{"id":7226,"date":"2021-12-03T17:24:03","date_gmt":"2021-12-03T16:24:03","guid":{"rendered":"https:\/\/www.websupport.cz\/podpora\/?post_type=ht_kb&p=7226"},"modified":"2021-12-03T17:43:37","modified_gmt":"2021-12-03T16:43:37","slug":"tlsa-zaznamy","status":"publish","type":"ht_kb","link":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/","title":{"rendered":"TLSA z\u00e1znamy"},"content":{"rendered":"\n

TLS autoriza\u010dn\u00ed z\u00e1znam<\/strong> (TLSA) se pou\u017e\u00edv\u00e1 na p\u0159i\u0159azen\u00ed TLS server certifik\u00e1tu nebo ve\u0159ejn\u00e9ho kl\u00ed\u010de k dom\u00e9n\u011b na kter\u00e9 se z\u00e1znam nach\u00e1z\u00ed. Pomoc\u00ed TLSA z\u00e1znamu je mo\u017en\u00e9 ulo\u017eit otisk certifik\u00e1tu TLS \/ SSL do DNS va\u0161\u00ed dom\u00e9ny.<\/p>\n\n\n\n

TLSA z\u00e1znam m\u00e1 smysl generovat pouze tehdy, kdy\u017e je na dom\u00e9n\u011b aktivovan\u00fd DNSSEC, kdy je zaru\u010den\u00e1 d\u016fv\u011bryhodnost odpov\u011bdi z DNS.<\/p>\n\n\n\n

<\/p>\n\n\n\n

Struktura z\u00e1znamu <\/strong><\/h2>\n\n\n\n

Typ<\/strong>: TLSA
TTL<\/strong>: time to live – ur\u010duje na jak dlouho si mohou servery poskytovatel\u016f internetu zapamatovat dan\u00e9 nastaven\u00ed DNS. \u010cas je uveden\u00fd v sekund\u00e1ch.
Host<\/strong>: _port._protocol.domena tzn. nap\u0159\u00edklad _100._tcp.domena.tld<\/strong>
Usage<\/strong>: (od 0 do 3) (0 – PKIX-TA, 1 – PKIX-EE, 2 – DANE-TA, 3 – DANE-EE) Specifikuje poskytnut\u00e9 p\u0159i\u0159azen\u00ed, kter\u00e9 se pou\u017eije k p\u0159i\u0159azen\u00ed k certifik\u00e1tu, p\u0159edlo\u017een\u00e9mu p\u0159i „pod\u00e1van\u00ed rukou“ TLS
Selector<\/strong>: (od 0 do 1) Specifikuje, kter\u00e1 \u010d\u00e1st certifik\u00e1tu TLS p\u0159edlo\u017een\u00e9ho serverem bude porovnan\u00e1 s daty p\u0159i\u0159azen\u00ed
Matching-Type<\/strong>: (od 0 do 2) Specifikuje, jak je prezentovan\u00e1 asociace certifik\u00e1t\u016f.
Points-to<\/strong>: hodnota<\/p>\n\n\n\n

<\/p>\n\n\n\n

Cel\u00fd z\u00e1znam tedy m\u016f\u017ee vypadat n\u00e1sledovn\u011b:<\/p>\n\n\n\n

_100._tcp.www.domena.tld. IN TLSA 3 1 1 1fff7351cdb3957d2d3edd0f7d48bb6246f25361006c1f83379b85c6f3071adc<\/em><\/p>\n\n\n\n

<\/p>\n\n\n\n

Nastaven\u00ed je dostupn\u00e9 p\u0159\u00edmo ve Webadmin rozhran\u00ed. Postup je n\u00e1sledovn\u00fd:<\/p>\n\n\n\n

  1. P\u0159ihlaste se do Webadminu<\/a><\/strong><\/li>
  2. Klikn\u011bte na n\u00e1zev dom\u00e9ny<\/li>
  3. V lev\u00e9m menu vyberte mo\u017enost DNS<\/strong><\/li>
  4. Proklikn\u011bte se na z\u00e1lo\u017eku TLSA<\/strong><\/li><\/ol>\n\n\n\n
    \"\"<\/figure>\n\n\n\n

    5. Pro vytvo\u0159en\u00ed nov\u00e9ho z\u00e1znamu sta\u010d\u00ed kliknout na tla\u010d\u00edtko Vytvo\u0159it nov\u00fd z\u00e1znam<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"

