103rul minim de certificate dintr-un lan\u021b valid este de trei.<\/p>\n<p>Certificatul r\u0103d\u0103cin\u0103 este inima centrului de certificare. Este de fapt integrat \u00een sistemul dumneavoastr\u0103 de operare sau \u00een browser, fiind prezent fizic pe dispozitivul dumneavoastr\u0103. Nu poate fi schimbat din partea serverului. Este nevoie de o actualizare for\u021bat\u0103 a sistemului de operare sau a software-ului \u00eencorporat pe dispozitiv.<\/p>\n<p>Expertul \u00een securitate Scott Helme <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/impending-doom-root-ca-expiring-legacy-clients\/\">scrie<\/a><\/noindex>, c\u0103 problemele principale vor ap\u0103rea la centrul de certificare Let's Encrypt, deoarece acesta este cel mai popular CA pe internet \u00een prezent, iar certificatul s\u0103u r\u0103d\u0103cin\u0103 va expira \u00een cur\u00e2nd. Schimbarea r\u0103d\u0103cinii Let's Encrypt <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">este programat\u0103 pentru 8 iulie 2020<\/a><\/noindex>.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nCertificatele finale \u0219i intermediare ale autorit\u0103\u021bii de certificare (CA) sunt livrate clientului de pe server, iar certificatul r\u0103d\u0103cin\u0103 al clientului <i>este deja disponibil<\/i>, astfel c\u0103 prin aceast\u0103 colec\u021bie de certificate se poate construi un lan\u021b \u0219i se poate autentifica site-ul web. <\/p>\n<p>Problema const\u0103 \u00een faptul c\u0103 fiecare certificat are o dat\u0103 de expirare, dup\u0103 care necesit\u0103 \u00eenlocuirea. De exemplu, \u00eencep\u00e2nd cu 1 septembrie 2020, \u00een browserul Safari se inten\u021bioneaz\u0103 introducerea unei limite pe durata de valabilitate a certificatelor TLS pentru servere <noindex><a rel=\"nofollow\" href=\"https:\/\/support.apple.com\/en-us\/HT211025\">maxim 398 de zile<\/a><\/noindex>.<\/p>\n<p>Aceasta \u00eenseamn\u0103 c\u0103 to\u021bi va trebui s\u0103 \u00eenlocuim certificatul de server cel pu\u021bin o dat\u0103 la 12 luni. Aceast\u0103 restric\u021bie se aplic\u0103 doar certificatelor de server, se <i>nu<\/i> aplic\u0103 \u0219i certificatelor r\u0103d\u0103cin\u0103 CA.<\/p>\n<p>Certificatul CA este reglementat de un alt set de reguli, av\u00e2nd astfel restric\u021bii diferite asupra duratei de valabilitate. Foarte frecvent, \u00eent\u00e2lnim certificate intermediare cu o durat\u0103 de valabilitate de 5 ani \u0219i certificate r\u0103d\u0103cin\u0103 cu o durat\u0103 de via\u021b\u0103 de p\u00e2n\u0103 la 25 de ani! <\/p>\n<p>De obicei, nu exist\u0103 probleme cu certificatele intermediare, deoarece acestea sunt livrate clientului de server, care \u00ee\u0219i schimb\u0103 mult mai frecvent propriul certificat, astfel c\u0103 pur \u0219i simplu \u00een timpul acestei proceduri \u00eei \u00eenlocuie\u0219te \u0219i pe cele intermediare. Este destul de u\u0219or s\u0103 fie \u00eenlocuit \u00eempreun\u0103 cu certificatul de server, spre deosebire de certificatul r\u0103d\u0103cin\u0103 CA.<\/p>\n<p>A\u0219a cum am men\u021bionat deja, CA-ul r\u0103d\u0103cin\u0103 este integrat direct \u00een dispozitivul client, \u00een sistemul de operare, \u00een browser sau \u00een alt software. Schimbarea CA-ului r\u0103d\u0103cin\u0103 nu poate fi controlat\u0103 de site-ul web. Este necesar\u0103 o actualizare pe client, fie c\u0103 este vorba de un update al sistemului de operare sau al software-ului.