{"id":84766,"date":"2020-06-10T13:43:11","date_gmt":"2020-06-10T11:43:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory"},"modified":"2020-06-10T13:43:11","modified_gmt":"2020-06-10T11:43:11","slug":"problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","title":{"rendered":"Problemi i certifikat\u00ebve rr\u00ebnj\u00ebsor\u00eb t\u00eb skaduar. N\u00eb radh\u00eb jan\u00eb Let&#8217;s Encrypt dhe TV-t\u00eb inteligjente","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Problemi i certifikat\u00ebve t\u00eb vjetruar t\u00eb rr\u00ebnj\u00ebve. N\u00eb radh\u00eb jan\u00eb Let&#039;s Encrypt dhe televizor\u00ebt inteligjent\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/662b2b855f327f8d1a1f5bf99ca6fcef.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb m\u00ebnyr\u00eb q\u00eb shfletuesi t\u00eb mund t\u00eb verifikoj\u00eb nj\u00eb faqe n\u00eb internet, ai paraqet nj\u00eb zinxhir t\u00eb vlefsh\u00ebm certifikatash. Nj\u00eb zinxhir tipik \u00ebsht\u00eb i paraqitur n\u00eb krye, dhe ai mund t\u00eb ket\u00eb m\u00eb shum\u00eb se nj\u00eb certifikat\u00eb nd\u00ebrmjet\u00ebse. Numri minimal i certifikatave n\u00eb nj\u00eb zinxhir t\u00eb vlefsh\u00ebm \u00ebsht\u00eb tre.<\/p>\n<p>Certifikata rr\u00ebnj\u00ebsore \u00ebsht\u00eb zemra e qendr\u00ebs s\u00eb certifikimit. Ajo \u00ebsht\u00eb n\u00eb thelb e integruar n\u00eb sistemin tuaj operativ ose shfletues, dhe fizikisht \u00ebsht\u00eb e pranishme n\u00eb pajisjen tuaj. Nuk mund ta ndryshosh nga serveri. Nevojitet nj\u00eb p\u00ebrdit\u00ebsim i detyruar i sistemit operativ ose i softuerit t\u00eb integruar n\u00eb pajisje.<\/p>\n<p>Specialisti i siguris\u00eb Scott Helme <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/impending-doom-root-ca-expiring-legacy-clients\/\">CNBC, n\u00eb periudh\u00ebn nga 2000 deri n\u00eb 2018 Facebook, Alphabet, Microsoft, Apple dhe Amazon kan\u00eb pun\u00ebsuar m\u00eb shum\u00eb se nj\u00eb milion punonj\u00ebs t\u00eb rinj. T\u00eb tilla biznese akumullojn\u00eb mjaft burime, p\u00ebrve\u00e7 aktivitetit t\u00eb tyre kryesor, p\u00ebr t\u00eb realizuar k\u00ebrkime dhe zhvillime masive n\u00eb fusha t\u00eb reja, ndonj\u00ebher\u00eb me rrezikshm\u00ebri t\u00eb lart\u00eb. P\u00ebr m\u00eb tep\u00ebr, kompanit\u00eb formojn\u00eb dhe ekosistemin e tyre, brenda t\u00eb cilit p\u00ebrdoruesit i zgjidhin nj\u00eb gam\u00eb t\u00eb gjer\u00eb problemesh - porositin menj\u00ebher\u00eb t\u00eb gjitha produktet e nevojshme, nga ushqimi deri te teknika, n\u00eb Amazon. Sipas parashikimeve t\u00eb analist\u00ebve, deri n\u00eb vitin 2021 ai<\/a><\/noindex>, q\u00eb problemet kryesore do t\u00eb ndodhin me qendr\u00ebn e certifikimit Let's Encrypt, sepse sot \u00ebsht\u00eb qendra m\u00eb e njohur n\u00eb internet, dhe certifikata e saj rr\u00ebnj\u00ebsore s\u00eb shpejti do \"t\u00eb skadoj\u00eb\". Ndryshimi i rr\u00ebnj\u00ebs Let's Encrypt <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">\u00ebsht\u00eb planifikuar p\u00ebr 8 korrik 2020<\/a><\/noindex>.