    TLS autoriza\u010dn\u00ed z\u00e1znam (TLSA) se pou\u017e\u00edv\u00e1 na p\u0159i\u0159azen\u00ed TLS server certifik\u00e1tu nebo ve\u0159ejn\u00e9ho kl\u00ed\u010de k dom\u00e9n\u011b na kter\u00e9 se z\u00e1znam nach\u00e1z\u00ed. Pomoc\u00ed TLSA z\u00e1znamu je mo\u017en\u00e9 ulo\u017eit otisk certifik\u00e1tu TLS \/ SSL do DNS va\u0161\u00ed dom\u00e9ny. TLSA z\u00e1znam m\u00e1 smysl generovat pouze tehdy, kdy\u017e je na dom\u00e9n\u011b aktivovan\u00fd DNSSEC, kdy…<\/p>\n","protected":false},"author":5,"template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[12],"ht-kb-tag":[],"class_list":["post-7226","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-dns-zaznamy"],"yoast_head":"\nTLSA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/\" \/>\n<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"TLSA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy\" \/>\n<meta property=\"og:description\" content=\"TLS autoriza\u010dn\u00ed z\u00e1znam (TLSA) se pou\u017e\u00edv\u00e1 na p\u0159i\u0159azen\u00ed TLS server certifik\u00e1tu nebo ve\u0159ejn\u00e9ho kl\u00ed\u010de k dom\u00e9n\u011b na kter\u00e9 se z\u00e1znam nach\u00e1z\u00ed. Pomoc\u00ed TLSA z\u00e1znamu je mo\u017en\u00e9 ulo\u017eit otisk certifik\u00e1tu TLS \/ SSL do DNS va\u0161\u00ed dom\u00e9ny. TLSA z\u00e1znam m\u00e1 smysl generovat pouze tehdy, kdy\u017e je na dom\u00e9n\u011b aktivovan\u00fd DNSSEC, kdy...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/\" \/>\n<meta property=\"og:site_name\" content=\"Websupport Centrum n\u00e1pov\u011bdy\" \/>\n<meta property=\"article:modified_time\" content=\"2021-12-03T16:43:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/12\/tlsa.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Odhadovan\u00e1 doba \u010dten\u00ed\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minuty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/\",\"url\":\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/\",\"name\":\"TLSA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy\",\"isPartOf\":{\"@id\":\"https:\/\/www.websupport.cz\/podpora\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/12\/tlsa.png\",\"datePublished\":\"2021-12-03T16:24:03+00:00\",\"dateModified\":\"2021-12-03T16:43:37+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#breadcrumb\"},\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#primaryimage\",\"url\":\"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/12\/tlsa.png\",\"contentUrl\":\"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/12\/tlsa.png\",\"width\":297,\"height\":518},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.websupport.cz\/podpora\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"TLSA z\u00e1znamy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.websupport.cz\/podpora\/#website\",\"url\":\"https:\/\/www.websupport.cz\/podpora\/\",\"name\":\"Websupport Centrum n\u00e1pov\u011bdy\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.websupport.cz\/podpora\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"cs\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"TLSA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/","og_locale":"cs_CZ","og_type":"article","og_title":"TLSA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy","og_description":"TLS autoriza\u010dn\u00ed z\u00e1znam (TLSA) se pou\u017e\u00edv\u00e1 na p\u0159i\u0159azen\u00ed TLS server certifik\u00e1tu nebo ve\u0159ejn\u00e9ho kl\u00ed\u010de k dom\u00e9n\u011b na kter\u00e9 se z\u00e1znam nach\u00e1z\u00ed. Pomoc\u00ed TLSA z\u00e1znamu je mo\u017en\u00e9 ulo\u017eit otisk certifik\u00e1tu TLS \/ SSL do DNS va\u0161\u00ed dom\u00e9ny. TLSA z\u00e1znam m\u00e1 smysl generovat pouze tehdy, kdy\u017e je na dom\u00e9n\u011b aktivovan\u00fd DNSSEC, kdy...","og_url":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/","og_site_name":"Websupport Centrum n\u00e1pov\u011bdy","article_modified_time":"2021-12-03T16:43:37+00:00","og_image":[{"url":"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/12\/tlsa.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Odhadovan\u00e1 doba \u010dten\u00ed":"2 minuty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/","url":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/","name":"TLSA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy","isPartOf":{"@id":"https:\/\/www.websupport.cz\/podpora\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#primaryimage"},"image":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#primaryimage"},"thumbnailUrl":"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/12\/tlsa.png","datePublished":"2021-12-03T16:24:03+00:00","dateModified":"2021-12-03T16:43:37+00:00","breadcrumb":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#breadcrumb"},"inLanguage":"cs","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/"]}]},{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#primaryimage","url":"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/12\/tlsa.png","contentUrl":"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/12\/tlsa.png","width":297,"height":518},{"@type":"BreadcrumbList","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/tlsa-zaznamy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.websupport.cz\/podpora\/"},{"@type":"ListItem","position":2,"name":"TLSA z\u00e1znamy"}]},{"@type":"WebSite","@id":"https:\/\/www.websupport.cz\/podpora\/#website","url":"https:\/\/www.websupport.cz\/podpora\/","name":"Websupport Centrum n\u00e1pov\u011bdy","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.websupport.cz\/podpora\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"cs"}]}},"_links":{"self":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/7226","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/users\/5"}],"version-history":[{"count":3,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/7226\/revisions"}],"predecessor-version":[{"id":7271,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/7226\/revisions\/7271"}],"wp:attachment":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/media?parent=7226"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb-category?post=7226"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb-tag?post=7226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}