{"id":72754,"date":"2020-03-04T02:42:36","date_gmt":"2020-03-03T23:42:36","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/massovyj-otzyv-sertifikatov-lets-encrypt"},"modified":"2020-03-04T02:42:36","modified_gmt":"2020-03-03T23:42:36","slug":"massovyj-otzyv-sertifikatov-lets-encrypt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/massovyj-otzyv-sertifikatov-lets-encrypt","title":{"rendered":"Marrje masive e certifikatave Let\u2019s Encrypt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Let\u2019s Encrypt \u00ebsht\u00eb nj\u00eb qend\u00ebr e certifikimit jo fitimprur\u00ebse, e kontrolluar nga komuniteti dhe q\u00eb ofron certifikata pa pages\u00eb p\u00ebr t\u00eb gjith\u00eb t\u00eb interesuarit. paralajm\u00ebroi<\/a><\/noindex> p\u00ebr nj\u00eb t\u00ebrheqje t\u00eb ardhshme t\u00eb shum\u00eb certifikatave TLS\/SSL q\u00eb jan\u00eb l\u00ebshuar m\u00eb par\u00eb. Nga 116 milion certifikata aktualisht aktive, do t\u00eb t\u00ebrhiqen pak m\u00eb shum\u00eb se 3 milion (2.6%), prej t\u00eb cilave rreth 1 milion jan\u00eb kopje, t\u00eb lidhura me nj\u00eb domen t\u00eb vet\u00ebm (gabimi preku kryesisht certifikatat q\u00eb p\u00ebrdit\u00ebsohen shum\u00eb shpesh, k\u00ebshtu q\u00eb ka kaq shum\u00eb kopje). T\u00ebrheqja \u00ebsht\u00eb planifikuar p\u00ebr 4 mars (koha e sakt\u00eb ende nuk \u00ebsht\u00eb p\u00ebrcaktuar, por t\u00ebrheqja do t\u00eb b\u00ebhet jo m\u00eb her\u00ebt se ora 3 t\u00eb m\u00ebngjesit MSK).<\/p>\n

K\u00ebmb\u00ebngulja p\u00ebr t\u00ebrheqje \u00ebsht\u00eb e arsyetuar nga nj\u00eb gabim<\/a><\/noindex>. Problemi \u00ebsht\u00eb evidentuar q\u00eb nga 25 korriku 2019 dhe ndikon n\u00eb sistemin e verifikimit t\u00eb regjistrave CAA n\u00eb DNS. Nj\u00eb regjist\u00ebr CAA (RFC-6844<\/a><\/noindex>, Autorizimi i Qendr\u00ebs s\u00eb Certifikimit) lejon pronarin e domain-it t\u00eb p\u00ebrcaktoj\u00eb qart\u00eb qendr\u00ebn e certifikimit p\u00ebrmes s\u00eb cil\u00ebs mund t\u00eb gjenerohen certifikata p\u00ebr domain-in e caktuar. N\u00ebse qendra e certifikimit nuk \u00ebsht\u00eb e listuar n\u00eb regjistrat CAA, ajo detyrohet t\u00eb bllokoj\u00eb l\u00ebshimin e certifikatave p\u00ebr k\u00ebt\u00eb domain dhe t\u2019i informoj\u00eb pronar\u00ebt e domain-it p\u00ebr p\u00ebrpjekjet e komprometimit. N\u00eb shumic\u00ebn e rasteve, certifikata k\u00ebrkohet menj\u00ebher\u00eb pas kalimit t\u00eb verifikimit CAA, por rezultati i verifikimit konsiderohet i vlefsh\u00ebm p\u00ebr 30 dit\u00eb t\u00eb tjera. Rregullat gjithashtu parashikojn\u00eb kryerjen e nj\u00eb verifikimi t\u00eb ri jo m\u00eb von\u00eb se 8 or\u00eb para l\u00ebshimit t\u00eb nj\u00eb certifikate t\u00eb re (dmth. n\u00ebse ka kaluar 8 or\u00eb nga hera e fundit e verifikimit kur k\u00ebrkohet nj\u00eb certifikat\u00eb e re, k\u00ebrkohet nj\u00eb verifikim i ri).<\/p>\n

