{"id":102446,"date":"2021-12-02T21:36:39","date_gmt":"2021-12-02T19:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov"},"modified":"2021-12-02T21:36:39","modified_gmt":"2021-12-02T19:36:39","slug":"uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","title":{"rendered":"Zranite\u013enos\u0165 v Mozilla NSS umo\u017e\u0148uj\u00faca vykona\u0165 k\u00f3d pri spracovan\u00ed certifik\u00e1tov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Vo s\u00fabore kryptografick\u00fdch kni\u017en\u00edc NSS (Network Security Services), ktor\u00e9 vyv\u00edja spolo\u010dnos\u0165 Mozilla, bola zisten\u00e1 kritick\u00e1 zranite\u013enos\u0165 (CVE-2021-43527), ktor\u00e1 m\u00f4\u017ee vies\u0165 k vykonaniu k\u00f3du \u00fato\u010dn\u00edka pri spracovan\u00ed digit\u00e1lnych podpisov DSA alebo RSA-PSS, stanoven\u00fdch pomocou met\u00f3dy k\u00f3dovania DER (Distinguished Encoding Rules). Probl\u00e9m, ktor\u00fd dostal k\u00f3dov\u00e9 meno BigSig, bol odstr\u00e1nen\u00fd vo vydaniach NSS 3.73 a NSS ESR 3.68.1. Aktualiz\u00e1cie bal\u00edkov s\u00fa dostupn\u00e9 pre distrib\u00facie Debian, RHEL, Ubuntu, SUSE, Arch Linux, Gentoo, FreeBSD. Aktualiz\u00e1cie pre Fedora zatia\u013e nie s\u00fa dostupn\u00e9.    <\/p>\n<p> Probl\u00e9m sa prejavuje v aplik\u00e1ci\u00e1ch, ktor\u00e9 pou\u017e\u00edvaj\u00fa NSS na spracovanie digit\u00e1lnych podpisov CMS, S\/MIME, PKCS #7 a PKCS #12, alebo pri overovan\u00ed certifik\u00e1tov v realiz\u00e1ci\u00e1ch TLS, X.509, OCSP a CRL. Zranite\u013enos\u0165 m\u00f4\u017ee vz\u00eds\u0165 v r\u00f4znych klientsk\u00fdch a serverov\u00fdch aplik\u00e1ci\u00e1ch, ktor\u00e9 podporuj\u00fa TLS, DTLS a S\/MIME, v e-mailov\u00fdch klientoch a PDF prehliada\u010doch, ktor\u00e9 pou\u017e\u00edvaj\u00fa volanie NSS CERT_VerifyCertificate() na overenie digit\u00e1lnych podpisov.     <\/p>\n<p>Ako pr\u00edklad zranite\u013en\u00fdch aplik\u00e1ci\u00ed sa spom\u00ednaj\u00fa LibreOffice, Evolution a Evince. Potenci\u00e1lne by probl\u00e9m mohol ovplyvni\u0165 aj tak\u00e9 projekty ako Pidgin, Apache OpenOffice, Suricata, Curl, Chrony, Red Hat Directory Server, Red Hat Certificate System, mod_nss pre http server Apache, Oracle Communications Messaging Server, Oracle Directory Server Enterprise Edition. Zranite\u013enos\u0165 sa v\u0161ak neprejavuje v Firefox, Thunderbird a Tor Browser, kde sa na overenie pou\u017e\u00edva samostatn\u00e1 kni\u017enica mozilla::pkix, ktor\u00e1 je tie\u017e s\u00fa\u010das\u0165ou NSS. Probl\u00e9m sa net\u00fdka ani prehliada\u010dov zalo\u017een\u00fdch na Chromiu (ak neboli \u0161peci\u00e1lne zostaven\u00e9 s NSS), ktor\u00e9 pou\u017e\u00edvali NSS do roku 2015, ale potom pre\u0161li na BoringSSL.    <\/p>\n<p>Zranite\u013enos\u0165 je sp\u00f4soben\u00e1 chybou v k\u00f3de overovania certifik\u00e1tov vo funkcii vfy_CreateContext v s\u00fabore secvfy.c. Chyba sa prejavuje pri \u010d\u00edtan\u00ed certifik\u00e1tu klienta zo servera, ako aj pri spracovan\u00ed <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sk\/server\/dts-prohoster\/\"   title=\"serverom\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3028\">serverom<\/a> certifik\u00e1tov klientov. Po\u010das overovania digit\u00e1lneho podpisu, zak\u00f3dovan\u00e9ho met\u00f3dou DER, NSS dek\u00f3duje podpis do vyrovn\u00e1vacej pam\u00e4te s pevnou ve\u013ekos\u0165ou a odovzd\u00e1va tento vyrovn\u00e1vaciu pam\u00e4\u0165 do modulu PKCS #11. Pri \u010fal\u0161om spracovan\u00ed, pre podpisy DSA a RSA-PSS sa nespr\u00e1vne kontroluje ve\u013ekos\u0165, \u010do vedie k prete\u010deniu vyrovn\u00e1vacej pam\u00e4te pridelen\u00e9 pod \u0161trukt\u00faru VFYContextStr, ak ve\u013ekos\u0165 digit\u00e1lneho podpisu presahuje 16384 bitov (pod vyrovn\u00e1vaciu pam\u00e4\u0165 je pridelen\u00fdch 2048 bajtov, ale nie je skontrolovan\u00e9, \u017ee podpis m\u00f4\u017ee by\u0165 v\u00e4\u010d\u0161ieho rozmeru).    <\/p>\n<p>K\u00f3d so zranite\u013enos\u0165ou sa sleduje od roku 2003, no nepredstavoval hrozbu a\u017e do refaktorovania, ktor\u00e9 sa uskuto\u010dnilo v roku 2012. V roku 2017 bola pri implement\u00e1cii podpory RSA-PSS vykonan\u00e1 t\u00e1 ist\u00e1 chyba. Na vykonanie \u00fatoku nie je potrebn\u00e1 n\u00e1ro\u010dn\u00e1 gener\u00e1cia ur\u010dit\u00fdch k\u013e\u00fa\u010dov na z\u00edskanie po\u017eadovan\u00fdch \u00fadajov, preto\u017ee prete\u010denie sa vyskytuje v \u0161t\u00e1diu pred kontrolou spr\u00e1vnosti digit\u00e1lneho podpisu. \u010cas\u0165 \u00fadajov, ktor\u00e1 presahuje limity, sa zapisuje do oblasti pam\u00e4te obsahuj\u00facej ukazovatele na funkcie, \u010do u\u013eah\u010duje vytv\u00e1ranie funk\u010dn\u00fdch exploitov.    <\/p>\n<p>Zranite\u013enos\u0165 bola odhalen\u00e1 v\u00fdskumn\u00edkmi z Google Project Zero po\u010das experimentov s nov\u00fdmi met\u00f3dami fuzzing-testovania a je dobr\u00fdm pr\u00edkladom toho, ako m\u00f4\u017eu by\u0165 trivi\u00e1lne zranite\u013enosti v \u0161iroko testovanom zn\u00e1mom projekte dlhodobo prehliadan\u00e9:  <\/p>\n<ul>\n<li class=\"l\"> K\u00f3d NSS je spravovan\u00fd sk\u00fasen\u00fdm t\u00edmom zodpovedn\u00fdm za bezpe\u010dnos\u0165, ktor\u00fd vyu\u017e\u00edva modern\u00e9 met\u00f3dy testovania a anal\u00fdzy ch\u00fdb. Existuje nieko\u013eko programov na vypl\u00e1canie v\u00fdznamn\u00fdch odmien za odha\u013eovanie zranite\u013enost\u00ed v NSS.\n<li class=\"l\">  NSS bol jedn\u00fdm z prv\u00fdch projektov, ktor\u00e9 sa zapojili do iniciat\u00edvy Google oss-fuzz, a bol tie\u017e testovan\u00fd v rozv\u00edjaj\u00facom sa fuzzing-testovacom syst\u00e9me Mozilla zalo\u017eenom na libFuzzer.\n<li class=\"l\"> K\u00f3d kni\u017enice bol opakovane testovan\u00fd v r\u00f4znych statick\u00fdch analyz\u00e1toroch, vr\u00e1tane sledovania slu\u017eby Coverity od roku 2008.\n<li class=\"l\"> Do roku 2015 sa NSS pou\u017e\u00edval v Google Chrome a nez\u00e1visle od Mozilly bol testovan\u00fd t\u00edmom Google (od roku 2015 pre\u0161iel Chrome na BoringSSL, ale podpora portu zalo\u017een\u00e9ho na NSS zost\u00e1va).    <\/ul>\n<p>Hlavn\u00e9 probl\u00e9my, kv\u00f4li ktor\u00fdm zostala t\u00e1to zranite\u013enos\u0165 dlho bez pov\u0161imnutia:  <\/p>\n<ul>\n<li class=\"l\"> Modulov\u00e1 kni\u017enica NSS a fuzzingov\u00e9 testovanie sa uskuto\u010dnilo nie celkovo, ale na \u00farovni jednotliv\u00fdch komponentov. Napr\u00edklad sa samostatne overoval k\u00f3d dek\u00f3dovania DER a spracovania certifik\u00e1tov \u2014 po\u010das fuzzingu mohol by\u0165 z\u00edskan\u00fd certifik\u00e1t, ktor\u00fd by viedol k v\u00fdskytu posudzovanej zranite\u013enosti, ale jeho overenie sa nedostalo k overovaciemu k\u00f3du a probl\u00e9m sa neprejavil.\n<li class=\"l\"> Pri fuzzing teste boli nastaven\u00e9 pr\u00edsne obmedzenia na ve\u013ekos\u0165 v\u00fdstupu (10000 bajtov) pri absencii podobn\u00fdch obmedzen\u00ed v NSS (mnoh\u00e9 \u0161trukt\u00fary v \u0161tandardnom re\u017eime mohli ma\u0165 v\u00e4\u010d\u0161iu ve\u013ekos\u0165 ako 10000 bajtov, preto na odhalenie probl\u00e9mov bolo potrebn\u00e9 v\u00e4\u010d\u0161ie mno\u017estvo vstupn\u00fdch d\u00e1t). Pre \u00fapln\u00fa kontrolu mal by\u0165 limit 224-1 bajtov (16 MB), \u010do zodpoved\u00e1 maxim\u00e1lnej ve\u013ekosti certifik\u00e1tu povolenej v TLS.