{"id":723,"date":"2021-04-01T09:37:30","date_gmt":"2021-04-01T09:37:30","guid":{"rendered":"https:\/\/dev.sourcecode.sk\/wsczkb\/?post_type=ht_kb&p=723"},"modified":"2021-08-16T15:50:26","modified_gmt":"2021-08-16T13:50:26","slug":"caa-zaznamy","status":"publish","type":"ht_kb","link":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/","title":{"rendered":"CAA z\u00e1znamy"},"content":{"rendered":"\n\n\n

Z\u00e1znam CAA<\/strong> (Certification Authority Authorization) – autorizace certifika\u010dn\u00ed autority, se pou\u017e\u00edv\u00e1 na ur\u010den\u00ed certifika\u010dn\u00ed autority (CA), kter\u00e1 m\u016f\u017ee vyd\u00e1vat SSL certifik\u00e1ty pro konkr\u00e9tn\u00ed dom\u00e9nu. Z\u00e1znamy CAA <\/strong>mohou nastavit pravidla pro celou dom\u00e9nu nebo pro konkr\u00e9tn\u00ed subdom\u00e9ny.<\/p>\n\n\n\n

\n\n\n\n

\u00da\u010delem z\u00e1znamu CAA je umo\u017enit majitel\u016fm dom\u00e9n deklarovat, kter\u00e9 certifika\u010dn\u00ed autority m\u016f\u017eou vyd\u00e1vat certifik\u00e1t pro dom\u00e9nu. Certifika\u010dn\u00ed autorita (CA) je subjekt, kter\u00fd m\u00e1 pr\u00e1vo vyd\u00e1vat digit\u00e1ln\u00ed SSL certifik\u00e1ty.<\/p>\n\n\n\n

Poskytuj\u00ed t\u00e9\u017e mo\u017enost upozorn\u011bn\u00ed v p\u0159\u00edpad\u011b, \u017ee n\u011bkdo po\u017e\u00e1d\u00e1 o certifik\u00e1t od neautorizovan\u00e9 certifika\u010dn\u00ed autority. Pokud nen\u00ed vytvo\u0159en\u00fd \u017e\u00e1dn\u00fd DNS CAA z\u00e1znam, jak\u00e1koliv certifika\u010dn\u00ed autorita<\/strong> m\u016f\u017ee vydat SSL certifik\u00e1t pro danou dom\u00e9nu. Pokud je CAA z\u00e1znam vytvo\u0159en\u00fd, certifik\u00e1t m\u016f\u017ee vydat pouze certifika\u010dn\u00ed autorita uveden\u00e1 v tomto DNS z\u00e1znamu.<\/p>\n\n\n\n

Form\u00e1t CAA z\u00e1znamu<\/h2>\n\n\n\n

CAA z\u00e1znam se skl\u00e1d\u00e1 z n\u00e1sleduj\u00edc\u00edch \u010dast\u00ed:<\/p>\n\n\n\n

  • Pro adresu<\/strong> – pokud ho ponech\u00e1te p\u0159edvolen\u00fd, vztahuje se na hlavn\u00ed dom\u00e9nu a na jakoukoliv subdom\u00e9nu. Pokud v poli Pro adresu<\/strong> zad\u00e1te jak\u00fdkoliv n\u00e1zev subdom\u00e9ny, z\u00e1znam se bude vztahovat pouze na ni<\/li>
  • Identifik\u00e1tor CA<\/strong> – Identifik\u00e1tor certifika\u010dn\u00ed autority, kter\u00e1 bude opr\u00e1vn\u011bn\u00e1 vystavovat certifik\u00e1ty pro va\u0161i dom\u00e9nu. M\u016f\u017ee m\u00edt tvar n\u00e1zvu certifika\u010dn\u00ed autority (u issue<\/strong> nap\u0159. letsencrypt.org<\/em>) nebo ve form\u011b e-mail nebo www adresy (u iodef<\/strong> pro nahl\u00e1\u0161en\u00ed naru\u0161ov\u00e1n\u00ed pravidel)<\/li>
  • Kritick\u00fd pro vydavatele<\/strong> – naz\u00fdvan\u00fd i flag. Tento parametr definuje, jak je z\u00e1znam kritick\u00fd. \u010c\u00edslo si v\u017edy ur\u010duje certifika\u010dn\u00ed autorita<\/li>
  • Tag<\/strong> – definuje vlastnosti CAA z\u00e1znamu. Pozn\u00e1me tag issue<\/strong> (v\u0161echny typy SSL od certifika\u010dn\u00ed autority), issuewild<\/strong> (pro Wildcart certifik\u00e1ty) a iodef<\/strong> (e-mail nebo www adresa, pro nahl\u00e1\u0161en\u00ed naru\u0161ov\u00e1n\u00ed pravidel)<\/li>
  • TTL<\/strong> – parametr TTL ur\u010duje, na jak dlouho si mohou servery poskytovatel\u016f internetu zapamatovat dan\u00e9 nastaven\u00ed DNS. \u010cas je uveden\u00fd v sekund\u00e1ch<\/li><\/ul>\n\n\n\n
    \"\"<\/figure>\n\n\n\n

