{"id":84766,"date":"2020-06-10T13:43:11","date_gmt":"2020-06-10T11:43:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory"},"modified":"2020-06-10T13:43:11","modified_gmt":"2020-06-10T11:43:11","slug":"problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","title":{"rendered":"Problemi i certifikata t\u00eb vjetruara t\u00eb rr\u00ebnj\u00ebs. N\u00eb pritje jan\u00eb Let\u2019s Encrypt dhe televizor\u00ebt e men\u00e7ur","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Problemi
\n
\nP\u00ebr t\u00eb lejuar q\u00eb shfletuesi t\u00eb verifikoj\u00eb nj\u00eb website, ai paraqet nj\u00eb zinxhir certifikatash t\u00eb vlefsh\u00ebm. Nj\u00eb zinxhir tipik \u00ebsht\u00eb i paraqitur m\u00eb sip\u00ebr, n\u00eb t\u00eb mund t\u00eb ket\u00eb m\u00eb shum\u00eb se nj\u00eb certifikat\u00eb nd\u00ebrmjet\u00ebse. Numri minimal i certifikatave n\u00eb nj\u00eb zinxhir t\u00eb vlefsh\u00ebm \u00ebsht\u00eb tre.<\/p>\n

Certifikata rr\u00ebnj\u00ebsore \u00ebsht\u00eb zemra e qendr\u00ebs s\u00eb certifikimit. Ajo \u00ebsht\u00eb literalisht e integruar n\u00eb sistemin tuaj operativ ose shfletuesin dhe fizikisht \u00ebsht\u00eb e pranishme n\u00eb pajisjen tuaj. Nuk mund ta nd\u00ebrroni nga serveri. K\u00ebrkohet nj\u00eb p\u00ebrdit\u00ebsim i detyruesh\u00ebm i sistemit operativ ose i softuerit t\u00eb integruar n\u00eb pajisje.<\/p>\n

Specialisti i siguris\u00eb Scott Helme raporton<\/a><\/noindex>, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u043e\u0437\u043d\u0438\u043a\u043d\u0443\u0442 \u0443 \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e \u0441\u0430\u043c\u044b\u0439 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u0426\u0421 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0430 \u0435\u0433\u043e \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0441\u043a\u043e\u0440\u043e \u00ab\u043f\u0440\u043e\u0442\u0443\u0445\u043d\u0435\u0442\u00bb. \u0421\u043c\u0435\u043d\u0430 \u043a\u043e\u0440\u043d\u044f Let’s Encrypt \u00ebsht\u00eb planifikuar p\u00ebr 8 korrik 2020<\/a><\/noindex>.
\n<\/a><\/noindex>
\nCertifikatat p\u00ebrfundimtare dhe nd\u00ebrmjet\u00ebse t\u00eb qendr\u00ebs s\u00eb certifikimit (CA) d\u00ebrgohen klientit nga serveri, nd\u00ebrsa certifikata rr\u00ebnj\u00ebsore ndodhet n\u00eb klient kemi tashm\u00eb<\/i>, prandaj me k\u00ebt\u00eb koleksion certifikatash mund t\u00eb nd\u00ebrtohet nj\u00eb zinxhir dhe t\u00eb autentikohet faqja e internetit. <\/p>\n

Problemi \u00ebsht\u00eb se \u00e7do certifikat\u00eb ka nj\u00eb afat, pas t\u00eb cilit nevojitet z\u00ebvend\u00ebsimi i saj. P\u00ebr shembull, nga 1 Shtatori 2020, n\u00eb shfletuesin Safari planifikojn\u00eb t\u00eb vendosin nj\u00eb kufizim n\u00eb afatin e vlefshm\u00ebris\u00eb s\u00eb certifikatave TLS p\u00ebr server\u00eb. maksimalisht 398 dit\u00eb<\/a><\/noindex>.<\/p>\n

Kjo do t\u00eb thot\u00eb se t\u00eb gjith\u00eb ne do t\u00eb duhet t\u00eb z\u00ebvend\u00ebsojm\u00eb certifikatat e serverit t\u00eb pakt\u00ebn \u00e7do 12 muaj. Ky kufizim i referohet vet\u00ebm certifikatave t\u00eb serverit, nuk<\/i> p\u00ebrfshin certifikatave rr\u00ebnj\u00ebsore CA.<\/p>\n

