{"id":101490,"date":"2021-10-01T16:22:46","date_gmt":"2021-10-01T14:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust"},"modified":"2021-10-01T16:22:46","modified_gmt":"2021-10-01T14:22:46","slug":"sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","title":{"rendered":"P\u00ebrplasje n\u00eb OpenBSD, DragonFly BSD dhe Electron p\u00ebr shkak t\u00eb skadimit t\u00eb certifikat\u00ebs rr\u00ebnj\u00ebsore IdenTrust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>P\u00ebrfundimi i vlefshm\u00ebris\u00eb s\u00eb certifikat\u00ebs rr\u00ebnj\u00eb nga kompania IdenTrust (DST Root CA X3), e p\u00ebrdorur p\u00ebr n\u00ebnshkrimin e certifikat\u00ebs rr\u00ebnj\u00eb t\u00eb autoritetit t\u00eb certifikimit Let's Encrypt, ka shkaktuar probleme me verifikimin e certifikat\u00ebve Let's Encrypt n\u00eb projekte q\u00eb p\u00ebrdorin versione t\u00eb vjetra t\u00eb OpenSSL dhe GnuTLS. Problemet gjithashtu kan\u00eb prekur bibliotek\u00ebn LibreSSL, zhvilluesit e s\u00eb cil\u00ebs nuk e kan\u00eb marr\u00eb parasysh p\u00ebrvoj\u00ebn e kaluar lidhur me d\u00ebshtimet q\u00eb ndodh\u00ebn pas skadimit t\u00eb certifikat\u00ebs rr\u00ebnj\u00eb AddTrust t\u00eb autoritetit t\u00eb certifikimit Sectigo (Comodo).    <\/p>\n<p>Kujtojm\u00eb se n\u00eb versionet e OpenSSL deri n\u00eb deg\u00ebn 1.0.2 p\u00ebrfshir\u00eb dhe n\u00eb GnuTLS deri n\u00eb versionin 3.6.14, ekzistonte nj\u00eb gabim q\u00eb nuk lejonte p\u00ebrpunimin e sakt\u00eb t\u00eb certifikat\u00ebve t\u00eb n\u00ebnshkruar nd\u00ebrmjet\u00ebsisht, n\u00eb rastin e skadimit t\u00eb nj\u00ebr\u00ebs prej certifikatave rr\u00ebnj\u00eb q\u00eb ishin t\u00eb angazhuara n\u00eb n\u00ebnshkrim, madje edhe n\u00eb rastin kur ishin t\u00eb tjera zinxhir\u00eb besimi t\u00eb vlefsh\u00ebm (n\u00eb rastin e Let's Encrypt, skadimi i certifikat\u00ebs rr\u00ebnj\u00eb IdenTrust nuk lejon verifikimin, madje edhe n\u00ebse sistemi ka mb\u00ebshtetje p\u00ebr certifikat\u00ebn rr\u00ebnj\u00eb Let's Encrypt, e cila \u00ebsht\u00eb e vlefshme deri n\u00eb vitin 2030). Natyra e gabimit \u00ebsht\u00eb se versionet e vjetra t\u00eb OpenSSL dhe GnuTLS e interpretonin certifikat\u00ebn si nj\u00eb zinxhir linear, nd\u00ebrsa sipas RFC 4158 certifikata mund t\u00eb p\u00ebrfaq\u00ebsoj\u00eb nj\u00eb graf t\u00eb drejtuar qarkor t\u00eb shp\u00ebrndar\u00eb me disa k\u00ebnde besimi q\u00eb duhet t\u00eb merren parasysh.     <\/p>\n<p>\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0431\u043e\u044f \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0438\u0437 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 (\/etc\/ca-certificates.conf \u0438 \/etc\/ssl\/certs) \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 &#171;DST Root CA X3&#187;, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 &#171;update-ca-certificates -f -v&#187;). \u0412 CentOS \u0438 RHEL \u043c\u043e\u0436\u043d\u043e \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 &#171;DST Root CA X3&#187; \u0432 \u0447\u0451\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a:         trust dump &#8212;filter &#171;pkcs11:id=%c4%a7%b1%a4%7b%2c%71%fa%db%e1%4b%90%75%ff%c4%15%60%85%89%10&#187; | openssl x509 | sudo tee \/etc\/pki\/ca-trust\/source\/blacklist\/DST-Root-CA-X3.pem     sudo update-ca-trust extract      <\/ul>\n<p>Disa nga d\u00ebshtimet e hasura pas skadimit t\u00eb certifikat\u00ebs themelore IdenTrust:  <\/p>\n<ul>\n<li class=\"l\"> N\u00eb