<\/p>\n<p>Unele CA-uri r\u0103d\u0103cin\u0103 exist\u0103 de foarte mult timp, vorbim de 20-25 de ani. \u00cen cur\u00e2nd, unele dintre cele mai vechi CA-uri r\u0103d\u0103cin\u0103 se vor apropia de sf\u00e2r\u0219itul vie\u021bii lor naturale, timpul lor se apropie de terminare. Pentru majoritatea dintre noi, aceasta nu va fi deloc o problem\u0103, deoarece CA-urile au creat noi certificate r\u0103d\u0103cin\u0103, care au fost deja r\u0103sp\u00e2ndite \u00een \u00eentreaga lume \u00een actualiz\u0103rile sistemelor de operare \u0219i ale browserelor de ani de zile. Dar dac\u0103 cineva nu a actualizat sistemul de operare sau browserul de foarte mult timp, aceasta poate fi o problem\u0103.<\/p>\n<p>Aceast\u0103 situa\u021bie a ap\u0103rut pe 30 mai 2020 la 10:48:38 GMT. Aceasta este ora exact\u0103 c\u00e2nd <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/globalsign\/blog\/504784\/\">certificatul r\u0103d\u0103cin\u0103 AddTrust<\/a><\/noindex> de la centrul de certificare Comodo (Sectigo) a expirat.<\/p>\n<p>Acesta a fost folosit pentru semn\u0103tura \u00eencruci\u0219at\u0103, pentru a asigura compatibilitatea cu dispozitivele mai vechi, care nu au noul certificat r\u0103d\u0103cin\u0103 USERTrust \u00een stocare.<\/p>\n<p>Din p\u0103cate, problemele nu au ap\u0103rut doar \u00een browserele dep\u0103\u0219ite, ci \u0219i \u00een clien\u021bii non-browser care folosesc OpenSSL 1.0.x, LibreSSL \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/gitlab.com\/gnutls\/gnutls\/-\/blob\/master\/lib\/x509\/verify.c\">GnuTLS<\/a><\/noindex>. De exemplu, \u00een set-top box-urile <noindex><a rel=\"nofollow\" href=\"https:\/\/support.roku.com\/en-gb\/article\/360049417393\">Roku<\/a><\/noindex>, \u00een serviciul <noindex><a rel=\"nofollow\" href=\"https:\/\/t.co\/RdU3GDwPmD?amp=1\">Heroku<\/a><\/noindex>, \u00een aplica\u021biile Fortinet, Chargify, pe platforma .NET Core 2.0 sub Linux \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/__agwa\/timelines\/1266777818811322368\">multe altele.<\/a><\/noindex>.<\/p>\n<p>Se presupunea c\u0103 problema va afecta doar sistemele dep\u0103\u0219ite (Android 2.3, Windows XP, Mac OS X 10.11, iOS 9 etc.), deoarece browserele moderne pot accesa al doilea certificat r\u0103d\u0103cin\u0103 USERTrust. Dar de fapt au ap\u0103rut defect\u0103ri \u00een sute de servicii web care foloseau biblioteci gratuite OpenSSL 1.0.x \u0219i GnuTLS. Conexiunea sigur\u0103 a \u00eencetat s\u0103 se stabileasc\u0103, gener\u00e2nd o eroare de expirare a certificatului.<\/p>\n<h1>Urm\u0103torul - Let's Encrypt<\/h1>\n<p>\nUn alt bun exemplu al viitoarei schimb\u0103ri a CA-ului r\u0103d\u0103cin\u0103 este centrul de certificare Let's Encrypt. A\u0219adar <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/lets-encrypt-to-transition-to-isrg-root\/\">ei au planificat s\u0103 treac\u0103 de la lan\u021bul Identrust la propriul lan\u021b ISRG Root, dar acest lucru<\/a><\/noindex> nu s-a \u00eent\u00e2mplat. <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">\u201eDin cauza \u00eengrijor\u0103rilor legate de r\u0103sp\u00e2ndirea insuficient\u0103 a r\u0103d\u0103cinii ISRG pe dispozitivele Android, am decis s\u0103 am\u00e2n\u0103m data tranzi\u021biei c\u0103tre propria r\u0103d\u0103cin\u0103 din 8 iulie 2019 pe 8 iulie 2020\u201d, se men\u021bioneaz\u0103 \u00een comunicatul oficial al Let\u2019s Encrypt.<\/a><\/noindex>.