{"id":84766,"date":"2020-06-10T13:43:11","date_gmt":"2020-06-10T11:43:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory"},"modified":"2020-06-10T13:43:11","modified_gmt":"2020-06-10T11:43:11","slug":"problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","title":{"rendered":"Problemi i certifikata t\u00eb vjetruara t\u00eb rr\u00ebnj\u00ebs. N\u00eb pritje jan\u00eb Let\u2019s Encrypt dhe televizor\u00ebt e men\u00e7ur","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Problemi i certifikatave rr\u00ebnj\u00eb t\u00eb vjetra. Tani \u00ebsht\u00eb radha e Let&#039;s Encrypt dhe TV-ve t\u00eb men\u00e7ura\" src=\"\/wp-content\/uploads\/2020\/06\/662b2b855f327f8d1a1f5bf99ca6fcef.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u00ebr t\u00eb lejuar q\u00eb shfletuesi t\u00eb verifikoj\u00eb nj\u00eb website, ai paraqet nj\u00eb zinxhir certifikatash t\u00eb vlefsh\u00ebm. Nj\u00eb zinxhir tipik \u00ebsht\u00eb i paraqitur m\u00eb sip\u00ebr, n\u00eb t\u00eb mund t\u00eb ket\u00eb m\u00eb shum\u00eb se nj\u00eb certifikat\u00eb nd\u00ebrmjet\u00ebse. Numri minimal i certifikatave n\u00eb nj\u00eb zinxhir t\u00eb vlefsh\u00ebm \u00ebsht\u00eb tre.<\/p>\n<p>Certifikata rr\u00ebnj\u00ebsore \u00ebsht\u00eb zemra e qendr\u00ebs s\u00eb certifikimit. Ajo \u00ebsht\u00eb literalisht e integruar n\u00eb sistemin tuaj operativ ose shfletuesin dhe fizikisht \u00ebsht\u00eb e pranishme n\u00eb pajisjen tuaj. Nuk mund ta nd\u00ebrroni nga serveri. K\u00ebrkohet nj\u00eb p\u00ebrdit\u00ebsim i detyruesh\u00ebm i sistemit operativ ose i softuerit t\u00eb integruar n\u00eb pajisje.<\/p>\n<p>Specialisti i siguris\u00eb Scott Helme <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/impending-doom-root-ca-expiring-legacy-clients\/\">raporton<\/a><\/noindex>, q\u00eb problemet kryesore do t\u00eb p\u00ebrjetohen nga qendra e certifikimit Let&#8217;s Encrypt, sepse sot ajo \u00ebsht\u00eb CAs m\u00eb popullor n\u00eb internet, dhe certifikata e saj rr\u00ebnj\u00ebsore do t\u00eb \"skadoj\u00eb\" s\u00eb shpejti. Ndryshimi i rr\u00ebnj\u00ebs Let&#8217;s Encrypt <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">\u00ebsht\u00eb planifikuar p\u00ebr 8 korrik 2020<\/a><\/noindex>.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nCertifikatat p\u00ebrfundimtare dhe nd\u00ebrmjet\u00ebse t\u00eb qendr\u00ebs s\u00eb certifikimit (CA) d\u00ebrgohen klientit nga serveri, nd\u00ebrsa certifikata rr\u00ebnj\u00ebsore ndodhet n\u00eb klient <i>kemi tashm\u00eb<\/i>, prandaj me k\u00ebt\u00eb koleksion certifikatash mund t\u00eb nd\u00ebrtohet nj\u00eb zinxhir dhe t\u00eb autentikohet faqja e internetit. <\/p>\n<p>Problemi \u00ebsht\u00eb se \u00e7do certifikat\u00eb ka nj\u00eb afat, pas t\u00eb cilit nevojitet z\u00ebvend\u00ebsimi i saj. P\u00ebr shembull, nga 1 Shtatori 2020, n\u00eb shfletuesin Safari planifikojn\u00eb t\u00eb vendosin nj\u00eb kufizim n\u00eb afatin e vlefshm\u00ebris\u00eb s\u00eb certifikatave TLS p\u00ebr server\u00eb. <noindex><a rel=\"nofollow\" href=\"https:\/\/support.apple.com\/en-us\/HT211025\">maksimalisht 398 dit\u00eb<\/a><\/noindex>.