{"id":87101,"date":"2020-07-03T19:42:00","date_gmt":"2020-07-03T17:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt"},"modified":"2020-07-03T19:42:00","modified_gmt":"2020-07-03T17:42:00","slug":"najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","title":{"rendered":"A fost g\u0103sit\u0103 cauza problemelor dehydrated cu serverele ACME, diferite de LetsEncrypt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sebastian Krause a identificat<\/a><\/noindex> sursa unei incompatibilit\u0103\u021bi ciudate cu serviciul Bypass<\/a><\/noindex> al scriptului dehydrated<\/a><\/noindex>, utilizat pentru automatizarea ob\u021binerii certificatelor TLS prin protocolul ACME. Bypass func\u021bioneaz\u0103 at\u00e2t cu clientul de referin\u021b\u0103, c\u00e2t \u0219i cu uacme, dar nu cu dehydrated (mai exact, a func\u021bionat \u0219i el cu unele ocoliri, dar exclusiv \u00een modul dns-1).<\/p>\n

Motivul s-a dovedit a fi banal: \u00een loc s\u0103 analizeze r\u0103spunsul \u00een format JSON \u00een mod corespunz\u0103tor, autorul dehydrated a folosit o caracteristic\u0103 de formatare specific\u0103 unui anumit output JSON de la serviciul Let's Encrypt \u0219i a efectuat analiza prin intermediul expresiilor regulate. \u00cens\u0103 Bypass returneaz\u0103 un JSON minificat, nu unul frumos formatat, \u0219i utilizat nu a func\u021bionat. Abordarea specificat\u0103 nu elimin\u0103 apari\u021bia problemelor \u0219i cu LetsEncrypt, dac\u0103 acest serviciu va schimba f\u0103r\u0103 preaviz formatul de emitere, r\u0103m\u00e2n\u00e2nd total \u00een conformitate cu protocolul oficial.<\/a><\/noindex> \u00cen discu\u021bia despre problem\u0103, s-a propus utilizarea unui parser JSON extern, cum ar fi<\/p>\n

json_pp (ad\u0103uga\u021bi \u00een pipe 'jq -r \u00ab.authorizations | .[]\u00bb' pentru o analiz\u0103 corect\u0103).<\/a><\/noindex> sau jq<\/a><\/noindex> (ad\u0103uga\u021bi \u00een pipe 'jq -r \u00ab.authorizations | .[]\u00bb' pentru o analiz\u0103 corect\u0103).
\nAutorul proiectului dehydrated (proiectul a fost recent<\/p>\n

v\u00e2ndut companiei Apilayer GmbH)<\/a><\/noindex> a convenit , c\u0103 analiza JSON este o problem\u0103 major\u0103, dar nu consider\u0103 o idee bun\u0103 s\u0103 adauge parsere externe, deoarece unul dintre principalele avantajuri ale scriptului este lipsa dependen\u021belor externe. \u00cen prezent, este ocupat, dar sper\u0103 s\u0103 acorde aten\u021bie solu\u021bion\u0103rii problemei \u00een urm\u0103toarele c\u00e2teva zile. \u00cen planuri este men\u021bionat\u0103 revizuirea parserului JSON sau integrarea unui parser gata f\u0103cut \u00een limbajul shell \u2014<\/a><\/noindex>, ceea ce face analiza JSON o problem\u0103 mare, dar a ad\u0103uga parselere externe nu consider\u0103 o idee bun\u0103, deoarece unul dintre avantajele cheie ale scriptului este absen\u021ba dependen\u021belor externe. \u00cen prezent, este ocupat, dar sper\u0103 s\u0103 acorde aten\u021bie solu\u021bion\u0103rii problemei \u00een urm\u0103toarele zile. \u00cen planuri este reimplementarea parserului JSON sau integrarea unui parser gata f\u0103cut \u00een limbajul shell \u2014 \u00cen Ubuntu 20.10, accesul la dmesg va fi restric\u021bionat<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Sebastian Krause \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0439 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c Bypass \u0441\u043a\u0440\u0438\u043f\u0442\u0430 dehydrated, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f TLS-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0443 ACME. \u0421 Bypass \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0442 \u0438 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u044b\u0439 \u043a\u043b\u0438\u0435\u043d\u0442, \u0438 uacme, \u043d\u043e \u043d\u0435 dehydrated (\u0442\u043e\u0447\u043d\u0435\u0435, \u043e\u043d \u0442\u043e\u0436\u0435 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u043c\u0438 \u043c\u0430\u043d\u0451\u0432\u0440\u0430\u043c\u0438 \u0437\u0430\u0440\u0430\u0431\u043e\u0442\u0430\u043b, \u043d\u043e \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 dns-1). \u041f\u0440\u0438\u0447\u0438\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u0430: \u0432\u043c\u0435\u0441\u0442\u043e \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c \u043e\u0442\u0432\u0435\u0442 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON \u043f\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-87101","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A fost g\u0103sit\u0103 cauza problemelor dehydrated cu serverele ACME, diferite de LetsEncrypt | ProHoster","description":"\ud83e\udd47A fost g\u0103sit\u0103 cauza problemelor dehydrated cu serverele ACME, diferite de LetsEncrypt | ProHoster","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u0430\u0439\u0434\u0435\u043d\u0430 \u043f\u0440\u0438\u0447\u0438\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c dehydrated \u0441 ACME-\u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u043c\u0438 \u043e\u0442 LetsEncrypt | ProHoster","og:description":"Sebastian Krause \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u043b \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a \u0441\u0442\u0440\u0430\u043d\u043d\u043e\u0439 \u043d\u0435\u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/najdena-prichina-problem-dehydrated-s-acme-serverami-otlichnymi-ot-letsencrypt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-03T17:42:00+00:00","article:modified_time":"2020-07-03T17:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"87101","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:58:52","updated":"2022-10-02 21:29:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/87101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=87101"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/87101\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=87101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=87101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=87101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}