Certifikatat CA rregullohen nga nj\u00eb grup tjet\u00ebr rregullash, prandaj kan\u00eb kufizime t\u00eb ndryshme n\u00eb afat. Shpesh hasen certifikata nd\u00ebrmjet\u00ebse me nj\u00eb afat vlefshm\u00ebrie prej 5 vjet\u00ebsh dhe certifikata rr\u00ebnj\u00ebsore me nj\u00eb jet\u00ebgjat\u00ebsi madje 25 vje\u00e7are! <\/p>\n

Me certificatat nd\u00ebrmjet\u00ebse zakonisht nuk ka probleme, sepse ato ofrohen klient\u00ebve nga serveri, i cili \u00ebsht\u00eb shum\u00eb m\u00eb shpesh q\u00ebndron duke e nd\u00ebrruar certifikat\u00ebn e tij, k\u00ebshtu q\u00eb thjesht gjat\u00eb k\u00ebsaj procedure z\u00ebvend\u00ebson edhe nd\u00ebrmjet\u00ebsoren. Ajo \u00ebsht\u00eb mjaft e leht\u00eb p\u00ebr t'u z\u00ebvend\u00ebsuar s\u00eb bashku me certifikat\u00ebn e serverit, ndryshe nga certifikata rr\u00ebnj\u00ebsore CA.<\/p>\n

Si\u00e7 e p\u00ebrmend\u00ebm tashm\u00eb, CA rr\u00ebnj\u00ebsore \u00ebsht\u00eb e integruar drejtp\u00ebrdrejt n\u00eb pajisjen e klientit, n\u00eb sistemin operativ, n\u00eb shfletues ose n\u00eb ndonj\u00eb program tjet\u00ebr. Ndryshimi i CA rr\u00ebnj\u00ebsore nuk mund t\u00eb kontrollohet nga faqja e internetit. K\u00ebtu k\u00ebrkohet nj\u00eb p\u00ebrdit\u00ebsim n\u00eb klient, qoft\u00eb p\u00ebrdit\u00ebsimi i sistemit operativ ose softuerit.<\/p>\n

Disa CA rr\u00ebnj\u00ebsore ekzistojn\u00eb p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb, flasim p\u00ebr 20-25 vjet. Shum\u00eb shpejt disa nga CA rr\u00ebnj\u00ebsore m\u00eb t\u00eb vjet\u00ebr do t\u00eb afroheshin n\u00eb fundin e jet\u00ebs s\u00eb tyre natyrore, koha e tyre pothuajse ka skaduar. P\u00ebr shumic\u00ebn e nesh, kjo dhe nuk do t\u00eb jet\u00eb nj\u00eb problem, sepse CA kan\u00eb krijuar certifikata t\u00eb reja rr\u00ebnj\u00ebsore, dhe ato jan\u00eb shp\u00ebrndar\u00eb prej vitesh n\u00eb p\u00ebrdit\u00ebsimet e sistemeve operative dhe shfletuesve. Por n\u00ebse dikush nuk ka p\u00ebrdit\u00ebsuar sistemin operativ apo shfletuesin e tij p\u00ebr nj\u00eb koh\u00eb mjaft t\u00eb gjat\u00eb, kjo \u00ebsht\u00eb nj\u00ebfar\u00eb problemi.<\/p>\n

Nj\u00eb situat\u00eb e till\u00eb ndodhi m\u00eb 30 maj 2020 n\u00eb 10:48:38 GMT. Ky \u00ebsht\u00eb momenti i sakt\u00eb kur skadove_certificate t\u00eb k\u00ebtij rr\u00ebnj\u00eb AddTrust<\/a><\/noindex> nga qendra e certifikimit Comodo (Sectigo).<\/p>\n

Ai u p\u00ebrdor p\u00ebr n\u00ebnshkrimin e kryq\u00ebzuar, p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebrin\u00eb me pajisjet e vjetruara, n\u00eb t\u00eb cilat nuk ka certifikat\u00ebn e re t\u00eb rr\u00ebnj\u00ebs USERTrust.<\/p>\n