<\/p>\n<p>Kjo do t\u00eb thot\u00eb se t\u00eb gjith\u00eb ne do t\u00eb duhet t\u00eb z\u00ebvend\u00ebsojm\u00eb certifikatat e serverit t\u00eb pakt\u00ebn \u00e7do 12 muaj. Ky kufizim i referohet vet\u00ebm certifikatave t\u00eb serverit, <i>nuk<\/i> p\u00ebrfshin certifikatave rr\u00ebnj\u00ebsore CA.<\/p>\n<p>Certifikatat CA rregullohen nga nj\u00eb grup tjet\u00ebr rregullash, prandaj kan\u00eb kufizime t\u00eb ndryshme n\u00eb afat. Shpesh hasen certifikata nd\u00ebrmjet\u00ebse me nj\u00eb afat vlefshm\u00ebrie prej 5 vjet\u00ebsh dhe certifikata rr\u00ebnj\u00ebsore me nj\u00eb jet\u00ebgjat\u00ebsi madje 25 vje\u00e7are! <\/p>\n<p>Me certificatat nd\u00ebrmjet\u00ebse zakonisht nuk ka probleme, sepse ato ofrohen klient\u00ebve nga serveri, i cili \u00ebsht\u00eb shum\u00eb m\u00eb shpesh q\u00ebndron duke e nd\u00ebrruar certifikat\u00ebn e tij, k\u00ebshtu q\u00eb thjesht gjat\u00eb k\u00ebsaj procedure z\u00ebvend\u00ebson edhe nd\u00ebrmjet\u00ebsoren. Ajo \u00ebsht\u00eb mjaft e leht\u00eb p\u00ebr t'u z\u00ebvend\u00ebsuar s\u00eb bashku me certifikat\u00ebn e serverit, ndryshe nga certifikata rr\u00ebnj\u00ebsore CA.<\/p>\n<p>Si\u00e7 e p\u00ebrmend\u00ebm tashm\u00eb, CA rr\u00ebnj\u00ebsore \u00ebsht\u00eb e integruar drejtp\u00ebrdrejt n\u00eb pajisjen e klientit, n\u00eb sistemin operativ, n\u00eb shfletues ose n\u00eb ndonj\u00eb program tjet\u00ebr. Ndryshimi i CA rr\u00ebnj\u00ebsore nuk mund t\u00eb kontrollohet nga faqja e internetit. K\u00ebtu k\u00ebrkohet nj\u00eb p\u00ebrdit\u00ebsim n\u00eb klient, qoft\u00eb p\u00ebrdit\u00ebsimi i sistemit operativ ose softuerit.<\/p>\n<p>Disa CA rr\u00ebnj\u00ebsore ekzistojn\u00eb p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb, flasim p\u00ebr 20-25 vjet. Shum\u00eb shpejt disa nga CA rr\u00ebnj\u00ebsore m\u00eb t\u00eb vjet\u00ebr do t\u00eb afroheshin n\u00eb fundin e jet\u00ebs s\u00eb tyre natyrore, koha e tyre pothuajse ka skaduar. P\u00ebr shumic\u00ebn e nesh, kjo dhe nuk do t\u00eb jet\u00eb nj\u00eb problem, sepse CA kan\u00eb krijuar certifikata t\u00eb reja rr\u00ebnj\u00ebsore, dhe ato jan\u00eb shp\u00ebrndar\u00eb prej vitesh n\u00eb p\u00ebrdit\u00ebsimet e sistemeve operative dhe shfletuesve. Por n\u00ebse dikush nuk ka p\u00ebrdit\u00ebsuar sistemin operativ apo shfletuesin e tij p\u00ebr nj\u00eb koh\u00eb mjaft t\u00eb gjat\u00eb, kjo \u00ebsht\u00eb nj\u00ebfar\u00eb problemi.<\/p>\n<p>Nj\u00eb situat\u00eb e till\u00eb ndodhi m\u00eb 30 maj 2020 n\u00eb 10:48:38 GMT. Ky \u00ebsht\u00eb momenti i sakt\u00eb kur <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/globalsign\/blog\/504784\/\">skadove_certificate t\u00eb k\u00ebtij rr\u00ebnj\u00eb AddTrust<\/a><\/noindex> nga qendra e certifikimit Comodo (Sectigo).<\/p>\n<p>Ai u p\u00ebrdor p\u00ebr n\u00ebnshkrimin e kryq\u00ebzuar, p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebrin\u00eb me pajisjet e vjetruara, n\u00eb t\u00eb cilat nuk ka certifikat\u00ebn e re t\u00eb rr\u00ebnj\u00ebs USERTrust.