Gabimi shfaqet n\u00ebse k\u00ebrkesa p\u00ebr certifikat\u00eb p\u00ebrfshin disa emra domenesh, p\u00ebr secilin prej t\u00eb cil\u00ebve k\u00ebrkohet verifikimi i regjistrit CAA. Thelbi i gabimit \u00ebsht\u00eb se n\u00eb momentin e verifikimit t\u00eb p\u00ebrs\u00ebritur, n\u00eb vend t\u00eb validimit t\u00eb t\u00eb gjith\u00eb domain\u00ebve, u krye verifikimi p\u00ebrs\u00ebrit\u00ebs vet\u00ebm p\u00ebr nj\u00eb nga nga lista (n\u00ebse n\u00eb k\u00ebrkes\u00eb kishte N domain\u00eb, n\u00eb vend t\u00eb N verifikimeve t\u00eb ndryshme, nj\u00eb domain u kontrollua N her\u00eb). P\u00ebr domain\u00ebt e tjer\u00eb, verifikimi p\u00ebrs\u00ebrit\u00ebs nuk u krye dhe n\u00eb marrjen e vendimit u p\u00ebrdor\u00ebn t\u00eb dh\u00ebnat e verifikimit t\u00eb par\u00eb (dmth. u p\u00ebrdor\u00ebn t\u00eb dh\u00ebnat q\u00eb ishin deri n\u00eb 30 dit\u00eb t\u00eb vjetra). Si pasoj\u00eb, brenda 30 dit\u00ebve pas verifikimit t\u00eb par\u00eb, Let\u2019s Encrypt mund t\u00eb kishte l\u00ebshuar nj\u00eb certifikat\u00eb, edhe n\u00ebse vlera e regjistrit CAA ishte ndryshuar dhe Let\u2019s Encrypt ishte hequr nga lista e qendrave t\u00eb certifikimit t\u00eb lejueshme.<\/p>\n

P\u00ebrdoruesve t\u00eb prekur nga problemi iu \u00ebsht\u00eb d\u00ebrguar nj\u00eb njoftim p\u00ebr email, n\u00ebse gjat\u00eb marrjes s\u00eb certifikat\u00ebs ishin plot\u00ebsuar t\u00eb dh\u00ebnat e kontaktit. Mund t\u00eb kontrolloni certifikatat tuaja duke ngarkuar lista<\/a><\/noindex> numrat serik\u00eb t\u00eb certifikatave t\u00eb t\u00ebrhequra ose duke p\u00ebrdorur sh\u00ebrbimin online<\/a><\/noindex> (i vendosur n\u00eb adres\u00ebn IP, t\u00eb bllokuar<\/a><\/noindex> n\u00eb RF nga Roskomnadzor). Mund t\u00eb merrni numrin serik t\u00eb certifikat\u00ebs p\u00ebr domenin e d\u00ebshiruar duke p\u00ebrdorur komand\u00ebn:<\/p>\n

openssl s_client -connect example.com:443 -showcerts \/dev\/null \\
\n | openssl x509 -text -noout | grep -A 1 Serial\\ Number | tr -d :<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let’s Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b \u043e \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u0449\u0435\u043c \u043e\u0442\u0437\u044b\u0432\u0435 \u043c\u043d\u043e\u0433\u0438\u0445 \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 TLS\/SSL \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u0418\u0437 116 \u043c\u043b\u043d \u043d\u044b\u043d\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let’s Encrypt \u0431\u0443\u0434\u0435\u0442 \u043e\u0442\u043e\u0437\u0432\u0430\u043d\u043e \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 3 \u043c\u043b\u043d (2.6%), \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 1 \u043c\u043b\u043d \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0434\u0443\u0431\u043b\u0438\u043a\u0430\u0442\u0430\u043c\u0438, \u043f\u0440\u0438\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c\u0438 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0434\u043e\u043c\u0435\u043d\u0443 (\u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u043e\u0447\u0435\u043d\u044c \u0447\u0430\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-72754","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u00ebrheqja masive e certifikatave Let's Encrypt | ProHoster","description":"Qendra jo-fitimprur\u00ebse e l\u00ebshimit t\u00eb certifikatave Let's Encrypt, e kontrolluar nga komuniteti dhe q\u00eb ofron certifikata falas p\u00ebr t\u00eb gjith\u00eb t\u00eb interesuarit,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/massovyj-otzyv-sertifikatov-lets-encrypt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041c\u0430\u0441\u0441\u043e\u0432\u044b\u0439 \u043e\u0442\u0437\u044b\u0432 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 Let&apos;s Encrypt | ProHoster","og:description":"\u041d\u0435\u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u0446\u0435\u043d\u0442\u0440 Let's Encrypt, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b \u0431\u0435\u0437\u0432\u043e\u0437\u043c\u0435\u0437\u0434\u043d\u043e \u0432\u0441\u0435\u043c \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u043c,","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/massovyj-otzyv-sertifikatov-lets-encrypt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-03T23:42:36+00:00","article:modified_time":"2020-03-03T23:42:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"72754","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:46:21","updated":"2022-09-28 12:43:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=72754"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/72754\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=72754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=72754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=72754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}