Fatkeq\u00ebsisht, problemet nuk u shfaq\u00ebn vet\u00ebm n\u00eb shfletuesit e vjet\u00ebruar, por edhe n\u00eb klient\u00eb jasht\u00eb shfletueseve t\u00eb bazuar n\u00eb OpenSSL 1.0.x, LibreSSL dhe GnuTLS<\/a><\/noindex>. P\u00ebr shembull, n\u00eb kutit\u00eb televizive Roku<\/a><\/noindex>, sh\u00ebrbimi Heroku<\/a><\/noindex>, n\u00eb aplikacionet Fortinet, Chargify, n\u00eb platform\u00ebn .NET Core 2.0 n\u00eb Linux dhe nd\u00ebr shum\u00eb t\u00eb tjera.<\/a><\/noindex>.<\/p>\n

P\u00ebrflitej se problemi do t\u00eb prekte vet\u00ebm sistemet e vjetruara (Android 2.3, Windows XP, Mac OS X 10.11, iOS 9 etj.), pasi shfletuesit modern\u00eb mund t\u00eb p\u00ebrdorin certifikat\u00ebn e dyt\u00eb t\u00eb rr\u00ebnj\u00ebs USERTrust. Por n\u00eb fakt, filluan d\u00ebshtime n\u00eb qindra sh\u00ebrbime n\u00eb internet q\u00eb p\u00ebrdor\u00ebn bibliotekat e lira OpenSSL 1.0.x dhe GnuTLS. Lidhja e sigurt nuk arriti t\u00eb vendoset, duke dh\u00ebn\u00eb nj\u00eb mesazh gabimi mbi skadimin e certifikat\u00ebs.<\/p>\n

\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u2014 Let’s Encrypt<\/h1>\n

\n\u0415\u0449\u0451 \u043e\u0434\u0438\u043d \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u0449\u0435\u0439 \u0441\u043c\u0435\u043d\u044b \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e CA \u2014 \u0446\u0435\u043d\u0442\u0440 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 Let’s Encrypt. \u0415\u0449\u0451 n\u00eb prill 2019<\/a><\/noindex> ata planifikuan t\u00eb kalonin nga zinxhiri Identrust n\u00eb zinxhirin e tyre ISRG Root, por kjo nuk ndodhi<\/a><\/noindex>.<\/p>\n

\"Problemi
\n
\n\u00ab\u0418\u0437-\u0437\u0430 \u043e\u043f\u0430\u0441\u0435\u043d\u0438\u0439 \u043f\u043e \u043f\u043e\u0432\u043e\u0434\u0443 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u044f ISRG \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Android \u043c\u044b \u0440\u0435\u0448\u0438\u043b\u0438 \u043f\u0435\u0440\u0435\u043d\u0435\u0441\u0442\u0438 \u0434\u0430\u0442\u0443 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043a \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u0440\u043d\u044e \u0441 8 \u0438\u044e\u043b\u044f 2019 \u0433\u043e\u0434\u0430 \u043d\u0430 8 \u0438\u044e\u043b\u044f 2020 \u0433\u043e\u0434\u0430\u00bb, \u2014 \u0441\u043a\u0430\u0437\u0430\u043d\u043e \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 Let’s Encrypt.<\/p>\n

Data u detyrua t\u00eb zhvendoset p\u00ebr shkak t\u00eb nj\u00eb problemi q\u00eb quhet \u00abshp\u00ebrndarja e rr\u00ebnj\u00ebs\u00bb (root propagation), m\u00eb sakt\u00ebsisht, mungesa e shp\u00ebrndarjes s\u00eb rr\u00ebnj\u00ebs, kur CA rr\u00ebnj\u00ebsor nuk \u00ebsht\u00eb shp\u00ebrndar\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb gjer\u00eb te t\u00eb gjith\u00eb klient\u00ebt. <\/p>\n

\u0421\u0435\u0439\u0447\u0430\u0441 Let’s Encrypt \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u043a\u0440\u0451\u0441\u0442\u043d\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0441 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0434\u043e \u043a\u043e\u0440\u043d\u044f IdenTrust DST Root CA X3. \u042d\u0442\u043e\u0442 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0431\u044b\u043b \u0432\u044b\u0434\u0430\u043d \u0435\u0449\u0451 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2000 \u0433\u043e\u0434\u0430 \u0438 \u0438\u0441\u0442\u0435\u043a\u0430\u0435\u0442 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2021 \u0433\u043e\u0434\u0430. \u0414\u043e \u044d\u0442\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 Let’s Encrypt \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u0430\u043c\u043e\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043a\u043e\u0440\u0435\u043d\u044c ISRG Root X1.<\/p>\n

