{"id":1730,"date":"2025-02-11T10:19:00","date_gmt":"2025-02-11T09:19:00","guid":{"rendered":"https:\/\/compliance.toscana.it\/portale\/?p=1730"},"modified":"2025-09-29T14:01:22","modified_gmt":"2025-09-29T12:01:22","slug":"specifiche-cart-per-gestione-certificati-ssl-tls","status":"publish","type":"post","link":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/","title":{"rendered":"Specifiche CART per gestione certificati SSL\/TLS"},"content":{"rendered":"\n

Sono state emesse nuove guide tecniche per l\u2019emissione\/rinnovo dei certificati SSL\/TLS .<\/p>\n\n\n\n

In caso di comunicazioni col CART protette da Mutua Autenticazione (mTLS) in ambito fruitore o erogatore, \u00e8 responsabilit\u00e0 delle applicazioni integrate richiedere, gestire operativamente e rinnovare i certificati<\/strong> SSL\/TLS in uso dai loro server sui canali TLS attivi. Amministrando e mantenendo segrete le chiavi private associate. La parte pubblica dei certificati generati (*.cer\/pem) dovr\u00e0 essere inviata tramite ticket al ServiceDesk CART (cartdesk@regione.toscana.it<\/strong><\/u><\/em>), per richiederne il trust sull\u2019infrastruttura di Interoperabilit\u00e0 di Regione Toscana. Allegando anche la catena completa delle CA firmatarie nel caso di si utilizzi un certificato proprio e non rilasciato dall\u2019ente regionale preposto.<\/p>\n\n\n\n

Contatti e Assistenza Tecnica sui Certificati<\/strong><\/p>\n\n\n\n

Nel caso in cui sia necessario ulteriore supporto o emergessero dubbi tecnici, potete contattare direttamente il team PKI preposto scrivendo mail a ra.pki@regione.toscana.it<\/strong><\/u><\/em> ed illustrando nel dettaglio la necessit\u00e0.<\/p>\n\n\n\n

Supporto all\u2019Emissione di Certificati<\/strong><\/p>\n\n\n\n

Qualora un applicativo non sia provvisto di certificati (validi) per l\u2019integrazione mTLS con la componente CART, Regione Toscana mette a disposizione l\u2019infrastruttura PKI per l\u2019emissione di nuovi certificati <\/strong>su CA Privata RTRT. Rilasciati in conformit\u00e0 con i vincoli di sicurezza indicati di seguito.<\/p>\n\n\n\n

Dopo aver contattato il ServiceDesk CART <\/strong>per segnalare l\u2019esigenza, ottenendo un ID Ticket dell\u2019attivit\u00e0 e concordando con loro i CN adatti, ogni applicativo pu\u00f2 procedere in autonomia nell\u2019inoltrare richiesta dei certificati necessari. Di seguito trovate una guida step-by-step, contenente link al portale di regione ed i vari passi da effettuare per ottenere nuovi certificati:<\/p>\n\n\n\n

Guida rilascio certificati App2App integrazione CART_v1.pdf<\/a><\/strong><\/em><\/p>\n\n\n\n

ATTENZIONE<\/strong><\/u><\/em> = Per motivi di sicurezza legati alla riservatezza e non-divulgazione delle chiavi private, la generazione di certificati dovrebbe essere effettuata dai referenti degli applicativi che gestiranno materialmente le chiavi associate e si occuperanno poi dell\u2019installazione sui server interessati.<\/p>\n\n\n\n

Vincoli sui Certificati<\/strong><\/p>\n\n\n\n

Di seguito l\u2019elenco dei vincoli da applicare durante l\u2019emissione di un certificato <\/strong>per integrazione col CART, secondo le linee guida di Regione Toscana:<\/p>\n\n\n\n

    \n
  1. No certificati self-signed (in nessun ambiente)<\/li>\n\n\n\n
  2. No certificati emessi da CA Private di soggetti terzi\n
      \n
    1. Per CA particolari (non-pubbliche) emesse da enti amministrativi specifici, \u00e8 necessario chiedere in prima battuta una verifica ed approvazione al team PKI<\/li>\n<\/ol>\n<\/li>\n\n\n\n
    2. No certificati con domini wildcard (se necessario utilizzare SAN)<\/li>\n\n\n\n
    3. Chiavi e hashing: RSA (minimo 2048), SHA (minimo SHA256)<\/li>\n<\/ol>\n\n\n\n
      \"\"<\/figure>\n\n\n\n

