Kufunyenwe unobangela weengxaki zokuphelelwa ngamanzi emzimbeni ngeeseva ze-ACME ngaphandle kweLetsEncrypt

Sebastian Krause uzimisele umthombo wokungahambelani okungaqhelekanga nenkonzo ukudlula umbhalo Ukuphelelwa ngamanzi emzimbeni, esetyenziselwa ukwenza ngokuzenzekelayo ukufumana izatifikethi ze-TLS usebenzisa i-ACME protocol. Zombini umxhasi wereferensi kunye nomsebenzi we-uacme kunye ne-Bypass, kodwa ayiphelelwa ngamanzi (ngokuchanekileyo, iphinde yasebenza nezinye iindlela zokusebenza, kodwa ngokukodwa kwimodi ye-dns-1).

Isizathu sijike sayinto encinci: endaweni yokwahlulahlula impendulo kwifomati ye-JSON ngokwenyani, umbhali we-dehydrate wasebenzisa uphawu lokufomatha lwemveliso ethile ye-JSON evela kwinkonzo ye-Let Encryption kwaye yahlulahlulwe kusetyenziswa intetho eqhelekileyo. Kodwa i-Bypass ayibuyiswanga kakuhle, kodwa i-JSON eyenziwe yancinci, kunye nesetyenzisiweyo ukubonakaliswa rhoqo khange isebenze. Le ndlela ayibandakanyi iingxaki nge-LetsEncrypt ukuba le nkonzo itshintsha ifomathi yokukhupha kwixa elizayo ngaphandle kwesilumkiso, ngelixa ihleli ngokupheleleyo kwisakhelo seprotocol esemthethweni.

Xa kuxoxwa ngengxaki, kwacetyiswa ukuba kusetyenziswe isahluli sangaphandle se-JSON njenge json_pp okanye jq (yongeza 'jq -r ".authorizations | .[]"' kumbhobho wokwahlulahlula ngokuchanekileyo).
Ukungalungi kwale ndlela kukudityaniswa kombono wokusebenzisa iindlela ezincinci nezinokuqinisekiswa ngokulula, kunye neengxaki zokuphatha iimpazamo.

Umbhali weprojekthi yokuphelelwa ngamanzi emzimbeni (iprojekthi ibikutsha nje ithengisiwe Apilayer GmbH) wavuma, ukuba ukwahlulahlula i-JSON yingxaki enkulu, kodwa akacingi ngokudibanisa abahlaluli bangaphandle umbono olungileyo, kuba enye yeenzuzo eziphambili zeskripthi kukunqongophala kokubophelela kukuxhomekeka kwangaphandle. Ngoku uxakekile, kodwa unethemba lokunikela ingqalelo yakhe ekusombululeni le ngxaki kwiintsuku ezimbalwa ezizayo. Izicwangciso ziquka ukuphinda kusetyenzwe kwakhona i-JSON parser okanye ukudibanisa i-parser esele ilungile kulwimi lweqokobhe - JSON.sh.

umthombo: opennet.ru