<\/p>\n<p>Fatkeq\u00ebsisht, problemet nuk u shfaq\u00ebn vet\u00ebm n\u00eb shfletuesit e vjet\u00ebruar, por edhe n\u00eb klient\u00eb jasht\u00eb shfletueseve t\u00eb bazuar n\u00eb OpenSSL 1.0.x, LibreSSL dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/gitlab.com\/gnutls\/gnutls\/-\/blob\/master\/lib\/x509\/verify.c\">GnuTLS<\/a><\/noindex>. P\u00ebr shembull, n\u00eb kutit\u00eb televizive <noindex><a rel=\"nofollow\" href=\"https:\/\/support.roku.com\/en-gb\/article\/360049417393\">Roku<\/a><\/noindex>, sh\u00ebrbimi <noindex><a rel=\"nofollow\" href=\"https:\/\/t.co\/RdU3GDwPmD?amp=1\">Heroku<\/a><\/noindex>, n\u00eb aplikacionet Fortinet, Chargify, n\u00eb platform\u00ebn .NET Core 2.0 n\u00eb Linux dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/__agwa\/timelines\/1266777818811322368\">nd\u00ebr shum\u00eb t\u00eb tjera.<\/a><\/noindex>.<\/p>\n<p>P\u00ebrflitej se problemi do t\u00eb prekte vet\u00ebm sistemet e vjetruara (Android 2.3, Windows XP, Mac OS X 10.11, iOS 9 etj.), pasi shfletuesit modern\u00eb mund t\u00eb p\u00ebrdorin certifikat\u00ebn e dyt\u00eb t\u00eb rr\u00ebnj\u00ebs USERTrust. Por n\u00eb fakt, filluan d\u00ebshtime n\u00eb qindra sh\u00ebrbime n\u00eb internet q\u00eb p\u00ebrdor\u00ebn bibliotekat e lira OpenSSL 1.0.x dhe GnuTLS. Lidhja e sigurt nuk arriti t\u00eb vendoset, duke dh\u00ebn\u00eb nj\u00eb mesazh gabimi mbi skadimin e certifikat\u00ebs.<\/p>\n<h1>Tjetri \u00ebsht\u00eb Let&#8217;s Encrypt<\/h1>\n<p>\nNj\u00eb tjet\u00ebr shembull i mir\u00eb i ndryshimit t\u00eb ardhsh\u00ebm t\u00eb CA-s\u00eb rr\u00ebnj\u00ebsore \u00ebsht\u00eb qendra e certifikimit Let&#8217;s Encrypt. Nj\u00eb tjet\u00ebr <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/lets-encrypt-to-transition-to-isrg-root\/\">n\u00eb prill 2019<\/a><\/noindex> ata planifikuan t\u00eb kalonin nga zinxhiri Identrust n\u00eb zinxhirin e tyre ISRG Root, por kjo <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">nuk ndodhi<\/a><\/noindex>.<\/p>\n<p><img decoding=\"async\" alt=\"Problemi i certifikatave rr\u00ebnj\u00eb t\u00eb vjetra. Tani \u00ebsht\u00eb radha e Let&#039;s Encrypt dhe TV-ve t\u00eb men\u00e7ura\" src=\"\/wp-content\/uploads\/2020\/06\/703c24e0215466cd0d1d8f655c0af2c8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\"P\u00ebr shkak t\u00eb shqet\u00ebsimeve n\u00eb lidhje me p\u00ebrhapjen e pamjaftueshme t\u00eb rr\u00ebnj\u00ebs ISRG n\u00eb pajisjet Android, ne vendos\u00ebm t\u00eb shtyjm\u00eb dat\u00ebn e kalimit n\u00eb rr\u00ebnj\u00ebn ton\u00eb t\u00eb ardhshme nga 8 korriku 2019 n\u00eb 8 korrik 2020,\" thuhet n\u00eb njoftimin zyrtar t\u00eb Let&#8217;s Encrypt.<\/p>\n<p>Data u detyrua t\u00eb zhvendoset p\u00ebr shkak t\u00eb nj\u00eb problemi q\u00eb quhet \u00abshp\u00ebrndarja e rr\u00ebnj\u00ebs\u00bb (root propagation), m\u00eb sakt\u00ebsisht, mungesa e shp\u00ebrndarjes s\u00eb rr\u00ebnj\u00ebs, kur CA rr\u00ebnj\u00ebsor nuk \u00ebsht\u00eb shp\u00ebrndar\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb gjer\u00eb te t\u00eb gjith\u00eb klient\u00ebt. <\/p>\n<p>Tani Let&#8217;s Encrypt p\u00ebrdor nj\u00eb certifikat\u00eb nd\u00ebrmjet\u00ebse t\u00eb n\u00ebnshkruar nga dy pal\u00eb me nj\u00eb zinxhir deri te rr\u00ebnja IdenTrust DST Root CA X3. Kjo certifikat\u00eb rr\u00ebnj\u00eb u l\u00ebshua n\u00eb shtator 2000 dhe skadon m\u00eb 30 shtator 2021. Para k\u00ebsaj date, Let&#8217;s Encrypt planifikon t\u00eb kaloj\u00eb n\u00eb rr\u00ebnj\u00ebn e saj autonome ISRG Root X1.