<\/p>\n<p><img decoding=\"async\" alt=\"Problema certificatelor r\u0103d\u0103cin\u0103 \u00eenvechite. Urmeaz\u0103 Let&#039;s Encrypt \u0219i televizoarele inteligente\" src=\"\/wp-content\/uploads\/2020\/06\/703c24e0215466cd0d1d8f655c0af2c8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\"Din cauza temerilor cu privire la r\u0103sp\u00e2ndirea insuficient\u0103 a r\u0103d\u0103cinii ISRG pe dispozitivele Android, am decis s\u0103 am\u00e2n\u0103m data tranzi\u021biei c\u0103tre propria r\u0103d\u0103cin\u0103 de la 8 iulie 2019 la 8 iulie 2020\", se men\u021bioneaz\u0103 \u00een comunicatul oficial al Let's Encrypt.<\/p>\n<p>Data a trebuit s\u0103 fie am\u00e2nat\u0103 din cauza unei probleme cunoscut\u0103 sub numele de \u201epropagarea r\u0103d\u0103cinii\u201d (root propagation), \u0219i mai exact, a absen\u021bei propag\u0103rii r\u0103d\u0103cinii, atunci c\u00e2nd CA-ul r\u0103d\u0103cin\u0103 nu este foarte r\u0103sp\u00e2ndit pe to\u021bi clien\u021bii. <\/p>\n<p>\u00cen prezent, Let's Encrypt utilizeaz\u0103 un certificat intermediar semnat \u00eencruci\u0219at cu o lan\u021b c\u0103tre r\u0103d\u0103cina IdenTrust DST Root CA X3. Acest certificat r\u0103d\u0103cin\u0103 a fost emis \u00een septembrie 2000 \u0219i expir\u0103 pe 30 septembrie 2021. P\u00e2n\u0103 atunci, Let's Encrypt pl\u0103nuie\u0219te s\u0103 treac\u0103 la propria r\u0103d\u0103cin\u0103 auto-semnat\u0103 ISRG Root X1.<\/p>\n<p><img decoding=\"async\" alt=\"Problema certificatelor r\u0103d\u0103cin\u0103 \u00eenvechite. Urmeaz\u0103 Let&#039;s Encrypt \u0219i televizoarele inteligente\" src=\"\/wp-content\/uploads\/2020\/06\/0599df9bb72cf0f6c440ec66a45a5917.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nR\u0103d\u0103cina ISRG a fost emis\u0103 pe 4 iunie 2015. Dup\u0103 aceasta, a \u00eenceput procesul de aprobat ca centru de certificare, care s-a finalizat <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2018\/08\/06\/trusted-by-all-major-root-programs.html\">pe 6 august 2018.<\/a><\/noindex>De atunci, CA-ul r\u0103d\u0103cin\u0103 a fost disponibil pentru to\u021bi clien\u021bii prin actualizarea sistemului de operare sau software-ului. Tot ce trebuia s\u0103 face\u021bi era s\u0103 instala\u021bi actualizarea. <\/p>\n<p>Dar \u00een asta consta problema.<\/p>\n<p>Dac\u0103 telefonul mobil, televizorul sau un alt dispozitiv nu a fost actualizat de doi ani - cum va afla despre noul certificat r\u0103d\u0103cin\u0103 ISRG Root X1? \u0218i dac\u0103 nu este instalat \u00een sistem, toate certificatele serverului Let's Encrypt vor fi considerate invalide de c\u0103tre dispozitivul t\u0103u, imediat ce Let's Encrypt va trece la noua r\u0103d\u0103cin\u0103. \u00cen ecosistemul Android sunt multe dispozitive \u00eenvechite care nu au fost actualizate de mult timp.<\/p>\n<p><img decoding=\"async\" alt=\"Problema certificatelor r\u0103d\u0103cin\u0103 \u00eenvechite. Urmeaz\u0103 Let&#039;s Encrypt \u0219i televizoarele inteligente\" src=\"\/wp-content\/uploads\/2020\/06\/c724b7cb8b0b6f2fdaa369dbe5cc09bb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Ecosistemul Android<\/i><\/p>\n<p>De aceea Let's Encrypt a am\u00e2nat tranzi\u021bia c\u0103tre propria r\u0103d\u0103cin\u0103 ISRG \u0219i folose\u0219te \u00een continuare leg\u0103tura intermediar\u0103 care coboar\u0103 la r\u0103d\u0103cina IdenTrust. Dar schimbarea trebuie s\u0103 aib\u0103 loc \u00een orice caz. Data schimb\u0103rii r\u0103d\u0103cinii a fost stabilit\u0103 <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">8 iulie 2020.<\/a><\/noindex>.