    Po vyps\u00e1n\u00ed pot\u0159ebn\u00fdch z\u00e1znam\u016f klikn\u011bte na Vytvo\u0159it.<\/strong><\/p>\n\n\n\n

    <\/div>\n\n\n\n

    P\u0159\u00edklad 1<\/strong> – certifika\u010dn\u00ed autorita Let’s Encrypt<\/h3>\n\n\n\n

    Kdy\u017e ponech\u00e1me pole Pro adresu<\/strong> pr\u00e1zdn\u00e9, jako Identifik\u00e1tor CA<\/strong> zvol\u00edme letsencrypt.org,<\/em> zaklikneme mo\u017enost „Kritick\u00fd pro vydavatele“<\/strong>, tag ponech\u00e1me na issue<\/strong> a jako TTL<\/strong> ponech\u00e1me 600, z\u00e1znam bude vypadat takto: <\/p>\n\n\n\n

    @  600  IN  CAA   128 issue \"letsencrypt.org\"<\/pre>\n\n\n\n
    P\u0159\u00edklad 2<\/strong> – ur\u010den\u00ed mailu pro kontakt v p\u0159\u00edpad\u011b probl\u00e9m\u016f<\/h3>\n\n\n\n
    Pokud ponech\u00e1me pole Pro adresu<\/strong> pr\u00e1zdn\u00e9, jako Identifik\u00e1tor CA<\/strong> zvol\u00edme mailto:notice@domena.tld,<\/em> zaklikneme mo\u017enost „Kritick\u00fd pro vydavatele“<\/strong>, jako tag zvol\u00edme iodef<\/strong> a jako TTL<\/strong> ponech\u00e1me 600, z\u00e1znam bude vypadat takto: <\/p>\n\n\n\n
    @  600  IN  CAA   128 iodef \"mailto:notice@domena.tld\"<\/pre>\n\n\n\n
    <\/p>\n","protected":false},"excerpt":{"rendered":"
    Z\u00e1znam CAA (Certification Authority Authorization) – autorizace certifika\u010dn\u00ed autority, se pou\u017e\u00edv\u00e1 na ur\u010den\u00ed certifika\u010dn\u00ed autority (CA), kter\u00e1 m\u016f\u017ee vyd\u00e1vat SSL certifik\u00e1ty pro konkr\u00e9tn\u00ed dom\u00e9nu. Z\u00e1znamy CAA mohou nastavit pravidla pro celou dom\u00e9nu nebo pro konkr\u00e9tn\u00ed subdom\u00e9ny. \u00da\u010delem z\u00e1znamu CAA je umo\u017enit majitel\u016fm dom\u00e9n deklarovat, kter\u00e9 certifika\u010dn\u00ed autority m\u016f\u017eou vyd\u00e1vat certifik\u00e1t…<\/p>\n","protected":false},"author":3,"template":"","format":"standard","meta":{"footnotes":""},"ht-kb-category":[6],"ht-kb-tag":[],"class_list":["post-723","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-ssl-certifikaty"],"yoast_head":"\nCAA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/\" \/>\n<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"CAA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy\" \/>\n<meta property=\"og:description\" content=\"Z\u00e1znam CAA (Certification Authority Authorization) – autorizace certifika\u010dn\u00ed autority, se pou\u017e\u00edv\u00e1 na ur\u010den\u00ed certifika\u010dn\u00ed autority (CA), kter\u00e1 m\u016f\u017ee vyd\u00e1vat SSL certifik\u00e1ty pro konkr\u00e9tn\u00ed dom\u00e9nu. Z\u00e1znamy CAA mohou nastavit pravidla pro celou dom\u00e9nu nebo pro konkr\u00e9tn\u00ed subdom\u00e9ny. \u00da\u010delem z\u00e1znamu CAA je umo\u017enit majitel\u016fm dom\u00e9n deklarovat, kter\u00e9 certifika\u010dn\u00ed autority m\u016f\u017eou vyd\u00e1vat certifik\u00e1t...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/\" \/>\n<meta property=\"og:site_name\" content=\"Websupport Centrum n\u00e1pov\u011bdy\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-16T13:50:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/08\/CAA-record-800x429.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Odhadovan\u00e1 doba \u010dten\u00ed\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minuty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/caa-zaznamy\\\/\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/caa-zaznamy\\\/\",\"name\":\"CAA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/caa-zaznamy\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/caa-zaznamy\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/app\\\/uploads\\\/2021\\\/08\\\/CAA-record-800x429.png\",\"datePublished\":\"2021-04-01T09:37:30+00:00\",\"dateModified\":\"2021-08-16T13:50:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/caa-zaznamy\\\/#breadcrumb\"},\"inLanguage\":\"cs\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/caa-zaznamy\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"cs\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/caa-zaznamy\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/app\\\/uploads\\\/2021\\\/08\\\/CAA-record.png\",\"contentUrl\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/app\\\/uploads\\\/2021\\\/08\\\/CAA-record.png\",\"width\":1212,\"height\":650},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/kb\\\/caa-zaznamy\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"CAA