OpenBSD, utilitari syspatch, i p\u00ebrdorur p\u00ebr t\u00eb instaluar p\u00ebrdit\u00ebsime binareshe t\u00eb sistemit, ka ndalur s\u00eb funksionuari. Projekti OpenBSD ka l\u00ebshuar me urgjenc\u00eb patches p\u00ebr deg\u00ebt 6.8 dhe 6.9, q\u00eb rregullojn\u00eb problemet me verifikimin e certifikatave kryqazimisht t\u00eb n\u00ebnshkruara n\u00eb LibreSSL, nj\u00eb nga certifikatate themelore n\u00eb zinxhirin e besimit t\u00eb t\u00eb cilave \u00ebsht\u00eb skaduar. Si nj\u00eb zgjidhje alternative rekomandohet q\u00eb n\u00eb \/etc\/installurl t\u00eb kaloni nga HTTPS n\u00eb HTTP (kjo nuk paraqet rrezik p\u00ebr sigurin\u00eb, pasi p\u00ebrdit\u00ebsimet verifikohen gjithashtu p\u00ebrmes n\u00ebnshkrimit digjital) ose t\u00eb zgjidhni nj\u00eb pasqyr\u00eb alternative (ftp.usa.openbsd.org, ftp.hostserver.de, cdn.openbsd.org). Gjithashtu, mund t\u00eb hiqni certifikat\u00ebn e skaduar DST Root CA X3 nga skedari \/etc\/ssl\/cert.pem.\n<li class=\"l\"> N\u00eb DragonFly BSD, probleme t\u00eb ngjashme vihen re gjat\u00eb pun\u00ebs me DPorts. Kur aktivizohet menaxheri i paketave pkg, jepet nj\u00eb gabim verifikimi certifikate. Rregullimi \u00ebsht\u00eb shtuar sot n\u00eb deg\u00ebt master, DragonFly_RELEASE_6_0 dhe DragonFly_RELEASE_5_8. Si nj\u00eb zgjidhje alternative, mund t\u00eb hiqet certifikata DST Root CA X3.\n<li class=\"l\"> Procesi i verifikimit t\u00eb certifikat\u00ebve Let's Encrypt \u00ebsht\u00eb nd\u00ebrprer\u00eb n\u00eb aplikacionet q\u00eb bazohen n\u00eb platform\u00ebn Electron. Problemi \u00ebsht\u00eb zgjidhur n\u00eb p\u00ebrdit\u00ebsimet 12.2.1, 13.5.1, 14.1.0, 15.1.0.\n<li class=\"l\"> N\u00eb disa distribuate jan\u00eb v\u00ebrejtur probleme me qasjen n\u00eb depozit\u00eb t\u00eb paketeve gjat\u00eb p\u00ebrdorimit t\u00eb menaxherit t\u00eb paketave APT, q\u00eb lidhen me versionet e vjetra t\u00eb bibliotek\u00ebs GnuTLS. Problemi preku Debian 9, i cili kishte p\u00ebrdorur nj\u00eb paket\u00eb t\u00eb pap\u00ebrmir\u00ebsuar t\u00eb GnuTLS, e cila \u00e7oi n\u00eb probleme me qasjen n\u00eb deb.debian.org p\u00ebr p\u00ebrdoruesit q\u00eb nuk e instaluan p\u00ebrdit\u00ebsimin n\u00eb koh\u00eb (p\u00ebrmir\u00ebsimi gnutls28-3.5.8-5+deb9u6 u ofrua m\u00eb 17 Shtator). Si nj\u00eb zgjidhje alternative p\u00ebr k\u00ebt\u00eb problem, rekomandohet t\u00eb hiqet DST_Root_CA_X3.crt nga skedari \/etc\/ca-certificates.conf.\n<li class=\"l\"> Procesi i krijimit t\u00eb interfejsit n\u00eb dDistibutin p\u00ebr Firewall OPNsense \u00ebsht\u00eb prishur, p\u00ebr problemin \u00ebsht\u00eb raportuar m\u00eb par\u00eb, por zhvilluesit nuk arrit\u00ebn ta l\u00ebshonin nj\u00eb patch n\u00eb koh\u00eb.\n<li class=\"l\"> Problemi preku paket\u00ebn OpenSSL 1.0.2k n\u00eb RHEL\/CentOS 7, por nj\u00eb jav\u00eb m\u00eb par\u00eb p\u00ebr RHEL 7 dhe CentOS 7 \u00ebsht\u00eb formuar nj\u00eb p\u00ebrdit\u00ebsim i paket\u00ebs ca-certificates-2021.2.50-72.el7_9.noarch, nga e cila \u00ebsht\u00eb fshir\u00eb certifikata IdenTrust, pra manifestimi i problemit \u00ebsht\u00eb bllokuar p\u00ebrpara. Nj\u00eb p\u00ebrdit\u00ebsim i ngjash\u00ebm nj\u00eb jav\u00eb m\u00eb par\u00eb \u00ebsht\u00eb publikuar p\u00ebr Ubuntu 16.04, Ubuntu 14.04, Ubuntu 21.04, Ubuntu 20.04 dhe Ubuntu 18.04. Duke qen\u00eb se p\u00ebrdit\u00ebsimet jan\u00eb l\u00ebshuar paraprakisht, problemi me verifikimin e certifikat\u00ebve Let's Encrypt e ka prekur vet\u00ebm p\u00ebrdoruesit e deg\u00ebve t\u00eb vjetra t\u00eb RHEL\/CentOS dhe Ubuntu, t\u00eb cil\u00ebt nuk instalojn\u00eb rregullisht p\u00ebrdit\u00ebsimet.