Raadinta guul-darrooyinka borooksi ee hubinta shahaadada CRL iyo OCSP

Codsi website ah wuu gaari karaa borooksigooda haddana guul-darray karaa, sababtoo ah xaqiijinta shahaadadu waxay u baahan tahay codsi kale oo shabakadeed. Soo-jiidashada CRL ama OCSP waxaa laga yaabaa inay maraan qayb nidaam oo leh akoon iyo siyaasad borooksi ka duwan macmiilka HTTP ee abka.

Ku bilow khaladka silsiladda oo sax ah. Revoked waxay ka duwan tahay lama heli karo macluumaadka tirtiridda ee hadda. Dhalashada iyo soo-saaraha aan la aaminin ayaa iyaguna mashaakil kale. Kaliya guul-darrada soo-jiidashada ayaa u baahan in la raaco waddada lumay ee tagta URL-ka xaaladda.

Guul-darradaas, si wada jir ah u aqoonso saddex waxyaabood: URL-ka la soo jiidanayo, qaybta soo-jiidashada samaynaysa iyo aqoonsiga geeddi-socodkeeda. In browser-ku si guul leh u furo URL-ka akoonkaaga isdhexgalka kuma caddaynayo in adeeggu ku xaqiijin karo isla borookskaas.

Haddii qaybta la aqoonsaday ay isticmaasho WinHTTP, baadh siyaasadda khuseysa. Habaynta borooksi ee taagan iyo qiimeynta borooksi ee otomaatiga ah ee URL kastaa waa habab kala duwan. Isticmaal habaynta la taageeray ee akoonka loogu talagalay; koobiga dejinta browser-ka ama beddelidda runtime aan la xiriirin waxay ka tagi kartaa soo-jiidashada dhabta ah iyada oo aan la taaban.

Gudaha .NET, UrlRetrievalTimeout ee siyaasadda silsiladda ayaa maamula sugitaanka xaqiijinta online ama soo-jiidashada CRL. Kordhinta waqtiga jawaabta HTTP ee caadiga ah ma kordhiso isla timer-kaas, kordhinta timer-ka soo-jiidashadana ma bixiso aqoonsiga borooksi ama waddo.

Borooksi HTTPS ah wuxuu muujin karaa ku-tiirsanaantan xitaa ka hor TLS-ka meesha loo socdo: aaminaadda xiriirka borookska laftiisu waxay u baahan karaan soo-jiidasho tirtirid. Soo celi helitaanka soo-jiidashada la taageeray iyo habaynta aaminaadda marxaladdaas. Dansanaanta hubinta tirtiriddu waxay beddeshaa siyaasadda shahaadada; ma soo celiso soo-jiidashadii guul-darraysatay.