\"Problemi
\n
\nRr\u00ebnja ISRG u l\u00ebshua m\u00eb 4 qershor 2015. Pas k\u00ebsaj, filloi procesi i miratimit t\u00eb saj si qend\u00ebr certifikimi, q\u00eb p\u00ebrfundoi m\u00eb 6 gusht 2018<\/a><\/noindex>. Nga ky moment, CA-n\u00eb rr\u00ebnj\u00eb ishte e aksesueshme p\u00ebr t\u00eb gjith\u00eb klient\u00ebt p\u00ebrmes azhurnimit t\u00eb sistemit operativ ose softuerit. E vetmja gj\u00eb q\u00eb duhej b\u00ebr\u00eb ishte t\u00eb instalonit azhurnimin. <\/p>\n

Por k\u00ebtu \u00ebsht\u00eb problemi.<\/p>\n

\u0415\u0441\u043b\u0438 \u0432\u0430\u0448 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0442\u0435\u043b\u0435\u0444\u043e\u043d, \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440 \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u2014 \u043a\u0430\u043a \u043e\u043d\u043e \u0443\u0437\u043d\u0430\u0435\u0442 \u043e \u043d\u043e\u0432\u043e\u043c \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0435 ISRG Root X1? \u0410 \u0435\u0441\u043b\u0438 \u0435\u0433\u043e \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0442\u043e \u0432\u0441\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u044b Let’s Encrypt \u0432\u0430\u0448\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0435\u0442 \u043d\u0435\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e Let’s Encrypt \u043f\u0435\u0440\u0435\u0439\u0434\u0451\u0442 \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u0440\u0435\u043d\u044c. \u0410 \u0432 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Android \u043c\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u043b\u0438\u0441\u044c.<\/p>\n

\"Problemi
\nEkosistemi Android<\/i><\/p>\n

\u0412\u043e\u0442 \u043f\u043e\u0447\u0435\u043c\u0443 Let’s Encrypt \u043e\u0442\u043b\u043e\u0436\u0438\u043b \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043a \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c\u0443 \u043a\u043e\u0440\u043d\u044e ISRG \u0438 \u0432\u0441\u0451 \u0435\u0449\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0435 \u0437\u0432\u0435\u043d\u043e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0441\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043a \u043a\u043e\u0440\u043d\u044e IdenTrust. \u041d\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u0434\u0451\u0442\u0441\u044f \u0441\u0434\u0435\u043b\u0430\u0442\u044c. \u0418 \u0434\u0430\u0442\u043e\u0439 \u0441\u043c\u0435\u043d\u044b \u043a\u043e\u0440\u043d\u044f \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043e 8 korrik 2020<\/a><\/noindex>.<\/p>\n

P\u00ebr t\u00eb verifikuar n\u00ebse n\u00eb aparatin tuaj (televizori, kutia e mediave ose nj\u00eb klient tjet\u00ebr) \u00ebsht\u00eb instaluar rr\u00ebnja ISRG X1, hapni nj\u00eb faqe testi https:\/\/valid-isrgrootx1.letsencrypt.org\/<\/a><\/noindex>. N\u00ebse nuk shfaqet nj\u00eb paralajm\u00ebrim t\u00eb siguris\u00eb, zakonisht gjith\u00e7ka \u00ebsht\u00eb n\u00eb rregull. <\/p>\n

Let’s Encrypt \u043d\u0435 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439, \u043a\u043e\u043c\u0443 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u0440\u0435\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0441 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u043c \u043d\u0430 \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u0440\u0435\u043d\u044c. \u041a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u044e \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0447\u0443\u0442\u044c \u0431\u043e\u043b\u0435\u0435 20 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u0442\u0430\u043a \u0447\u0442\u043e \u043a\u0430\u043a \u0440\u0430\u0437 \u0441\u0435\u0439\u0447\u0430\u0441 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0435\u0442 \u043c\u043e\u043c\u0435\u043d\u0442 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043c\u043d\u043e\u0433\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432.<\/p>\n

