ืื ืืืคึผืจืืฉืืืืฉืึทื ืคืื ืื IdenTrust ืืืึธืจืฆื ืืึทืืืืึทืื (DST Root CA X3), ืืขื ืืฆื ืฆื ืงืจืืึทื-ืฆืืืื ืื Let's Encrypt CA ืืืึธืจืฆื ืืึทืืืืึทืื, ืืื ืืขืคึฟืืจื ืคึผืจืึธืืืขืืก ืืื Let's Encrypt ืืึทืืืืึทืื ืืืขืจืึทืคืึทืงืืืฉืึทื ืืื ืคึผืจืึทืืืฉืขืงืก ื ืืฆื ืขืืืขืจืข ืืืขืจืกืืขืก ืคืื OpenSSL ืืื GnuTLS. ืคึผืจืึธืืืขืืก ืืืื ืึทืคืขืงืืึทื ืื LibreSSL ืืืืืืึธืืขืง, ืื ืืขืืืขืืึธืคึผืขืจืก ืคืื ืืืึธืก ืืึธืื ื ืืฉื ืืขื ืืืขื ืืื ืืฉืืื ืคืึทืจืืึทื ืืขื ืืืื ืืขืจืคืึทืจืื ื ืคึฟืึทืจืืื ืื ืืื ืคืืืืืขืจื ืืืึธืก ืืขื ืขื ืืืืคืืขืฉืืื ืขื ื ืึธื ืื AddTrust ืืืึธืจืฆื ืืึทืืืืึทืื ืคืื ืื Sectigo (Comodo) CA ืืื ืคืึทืจืขืืืขืจื.
ืืึธืืืจ ืฆืืจืืงืจืืคื ืึทื ืืื OpenSSL ืจืืืืกืื ืึทืจืืืฃ ืฆื ืฆืืืืึทื 1.0.2 ืื ืงืืืกืืื ืืื ืืื GnuTLS ืืืืืขืจ ืืขืืืื ื 3.6.14, ืขืก ืืื ืืขืืืขื ืึท ืืฉืืง ืืืึธืก ืืื ื ืืฉื ืืึธืื ืงืจืืึทื-ืืขืืชืืขื ืกืขืจืืืคืืงืึทืฅ ืฆื ืืืื ืคึผืจืึทืกืขืกื ืจืืืืืง ืืืื ืืืื ืขืจ ืคืื ืื ืืืึธืจืฆื ืกืขืจืืืคืืงืึทืฅ ืืขื ืืฆื ืคึฟืึทืจ ืกืืื ืื ื ืืื ืึทืืืืืืืื , ืืคืืื ืืืื ืื ืืขืจืข ืืืืืืง ืึธื ืขืก ืืขื ืขื ืืคืืขืืื ืงืืืื ืคืื ืฆืืืจืื (ืืื ืืขื ืคืึทื ืคืื Let's Encrypt, ืื ืึทืืกืึทืืขืกืึทื ืก ืคืื ืื IdenTrust ืืืึธืจืฆื ืืึทืืืืึทืื ืคึผืจืืืืขื ืฅ ืืืขืจืึทืคืึทืงืืืฉืึทื, ืืคืืื ืืืื ืื ืกืืกืืขื ืืื ืฉืืืฆื ืคึฟืึทืจ Let's Encrypt ืก ืืืืืขื ืข ืืืึธืจืฆื ืืึทืืืืึทืื, ืืืืืืง ืืื 2030). ืืขืจ ืขืืงืจ ืคืื ืืขื ืืฉืืง ืืื ืึทื ืขืืืขืจืข ืืืขืจืกืืขืก ืคืื OpenSSL ืืื GnuTLS ืคึผืึทืจืกื ืื ืืึทืืืืึทืื ืืื ืึท ืืื ืขืึทืจ ืงืืื, ืืฉืขืช ืืืื RFC 4158, ืึท ืืึทืืืืึทืื ืงืขื ืขื ืคืึธืจืฉืืขืื ืึท ืืืจืขืงืืขื ืคืื ืื ืืขืจืืขืืืืื ืงืืึทืืขืืืง ืืจืึทืคืืง ืืื ืงืืืคื ืฆืืืจืื ืึทื ืืงืขืจื ืืืึธืก ืืึทืจืคึฟื ืฆื ืืืื ืืขื ืืืขื ืืื ืืฉืืื.