<\/p>\n<p><img decoding=\"async\" alt=\"Problemi i certifikatave rr\u00ebnj\u00eb t\u00eb vjetra. Tani \u00ebsht\u00eb radha e Let&#039;s Encrypt dhe TV-ve t\u00eb men\u00e7ura\" src=\"\/wp-content\/uploads\/2020\/06\/0599df9bb72cf0f6c440ec66a45a5917.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nRr\u00ebnja ISRG u l\u00ebshua m\u00eb 4 qershor 2015. Pas k\u00ebsaj, filloi procesi i miratimit t\u00eb saj si qend\u00ebr certifikimi, q\u00eb p\u00ebrfundoi <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2018\/08\/06\/trusted-by-all-major-root-programs.html\">m\u00eb 6 gusht 2018<\/a><\/noindex>. Nga ky moment, CA-n\u00eb rr\u00ebnj\u00eb ishte e aksesueshme p\u00ebr t\u00eb gjith\u00eb klient\u00ebt p\u00ebrmes azhurnimit t\u00eb sistemit operativ ose softuerit. E vetmja gj\u00eb q\u00eb duhej b\u00ebr\u00eb ishte t\u00eb instalonit azhurnimin. <\/p>\n<p>Por k\u00ebtu \u00ebsht\u00eb problemi.<\/p>\n<p>N\u00ebse telefoni juaj mobil, televizori apo ndonj\u00eb pajisje tjet\u00ebr nuk \u00ebsht\u00eb p\u00ebrdit\u00ebsuar p\u00ebr dy vjet \u2014 si do ta dij\u00eb p\u00ebr certifikat\u00ebn e re rr\u00ebnj\u00ebsore ISRG Root X1? Dhe n\u00ebse nuk instalohet n\u00eb sistem, t\u00eb gjitha certifikatat serverike t\u00eb Let&#8217;s Encrypt do t\u00eb njihen si t\u00eb pavlefshme nga pajisja juaj, sapo Let&#8217;s Encrypt t\u00eb kaloj\u00eb n\u00eb rr\u00ebnj\u00ebn e re. N\u00eb ekosistemin Android ka shum\u00eb pajisje t\u00eb vjetra q\u00eb nuk jan\u00eb p\u00ebrdit\u00ebsuar prej koh\u00ebsh.<\/p>\n<p><img decoding=\"async\" alt=\"Problemi i certifikatave rr\u00ebnj\u00eb t\u00eb vjetra. Tani \u00ebsht\u00eb radha e Let&#039;s Encrypt dhe TV-ve t\u00eb men\u00e7ura\" src=\"\/wp-content\/uploads\/2020\/06\/c724b7cb8b0b6f2fdaa369dbe5cc09bb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Ekosistemi Android<\/i><\/p>\n<p>Kjo \u00ebsht\u00eb arsyeja pse Let&#8217;s Encrypt e shtyu kalimin n\u00eb rr\u00ebnj\u00ebn e saj ISRG dhe akoma p\u00ebrdor lidhjen nd\u00ebrmjet\u00ebse q\u00eb shkon deri te rr\u00ebnja IdenTrust. Por kalimi n\u00eb \u00e7do rast do t\u00eb duhet t\u00eb realizohet. Data e nd\u00ebrrimit t\u00eb rr\u00ebnj\u00ebs \u00ebsht\u00eb caktuar <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">8 korrik 2020<\/a><\/noindex>.<\/p>\n<p>P\u00ebr t\u00eb verifikuar n\u00ebse n\u00eb aparatin tuaj (televizori, kutia e mediave ose nj\u00eb klient tjet\u00ebr) \u00ebsht\u00eb instaluar rr\u00ebnja ISRG X1, hapni nj\u00eb faqe testi <noindex><a rel=\"nofollow\" href=\"https:\/\/valid-isrgrootx1.letsencrypt.org\/\">https:\/\/valid-isrgrootx1.letsencrypt.org\/<\/a><\/noindex>. N\u00ebse nuk shfaqet nj\u00eb paralajm\u00ebrim t\u00eb siguris\u00eb, zakonisht gjith\u00e7ka \u00ebsht\u00eb n\u00eb rregull. <\/p>\n<p>Let&#8217;s Encrypt nuk \u00ebsht\u00eb e vetmja q\u00eb duhet t\u00eb zgjidh\u00eb problemin e kalimit n\u00eb nj\u00eb rr\u00ebnj\u00eb t\u00eb re. Kriptografia n\u00eb internet ka filluar t\u00eb p\u00ebrdoret pak m\u00eb shum\u00eb se 20 vjet m\u00eb par\u00eb, k\u00ebshtu q\u00eb tani \u00ebsht\u00eb momenti p\u00ebrfundimtar p\u00ebr shum\u00eb certifikata rr\u00ebnj\u00ebsore.