Pronaret e televizor\u00ebve inteligjent\u00eb, t\u00eb cil\u00ebt nuk kan\u00eb p\u00ebrdit\u00ebsuar softuerin e tyre Smart TV p\u00ebr shum\u00eb vite, mund t\u00eb p\u00ebrballen me nj\u00eb problem t\u00eb till\u00eb. P\u00ebr shembull, themeli i ri GlobalSign R5 Root<\/a><\/noindex> u l\u00ebshua n\u00eb vitin 2012, dhe pas k\u00ebsaj disa televizor\u00eb t\u00eb vjet\u00ebr inteligjent\u00eb nuk arrijn\u00eb t\u00eb krijojn\u00eb nj\u00eb zinxhir me t\u00eb, sepse ky CA rr\u00ebnj\u00ebsor nuk \u00ebsht\u00eb i pranish\u00ebm te ata. K\u00ebta klient\u00eb, p\u00ebr shembull, nuk arrit\u00ebn t\u00eb vendosin nj\u00eb lidhje t\u00eb sigurt me faqen bbc.co.uk. P\u00ebr t\u00eb zgjidhur problemin, administrator\u00ebt e BBC-s\u00eb u detyruan t\u00eb gjejn\u00eb nj\u00eb zgjidhje: ata krijuan nj\u00eb zinxhir alternativ p\u00ebr k\u00ebta klient\u00eb<\/a><\/noindex> n\u00ebp\u00ebrmjet certifikatave nd\u00ebrmjet\u00ebsuese shtes\u00eb, duke p\u00ebrdorur rr\u00ebnj\u00ebt e vjetra R3 Root<\/a><\/noindex> dhe R1 Root<\/a><\/noindex>, t\u00eb cilat ende nuk kan\u00eb skaduar.<\/p>\n