ืืื ืึท ืืืึธืจืงืึทืจืึธืื ื ืฆื ืืึทืืื ืืขื ืืืจืืคืึทื, ืขืก ืืื ืคืืจืืขืืืืื ืฆื ืืืกืืขืงื ืื "DST Root CA X3" ืืึทืืืืึทืื ืคืื ืื ืกืืกืืขื ืกืืึธืจืืืืฉ (/etc/ca-certificates.conf ืืื /etc/ssl/certs), ืืื ืืืืคื ืื ืืึทืคึฟืขื "ืืขืจืืืึทื ืืืงื" -ca-certificates -f -v" "). ืืืืฃ CentOS ืืื RHEL, ืืืจ ืงืขื ืขื ืืืืื ืื "DST Root CA X3" ืืึทืืืืึทืื ืฆื ืื ืืืึทืงืืืกื: trust dump โfilter "pkcs11:id=%c4%a7%b1%a4%7b%2c%71%fa%db%e1% 4ื%90%75%ืคืฃ%ืง4%15%60%85%89%10" | openssl x509 | sudo tee /etc/pki/ca-trust/source/blacklist/DST-Root-CA-X3.pem sudo update-ca-trust ืขืงืกืืจืึทืงื
ืขืืืขืืข ืคืื โโืื ืงืจืึทืฉืื ืืืึธืก ืืืจ ืืึธืื ืืขืืขื ื ืึธื ืื IdenTrust ืืืึธืจืฆื ืืึทืืืืึทืื ืืื ืืืืกืืขืืื ืืขื:
- ืืื OpenBSD, ืื syspatch ื ืืฆื, ืืขื ืืฆื ืฆื ืื ืกืืึทืืืจื ืืืื ืขืจื ืกืืกืืขื ืืขืจืืืึทื ืืืงืื ืืขื, ืืื ืคืืจืฉืืืคื ืืจืืขืื. ืื OpenBSD ืคึผืจืืืขืงื ืืืึทื ื ืขืจืืืฉืึทื ืืื ืืืคืจืืื ืคึผืึทืืฉืึทื ืคึฟืึทืจ ืฆืืืืืื 6.8 ืืื 6.9 ืืืึธืก ืคืึทืจืจืืืื ืคึผืจืึธืืืขืืก ืืื LibreSSL ืืื ืงืึธื ืืจืึธืืืจืื ื ืงืจืืึทื-ืืขืืชืืขื ืกืขืจืืืคืืงืึทืฅ, ืืืื ืขืจ ืคืื ืื ืืืึธืจืฆื ืกืขืจืืืคืืงืึทืฅ ืืื ืื ืฆืืืจืื ืงืืื ืคืื ืืืึธืก ืืื ืืืืกืืขืืื ืืขื. ืืื ืึท ืืืึธืจืงืึทืจืึธืื ื ืคึฟืึทืจ ืืขื ืคึผืจืึธืืืขื, ืขืก ืืื ืจืขืงืึทืืขื ืืื ืฆื ืืึทืฉืืืืขื ืคืื HTTPS ืฆื HTTP ืืื /etc/installurl (ืืึธืก ืืื ื ืืฉื ืกืืจืึทืฉืขื ืืืืขืจืืืื, ืืืืึทื ืืขืจืืืึทื ืืืงืื ืืขื ืืขื ืขื ืึทืืืฉื ืึทืื ืืืขืจืึทืคืืื ืืืจื ืึท ืืืืืืึทื ืืกืืืข) ืึธืืขืจ ืกืขืืขืงืืืจื ืึทื ืื ืืขืจ ืืจืืจื ืฉืคึผืืื (ftp.usa.openbsd. org, ftp.hostserver.de, cdn.openbsd.org). ืืืจ ืงืขื ืขื ืืืื ืืึทืืืึทืืืงื ืื ืืืืกืืขืืื ืืขื DST Root CA X3 ืืืึธืจืฆื ืืึทืืืืึทืื ืคืื ืื /etc/ssl/cert.pem ืืขืงืข.
- ืืื DragonFly BSD, ืขื ืืขื ืคึผืจืึธืืืขืืก ืืขื ืขื ืืืืขืจืงื ืืืขื ืืจืืขืื ืืื ืืคึผืึธืจืืก. ืืืขื ืกืืึทืจืืื ื ืื pkg ืคึผืขืงื ืคืึทืจืืืึทืืืขืจ, ืึท ืืึทืืืืึทืื ืืืขืจืึทืคืึทืงืืืฉืึทื ืืขืืช ืืื ืืจืืืก. ืื ืคืึทืจืจืืืื ืืื ืฆืืืขืืืืื ืืืึทื ื ืฆื ืื ืืขื, DragonFly_RELEASE_6_0 ืืื DragonFly_RELEASE_5_8 ืฆืืืืืื. ืืื ืึท ืืืึธืจืงืึทืจืึธืื ื, ืืืจ ืงืขื ืขื ืึทืจืึธืคึผื ืขืืขื ืื DST Root CA X3 ืืึทืืืืึทืื.
