{"id":72754,"date":"2020-03-04T02:42:36","date_gmt":"2020-03-03T23:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/massovyj-otzyv-sertifikatov-lets-encrypt"},"modified":"2020-03-04T02:42:36","modified_gmt":"2020-03-03T23:42:36","slug":"massovyj-otzyv-sertifikatov-lets-encrypt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/massovyj-otzyv-sertifikatov-lets-encrypt","title":{"rendered":"T\u00ebrheqja masive e certifikatave Let's Encrypt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Qendra jo fitimprur\u00ebse e v\u00ebrtetimit Let’s Encrypt, e kontrolluar nga komuniteti dhe q\u00eb ofron certifikata pa pages\u00eb p\u00ebr t\u00eb gjith\u00eb t\u00eb interesuarit, paralajm\u00ebroi<\/a><\/noindex> rreth t\u00ebrheqjes s\u00eb shum\u00eb nga certifikatat TLS\/SSL t\u00eb l\u00ebshuara m\u00eb par\u00eb. Nga 116 milion certifikatesh aktuale t\u00eb Let’s Encrypt, do t\u00eb t\u00ebrhiqen pak m\u00eb shum\u00eb se 3 milion (2.6%), prej t\u00eb cilave rreth 1 milion jan\u00eb kopje q\u00eb lidhen me nj\u00eb domen (gabimi kryesisht preku certifikatat q\u00eb p\u00ebrdit\u00ebsohen shum\u00eb shpesh, k\u00ebshtu q\u00eb ka shum\u00eb kopje). T\u00ebrheqja \u00ebsht\u00eb planifikuar p\u00ebr m\u00eb 4 mars (koha e sakt\u00eb nuk \u00ebsht\u00eb caktuar ende, por t\u00ebrheqja nuk do t\u00eb b\u00ebhet para or\u00ebs 3 t\u00eb nat\u00ebs MSK).<\/p>\n

Nevoja p\u00ebr t\u00ebrheqje \u00ebsht\u00eb e shkaktuar nga nj\u00eb gabim<\/a><\/noindex>. Problemi ka filluar q\u00eb nga 25 korriku 2019 dhe prek sistemin e verifikimit t\u00eb regjistrave CAA n\u00eb DNS. Regjistri CAA (RFC-6844<\/a><\/noindex>, Autorizimi i Qendr\u00ebs s\u00eb Certifikimit) i jep mund\u00ebsin\u00eb pronarit t\u00eb domenit t\u00eb p\u00ebrcaktoj\u00eb qendr\u00ebn e certifikimit p\u00ebrmes s\u00eb cil\u00ebs mund t\u00eb gjenerohen certifikatat p\u00ebr domenin e caktuar. N\u00ebse qendra e certifikimit nuk \u00ebsht\u00eb e listed n\u00eb regjistrat CAA, ajo \u00ebsht\u00eb e detyruar t\u00eb bllokoj\u00eb l\u00ebshimin e certifikatave p\u00ebr k\u00ebt\u00eb domen dhe ta informoj\u00eb pronarin e domenit p\u00ebr p\u00ebrpjekjet e kompromitimit. N\u00eb shumic\u00ebn e rasteve, certifikata k\u00ebrkohet menj\u00ebher\u00eb pas p\u00ebrfundimit t\u00eb verifikimit CAA, por rezultati i verifikimit konsiderohet valid p\u00ebr 30 dit\u00eb t\u00eb tjera. Rregullat gjithashtu parashikojn\u00eb q\u00eb t\u00eb b\u00ebhet nj\u00eb verifikim i ri jo m\u00eb von\u00eb se 8 or\u00eb para l\u00ebshimit t\u00eb nj\u00eb certifikate t\u00eb re (pra, n\u00ebse ka kaluar 8 or\u00eb nga verifikimi i fundit kur k\u00ebrkohet nj\u00eb certifikat\u00eb e re, k\u00ebrkohet nj\u00eb verifikim i ri).<\/p>\n