<\/p>\n<p>Pronaret e televizor\u00ebve inteligjent\u00eb, t\u00eb cil\u00ebt nuk kan\u00eb p\u00ebrdit\u00ebsuar softuerin e tyre Smart TV p\u00ebr shum\u00eb vite, mund t\u00eb p\u00ebrballen me nj\u00eb problem t\u00eb till\u00eb. P\u00ebr shembull, themeli i ri GlobalSign <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r5.roots.globalsign.com\/\">R5 Root<\/a><\/noindex> u l\u00ebshua n\u00eb vitin 2012, dhe pas k\u00ebsaj disa televizor\u00eb t\u00eb vjet\u00ebr inteligjent\u00eb nuk arrijn\u00eb t\u00eb krijojn\u00eb nj\u00eb zinxhir me t\u00eb, sepse ky CA rr\u00ebnj\u00ebsor nuk \u00ebsht\u00eb i pranish\u00ebm te ata. K\u00ebta klient\u00eb, p\u00ebr shembull, nuk arrit\u00ebn t\u00eb vendosin nj\u00eb lidhje t\u00eb sigurt me faqen bbc.co.uk. P\u00ebr t\u00eb zgjidhur problemin, administrator\u00ebt e BBC-s\u00eb u detyruan t\u00eb gjejn\u00eb nj\u00eb zgjidhje: ata <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/impending-doom-root-ca-expiring-legacy-clients\/\">krijuan nj\u00eb zinxhir alternativ p\u00ebr k\u00ebta klient\u00eb<\/a><\/noindex> n\u00ebp\u00ebrmjet certifikatave nd\u00ebrmjet\u00ebsuese shtes\u00eb, duke p\u00ebrdorur rr\u00ebnj\u00ebt e vjetra <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r3.roots.globalsign.com\/\">R3 Root<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r1.roots.globalsign.com\/\">R1 Root<\/a><\/noindex>, t\u00eb cilat ende nuk kan\u00eb skaduar.<\/p>\n<pre>www.bbc.co.uk (Leaf)\nGlobalSign ECC OV SSL CA 2018 (Intermediate)\nGlobalSign Root CA - R5 (Intermediate)\nGlobalSign Root CA - R3 (Intermediate)<\/pre>\n<p>\nKy \u00ebsht\u00eb nj\u00eb zgjidhje p\u00ebrkohshme. Problemi nuk do t\u00eb zhduket n\u00ebse nuk e rinovoni softuerin e klientit. Nj\u00eb televizor i men\u00e7ur \u00ebsht\u00eb n\u00eb thelb nj\u00eb kompjuter me kapacitete t\u00eb kufizuara n\u00ebn Linux. Pa rinovimet, certifikatat e tij rr\u00ebnj\u00ebsore do t\u00eb skadojn\u00eb patjet\u00ebr.<\/p>\n<p>Kjo i p\u00ebrket t\u00eb gjitha pajisjeve, jo vet\u00ebm televizor\u00ebve. N\u00ebse keni ndonj\u00eb pajisje q\u00eb \u00ebsht\u00eb e lidhur me internetin dhe q\u00eb \u00ebsht\u00eb reklamuar si nj\u00eb pajisje \"inteligjente\", at\u00ebher\u00eb problemi me certifikatat e skaduara pothuajse me siguri e prek at\u00eb. N\u00ebse pajisja nuk rinovohet, depoja rr\u00ebnj\u00ebsore e CA do t\u00eb skadoj\u00eb me kalimin e koh\u00ebs, dhe p\u00ebrfundimisht problemi do t\u00eb dal\u00eb n\u00eb sip\u00ebrfaqe. Sa shpejt do t\u00eb shfaqet problemi varet nga koha e fundit e rinovimi t\u00eb depozit\u00ebs rr\u00ebnj\u00ebsore. Kjo mund t\u00eb jet\u00eb disa vjet para dat\u00ebs reale t\u00eb l\u00ebshimit t\u00eb pajisjes.<\/p>\n<p>Me p\u00ebr t\u00eb th\u00ebn\u00eb, kjo \u00ebsht\u00eb arsyeja pse disa platforma t\u00eb m\u00ebdha mediatike nuk mund t\u00eb p\u00ebrdorin qendra t\u00eb automatizuara moderne sertifikimi si Let&#8217;s Encrypt, shkruan Scott Helme. P\u00ebr televizor\u00ebt e men\u00e7ur, ato nuk jan\u00eb t\u00eb p\u00ebrshtatshme, dhe numri i rr\u00ebnj\u00ebve \u00ebsht\u00eb shum\u00eb i vog\u00ebl p\u00ebr t\u00eb garantuar mb\u00ebshtetje p\u00ebr certifikatat n\u00eb pajisjet e vjetra. N\u00eb t\u00eb kund\u00ebrt, televizori thjesht nuk do t\u00eb mund t\u00eb nisi sh\u00ebrbimet moderne t\u00eb transmetimit.