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nCertifikatat p\u00ebrfundimtare dhe ato nd\u00ebrmjet\u00ebse t\u00eb qendr\u00ebs s\u00eb certifikimit (CA) d\u00ebrgohen nga serveri te klienti, nd\u00ebrsa certifikata rr\u00ebnj\u00ebsore e klientit <i>ve\u00e7se ekziston<\/i>, prandaj me k\u00ebt\u00eb koleksion certifikatash mund t\u00eb nd\u00ebrtohet nj\u00eb zinxhir dhe t\u00eb autentikohet nj\u00eb faqe n\u00eb internet. <\/p>\n<p>Problemi \u00ebsht\u00eb se \u00e7do certifikate ka nj\u00eb afat skadimi, pas t\u00eb cilit k\u00ebrkon z\u00ebvend\u00ebsim. P\u00ebr shembull, nga 1 shtatori 2020, n\u00eb shfletuesin Safari planifikojn\u00eb t\u00eb vendosin nj\u00eb kufizim p\u00ebr afatin e skadimit t\u00eb certifikatave TLS t\u00eb server\u00ebve <noindex><a rel=\"nofollow\" href=\"https:\/\/support.apple.com\/en-us\/HT211025\">maksimumi 398 dit\u00eb<\/a><\/noindex>.<\/p>\n<p>Kjo do t\u00eb thot\u00eb se t\u00eb gjith\u00eb ne do t\u00eb duhet t\u00eb z\u00ebvend\u00ebsojm\u00eb certifikatat e server\u00ebve t\u00eb pakt\u00ebn \u00e7do 12 muaj. Ky kufizim zbatohet vet\u00ebm p\u00ebr certifikatat e server\u00ebve, ai <i>jo<\/i> zbaton gjithashtu p\u00ebr certifikat\u00ebn rr\u00ebnj\u00ebsore t\u00eb CA.<\/p>\n<p>Certifikatat e CA rregullohen nga nj\u00eb grup tjet\u00ebr rregullash, prandaj kan\u00eb kufizime t\u00eb ndryshme p\u00ebr afatin e skadimit. \u00c7do her\u00eb takohen certifikata nd\u00ebrmjet\u00ebse me nj\u00eb afat skadimi prej 5 vjet\u00ebsh dhe certifikata rr\u00ebnj\u00ebsore edhe me nj\u00eb afat krijimi prej 25 vjet\u00ebsh! <\/p>\n<p>Me certifikatat nd\u00ebrmjet\u00ebse zakonisht nuk ka probleme, sepse ato d\u00ebrgohen te klienti nga serveri, i cili p\u00ebrshtat shpesh certifikat\u00ebn e tij, k\u00ebshtu q\u00eb thjesht n\u00ebp\u00ebrmjet k\u00ebsaj procedure z\u00ebvend\u00ebson edhe certifikat\u00ebn nd\u00ebrmjet\u00ebse. Ajo \u00ebsht\u00eb mjaft e leht\u00eb p\u00ebr t'u z\u00ebvend\u00ebsuar s\u00eb bashku me certifikat\u00ebn e serverit, ndryshe nga certifikata rr\u00ebnj\u00ebsore e CA.<\/p>\n<p>Si e tham\u00eb, CA-i rr\u00ebnj\u00ebsor \u00ebsht\u00eb i integruar drejtp\u00ebrdrejt n\u00eb pajisjen klient, n\u00eb sistemin operativ, n\u00eb shfletues ose n\u00eb ndonj\u00eb softuer tjet\u00ebr. Ndryshimi i CA-s\u00eb rr\u00ebnj\u00ebsore nuk mund t\u00eb kontrollohet nga faqja e internetit. K\u00ebtu k\u00ebrkohet nj\u00eb p\u00ebrdit\u00ebsim n\u00eb klient, qoft\u00eb kjo p\u00ebrdit\u00ebsim i sistemit operativ ose softuerit.<\/p>\n<p>Disa CA t\u00eb rr\u00ebnj\u00ebsor\u00eb ekzistojn\u00eb q\u00eb nga koh\u00ebt e lashta, p\u00ebr rreth 20-25 vjet. Shum\u00eb shpejt disa nga CA t\u00eb m\u00eb t\u00eb vjetra do t\u00eb arrijn\u00eb n\u00eb fundin e jet\u00ebs s\u00eb tyre natyrore, koha e tyre po i skadon. P\u00ebr shumic\u00ebn prej nesh, kjo nuk do t\u00eb jet\u00eb nj\u00eb problem, pasi CA-t\u00eb kan\u00eb krijuar certifikata t\u00eb reja rr\u00ebnj\u00ebsore, t\u00eb cilat jan\u00eb shp\u00ebrndar\u00eb p\u00ebr shum\u00eb vite n\u00eb t\u00eb gjith\u00eb bot\u00ebn p\u00ebrmes p\u00ebrdit\u00ebsimeve t\u00eb sistemeve operative dhe shfletuesve. Por n\u00ebse ndonj\u00eb person nuk ka p\u00ebrdit\u00ebsuar sistemin operativ ose shfletuesin p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb, kjo \u00ebsht\u00eb nj\u00eb lloj problemi.