      5. Attributo \u00abUtilizzo Avanzato Chiave\u00bb (EKU) correttamente configurato in base all\u2019utilizzo del certificato stesso: deve includere \u2018Autenticazione Client<\/em>\u2018 se usato lato fruitore e \u2018Autenticazione Server<\/em>\u2018 se invece esposto lato erogatore<\/p>\n\n\n\n

      \"\"<\/figure>\n\n\n\n

      6. No utilizzo dello stesso certificato sia in Collaudo che in Produzione. Per ciascun ambiente \u00e8 necessario procurarsi certificati distinti con diversi CN.<\/p>\n\n\n\n

      7. CN di lunghezza massima 64 caratteri (evitando se possibile caratteri speciali)<\/p>\n\n\n\n

      \"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

      Sono state emesse nuove guide tecniche per l\u2019emissione\/rinnovo dei certificati […]<\/p>\n","protected":false},"author":12,"featured_media":1674,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[40,48,44],"tags":[],"class_list":["post-1730","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-aggiornamenti","category-notizie","category-specifiche-tecniche"],"yoast_head":"\nSpecifiche CART per gestione certificati SSL\/TLS - Toscana Compliance<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Specifiche CART per gestione certificati SSL\/TLS - Toscana Compliance\" \/>\n<meta property=\"og:description\" content=\"Sono state emesse nuove guide tecniche per l\u2019emissione\/rinnovo dei certificati [...]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/\" \/>\n<meta property=\"og:site_name\" content=\"Toscana Compliance\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-11T09:19:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-09-29T12:01:22+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/compliance.toscana.it\/portale\/wp-content\/uploads\/2025\/08\/image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Emilio Moncini\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Emilio Moncini\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/\"},\"author\":{\"name\":\"Emilio Moncini\",\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/#\\\/schema\\\/person\\\/cc58c9fce7a9997f1d3dc7660a862401\"},\"headline\":\"Specifiche CART per gestione certificati SSL\\\/TLS\",\"datePublished\":\"2025-02-11T09:19:00+00:00\",\"dateModified\":\"2025-09-29T12:01:22+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/\"},\"wordCount\":468,\"image\":{\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/image-e1764240920430.jpg\",\"articleSection\":[\"Aggiornamenti\",\"Notizie\",\"Specifiche tecniche\"],\"inLanguage\":\"it-IT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/\",\"url\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/\",\"name\":\"Specifiche CART per gestione certificati SSL\\\/TLS - Toscana Compliance\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/image-e1764240920430.jpg\",\"datePublished\":\"2025-02-11T09:19:00+00:00\",\"dateModified\":\"2025-09-29T12:01:22+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/#\\\/schema\\\/person\\\/cc58c9fce7a9997f1d3dc7660a862401\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/#primaryimage\",\"url\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/image-e1764240920430.jpg\",\"contentUrl\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/wp-content\\\/uploads\\\/2025\\\/08\\\/image-e1764240920430.jpg\",\"width\":1024,\"height\":577,\"caption\":\"Certificati CART img 1\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/specifiche-cart-per-gestione-certificati-ssl-tls\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Specifiche CART per gestione certificati SSL\\\/TLS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/#website\",\"url\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/\",\"name\":\"Toscana Compliance\",\"description\":\"L'interoperabilit\u00e0 applicativa in Toscana\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/#\\\/schema\\\/person\\\/cc58c9fce7a9997f1d3dc7660a862401\",\"name\":\"Emilio Moncini\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3b23f59c27bbcbd51d3f303af1d2d1c73ad5c39a59f8164405da95b268a4e6e3?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3b23f59c27bbcbd51d3f303af1d2d1c73ad5c39a59f8164405da95b268a4e6e3?