<\/p>\n<p>Pentru a verifica dac\u0103 pe dispozitivul dumneavoastr\u0103 (televizor, set-top box sau alt client) este instalat\u0103 r\u0103d\u0103cina ISRG X1, deschide\u021bi site-ul de test. <noindex><a rel=\"nofollow\" href=\"https:\/\/valid-isrgrootx1.letsencrypt.org\/\">https:\/\/valid-isrgrootx1.letsencrypt.org\/<\/a><\/noindex>Dac\u0103 nu apare un avertisment de securitate, de obicei este \u00een regul\u0103. <\/p>\n<p>Let's Encrypt nu este singurul care trebuie s\u0103 rezolve problema tranzi\u021biei c\u0103tre noua r\u0103d\u0103cin\u0103. Criptografia pe internet a \u00eenceput s\u0103 fie utilizat\u0103 acum pu\u021bin peste 20 de ani, a\u0219a c\u0103 acum este momentul \u00een care multe certificate r\u0103d\u0103cin\u0103 \u00ee\u0219i expir\u0103 valabilitatea.<\/p>\n<p>Proprietarii televizoarelor inteligente care nu \u0219i-au actualizat software-ul Smart TV de ani de zile pot \u00eent\u00e2mpina o astfel de problem\u0103. De exemplu, noua r\u0103d\u0103cin\u0103 GlobalSign <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r5.roots.globalsign.com\/\">R5 Root<\/a><\/noindex> a fost lansat \u00een 2012, iar dup\u0103 aceea, unele televizoare Smart mai vechi nu pot construi un lan\u021b c\u0103tre el, deoarece acest CA r\u0103d\u0103cin\u0103 pur \u0219i simplu nu exist\u0103 pentru ele. \u00cen special, ace\u0219ti clien\u021bi nu au putut stabili o conexiune securizat\u0103 cu site-ul bbc.co.uk. Pentru a rezolva problema, administratorii BBC au fost nevoi\u021bi s\u0103 recurg\u0103 la un truc: ei <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/impending-doom-root-ca-expiring-legacy-clients\/\">au construit pentru ace\u0219ti clien\u021bi un lan\u021b alternativ<\/a><\/noindex> prin intermediul unor certificate intermediare suplimentare, implic\u00e2nd r\u0103d\u0103cini vechi <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r3.roots.globalsign.com\/\">R3 Root<\/a><\/noindex> \u0219i <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r1.roots.globalsign.com\/\">R1 Root<\/a><\/noindex>, care nu au expirat \u00eenc\u0103.<\/p>\n<pre>www.bbc.co.uk (Leaf)\nGlobalSign ECC OV SSL CA 2018 (Intermediate)\nGlobalSign Root CA - R5 (Intermediate)\nGlobalSign Root CA - R3 (Intermediate)<\/pre>\n<p>\nAceasta este o solu\u021bie temporar\u0103. Problema nu va disp\u0103rea dac\u0103 software-ul clientului nu este actualizat. Un televizor inteligent este, de fapt, un computer limitat \u00een func\u021bionalitate care ruleaz\u0103 Linux. \u0218i f\u0103r\u0103 actualiz\u0103ri, certificatele sale r\u0103d\u0103cin\u0103 vor expira inevitabil.<\/p>\n<p>Aceasta se aplic\u0103 tuturor dispozitivelor, nu doar televizoarelor. Dac\u0103 ave\u021bi orice dispozitiv conectat la internet \u0219i care a fost promovat ca un dispozitiv \u201einteligent\u201d, atunci problema certificatelor expirate \u00eel afecteaz\u0103 aproape cu siguran\u021b\u0103. Dac\u0103 dispozitivul nu se actualizeaz\u0103, depozitul r\u0103d\u0103cin\u0103 CA se va \u00eenvechi \u00een timp, iar problema va ie\u0219i la suprafa\u021b\u0103. C\u00e2t de repede apare problema depinde de momentul ultimei actualiz\u0103ri a depozitului r\u0103d\u0103cin\u0103. Acesta poate fi cu c\u00e2\u021biva ani \u00eenainte de data real\u0103 a lans\u0103rii dispozitivului.<\/p>\n<p>Apropo, aceasta este problema pentru care unele mari platforme media nu pot folosi centre de certificare automatizate moderne precum Let's Encrypt, scrie Scott Helme. Acestea nu sunt potrivite pentru televizoarele inteligente, iar num\u0103rul r\u0103d\u0103cinilor este prea mic pentru a garanta suportul certificatului pe dispozitivele \u00eenvechite. Altfel, televiziunile pur \u0219i simplu nu vor fi capabile s\u0103 ruleze servicii moderne de streaming.