{"id":85822,"date":"2020-06-19T13:42:20","date_gmt":"2020-06-19T11:42:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/opyt-primeneniya-tehnologii-rutoken-dlya-registraczii-i-avtorizaczii-polzovatelej-v-sisteme-chast-3"},"modified":"2020-06-19T13:42:20","modified_gmt":"2020-06-19T11:42:20","slug":"opyt-primeneniya-tehnologii-rutoken-dlya-registraczii-i-avtorizaczii-polzovatelej-v-sisteme-chast-3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/opyt-primeneniya-tehnologii-rutoken-dlya-registraczii-i-avtorizaczii-polzovatelej-v-sisteme-chast-3","title":{"rendered":"Eksperienca e p\u00ebrdorimit t\u00eb teknologjis\u00eb Rutoken p\u00ebr regjistrimin dhe autorizimin e p\u00ebrdoruesve n\u00eb sistem (pjesa 3)","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mir\u00eb dit\u00ebn!<\/p>\n

N\u00eb pjes\u00ebn e m\u00ebparshme<\/a><\/noindex> Ne kemi krijuar me sukses qendr\u00ebn ton\u00eb t\u00eb besimit. Si mundet ajo t\u00eb jet\u00eb e dobishme p\u00ebr q\u00ebllimet tona? <\/p>\n

Me an\u00eb t\u00eb qendr\u00ebs lokale t\u00eb besimit, ne mund t\u00eb ndajm\u00eb certifikata dhe t\u00eb realizojm\u00eb verifikimin e n\u00ebnshkrimit sipas k\u00ebtyre certifikatave.
\n<\/a><\/noindex>
\nKur l\u00ebshohet nj\u00eb certifikat\u00eb p\u00ebr p\u00ebrdoruesin, qendra e besimit p\u00ebrdor nj\u00eb k\u00ebrkes\u00eb t\u00eb ve\u00e7ant\u00eb p\u00ebr l\u00ebshimin e certifikat\u00ebs Pkcs#10, e cila ka formatin e skedarit \u2018.csr\u2019. Kjo k\u00ebrkes\u00eb p\u00ebrmban nj\u00eb sekuenc\u00eb t\u00eb koduar, t\u00eb cil\u00ebn qendra e besimit e di si ta parse korrektisht. K\u00ebrkesa p\u00ebrmban si \u00e7el\u00ebsin publik t\u00eb p\u00ebrdoruesit ashtu edhe t\u00eb dh\u00ebnat p\u00ebr krijimin e certifikat\u00ebs (nj\u00eb array asociativ me t\u00eb dh\u00ebnat e p\u00ebrdoruesit). <\/p>\n

Si ta marrim k\u00ebrkes\u00ebn p\u00ebr l\u00ebshimin e certifikat\u00ebs, do ta shqyrtojm\u00eb n\u00eb artikullin e ardhsh\u00ebm, nd\u00ebrsa n\u00eb k\u00ebt\u00eb tregoj komandat kryesore t\u00eb qendr\u00ebs s\u00eb besimit, q\u00eb do na ndihmojn\u00eb t\u00eb realizojm\u00eb detyr\u00ebn ton\u00eb n\u00eb an\u00ebn e backend. <\/p>\n

Pra, n\u00eb fillim duhet t\u00eb krijojm\u00eb certifikat\u00ebn. P\u00ebr k\u00ebt\u00eb do t\u00eb p\u00ebrdorim komand\u00ebn:<\/p>\n

openssl ca -batch -in user.csr -out user.crt<\/code><\/pre>\n
\nca \u2014 komanda openSSL, e cila i p\u00ebrket qendr\u00ebs s\u00eb besimit,
\n-batch \u2014 anullohet k\u00ebrkesa p\u00ebr konfirmimin gjat\u00eb formimit t\u00eb certifikat\u00ebs.
\nuser.csr \u2014 k\u00ebrkes\u00eb p\u00ebr krijimin e certifikat\u00ebs (skedari me format .csr).
\nuser.crt \u2014 certifikata (rezultati i marr\u00eb nga komanda).<\/p>\n
P\u00ebr t\u00eb punuar kjo komand\u00eb, qendra e besimit duhet t\u00eb jet\u00eb e konfiguruar sakt\u00ebsisht si\u00e7 \u00ebsht\u00eb p\u00ebrshkruar n\u00eb pjes\u00ebn e m\u00ebparshme t\u00eb artikullit.<\/a><\/noindex>Mndryshe, do t\u00eb duhet t\u00eb sakt\u00ebsoni vendndodhjen e certifikat\u00ebs rr\u00ebnj\u00ebsore t\u00eb qendr\u00ebs s\u00eb besimit. <\/p>\n
Komanda e verifikimit t\u00eb certifikat\u00ebs:<\/p>\n
openssl cms -verify -in authenticate.cms -inform PEM -CAfile \/Users\/\u2026\u2026\/demoCA\/ca.crt -out data.file<\/code><\/pre>\n
\ncms \u2014 komanda openSSL, e cila p\u00ebrdoret p\u00ebr n\u00ebnshkrim, verifikim, enkriptimin e t\u00eb dh\u00ebnave dhe operacione t\u00eb tjera kriptografike me an\u00eb t\u00eb openSSL.<\/p>\n
-verify \u2014 n\u00eb k\u00ebt\u00eb rast po realizojm\u00eb verifikimin e certifikat\u00ebs.<\/p>\n
authenticate.cms \u2014 skedari q\u00eb p\u00ebrmban t\u00eb dh\u00ebna t\u00eb n\u00ebnshkruara nga certifikata, e cila u l\u00ebshua nga komanda e m\u00ebparshme.<\/p>\n
-inform PEM \u2014 p\u00ebrdoret formati PEM.<\/p>\n
-CAfile \/Users\/\u2026\u2026\/demoCA\/ca.crt \u2014 rruga drejt certifikat\u00ebs rr\u00ebnj\u00ebsore. (pa k\u00ebt\u00eb komanda nuk funksionoi p\u00ebr mua, edhe pse ishin t\u00eb shkruara rrug\u00ebt drejt ca.crt n\u00eb skedarin openssl.cfg)<\/p>\n
-out data.file \u2014 t\u00eb dh\u00ebnat e dekoduara i d\u00ebrgoj n\u00eb skedarin data.file.<\/p>\n
Algoritmi i p\u00ebrdorimit t\u00eb qendr\u00ebs s\u00eb besimit n\u00eb an\u00ebn e backend \u00ebsht\u00eb si vijon:<\/p>\n