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/3b23f59c27bbcbd51d3f303af1d2d1c73ad5c39a59f8164405da95b268a4e6e3?s=96&d=mm&r=g\",\"caption\":\"Emilio Moncini\"},\"url\":\"https:\\\/\\\/compliance.toscana.it\\\/portale\\\/author\\\/tinit-mncmle72d20g713m\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Specifiche CART per gestione certificati SSL\/TLS - Toscana Compliance","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/","og_locale":"it_IT","og_type":"article","og_title":"Specifiche CART per gestione certificati SSL\/TLS - Toscana Compliance","og_description":"Sono state emesse nuove guide tecniche per l\u2019emissione\/rinnovo dei certificati [...]","og_url":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/","og_site_name":"Toscana Compliance","article_published_time":"2025-02-11T09:19:00+00:00","article_modified_time":"2025-09-29T12:01:22+00:00","og_image":[{"width":1024,"height":768,"url":"https:\/\/compliance.toscana.it\/portale\/wp-content\/uploads\/2025\/08\/image.jpg","type":"image\/jpeg"}],"author":"Emilio Moncini","twitter_card":"summary_large_image","twitter_misc":{"Scritto da":"Emilio Moncini","Tempo di lettura stimato":"3 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/#article","isPartOf":{"@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/"},"author":{"name":"Emilio Moncini","@id":"https:\/\/compliance.toscana.it\/portale\/#\/schema\/person\/cc58c9fce7a9997f1d3dc7660a862401"},"headline":"Specifiche CART per gestione certificati SSL\/TLS","datePublished":"2025-02-11T09:19:00+00:00","dateModified":"2025-09-29T12:01:22+00:00","mainEntityOfPage":{"@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/"},"wordCount":468,"image":{"@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/#primaryimage"},"thumbnailUrl":"https:\/\/compliance.toscana.it\/portale\/wp-content\/uploads\/2025\/08\/image-e1764240920430.jpg","articleSection":["Aggiornamenti","Notizie","Specifiche tecniche"],"inLanguage":"it-IT"},{"@type":"WebPage","@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/","url":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/","name":"Specifiche CART per gestione certificati SSL\/TLS - Toscana Compliance","isPartOf":{"@id":"https:\/\/compliance.toscana.it\/portale\/#website"},"primaryImageOfPage":{"@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/#primaryimage"},"image":{"@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/#primaryimage"},"thumbnailUrl":"https:\/\/compliance.toscana.it\/portale\/wp-content\/uploads\/2025\/08\/image-e1764240920430.jpg","datePublished":"2025-02-11T09:19:00+00:00","dateModified":"2025-09-29T12:01:22+00:00","author":{"@id":"https:\/\/compliance.toscana.it\/portale\/#\/schema\/person\/cc58c9fce7a9997f1d3dc7660a862401"},"breadcrumb":{"@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/#primaryimage","url":"https:\/\/compliance.toscana.it\/portale\/wp-content\/uploads\/2025\/08\/image-e1764240920430.jpg","contentUrl":"https:\/\/compliance.toscana.it\/portale\/wp-content\/uploads\/2025\/08\/image-e1764240920430.jpg","width":1024,"height":577,"caption":"Certificati CART img 1"},{"@type":"BreadcrumbList","@id":"https:\/\/compliance.toscana.it\/portale\/it\/specifiche-cart-per-gestione-certificati-ssl-tls\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/compliance.toscana.it\/portale\/it\/"},{"@type":"ListItem","position":2,"name":"Specifiche CART per gestione certificati SSL\/TLS"}]},{"@type":"WebSite","@id":"https:\/\/compliance.toscana.it\/portale\/#website","url":"https:\/\/compliance.toscana.it\/portale\/","name":"Toscana Compliance","description":"L'interoperabilit\u00e0 applicativa in Toscana","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/compliance.toscana.it\/portale\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Person","@id":"https:\/\/compliance.toscana.it\/portale\/#\/schema\/person\/cc58c9fce7a9997f1d3dc7660a862401","name":"Emilio Moncini","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/3b23f59c27bbcbd51d3f303af1d2d1c73ad5c39a59f8164405da95b268a4e6e3?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/3b23f59c27bbcbd51d3f303af1d2d1c73ad5c39a59f8164405da95b268a4e6e3?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/3b23f59c27bbcbd51d3f303af1d2d1c73ad5c39a59f8164405da95b268a4e6e3?s=96&d=mm&r=g","caption":"Emilio Moncini"},"url":"https:\/\/compliance.toscana.it\/portale\/author\/tinit-mncmle72d20g713m\/"}]}},"_links":{"self":[{"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/posts\/1730","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/comments?post=1730"}],"version-history":[{"count":1,"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/posts\/1730\/revisions"}],"predecessor-version":[{"id":1731,"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/posts\/1730\/revisions\/1731"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/media\/1674"}],"wp:attachment":[{"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/media?parent=1730"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/categories?post=1730"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/compliance.toscana.it\/portale\/wp-json\/wp\/v2\/tags?post=1730"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}