<\/p>\n<p>Nj\u00eb situat\u00eb e till\u00eb ndodhi m\u00eb 30 maj 2020 n\u00eb or\u00ebn 10:48:38 GMT. Ky \u00ebsht\u00eb momenti i sakt\u00eb kur <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/globalsign\/blog\/504784\/\">skadoi certifikata rr\u00ebnj\u00ebsore AddTrust<\/a><\/noindex> nga qendra e certifikimit Comodo (Sectigo).<\/p>\n<p>Ajo u p\u00ebrdor p\u00ebr n\u00ebnshkrimin nd\u00ebrkufitar p\u00ebr t\u00eb \u0433\u0430\u0440\u0430\u043d\u0442uar p\u00ebrputhshm\u00ebrin\u00eb me pajisjet e vjetra, n\u00eb magazinat e t\u00eb cilave nuk kishte certifikat\u00ebn e re rr\u00ebnj\u00ebsore USERTrust.<\/p>\n<p>Fatkeq\u00ebsisht, problemet nuk ndodh\u00ebn vet\u00ebm n\u00eb shfletuesit e vjet\u00ebruar, por edhe n\u00eb klient\u00ebt jasht\u00eb shfletuesit t\u00eb bazuar n\u00eb OpenSSL 1.0.x, LibreSSL dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/gitlab.com\/gnutls\/gnutls\/-\/blob\/master\/lib\/x509\/verify.c\">GnuTLS<\/a><\/noindex>. P\u00ebr shembull, n\u00eb pajisjet televizive <noindex><a rel=\"nofollow\" href=\"https:\/\/support.roku.com\/en-gb\/article\/360049417393\">Roku<\/a><\/noindex>, sh\u00ebrbimin <noindex><a rel=\"nofollow\" href=\"https:\/\/t.co\/RdU3GDwPmD?amp=1\">Heroku<\/a><\/noindex>, n\u00eb aplikacionet Fortinet, Chargify, n\u00eb platform\u00ebn .NET Core 2.0 n\u00ebn Linux dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/twitter.com\/__agwa\/timelines\/1266777818811322368\">n\u00eb shum\u00eb t\u00eb tjera.<\/a><\/noindex>.<\/p>\n<p>Pritej q\u00eb problemi t\u00eb prekte vet\u00ebm sistemet e vjetruara (Android 2.3, Windows XP, Mac OS X 10.11, iOS 9 etj.), pasi shfletuesit modern\u00eb mund t\u00eb angazhonin certifikat\u00ebn e dyt\u00eb rr\u00ebnj\u00ebsore USERTrust. Por n\u00eb fakt, filluan d\u00ebshtime n\u00eb qindra sh\u00ebrbime n\u00eb internet, t\u00eb cilat p\u00ebrdor\u00ebn bibliotekat e lira OpenSSL 1.0.x dhe GnuTLS. Lidhi i sigurt nuk u krijua m\u00eb me nxjerrjen e gabimit p\u00ebr skadimin e certifikat\u00ebs.<\/p>\n<h1>Tjetri \u2014 Let's Encrypt<\/h1>\n<p>\nNj\u00eb tjet\u00ebr shembull i mir\u00eb i ndryshimit t\u00eb ardhsh\u00ebm t\u00eb CA rr\u00ebnj\u00ebsore \u00ebsht\u00eb qendra e certifikimit Let's Encrypt. Edhe <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/lets-encrypt-to-transition-to-isrg-root\/\">n\u00eb prill 2019<\/a><\/noindex> ata planifikuan t\u00eb kalonin nga zinxhiri Identrust n\u00eb nj\u00eb zinxhir t\u00eb tyre ISRG Root, por kjo <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">nuk ndodhi.<\/a><\/noindex>.