{"id":184233,"date":"2026-11-12T11:41:15","date_gmt":"2026-11-12T09:41:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/udostoveryayushhij-czentr-emudhra-otozval-eshhyo-8-promezhutochnyh-kornevyh-sertifikatov"},"modified":"2026-11-12T11:41:21","modified_gmt":"2026-11-12T09:41:21","slug":"emudhra-certificate-authority-revokes-8-more-intermediate-root-certificates","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/emudhra-certificate-authority-revokes-8-more-intermediate-root-certificates","title":{"rendered":"Qendra e Certifikimit e eMudhra t\u00ebrhoqi gjithashtu 8 certifikata t\u00eb tjera t\u00eb rr\u00ebnj\u00ebs nd\u00ebrmjet\u00ebs","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Kompania eMudhra zbuloi detaje t\u00eb tjera lidhur me incidentin, gjat\u00eb t\u00eb cilit tet\u00eb \u00e7ertifikatat themelore t\u00eb autoritetit t\u00eb certifikimit kishin \u00e7el\u00ebsa t\u00eb mbyllur leht\u00ebsisht t\u00eb aksesuesh\u00ebm, q\u00eb kishin vet\u00ebm 1 byte entropi n\u00eb vend t\u00eb 48. P\u00ebrve\u00e7 problemeve fillestare t\u00eb identifikuara me \u00e7ertifikatat nd\u00ebrmjet\u00ebse, raportohet p\u00ebr t\u00ebrheqjen e 8 t\u00eb tjera, por jo p\u00ebr shkak t\u00eb problemeve me entropin\u00eb. Hetimi tregoi se burimi i problemeve me entropin\u00eb ishte nj\u00eb skenar Python t\u00eb krijuar vet\u00eb, q\u00eb p\u00ebrdorej p\u00ebr t\u00eb transferuar \u00e7el\u00ebsa t\u00eb mbyllur midis pajisjeve t\u00eb ruajtjes s\u00eb \u00e7el\u00ebsave (HSM) nga prodhues t\u00eb ndrysh\u00ebm. Transferi i \u00e7el\u00ebsave ishte n\u00ebn ndikimin e vonesave n\u00eb dor\u00ebzimin e modeleve t\u00eb avancuara HSM q\u00eb plot\u00ebsojn\u00eb k\u00ebrkesat e reja p\u00ebr autoritetet e certifikimit. <\/p>\n
P\u00ebr shkak t\u00eb nj\u00eb gabimi, madh\u00ebsia e \u00e7el\u00ebsave t\u00eb mbyllur ECDSA u reduktua n\u00eb 1 byte. P\u00ebrve\u00e7 k\u00ebsaj, gjat\u00eb transferit t\u00eb \u00e7el\u00ebsave midis HSM, skripti trajtonte \u00e7el\u00ebsat e mbyllur n\u00eb memorien e mbrojtur t\u00eb kompjuterit ku ishte aktivizuar, nd\u00ebrkoh\u00eb q\u00eb operacionet me \u00e7el\u00ebsa t\u00eb mbyllur duhet t\u00eb realizohen vet\u00ebm brenda HSM. Log-et e HSM konfirmuan se pajisjet e ruajtjes funksiononin si\u00e7 duhet, dhe problemi ishte shkaktuar nga p\u00ebrdorimi i skriptit t\u00eb b\u00ebr\u00eb vet\u00eb. <\/p>\n
P\u00ebrve\u00e7 \u00e7el\u00ebsave ECDSA, skripti u p\u00ebrdor gjithashtu p\u00ebr t\u00eb transferuar 8 \u00e7el\u00ebsa RSA-4096, me t\u00eb cil\u00ebt nuk kishte probleme me entropin\u00eb, por trajtimi i \u00e7el\u00ebsave n\u00eb memorien e zakonshme shkel k\u00ebrkesat e siguris\u00eb q\u00eb k\u00ebrkohen p\u00ebr autoritetet e certifikimit, prandaj \u00e7ertifikatat RSA gjithashtu tani jan\u00eb t\u00ebrhequr. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"