Gabimi shfaqet n\u00ebse k\u00ebrkesa p\u00ebr certifikat\u00ebn mbulon disa emra domenesh, p\u00ebr secilin prej t\u00eb cil\u00ebve k\u00ebrkohet verifikimi i regjistrit CAA. Thelbi i gabimit q\u00ebndron n\u00eb at\u00eb se, n\u00eb momentin e kontrollit t\u00eb p\u00ebrs\u00ebritur, n\u00eb vend q\u00eb t\u00eb verifikohen t\u00eb gjith\u00eb domenet, b\u00ebhej vet\u00ebm nj\u00eb verifikim p\u00ebr nj\u00eb nga domenet e list\u00ebs (n\u00ebse n\u00eb k\u00ebrkes\u00eb kishim N domenet, n\u00eb vend t\u00eb N kontrollimeve t\u00eb ndryshme, nj\u00eb domen kontrollohej N her\u00eb). P\u00ebr domenet e tjera nuk b\u00ebhej verifikimi i p\u00ebrs\u00ebritur dhe n\u00eb vendim merreshin t\u00eb dh\u00ebnat e kontrollit t\u00eb par\u00eb (dmth., merreshin t\u00eb dh\u00ebnat deri n\u00eb 30 dit\u00eb m\u00eb par\u00eb). Si pasoj\u00eb, gjat\u00eb 30 dit\u00ebve pas kontrollit t\u00eb par\u00eb, Let’s Encrypt mund t\u00eb jepte nj\u00eb certifikat\u00eb, edhe n\u00ebse vlera e regjistrit CAA ishte ndryshuar dhe Let’s Encrypt ishte hequr nga lista e autoriteteve t\u00eb besuar.<\/p>\n

P\u00ebrdoruesve t\u00eb prekur nga problemi u \u00ebsht\u00eb d\u00ebrguar nj\u00eb njoftim me email, n\u00ebse gjat\u00eb marrjes s\u00eb certifikat\u00ebs ishin plot\u00ebsuar t\u00eb dh\u00ebnat e kontaktit. Mund t\u00eb kontrolloni certifikatat tuaja duke shkarkuar e atributeve<\/a><\/noindex> numrat serial t\u00eb certifikatave t\u00eb t\u00ebrhequra ose duke p\u00ebrdorur sh\u00ebrbimin online<\/a><\/noindex> (vendosur n\u00eb adres\u00ebn IP, t\u00eb bllokuar<\/a><\/noindex> n\u00eb Rusi nga Roskomnadzor). Mund t\u00eb m\u00ebsoni numrin serial t\u00eb certifikat\u00ebs p\u00ebr domenin e interesit duke p\u00ebrdorur komand\u00ebn:<\/p>\n

openssl s_client -connect example.com:443 -showcerts \/dev\/null \\
\n | openssl x509 -text -noout | grep -A 1 Serial\\ Number | tr -d :<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043e \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u0449\u0435\u043c \u043e\u0442\u0437\u044b\u0432\u0435 \u043c\u043d\u043e\u0433\u0438\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 TLS\/SSL \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u0418\u0437 116 \u043c\u043b\u043d \u043d\u044b\u043d\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let’s Encrypt \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043e \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 3 \u043c\u043b\u043d (2.6%), \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 1 \u043c\u043b\u043d \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u0443\u0431\u043b\u0438\u043a\u0430\u0442\u0430\u043c\u0438, \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0434\u043e\u043c\u0435\u043d\u0443 (\u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043e\u0447\u0435\u043d\u044c \u0447\u0430\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72754","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u00ebrheqja masive e certifikatave Let's Encrypt | ProHoster","description":"Qendra e besueshme e certifikimit Let's Encrypt, e kontrolluar nga komuniteti dhe q\u00eb ofron certifikata falas p\u00ebr t\u00eb gjith\u00eb q\u00eb d\u00ebshirojn\u00eb,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/massovyj-otzyv-sertifikatov-lets-encrypt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u043e\u0442\u0437\u044b\u0432 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&apos;s Encrypt | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c,","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/massovyj-otzyv-sertifikatov-lets-encrypt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-03T23:42:36+00:00","article:modified_time":"2020-03-03T23:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72754","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:46:21","updated":"2022-09-28 12:43:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=72754"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72754\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=72754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=72754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=72754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}