<\/p>\n<p><img decoding=\"async\" alt=\"Problemi i certifikat\u00ebve t\u00eb vjetruar t\u00eb rr\u00ebnj\u00ebve. N\u00eb radh\u00eb jan\u00eb Let&#039;s Encrypt dhe televizor\u00ebt inteligjent\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/703c24e0215466cd0d1d8f655c0af2c8.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00abP\u00ebr shkak t\u00eb shqet\u00ebsimeve n\u00eb lidhje me p\u00ebrhapjen e pamjaftueshme t\u00eb rr\u00ebnj\u00ebs ISRG n\u00eb pajisjet Android, ne vendos\u00ebm t\u00eb ndajm\u00eb dat\u00ebn e kalimit n\u00eb rr\u00ebnj\u00ebn ton\u00eb t\u00eb vetme nga 8 korriku 2019 n\u00eb 8 korrik 2020\u00bb, thuhet n\u00eb njoftimin zyrtar t\u00eb Let's Encrypt.<\/p>\n<p>Data u detyrua p\u00ebr t'u transferuar p\u00ebr shkak t\u00eb nj\u00eb problemi q\u00eb quhet 'p\u00ebrhapja e rr\u00ebnj\u00ebs' (root propagation), p\u00ebr m\u00eb sakt\u00eb, munges\u00ebs s\u00eb p\u00ebrhapjes s\u00eb rr\u00ebnj\u00ebs, kur CA e rr\u00ebnj\u00ebs nuk \u00ebsht\u00eb shum\u00eb e shp\u00ebrndar\u00eb n\u00eb t\u00eb gjith\u00eb klient\u00ebt. <\/p>\n<p>Aktualisht, Let's Encrypt po p\u00ebrdor nj\u00eb certifikat\u00eb t\u00eb n\u00ebnshkruar p\u00ebrmes kryq\u00ebzimit me zinxhir deri te rr\u00ebnja IdenTrust DST Root CA X3. Kjo certifikat\u00eb rr\u00ebnj\u00eb u dha q\u00eb n\u00eb n\u00ebntor 2000 dhe skadon m\u00eb 30 shtator 2021. Para k\u00ebsaj date, Let's Encrypt planifikon t\u00eb kaloj\u00eb n\u00eb rr\u00ebnj\u00ebn e saj t\u00eb vet\u00eb-n\u00ebnshkruar ISRG Root X1.<\/p>\n<p><img decoding=\"async\" alt=\"Problemi i certifikat\u00ebve t\u00eb vjetruar t\u00eb rr\u00ebnj\u00ebve. N\u00eb radh\u00eb jan\u00eb Let&#039;s Encrypt dhe televizor\u00ebt inteligjent\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/0599df9bb72cf0f6c440ec66a45a5917.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nRr\u00ebnja ISRG u l\u00ebshua m\u00eb 4 qershor 2015. Pas k\u00ebsaj, filloi procesi i miratimit t\u00eb saj si qend\u00ebr sertifikimi, i cili u p\u00ebrfundua <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2018\/08\/06\/trusted-by-all-major-root-programs.html\">m\u00eb 6 gusht 2018<\/a><\/noindex>. Q\u00eb nga ai moment, CA e rr\u00ebnj\u00ebs ishte e disponueshme p\u00ebr t\u00eb gjith\u00eb klient\u00ebt n\u00ebp\u00ebrmjet p\u00ebrdit\u00ebsimit t\u00eb sistemit operativ ose softuerit. E gjith\u00eb \u00e7far\u00eb nevojitej ishte t\u00eb instalohej p\u00ebrdit\u00ebsimi. <\/p>\n<p>Por kjo \u00ebsht\u00eb pik\u00ebrisht problemi.<\/p>\n<p>N\u00ebse telefoni juaj mobil, televizori ose pajisja tjet\u00ebr nuk \u00ebsht\u00eb azhurnuar p\u00ebr dy vjet \u2014 si do t\u00eb dij\u00eb ai p\u00ebr certifikat\u00ebn e re rr\u00ebnj\u00ebsore ISRG Root X1? Dhe n\u00ebse ajo nuk instalohet n\u00eb sistem, t\u00eb gjitha certifikatat server\u00ebve t\u00eb Let's Encrypt do t\u00eb njihen si t\u00eb pavlefshme nga pajisja juaj sa her\u00eb q\u00eb Let's Encrypt t\u00eb kaloj\u00eb n\u00eb rr\u00ebnj\u00ebn e re. Dhe n\u00eb ekosistemin Android ka shum\u00eb pajisje t\u00eb vjetra q\u00eb nuk jan\u00eb azhurnuar prej koh\u00ebsh.