\n<li class=\"l\"> Nespr\u00e1vne ch\u00e1panie pokrytia k\u00f3du fuzzing testovan\u00edm. Zranite\u013en\u00fd k\u00f3d bol akt\u00edvne testovan\u00fd, ale s pou\u017eit\u00edm fuzzov, ktor\u00e9 neboli schopn\u00e9 generova\u0165 potrebn\u00e9 vstupn\u00e9 d\u00e1ta. Napr\u00edklad, fuzzer tls_server_target pou\u017e\u00edval preddefinovan\u00fd s\u00fabor pripraven\u00fdch certifik\u00e1tov, \u010do obmedzovalo kontrolu k\u00f3du overovania certifik\u00e1tu len na TLS spr\u00e1vy a zmeny stavu protokolu.    <\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56268\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 DSA \u0438\u043b\u0438 RSA-PSS, \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043c\u0435\u0442\u043e\u0434\u0430 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f DER (Distinguished Encoding Rules). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u043e \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f BigSig, \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0445 NSS 3.73 \u0438 NSS ESR 3.68.1. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u043a\u0435\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102446","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Mozilla NSS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-12-02T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-12-02T19:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranite\u013enos\u0165 v Mozilla NSS, ktor\u00e1 umo\u017e\u0148uje vykona\u0165 k\u00f3d pri spracovan\u00ed certifik\u00e1tov | ProHoster","description":"V s\u00fabore kryptografick\u00fdch kni\u017en\u00edc NSS (Network Security Services), vyv\u00edjan\u00fdch spolo\u010dnos\u0165ou Mozilla, bola zisten\u00e1 kritick\u00e1 zranite\u013enos\u0165 (CVE-2021-43527), ktor\u00e1 m\u00f4\u017ee vies\u0165 k vykonaniu k\u00f3du \u00fato\u010dn\u00edka.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Mozilla NSS, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u0434 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043d\u0430\u0431\u043e\u0440\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a NSS (Network Security Services), \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 Mozilla, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2021-43527), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u043f\u0440\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/uyazvimost-v-mozilla-nss-pozvolyayushhaya-vypolnit-kod-pri-obrabotke-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-02T19:36:39+00:00","article:modified_time":"2021-12-02T19:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102446","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-02 19:38:04","updated":"2026-02-09 21:46:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/102446","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=102446"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/102446\/revisions"}],"predecessor-version":[{"id":160309,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/102446\/revisions\/160309"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=102446"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=102446"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=102446"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}