<\/p>\n<p>Ultimul incident cu AddTrust a ar\u0103tat c\u0103 chiar \u0219i marile companii IT nu sunt preg\u0103tite pentru expirarea unui certificat r\u0103d\u0103cin\u0103.<\/p>\n<p>Solu\u021bia problemei este una singur\u0103 \u2014 actualizarea. Dezvoltatorii de dispozitive inteligente trebuie s\u0103 asigure din timp un mecanism de actualizare a software-ului \u0219i a certificatelor r\u0103d\u0103cin\u0103. Pe de alt\u0103 parte, produc\u0103torii nu au interesul de a men\u021bine func\u021bionalitatea dispozitivelor lor dup\u0103 expirarea garan\u021biei.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/promo.miran.ru\"><img decoding=\"async\" alt=\"Problema certificatelor r\u0103d\u0103cin\u0103 \u00eenvechite. Urmeaz\u0103 Let&#039;s Encrypt \u0219i televizoarele inteligente\" src=\"\/wp-content\/uploads\/2020\/06\/3705c7e9fca090ccca917bb7fba231f7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/a><\/noindex><br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dcmiran\/blog\/506026\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0442\u043e\u0431\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043c\u043e\u0433 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442, \u0442\u043e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0431\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u0422\u0438\u043f\u0438\u0447\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u0441\u0432\u0435\u0440\u0445\u0443, \u0432 \u043d\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u041c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0440\u0430\u0432\u043d\u043e \u0442\u0440\u0451\u043c. \u041a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u2014 \u0441\u0435\u0440\u0434\u0446\u0435 \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u043d \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432 \u0432\u0430\u0448\u0443 \u041e\u0421 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043e\u043d \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0415\u0433\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u043d\u044f\u0435\u0448\u044c \u0441\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84767,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 Let\u2019s Encrypt \u0438 \u0443\u043c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-10T11:43:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-10T11:43:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Problema certificatelor r\u0103d\u0103cin\u0103 \u00eenvechite. Urmeaz\u0103 Let's Encrypt \u0219i televizoarele inteligente | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 Let\u2019s Encrypt \u0438 \u0443\u043c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-10T11:43:11+00:00","article:modified_time":"2020-06-10T11:43:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84766","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:51:43","updated":"2022-09-29 06:39:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=84766"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84766\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/84767"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=84766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=84766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=84766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}