Kukadzi 27, 2020 Ngati Encrypt Yemahara Chitupa Chiremera yakapa bhiriyoni chitupa.

Mukupemberera kuburitswa kwenhau, vamiriri veprojekiti vanoyeuka kuti zuva rekutanga remamiriyoni zana akapihwa zvitupa rakapembererwa. muna June 2017. Ipapo chikamu cheHTTPS traffic paInternet chaive 58% (muUS - 64%). Mumakore maviri nehafu, nhamba dzakakura zvakanyanya: “Nhasi, 81% yemapeji akaremerwa pasi rose anoshandisa HTTPS, uye muUnited States tiri pa91%! - vakomana vanobva purojekiti vanofara. - Kubudirira kunoshamisa. Iyi idanho repamusoro rekuvanzika uye kuchengetedzeka kune wese munhu. "

Let's Encrypt yakaita basa rakakosha mukugadzira zvitupa zveHTTPS chiyero chekushandisa, uye yakasimba traffic encryption ichiva yakajairwa paInternet.

Beta kuyedzwa kweiyo itsva Let's Encrypt chitupa chiremera chakatanga muna Zvita 2015. Chinhu chakasarudzika chenzvimbo nyowani yaive yekuti maitiro ekuburitsa zvitupa pakutanga aive otomatiki.

Kugadzirisa otomatiki kweHTTPS paserver kunoitika mumatanho maviri. Munhanho yekutanga, mumiririri anozivisa iyo CA yekodzero yemutungamiriri we server kune zita rezita. Semuyenzaniso, kusimbiswa kungasanganisira kugadzira yakati rebei, kana kuisa HTTP sosi ine yakananga URI mukati medura.

Let's Encrypt inozivisa webhu server inomhanyisa mumiriri nekiyi yayo yeruzhinji. Makiyi eruzhinji neakavanzika anogadzirwa nemumiriri pamberi pekutanga kubatana kuCA. Munguva yekuongorora otomatiki, mumiririri anoita akati wandei bvunzo: semuenzaniso, inosaina yakagashirwa-yenguva pasiwedhi ine kiyi yeruzhinji uye inopa HTTP sosi ine chaiyo URI. Kana iyo siginecha yedhijitari iri chokwadi uye bvunzo dzese dzapasa, mumiriri anopihwa kodzero dzekutarisira zvitupa zvedomeini.

Munhanho yechipiri, mumiririri anogona kukumbira, kuvandudza, uye kudzoreredza zvitupa. Kuti ungoburitsa chitupa, dambudziko-mhinduro (dambudziko-mhinduro, dambudziko-mhinduro) kirasi yechokwadi protocol inonzi Automated Certificate Management Environment (ACME) inoshandiswa. Ese manipulations ane chitupa anoitwa pasina kumisa webhu server uchishandisa ACME mutengi certbot. Zviri nyore kushandisa, inoshanda pane akawanda masisitimu anoshanda, uye akanyorwa zvakanaka. Pane inyanzvi modhi ine yakawedzera seti yezvirongwa. Kuwedzera kune Certbot, kune vamwe vakawanda ACME vatengi.

Kukosha kweLet Encrypt

Let's Encrypt yakashandura musika waimbotongwa nekutengesa maCA. Vave kutobuda mubhizinesi retifiketi reDV (Domain Validation), kunyangwe vachiramba vachitengesa zvitupa zveOrganization Validation (OV) uye Extended Validation (EV) izvo Let's Encrypt hazvibudisi. Nekudaro, ichi chigadzirwa niche, uye yemahara Let's Encrypt zvitupa zvinotonga zvakanyanya mumusika mukuru.

Let's Encrypt yaita chiyero chekuburitsa otomatiki zvitupa. Zvisinei nehupenyu hwavo hupfupi (mazuva makumi mapfumbamwe), maitiro otomatiki anobvisa "chinhu chemunhu" icho chinowanzomiririra njodzi huru yekuchengetedza. Domain administrator vanowanzo kanganwa kuvandudza zvitupa, zvichiita kuti masevhisi atadze. Chiitiko chekupedzisira chakadai chakaitika neMicrosoft Teams. Musi waKukadzi 90, 3, iyi sevhisi yekubatana yakaenda kunze kwenyika nekuda kwechitupa chakapera basa.

Kutsiva otomatiki kwezvitupa uchishandisa iyo ACME protocol kunobvisa mukana wezviitiko zvakadaro.

Kunyange zvazvo Let's Encrypt project ichishandira hafu yeInternet, munyika yenyama isangano diki risingaite purofiti: “Mumakore maviri nehafu aya, sangano redu rakakura, asi kwete zvakanyanya! vanonyora. “Muna Chikumi 2017, takabata mawebhusaiti anosvika mamirioni makumi mana nematanhatu ane vashandi venguva yakazara gumi nerimwe uye bhajeti regore remadhora 46 miriyoni. tiri kushanda nekanopfuura kana nzvimbo dzakawanda nevashandi vaviri chete uye kuwedzera kwe11 muzana mubhajeti.

Iyo purojekiti inotsigirwa kuburikidza zvipo и rubatsiro.

Parizvino, HTTPS yave iyo de facto standard painternet. Kubva gore rapfuura, mabhurawuza makuru anga achiyambira vashandisi nezve njodzi yekubatanidza kune masaiti asina encrypt traffic pamusoro peHTTPS. Let's Encrypt inopihwa neshanduko yakadaro munzvimbo yekuchengetedza.

Pamusoro peizvozvo, Let's Encrypt ndizvo chaizvo yakamutsiridza veruzhinji XMPP server zvivakwa. Iye zvino Jabber anoshanda nechisimba encryption ese ari mutengi-server uye server-server mazinga, uye huwandu hwakawanda hwezvitupa hwakapihwa naLet Encrypt.

"Senharaunda, takaita zvinhu zvinoshamisa kuchengetedza vanhu online," inoverenga kudaro kuburitswa. “Kupihwa kwebhirioni imwe zvitupa humbowo hwekufambira mberi kwatakaita senharaunda.

Source: www.habr.com