www.bbc.co.uk (Leaf)\nGlobalSign ECC OV SSL CA 2018 (Intermediate)\nGlobalSign Root CA - R5 (Intermediate)\nGlobalSign Root CA - R3 (Intermediate)<\/pre>\n
\nKy \u00ebsht\u00eb nj\u00eb zgjidhje p\u00ebrkohshme. Problemi nuk do t\u00eb zhduket n\u00ebse nuk e rinovoni softuerin e klientit. Nj\u00eb televizor i men\u00e7ur \u00ebsht\u00eb n\u00eb thelb nj\u00eb kompjuter me kapacitete t\u00eb kufizuara n\u00ebn Linux. Pa rinovimet, certifikatat e tij rr\u00ebnj\u00ebsore do t\u00eb skadojn\u00eb patjet\u00ebr.<\/p>\n
Kjo i p\u00ebrket t\u00eb gjitha pajisjeve, jo vet\u00ebm televizor\u00ebve. N\u00ebse keni ndonj\u00eb pajisje q\u00eb \u00ebsht\u00eb e lidhur me internetin dhe q\u00eb \u00ebsht\u00eb reklamuar si nj\u00eb pajisje \"inteligjente\", at\u00ebher\u00eb problemi me certifikatat e skaduara pothuajse me siguri e prek at\u00eb. N\u00ebse pajisja nuk rinovohet, depoja rr\u00ebnj\u00ebsore e CA do t\u00eb skadoj\u00eb me kalimin e koh\u00ebs, dhe p\u00ebrfundimisht problemi do t\u00eb dal\u00eb n\u00eb sip\u00ebrfaqe. Sa shpejt do t\u00eb shfaqet problemi varet nga koha e fundit e rinovimi t\u00eb depozit\u00ebs rr\u00ebnj\u00ebsore. Kjo mund t\u00eb jet\u00eb disa vjet para dat\u00ebs reale t\u00eb l\u00ebshimit t\u00eb pajisjes.<\/p>\n
\u041a\u0441\u0442\u0430\u0442\u0438, \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u043e\u0447\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043c\u0435\u0434\u0438\u0430\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0446\u0435\u043d\u0442\u0440\u044b \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0442\u0438\u043f\u0430 Let’s Encrypt, \u043f\u0438\u0448\u0435\u0442 \u0421\u043a\u043e\u0442\u0442 \u0425\u0435\u043b\u044c\u043c\u0435. \u0414\u043b\u044f \u0443\u043c\u043d\u044b\u0445 \u0422\u0412 \u043e\u043d\u0438 \u043d\u0435 \u043f\u043e\u0434\u0445\u043e\u0434\u044f\u0442, \u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043a\u043e\u0440\u043d\u0435\u0439 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043c\u0430\u043b\u043e, \u0447\u0442\u043e\u0431\u044b \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043d\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445. \u0412 \u043f\u0440\u043e\u0442\u0438\u0432\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u0422\u0412 \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u0441\u043c\u043e\u0436\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0442\u0440\u0438\u043c\u0438\u043d\u0433\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.<\/p>\n
Incidenti i fundit me AddTrust tregoi se edhe kompanit\u00eb e m\u00ebdha IT ndonj\u00ebher\u00eb nuk jan\u00eb t\u00eb p\u00ebrgatitura p\u00ebr faktin se certifikata rr\u00ebnj\u00eb skadon.<\/p>\n
Zgjidhja e vetme p\u00ebr k\u00ebt\u00eb problem \u00ebsht\u00eb p\u00ebrdit\u00ebsimi. Zhvilluesit e pajisjeve t\u00eb men\u00e7ura duhet t\u00eb sigurojn\u00eb nj\u00eb mekaniz\u00ebm p\u00ebr p\u00ebrdit\u00ebsimin e softuerit dhe certifikatave rr\u00ebnj\u00eb paraprakisht. Nga ana tjet\u00ebr, prodhuesit nuk kan\u00eb interes t\u00eb sigurojn\u00eb funksionimin e pajisjeve t\u00eb tyre pas skadimit t\u00eb garancis\u00eb.<\/p>\n
\n\"Problemi
\n<\/a><\/noindex>
\n
Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0427\u0442\u043e\u0431\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043c\u043e\u0433 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442, \u0442\u043e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0431\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u0422\u0438\u043f\u0438\u0447\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u0441\u0432\u0435\u0440\u0445\u0443, \u0432 \u043d\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u041c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0440\u0430\u0432\u043d\u043e \u0442\u0440\u0451\u043c. \u041a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u2014 \u0441\u0435\u0440\u0434\u0446\u0435 \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u043d \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432 \u0432\u0430\u0448\u0443 \u041e\u0421 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043e\u043d \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0415\u0433\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u043d\u044f\u0435\u0448\u044c \u0441\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84767,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Problemi i certifikatave rr\u00ebnj\u00ebsore t\u00eb p\u00ebrjet\u00ebsuara. N\u00eb radh\u00eb Let\u2019s Encrypt dhe televizor\u00ebt inteligjent\u00eb | ProHoster","description":"P\u00ebr t\u00eb lejuar q\u00eb shfletuesi t\u00eb autentifikoj\u00eb nj\u00eb faqe n\u00eb internet, ajo paraqet vetveten si nj\u00eb zinxhir t\u00eb vlefsh\u00ebm certifikatash. Nj\u00eb zinxhir tipik \u00ebsht\u00eb i paraqitur m\u00eb sip\u00ebr, ku mund t\u00eb ket\u00eb m\u00eb shum\u00eb se nj\u00eb certifikat\u00eb nd\u00ebrmjet\u00ebse. Numri minimal i certifikatave n\u00eb nj\u00eb zinxhir t\u00eb vlefsh\u00ebm \u00ebsht\u00eb tre. Certifikata rr\u00ebnj\u00ebsore \u00ebsht\u00eb zemra e qendr\u00ebs s\u00eb certifikimit. Ajo \u00ebsht\u00eb n\u00eb thelb e integruar n\u00eb sistemin tuaj operativ ose shfletues, dhe \u00ebsht\u00eb fizikisht e pranishme n\u00eb pajisjen tuaj. Nuk mund ta ndryshoni me","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 Let\u2019s Encrypt \u0438 \u0443\u043c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b | ProHoster","og:description":"\u0427\u0442\u043e\u0431\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043c\u043e\u0433 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442, \u0442\u043e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0431\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u0422\u0438\u043f\u0438\u0447\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u0441\u0432\u0435\u0440\u0445\u0443, \u0432 \u043d\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u041c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0440\u0430\u0432\u043d\u043e \u0442\u0440\u0451\u043c. \u041a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u2014 \u0441\u0435\u0440\u0434\u0446\u0435 \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u043d \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432 \u0432\u0430\u0448\u0443 \u041e\u0421 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043e\u043d \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0415\u0433\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u043d\u044f\u0435\u0448\u044c \u0441\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-10T11:43:11+00:00","article:modified_time":"2020-06-10T11:43:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84766","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:51:43","updated":"2022-09-29 06:39:22"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84766"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84766\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84767"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}