- ืืขืจ ืคึผืจืึธืฆืขืก ืคืื ืงืึธื ืืจืึธืืืจืื ื ืืื ืก ืขื ืงืจืืคึผื ืกืขืจืืืคืืงืึทืฅ ืืื ืึทืคึผืืึทืงืืืฉืึทื ื ืืืืืจื ืืืืฃ ืื ืขืืขืงืืจืึธื ืคึผืืึทืืคืึธืจืืข ืืื ืฆืขืืจืืื. ืืขืจ ืคึผืจืึธืืืขื ืืื ืืขืืืขื ืคืึทืจืคืขืกืืืงื ืืื ืืขืจืืืึทื ืืืงืื ืืขื 12.2.1, 13.5.1, 14.1.0, 15.1.0.
- ืขืืืขืืข ืืืกืืจืืืืืฉืึทื ื ืืึธืื ืคึผืจืึธืืืขืืก ืืื ืึทืงืกืขืกืื ื ืคึผืขืงื ืจืืคึผืึทืืึทืืึธืจืื ืืืขื ืืืจ ื ืืฆื ืื APT ืคึผืขืงื ืคืึทืจืืืึทืืืขืจ ืคึฟืึทืจืืื ืื ืืื ืขืืืขืจืข ืืืขืจืกืืขืก ืคืื ืื GnuTLS ืืืืืืึธืืขืง. ืืขืืืึทื 9 ืืื ืืขืืืขื ืึทืคืขืงืืึทื ืืืจื ืืขื ืคึผืจืึธืืืขื, ืืืึธืก ืืขื ืืฆื ืึทื ืึทื ืคึผืึทืืฉื GnuTLS ืคึผืขืงื, ืืืึธืก ืืขืคึฟืืจื ืฆื ืคึผืจืึธืืืขืืก ืืืขื ืึทืงืกืขืก ืฆื deb.debian.org ืคึฟืึทืจ ืืืืขืจื ืืืึธืก ืืึธืื ื ืืฉื ืืื ืกืืึทืืืจื ืื ืืขืจืืืึทื ืืืงื ืืื ืฆืืื (ืื gnutls28-3.5.8-5+deb9u6 ืคืึทืจืจืืืื ืืื ืืขืืืขื ืืขืคึฟืื ื. ืืขื 17ืื ืกืขืคืืขืืืขืจ). ืืื ืึท ืืืึธืจืงืึทืจืึธืื ื, ืขืก ืืื ืจืขืงืึทืืขื ืืื ืฆื ืืึทืืืึทืืืงื DST_Root_CA_X3.crt ืคืื ืื /etc/ca-certificates.conf ืืขืงืข.
- ืื ืึธืคึผืขืจืึทืฆืืข ืคืื โโโโืึทืงืืข-ืงืืืขื ื ืืื ืื ืคืึทืจืฉืคึผืจืืืืื ื ืื ืืืขื ืืึทืจ ืคึฟืึทืจ ืงืจืืืืืื ื OPNsense ืคืืืจืืืึทืืืก ืืื ืืืกืจืึทืคึผืืื; ืื ืคึผืจืึธืืืขื ืืื ืืขืืืขื ืจืขืคึผืึธืจืืขื ืืื ืฉืืืึทืื, ืึธืืขืจ ืื ืืขืืืขืืึธืคึผืขืจืก ืืึธืื ื ืืฉื ืืขืจืืื ืฆื ืืึทืคืจืืึทืขื ืึท ืืึทืืข ืืื ืฆืืื.
- ืืขืจ ืคึผืจืึธืืืขื ืึทืคืคืขืงืืขื ืื OpenSSL 1.0.2k ืคึผืขืงื ืืื RHEL/CentOS 7, ืึธืืขืจ ืึท ืืืึธื ืฆืืจืืง ืึท ืืขืจืืืึทื ืืืงื ืฆื ืื ca-certificates-7-7.el2021.2.50_72.noarch ืคึผืขืงื ืืื ืืืฉืขื ืขืจืืืืึทื ืคึฟืึทืจ RHEL 7 ืืื CentOS 9, ืคึฟืื ืืืึธืก ืื IdenTrust. ืกืขืจืืืคืืงืึทื ืืื ืึทืืืขืงืืขื ืืืขื, ื.ื. ืื ืืึทื ืึทืคืขืกืืืืฉืึทื ืคืื ืื ืคึผืจืึธืืืขื ืืื ืืคืืขืฉืืขืื ืืื ืฉืืืึทืื. ื ืขื ืืขื ืืขืจืืืึทื ืืืงื ืืื ืืจืืืก ืืื ืึท ืืืึธื ืฆืืจืืง ืคึฟืึทืจ Ubuntu 16.04, Ubuntu 14.04, Ubuntu 21.04, Ubuntu 20.04 ืืื Ubuntu 18.04. ืืื ื ืื ืืขืจืืืึทื ืืืงืื ืืขื ืืขื ืขื ืคืจืื ืืื ืฉืืืึทืื, ืื ืคึผืจืึธืืืขื ืืื ืงืึธื ืืจืึธืืืจืื ื ืืื ืขื ืงืจืืคึผื ืกืขืจืืืคืืงืึทืฅ ืืืืื ืึทืคืขืงืืึทื ืืืืขืจื ืคืื ืขืืืขืจืข ืฆืืืืืื ืคืื RHEL / CentOS ืืื Ubuntu ืืืึธืก ืืึธืื ื ืืฉื ืงืขืกืืืืขืจ ืื ืกืืึทืืืจื ืืขืจืืืึทื ืืืงืื ืืขื.