\n<li class=\"l\"> Procesi i verifikimit t\u00eb certifikatave n\u00eb grpc \u00ebsht\u00eb prishur.\n<li class=\"l\"> Gabim gjat\u00eb nd\u00ebrtimit t\u00eb platform\u00ebs Cloudflare Pages.\n<li class=\"l\"> Probleme n\u00eb Amazon Web Services (AWS).\n<li class=\"l\"> Probleme me lidhjen n\u00eb DB p\u00ebr p\u00ebrdoruesit e DigitalOcean.\n<li class=\"l\"> Gabim n\u00eb funksionimin e platform\u00ebs Cloud Netlify.\n<li class=\"l\">  Probleme me qasjen n\u00eb sh\u00ebrbimet Xero.\n<li class=\"l\"> Gabim gjat\u00eb p\u00ebrpjekjes p\u00ebr t\u00eb instaluar nj\u00eb lidhje TLS me Web API t\u00eb sh\u00ebrbimit MailGun.\n<li class=\"l\"> D\u00ebshtimet n\u00eb versionet macOS dhe iOS (11, 13, 14), q\u00eb teori nuk duhet t\u00eb prekin problemin.\n<li class=\"l\"> D\u00ebshtimi n\u00eb sh\u00ebrbimet Catchpoint.\n<li class=\"l\"> Gabim n\u00eb verifikimin e certifikateve kur aksesohet API PostMan.\n<li class=\"l\"> D\u00ebshtimi n\u00eb funksionimin e Guardian Firewall.\n<li class=\"l\"> Shkelje n\u00eb funksionimin e faqes s\u00eb mb\u00ebshtetjes monday.com.\n<li class=\"l\"> D\u00ebshtimi n\u00eb funksionimin e platform\u00ebs Cerb.\n<li class=\"l\"> D\u00ebshtim n\u00eb verifikimin e uptime n\u00eb Google Cloud Monitoring.\n<li class=\"l\"> Probleme me verifikimin e certifikateve n\u00eb Cisco Umbrella Secure Web Gateway.\n<li class=\"l\"> Probleme me lidhjen me proxy Bluecoat dhe Palo Alto.\n<li class=\"l\"> N\u00eb OVHcloud kemi pasur probleme me lidhjen me OpenStack API.\n<li class=\"l\"> Probleme me gjenerimin e raporteve n\u00eb Shopify.\n<li class=\"l\"> Po v\u00ebrehen probleme kur i qasemi API Heroku.\n<li class=\"l\"> D\u00ebshtim n\u00eb funksionimin e Ledger Live Manager.\n<li class=\"l\"> Gabim n\u00eb verifikimin e certifikat\u00ebs n\u00eb veglat p\u00ebr zhvilluesit e aplikacioneve p\u00ebr Facebook.\n<li class=\"l\"> Probleme n\u00eb Sophos SG UTM.\n<li class=\"l\"> Probleme me verifikimin e certifikatave n\u00eb cPanel.  <\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55897\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#8217;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&#8217;s Encrypt \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSL \u0438 GnuTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 LibreSSL, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0443\u0447\u043b\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u043e\u043f\u044b\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441\u043e \u0441\u0431\u043e\u044f\u043c\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u043c\u0438 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101490","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#039;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&#039;s Encrypt \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSL \u0438 GnuTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 LibreSSL, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0443\u0447\u043b\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u043e\u043f\u044b\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441\u043e \u0441\u0431\u043e\u044f\u043c\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u043c\u0438 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0421\u0431\u043e\u0438 \u0432 OpenBSD, DragonFly BSD \u0438 Electron \u0438\u0437-\u0437\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 IdenTrust | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let&#039;s Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&#039;s Encrypt \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSL \u0438 GnuTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 LibreSSL, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0443\u0447\u043b\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u043e\u043f\u044b\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441\u043e \u0441\u0431\u043e\u044f\u043c\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u043c\u0438 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-10-01T14:22:46+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-10-01T14:22:46+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47D\u00ebshtimet n\u00eb OpenBSD, DragonFly BSD dhe Electron p\u00ebr shkak t\u00eb skadimit t\u00eb certifikat\u00ebs rr\u00ebnj\u00ebsore IdenTrust | ProHoster","description":"Skadimi i certifikat\u00ebs rr\u00ebnj\u00ebsore t\u00eb kompanis\u00eb IdenTrust (DST Root CA X3), e cila p\u00ebrdoret p\u00ebr n\u00ebnshkrimin nd\u00ebrkoh\u00ebs t\u00eb certifikat\u00ebs rr\u00ebnj\u00ebsore t\u00eb autoritetit t\u00eb certifikimit Let's Encrypt, solli probleme me verifikimin e certifikatave Let's Encrypt n\u00eb projekte q\u00eb p\u00ebrdorin versione t\u00eb vjetra t\u00eb OpenSSL dhe GnuTLS. Problemet preken gjithashtu bibliotek\u00ebn LibreSSL, zhvilluesit e s\u00eb cil\u00ebs nuk e mor\u00ebn parasysh p\u00ebrvoj\u00ebn e kaluar lidhur me d\u00ebshtimet q\u00eb ndodh\u00ebn pas skadimit t\u00eb certifikat\u00ebs rr\u00ebnj\u00ebsore.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u0431\u043e\u0438 \u0432 OpenBSD, DragonFly BSD \u0438 Electron \u0438\u0437-\u0437\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 IdenTrust | ProHoster","og:description":"\u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 IdenTrust (DST Root CA X3), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043a\u0440\u043e\u0441\u0441-\u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 Let's Encrypt, \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let's Encrypt \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u0440\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 OpenSSL \u0438 GnuTLS. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 LibreSSL, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0435 \u0443\u0447\u043b\u0438 \u043f\u0440\u043e\u0448\u043b\u044b\u0439 \u043e\u043f\u044b\u0442, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441\u043e \u0441\u0431\u043e\u044f\u043c\u0438, \u0432\u043e\u0437\u043d\u0438\u043a\u0448\u0438\u043c\u0438 \u043f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/sboi-v-openbsd-dragonfly-bsd-i-electron-iz-za-ustarevaniya-kornevogo-sertifikata-identrust","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-10-01T14:22:46+00:00","article:modified_time":"2021-10-01T14:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-10-01 14:46:38","updated":"2022-09-27 21:37:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=101490"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101490\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=101490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=101490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=101490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}