z\u00e1znamy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/#website\",\"url\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/\",\"name\":\"Websupport Centrum n\u00e1pov\u011bdy\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.websupport.cz\\\/podpora\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"cs\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"CAA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/","og_locale":"cs_CZ","og_type":"article","og_title":"CAA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy","og_description":"Z\u00e1znam CAA (Certification Authority Authorization) – autorizace certifika\u010dn\u00ed autority, se pou\u017e\u00edv\u00e1 na ur\u010den\u00ed certifika\u010dn\u00ed autority (CA), kter\u00e1 m\u016f\u017ee vyd\u00e1vat SSL certifik\u00e1ty pro konkr\u00e9tn\u00ed dom\u00e9nu. Z\u00e1znamy CAA mohou nastavit pravidla pro celou dom\u00e9nu nebo pro konkr\u00e9tn\u00ed subdom\u00e9ny. \u00da\u010delem z\u00e1znamu CAA je umo\u017enit majitel\u016fm dom\u00e9n deklarovat, kter\u00e9 certifika\u010dn\u00ed autority m\u016f\u017eou vyd\u00e1vat certifik\u00e1t...","og_url":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/","og_site_name":"Websupport Centrum n\u00e1pov\u011bdy","article_modified_time":"2021-08-16T13:50:26+00:00","og_image":[{"url":"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/08\/CAA-record-800x429.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_misc":{"Odhadovan\u00e1 doba \u010dten\u00ed":"2 minuty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/","url":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/","name":"CAA z\u00e1znamy - Websupport Centrum n\u00e1pov\u011bdy","isPartOf":{"@id":"https:\/\/www.websupport.cz\/podpora\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/#primaryimage"},"image":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/#primaryimage"},"thumbnailUrl":"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/08\/CAA-record-800x429.png","datePublished":"2021-04-01T09:37:30+00:00","dateModified":"2021-08-16T13:50:26+00:00","breadcrumb":{"@id":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/#breadcrumb"},"inLanguage":"cs","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/"]}]},{"@type":"ImageObject","inLanguage":"cs","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/#primaryimage","url":"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/08\/CAA-record.png","contentUrl":"https:\/\/www.websupport.cz\/podpora\/app\/uploads\/2021\/08\/CAA-record.png","width":1212,"height":650},{"@type":"BreadcrumbList","@id":"https:\/\/www.websupport.cz\/podpora\/kb\/caa-zaznamy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.websupport.cz\/podpora\/"},{"@type":"ListItem","position":2,"name":"CAA z\u00e1znamy"}]},{"@type":"WebSite","@id":"https:\/\/www.websupport.cz\/podpora\/#website","url":"https:\/\/www.websupport.cz\/podpora\/","name":"Websupport Centrum n\u00e1pov\u011bdy","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.websupport.cz\/podpora\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"cs"}]}},"_links":{"self":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/723","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/users\/3"}],"version-history":[{"count":2,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/723\/revisions"}],"predecessor-version":[{"id":5339,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb\/723\/revisions\/5339"}],"wp:attachment":[{"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/media?parent=723"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb-category?post=723"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.websupport.cz\/podpora\/wp-json\/wp\/v2\/ht-kb-tag?post=723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}