- ืืขืจ ืืึทืืืืึทืื ืืืขืจืึทืคืึทืงืืืฉืึทื ืคึผืจืึธืฆืขืก ืืื grpc ืืื ืฆืขืืจืืื.
- ืื ืืืืขื ืคืื ืงืืึธืืืคืืึทืจืข ืืืขืืขืจ ืคึผืืึทืืคืึธืจืืข ืืื ื ืื ืึทื ืืขืจืฉ.
- ืืฉืื ืืื Amazon Web Services (AWS).
- DigitalOcean ืืืืขืจื ืืึธืื ืคึผืจืึธืืืขืืก ืืื ืงืึทื ืขืงืืื ื ืฆื ืื ืืึทืืึทืืืืก.
- ืื Netlify ืืืึธืืงื ืคึผืืึทืืคืึธืจืืข ืืื ืงืจืึทืฉื.
- ืคึผืจืึธืืืขืืก ืืื ืึทืงืกืขืก Xero ืืึทืืื ืื ืืก.
- ืึทื ืคึผืจืืืื ืฆื ืคืึทืจืืืืื ืึท TLS ืคึฟืึทืจืืื ืืื ื ืฆื ืื ืืืขื ืึทืคึผื ืคืื ืื MailGun ืืื ืกื ืืื ื ืื ืึทื ืืขืจืฉ.
- ืงืจืึทืฉืื ืืื ืืืขืจืกืืขืก ืคืื ืืึทืงืึธืก ืืื ืืึธืก (11, 13, 14), ืืืึธืก ืืขืึธืจืขืืืฉ ืืึธื ื ืืฉื ืืึธืื ืึทืคืขืงืืึทื ืืืจื ืืขื ืคึผืจืึธืืืขื.
- ืงืึทืืืฉืคึผืืื ื ืืึทืืื ืื ืืก ื ืื ืึทื ืืขืจืฉ.
- ืืขืืช ืืืขืจืึทืคืืืื ื ืกืขืจืืืคืืงืึทืฅ ืืืขื ืึทืงืกืขืกืื ื PostMan API.
- Guardian Firewall ืืื ืงืจืึทืฉื.
- ืื monday.com ืฉืืืฆื ืืืึทื ืืื ืฆืขืืจืืื.
- ืื ืกืขืจื ืคึผืืึทืืคืึธืจืืข ืืื ืงืจืึทืฉื.
- ืืคึผืืืืข ืืฉืขืง ืืื ื ืื ืึทื ืืขืจืฉ ืืื Google ืงืืึธืื ืืึธื ืืืึธืจืื ื.
- ืึทืจืืืกืืขืื ืืื ืืึทืืืืึทืื ืืืขืจืึทืคืึทืงืืืฉืึทื ืืื Cisco Umbrella Secure Web Gateway.
- ืคึผืจืึธืืืขืืก ืืื ืงืึทื ืขืงืืื ื ืฆื Bluecoat ืืื Palo Alto ืคึผืจืึทืงืกืื.
- OVHcloud ืืื ืคึผืจืึธืืืขืืก ืืื ืงืึทื ืขืงืืื ื ืฆื ืื OpenStack API.
- ืคึผืจืึธืืืขืืก ืืื ืืืฉืขื ืขืจืืืืื ื ืจืืคึผืึธืจืฅ ืืื Shopify.
- ืขืก ืืขื ืขื ืคึผืจืึธืืืขืืก ืืื ืึทืงืกืขืก ืื Heroku API.
- ืืขืืืฉืขืจ ืืืืื ืืึทื ืึทืืขืจ ืงืจืึทืฉืื.
- ืกืขืจืืืคืืงืึทื ืืืขืจืึทืคืึทืงืืืฉืึทื ืืขืืช ืืื Facebook ืึทืคึผ ืืขืืืขืืึธืคึผืขืจ ืืืฉืืจืื.
- ืคึผืจืึธืืืขืืก ืืื Sophos SG UTM.
- ืคึผืจืึธืืืขืืก ืืื ืืึทืืืืึทืื ืืืขืจืึทืคืึทืงืืืฉืึทื ืืื cPanel.
ืืงืืจ: opennet.ru