{"id":103111,"date":"2022-01-27T15:36:56","date_gmt":"2022-01-27T13:36:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01"},"modified":"2022-01-27T15:36:56","modified_gmt":"2022-01-27T13:36:56","slug":"lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/lets-encrypt-otzyvaet-2-mln-sertifikatov-iz-za-problem-v-realizaczii-tls-alpn-01","title":{"rendered":"Let's Encrypt heq 2 milion certifikata p\u00ebr shkak t\u00eb problemeve n\u00eb implementimin e TLS-ALPN-01.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Qendra e certifikimit jofitimprur\u00ebse Let’s Encrypt, e kontrolluar nga komuniteti dhe q\u00eb ofron certifikata falas p\u00ebr t\u00eb gjith\u00eb ata q\u00eb d\u00ebshirojn\u00eb, njoftoi p\u00ebr t\u00ebrheqjen e parakohshme t\u00eb rreth dy milion certifikatave TLS, q\u00eb p\u00ebrb\u00ebn rreth 1% t\u00eb t\u00eb gjitha certifikatave aktive t\u00eb k\u00ebsaj qendre certifikimi. T\u00ebrheqja e certifikatave \u00ebsht\u00eb iniciuar p\u00ebr shkak t\u00eb zb discoverimit t\u00eb nj\u00eb mos p\u00ebrputhjeje me k\u00ebrkesat e specifikimit n\u00eb kodin e p\u00ebrdorur nga Let’s Encrypt me implementimin e zgjerimit TLS-ALPN-01 (RFC 7301, Negocimi i Protokollit t\u00eb Shtres\u00ebs s\u00eb Aplikacionit). Mos p\u00ebrputhja ishte e lidhur me munges\u00ebn e disa kontrollove q\u00eb kryhen gjat\u00eb procesit t\u00eb negociat\u00ebs s\u00eb lidhjeve mbi baz\u00ebn e zgjerimit TLS-ALPN, t\u00eb p\u00ebrdorur n\u00eb HTTP\/2. Informacioni i detajuar mbi incidentin do t\u00eb publikohet pasi t\u00eb p\u00ebrfundoj\u00eb t\u00ebrheqja e certifikatave problematike. <\/p>\n
M\u00eb 26 janar n\u00eb 03:48 (MSK) problemi u zgjidh, por t\u00eb gjitha certifikatat p\u00ebr t\u00eb cilat p\u00ebr verifikimin \u00ebsht\u00eb p\u00ebrdorur metoda TLS-ALPN-01, jan\u00eb vendosur t'u jepet statusi i pavlefsh\u00ebm. Pezullimi i certifikatave do t\u00eb filloj\u00eb m\u00eb 28 janar n\u00eb 19:00 (MSK). Para k\u00ebsaj kohe, p\u00ebrdoruesve q\u00eb p\u00ebrdorin metod\u00ebn e verifikimit TLS-ALPN-01 u rekomandohet t\u00eb p\u00ebrfundojn\u00eb azhurnimin e certifikatave t\u00eb tyre, p\u00ebrndryshe ato do t\u00eb shpalleshin para kohe si t\u00eb pavlefshme. <\/p>\n
Njoftimet p\u00ebrkat\u00ebse mbi nevoj\u00ebn p\u00ebr azhurnimin e certifikatave jan\u00eb d\u00ebrguar n\u00eb email. P\u00ebrdoruesit q\u00eb p\u00ebrdorin mjetet Certbot dhe dehydrated p\u00ebr t\u00eb marr\u00eb certifikat\u00ebn, duke p\u00ebrdorur konfigurimet e paracaktuara, nuk jan\u00eb prekur nga problemi. Metoda TLS-ALPN-01 mb\u00ebshtetet n\u00eb paketat Caddy, Traefik, apache mod_md dhe autocert. Mund t\u00eb kontrolloni sakt\u00ebsin\u00eb e certifikatave tuaja p\u00ebrmes k\u00ebrkimit t\u00eb identifikator\u00ebve, numrave serial apo t\u00eb domen\u00ebve<\/a> n\u00eb list\u00ebn e certifikatave problematike. <\/p>\n