<\/p>\n<p>Incidenti i fundit me AddTrust tregoi se edhe kompanit\u00eb e m\u00ebdha IT ndonj\u00ebher\u00eb nuk jan\u00eb t\u00eb p\u00ebrgatitura p\u00ebr faktin se certifikata rr\u00ebnj\u00eb skadon.<\/p>\n<p>Zgjidhja e vetme p\u00ebr k\u00ebt\u00eb problem \u00ebsht\u00eb p\u00ebrdit\u00ebsimi. Zhvilluesit e pajisjeve t\u00eb men\u00e7ura duhet t\u00eb sigurojn\u00eb nj\u00eb mekaniz\u00ebm p\u00ebr p\u00ebrdit\u00ebsimin e softuerit dhe certifikatave rr\u00ebnj\u00eb paraprakisht. Nga ana tjet\u00ebr, prodhuesit nuk kan\u00eb interes t\u00eb sigurojn\u00eb funksionimin e pajisjeve t\u00eb tyre pas skadimit t\u00eb garancis\u00eb.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/promo.miran.ru\"><img decoding=\"async\" alt=\"Problemi i certifikatave rr\u00ebnj\u00eb t\u00eb vjetra. Tani \u00ebsht\u00eb radha e Let&#039;s Encrypt dhe TV-ve t\u00eb men\u00e7ura\" src=\"\/wp-content\/uploads\/2020\/06\/3705c7e9fca090ccca917bb7fba231f7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/a><\/noindex><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dcmiran\/blog\/506026\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0442\u043e\u0431\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043c\u043e\u0433 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442, \u0442\u043e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0431\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u0422\u0438\u043f\u0438\u0447\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u0441\u0432\u0435\u0440\u0445\u0443, \u0432 \u043d\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u041c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0440\u0430\u0432\u043d\u043e \u0442\u0440\u0451\u043c. \u041a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u2014 \u0441\u0435\u0440\u0434\u0446\u0435 \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u043d \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432 \u0432\u0430\u0448\u0443 \u041e\u0421 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043e\u043d \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0415\u0433\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u043d\u044f\u0435\u0448\u044c \u0441\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84767,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 Let\u2019s Encrypt \u0438 \u0443\u043c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-10T11:43:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-10T11:43:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Problemi i certifikatave rr\u00ebnj\u00ebsore t\u00eb p\u00ebrjet\u00ebsuara. N\u00eb radh\u00eb Let\u2019s Encrypt dhe televizor\u00ebt inteligjent\u00eb | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 Let\u2019s Encrypt \u0438 \u0443\u043c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-10T11:43:11+00:00","article:modified_time":"2020-06-10T11:43:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84766","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:51:43","updated":"2022-09-29 06:39:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84766"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84766\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84767"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}