<\/p>\n<p><img decoding=\"async\" alt=\"Problemi i certifikat\u00ebve t\u00eb vjetruar t\u00eb rr\u00ebnj\u00ebve. N\u00eb radh\u00eb jan\u00eb Let&#039;s Encrypt dhe televizor\u00ebt inteligjent\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/c724b7cb8b0b6f2fdaa369dbe5cc09bb.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Ekosistemi Android<\/i><\/p>\n<p>Kjo \u00ebsht\u00eb arsyeja pse Let's Encrypt e shtyu kalimin n\u00eb rr\u00ebnj\u00ebn e saj ISRG dhe akoma p\u00ebrdor lidhjen e nd\u00ebrmjetme q\u00eb shp\u00ebrndahet te rr\u00ebnja IdenTrust. Por kalimi n\u00eb \u00e7do rast do t\u00eb duhet t\u00eb b\u00ebhet. Dhe data e kalimit t\u00eb rr\u00ebnj\u00ebs \u00ebsht\u00eb caktuar <noindex><a rel=\"nofollow\" href=\"https:\/\/letsencrypt.org\/2019\/04\/15\/transitioning-to-isrg-root.html\">m\u00eb 8 korrik 2020<\/a><\/noindex>.<\/p>\n<p>P\u00ebr t\u00eb kontrolluar n\u00ebse n\u00eb pajisjen tuaj (televizor, pajisje ose ndonj\u00eb klient tjet\u00ebr) \u00ebsht\u00eb instaluar rr\u00ebnja ISRG X1, hapni faqen e testimit <noindex><a rel=\"nofollow\" href=\"https:\/\/valid-isrgrootx1.letsencrypt.org\/\">https:\/\/valid-isrgrootx1.letsencrypt.org\/<\/a><\/noindex>. N\u00ebse nuk shfaqet nj\u00eb paralajm\u00ebrim sigurie, at\u00ebher\u00eb zakonisht \u00ebsht\u00eb gjith\u00e7ka n\u00eb rregull. <\/p>\n<p>Let's Encrypt nuk \u00ebsht\u00eb e vetmja q\u00eb p\u00ebrballet me problemin e kalimit n\u00eb rr\u00ebnj\u00ebn e re. Kriptografia n\u00eb internet filloi t\u00eb p\u00ebrdoret pak m\u00eb shum\u00eb se 20 vjet m\u00eb par\u00eb, k\u00ebshtu q\u00eb pik\u00ebrisht tani po vjen koha e skadimit t\u00eb shum\u00eb certifikatave rr\u00ebnj\u00ebsore.<\/p>\n<p>Me k\u00ebt\u00eb problem mund t\u00eb p\u00ebrballen pronar\u00ebt e televizon\u00ebve inteligjent\u00eb q\u00eb nuk e kan\u00eb p\u00ebrdit\u00ebsuar softuerin e Smart TV p\u00ebr shum\u00eb vjet. P\u00ebr shembull, rr\u00ebnja e re GlobalSign <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r5.roots.globalsign.com\/\">R5 Root<\/a><\/noindex> u publikua n\u00eb vitin 2012, dhe pas nj\u00eb kohe disa Smart TV t\u00eb vjet\u00ebr nuk mund t\u00eb nd\u00ebrtojn\u00eb nj\u00eb zinxhir lidhjeje me t\u00eb, sepse ky CA rr\u00ebnj\u00ebsor thjesht u mungon atyre. N\u00eb ve\u00e7anti, k\u00ebta klient\u00eb nuk mund\u00ebn t\u00eb vendosnin nj\u00eb lidhje t\u00eb sigurt me faqen bbc.co.uk. P\u00ebr t\u00eb zgjidhur problemin, administrator\u00ebt e BBC-s\u00eb duhej t\u00eb b\u00ebnin nj\u00eb hile: ata <noindex><a rel=\"nofollow\" href=\"https:\/\/scotthelme.co.uk\/impending-doom-root-ca-expiring-legacy-clients\/\">nd\u00ebrtuan p\u00ebr k\u00ebta klient\u00eb nj\u00eb zinxhir alternativ<\/a><\/noindex> n\u00ebp\u00ebrmjet certifikatave t\u00eb nd\u00ebrmjetme shtes\u00eb, duke angazhuar rr\u00ebnj\u00ebt e vjetra <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r3.roots.globalsign.com\/\">R3 Root<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/valid.r1.roots.globalsign.com\/\">R1 Root<\/a><\/noindex>, q\u00eb akoma nuk kan\u00eb skaduar.