{"id":101436,"date":"2021-09-27T16:22:56","date_gmt":"2021-09-27T14:22:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ustarevanie-kornevogo-sertifikata-identrust-privedyot-k-potere-doveriya-k-lets-encrypt-na-staryh-ustrojstvah"},"modified":"2021-09-27T16:22:56","modified_gmt":"2021-09-27T14:22:56","slug":"ustarevanie-kornevogo-sertifikata-identrust-privedyot-k-potere-doveriya-k-lets-encrypt-na-staryh-ustrojstvah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/ustarevanie-kornevogo-sertifikata-identrust-privedyot-k-potere-doveriya-k-lets-encrypt-na-staryh-ustrojstvah","title":{"rendered":"Skadencimi i certifikat\u00ebs rr\u00ebnj\u00ebsore IdenTrust do t\u00eb \u00e7oj\u00eb n\u00eb humbjen e besimit ndaj Let's Encrypt n\u00eb pajisjet e vjetra.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

M\u00eb 30 Shtator n\u00eb or\u00ebn 17:01 sipas koh\u00ebs s\u00eb Mosk\u00ebs skadon koha e jet\u00ebgjat\u00ebsis\u00eb s\u00eb certifikat\u00ebs rr\u00ebnj\u00eb t\u00eb kompanis\u00eb IdenTrust (DST Root CA X3), e cila u p\u00ebrdor p\u00ebr n\u00ebnshkrimin e certifikat\u00ebs rr\u00ebnj\u00eb t\u00eb autoritetit t\u00eb certifikimit Let’s Encrypt (ISRG Root X1), e kontrolluar nga komuniteti dhe ofron certifikata falas p\u00ebr t\u00eb gjith\u00eb q\u00eb e duan. N\u00ebnshkrimi i p\u00ebrbashk\u00ebt siguroi besueshm\u00ebri p\u00ebr certifikatat e Let’s Encrypt n\u00eb nj\u00eb gam\u00eb t\u00eb gjer\u00eb pajisjesh, sisteme operimi dhe shfletuesish gjat\u00eb periudh\u00ebs s\u00eb integrimit t\u00eb certifikat\u00ebs rr\u00ebnj\u00eb s\u00eb vet\u00eb Let’s Encrypt n\u00eb depozitat e certifikatave rr\u00ebnj\u00eb. <\/p>\n

Fillimisht ishte planifikuar q\u00eb pas skadimit t\u00eb DST Root CA X3, projekti Let’s Encrypt do t\u00eb kalonte n\u00eb formimin e n\u00ebnshkrimeve duke p\u00ebrdorur vet\u00ebm certifikat\u00ebn e tij rr\u00ebnj\u00eb, por nj\u00eb hap i till\u00eb do t\u00eb \u00e7onte n\u00eb humbjen e kompatibilitetit me shum\u00eb sisteme t\u00eb vjetra, t\u00eb cilat nuk kishin shtuar certifikat\u00ebn rr\u00ebnj\u00eb t\u00eb Let’s Encrypt n\u00eb depozitat e tyre. N\u00eb ve\u00e7anti, rreth 30% e pajisjeve Android t\u00eb p\u00ebrdorura nuk kan\u00eb informacion p\u00ebr certifikat\u00ebn rr\u00ebnj\u00eb t\u00eb Let’s Encrypt, mb\u00ebshtetje e s\u00eb cil\u00ebs filloi vet\u00ebm me platform\u00ebn Android 7.1.1, e cila u l\u00ebshua n\u00eb fund t\u00eb vitit 2016. <\/p>\n

Let’s Encrypt nuk kishte planifikuar t\u00eb n\u00ebnshkruante nj\u00eb marr\u00ebveshje t\u00eb re p\u00ebr n\u00ebnshkrim t\u00eb p\u00ebrbashk\u00ebt, sepse kjo v\u00eb nj\u00eb p\u00ebrgjegj\u00ebsi t\u00eb shtuar mbi pjes\u00ebmarr\u00ebsit e marr\u00ebveshjes, heq autonomin\u00eb dhe lidhet me rregullat e tjera t\u00eb autoritetit t\u00eb certifikimit. Por p\u00ebr shkak t\u00eb rrezikut t\u00eb mundsh\u00ebm n\u00eb nj\u00eb num\u00ebr t\u00eb madh pajisjesh Android plani u rishikua. U arrit nj\u00eb marr\u00ebveshje e re me autoritetin e certifikimit IdenTrust, n\u00eb kuad\u00ebr t\u00eb s\u00eb cil\u00ebs u krijua nj\u00eb certifikat\u00eb alternative e n\u00ebnshkruar p\u00ebrbashk\u00ebt, e cila do t\u00eb jet\u00eb e vlefshme p\u00ebr tre vjet dhe do t\u00eb ruaj\u00eb mb\u00ebshtetje p\u00ebr pajisjet Android nga versioni 2.3.6. <\/p>\n

Megjithat\u00eb, certifikata e re e nd\u00ebrmjetme nuk mbulon shum\u00eb sisteme t\u00eb tjera t\u00eb vjetra. P\u00ebr shembull, pas skadimit t\u00eb certifikat\u00ebs DST Root CA X3 m\u00eb 30 Shtator, certifikatat Let’s Encrypt do t\u00eb ndalen s\u00eb funksionuari n\u00eb firmware dhe sisteme operimi q\u00eb nuk jan\u00eb m\u00eb t\u00eb mb\u00ebshtetura, ku p\u00ebr t\u00eb siguruar besueshm\u00ebrin\u00eb p\u00ebr certifikatat Let’s Encrypt do t\u00eb nevojitet shtimi manual i certifikat\u00ebs ISRG Root X1 n\u00eb depozitat e certifikatave rr\u00ebnj\u00eb. Problemet do t\u00eb shfaqen n\u00eb: <\/p>\n