<\/p>\n<pre>www.bbc.co.uk (Leaf)\nGlobalSign ECC OV SSL CA 2018 (Intermediate)\nGlobalSign Root CA - R5 (Intermediate)\nGlobalSign Root CA - R3 (Intermediate)<\/pre>\n<p>\nKjo \u00ebsht\u00eb nj\u00eb zgjidhje temporary. Problemi nuk do t\u00eb zhduket n\u00ebse nuk p\u00ebrdit\u00ebsohet softueri klient. Nj\u00eb televizor i men\u00e7ur \u00ebsht\u00eb n\u00eb thelb nj\u00eb kompjuter me funksionalitet t\u00eb kufizuar, bazuar n\u00eb Linux. Dhe pa p\u00ebrdit\u00ebsime, certifikatat e tij rr\u00ebnj\u00ebsore patjet\u00ebr do t\u00eb skadojn\u00eb.<\/p>\n<p>Kjo i p\u00ebrket t\u00eb gjitha pajisjeve, jo vet\u00ebm televizor\u00ebve. N\u00ebse keni ndonj\u00eb pajisje q\u00eb lidhet me internetin dhe q\u00eb \u00ebsht\u00eb reklamuar si nj\u00eb pajisje \"e men\u00e7ur\", at\u00ebher\u00eb problemi me certifikatat e skaduara p\u00ebr siguri \u00ebsht\u00eb shum\u00eb mund\u00ebsisht i lidhur me t\u00eb. N\u00ebse pajisja nuk p\u00ebrdit\u00ebsohet, at\u00ebher\u00eb depozita rr\u00ebnj\u00ebsore CA do t\u00eb skadoj\u00eb me kalimin e koh\u00ebs dhe p\u00ebrfundimisht problemi do t\u00eb dal\u00eb n\u00eb pah. Sa shpejt do t\u00eb shfaqet problemi varet nga koha e fundit e p\u00ebrdit\u00ebsimit t\u00eb depozit\u00ebs rr\u00ebnj\u00ebsore. Kjo mund t\u00eb jet\u00eb disa vite para dat\u00ebs reale t\u00eb publikimit t\u00eb pajisjes.<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, kjo \u00ebsht\u00eb nj\u00eb nga problemet pse disa platforma t\u00eb m\u00ebdha t\u00eb mediave nuk mund t\u00eb p\u00ebrdorin qendra moderne automatike t\u00eb certifikimit si Let's Encrypt, shkruan Scott Helme. Ato nuk jan\u00eb t\u00eb p\u00ebrshtatshme p\u00ebr televizor\u00ebt inteligjent\u00eb, dhe numri i rr\u00ebnj\u00ebve \u00ebsht\u00eb shum\u00eb i vog\u00ebl p\u00ebr t\u00eb garantuar mb\u00ebshtetje t\u00eb certifikatave n\u00eb pajisjet e vjetra. P\u00ebrndryshe, televizori thjesht nuk do t\u00eb mund t\u00eb aktivizoj\u00eb sh\u00ebrbimet moderne t\u00eb transmetimit.<\/p>\n<p>Incidenti i fundit me AddTrust tregoi se madje edhe kompanit\u00eb e m\u00ebdha t\u00eb IT-s\u00eb shpesh nuk jan\u00eb t\u00eb p\u00ebrgatitura p\u00ebr p\u00ebrfundimin e afatit t\u00eb nj\u00eb certifikate rr\u00ebnj\u00ebsore.<\/p>\n<p>Zgjidhja e vetme p\u00ebr problemin \u00ebsht\u00eb p\u00ebrdit\u00ebsimi. Zhvilluesit e pajisjeve t\u00eb men\u00e7ura duhet t\u00eb sigurojn\u00eb paraprakisht nj\u00eb mekaniz\u00ebm p\u00ebr p\u00ebrdit\u00ebsimin e softuerit dhe certifikatave rr\u00ebnj\u00ebsore. Nga ana tjet\u00ebr, prodhuesve u jepet konvenienca t\u00eb ofrojn\u00eb funksionimin e pajisjeve t\u00eb tyre pas p\u00ebrfundimit t\u00eb garancis\u00eb.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" href=\"http:\/\/promo.miran.ru\"><img decoding=\"async\" alt=\"Problemi i certifikat\u00ebve t\u00eb vjetruar t\u00eb rr\u00ebnj\u00ebve. N\u00eb radh\u00eb jan\u00eb Let&#039;s Encrypt dhe televizor\u00ebt inteligjent\u00eb\" src=\"\/wp-content\/uploads\/2020\/06\/3705c7e9fca090ccca917bb7fba231f7.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/a><\/noindex><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dcmiran\/blog\/506026\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0427\u0442\u043e\u0431\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u043c\u043e\u0433 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442, \u0442\u043e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0431\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u0422\u0438\u043f\u0438\u0447\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u0441\u0432\u0435\u0440\u0445\u0443, \u0432 \u043d\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0431\u043e\u043b\u044c\u0448\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430. \u041c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \u0440\u0430\u0432\u043d\u043e \u0442\u0440\u0451\u043c. \u041a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u2014 \u0441\u0435\u0440\u0434\u0446\u0435 \u0446\u0435\u043d\u0442\u0440\u0430 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041e\u043d \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u0432 \u0432\u0430\u0448\u0443 \u041e\u0421 \u0438\u043b\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043e\u043d \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043d\u0430 \u0432\u0430\u0448\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435. \u0415\u0433\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u043d\u044f\u0435\u0448\u044c \u0441\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84767,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 Let\u2019s Encrypt \u0438 \u0443\u043c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-10T11:43:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-10T11:43:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Problemi i certifikat\u00ebve t\u00eb vjetruar t\u00eb rr\u00ebnj\u00ebve. N\u00eb radh\u00eb jan\u00eb Let\u2019s Encrypt dhe televizor\u00ebt inteligjent\u00eb | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041d\u0430 \u043e\u0447\u0435\u0440\u0435\u0434\u0438 Let\u2019s Encrypt \u0438 \u0443\u043c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0432\u0438\u0437\u043e\u0440\u044b | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/problema-ustarevshih-kornevyh-sertifikatov-na-ocheredi-lets-encrypt-i-umnye-televizory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-10T11:43:11+00:00","article:modified_time":"2020-06-10T11:43:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84766","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:51:43","updated":"2022-09-29 06:39:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=84766"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/84766\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/84767"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=84766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=84766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=84766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}