{"id":38754,"date":"2019-10-31T22:25:45","date_gmt":"2019-10-31T19:25:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/reliz-openssh-8-1\/"},"modified":"2019-10-31T22:25:45","modified_gmt":"2019-10-31T19:25:45","slug":"reliz-openssh-8-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-1","title":{"rendered":"Vyd\u00e1n\u00ed OpenSSH 8.1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Po \u0161esti m\u011bs\u00edc\u00edch v\u00fdvoje <noindex><a rel=\"nofollow\" href=\"http:\/\/lists.mindrot.org\/pipermail\/openssh-unix-dev\/2019-October\/037966.html\">byl p\u0159edstaven<\/a><\/noindex> vyd\u00e1n\u00ed <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openssh.com\/\">OpenSSH 8.1<\/a><\/noindex>, otev\u0159en\u00e9 implementaci klienta a serveru pro pr\u00e1ci s protokoly SSH 2.0 a SFTP. <\/p>\n<p>Nov\u00e9 vyd\u00e1n\u00ed si zaslou\u017e\u00ed zvl\u00e1\u0161tn\u00ed pozornost kv\u016fli odstran\u011bn\u00ed zranitelnosti, kter\u00e1 ovliv\u0148uje ssh, sshd, ssh-add a ssh-keygen. Probl\u00e9m je p\u0159\u00edtomen v k\u00f3du pro parsov\u00e1n\u00ed uzav\u0159en\u00fdch kl\u00ed\u010d\u016f typu XMSS a umo\u017e\u0148uje \u00fato\u010dn\u00edkovi iniciovat p\u0159ete\u010den\u00ed cel\u00e9ho \u010d\u00edsla. Zranitelnost je ozna\u010dena jako zneu\u017eiteln\u00e1, ale m\u00e1lo pou\u017eiteln\u00e9, proto\u017ee podpora kl\u00ed\u010d\u016f XMSS pat\u0159\u00ed mezi experiment\u00e1ln\u00ed mo\u017enosti, kter\u00e9 jsou ve v\u00fdchoz\u00edm nastaven\u00ed vypnut\u00e9 (v p\u0159enositeln\u00e9m verzi v autoconf nen\u00ed ani zaji\u0161t\u011bna mo\u017enost sestaven\u00ed pro zapnut\u00ed XMSS).<\/p>\n<p>Hlavn\u00ed zm\u011bny: <\/p>\n<ul>\n<li class=\"l\"> v ssh, sshd a ssh-agent <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50929\">p\u0159id\u00e1n<\/a><\/noindex> k\u00f3d zabra\u0148uj\u00edc\u00ed obnoven\u00ed priv\u00e1tn\u00edho kl\u00ed\u010de, kter\u00fd se nach\u00e1z\u00ed v opera\u010dn\u00ed pam\u011bti, v d\u016fsledku prov\u00e1d\u011bn\u00ed \u00fatok\u016f prost\u0159ednictv\u00edm bo\u010dn\u00edch kan\u00e1l\u016f, jako je <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=47856\">Spectre, Meltdown<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=41340\">RowHammer<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/rambleed.com\/\">RAMBleed<\/a><\/noindex>. Priv\u00e1tn\u00ed kl\u00ed\u010de jsou nyn\u00ed \u0161ifrov\u00e1ny p\u0159i na\u010d\u00edt\u00e1n\u00ed do pam\u011bti a de\u0161ifrov\u00e1ny pouze v okam\u017eiku pou\u017eit\u00ed, jinak z\u016fst\u00e1vaj\u00ed \u0161ifrovan\u00e9. P\u0159i tomto p\u0159\u00edstupu je pro \u00fasp\u011b\u0161n\u00e9 obnoven\u00ed uzav\u0159en\u00e9ho kl\u00ed\u010de \u00fato\u010dn\u00edkovi zapot\u0159eb\u00ed nejprve obnovit n\u00e1hodn\u011b generovan\u00fd mezikl\u00ed\u010d o velikosti 16 kB, pou\u017e\u00edvan\u00fd k \u0161ifrov\u00e1n\u00ed hlavn\u00edho kl\u00ed\u010de, co\u017e je nepravd\u011bpodobn\u00e9 p\u0159i sou\u010dasn\u00e9 frekvenci chyb obnovy typick\u00fdch pro modern\u00ed \u00fatoky;\n<li class=\"l\"> V  <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/ssh-keygen.1\">ssh-keygen<\/a><\/noindex>  byla p\u0159id\u00e1na experiment\u00e1ln\u00ed podpora zjednodu\u0161en\u00e9ho sch\u00e9matu pro vytv\u00e1\u0159en\u00ed a ov\u011b\u0159ov\u00e1n\u00ed digit\u00e1ln\u00edch podpis\u016f. Digit\u00e1ln\u00ed podpisy mohou b\u00fdt vytv\u00e1\u0159eny pomoc\u00ed b\u011b\u017en\u00fdch SSH kl\u00ed\u010d\u016f ulo\u017een\u00fdch na disku nebo v ssh-agent a ov\u011b\u0159ov\u00e1ny pomoc\u00ed seznamu podobn\u00e9ho authorized_keys <noindex><a rel=\"nofollow\" href=\"https:\/\/man.openbsd.org\/ssh-keygen.1#ALLOWED_SIGNERS\">seznamu povolen\u00fdch kl\u00ed\u010d\u016f<\/a><\/noindex>. Do digit\u00e1ln\u00edho podpisu je integrov\u00e1na informace o prostoru n\u00e1zv\u016f, aby se p\u0159ede\u0161lo z\u00e1m\u011bn\u011b p\u0159i pou\u017eit\u00ed v r\u016fzn\u00fdch oblastech (nap\u0159. pro emaily a soubory);\n<li class=\"l\"> ssh-keygen je ve v\u00fdchoz\u00edm nastaven\u00ed nastaven na pou\u017e\u00edv\u00e1n\u00ed algoritmu rsa-sha2-512 pro certifikaci digit\u00e1ln\u00edch podpis\u016f zalo\u017een\u00fdch na kl\u00ed\u010di RSA (p\u0159i provozu v re\u017eimu CA). Tyto certifik\u00e1ty nejsou kompatibiln\u00ed s verzemi p\u0159ed OpenSSH 7.2 (pro zaji\u0161t\u011bn\u00ed kompatibility je t\u0159eba p\u0159edefinovat typ algoritmu, nap\u0159\u00edklad pomoc\u00ed p\u0159\u00edkazu \u201essh-keygen -t ssh-rsa -s ...\u201c);\n<li class=\"l\"> Ve ssh byla do v\u00fdrazu ProxyCommand p\u0159id\u00e1na podpora pro roz\u0161\u00ed\u0159en\u00ed z\u00e1stupn\u00e9ho symbolu \u201e%n\u201c (ur\u010den\u00e9ho v adresn\u00edm \u0159\u00e1dku jm\u00e9nem hostitele);\n<li class=\"l\"> V seznamech \u0161ifrovac\u00edch algoritm\u016f pro ssh a sshd lze nyn\u00ed pro vlo\u017een\u00ed v\u00fdchoz\u00edch algoritm\u016f pou\u017e\u00edt znak \u201e^\u201c. Nap\u0159\u00edklad pro p\u0159id\u00e1n\u00ed ssh-ed25519 do v\u00fdchoz\u00edho seznamu lze uv\u00e9st \u201eHostKeyAlgorithms ^ssh-ed25519\u201c;\n<li class=\"l\"> V ssh-keygen byla zaji\u0161t\u011bna v\u00fdstupn\u00ed informace k p\u0159ipojen\u00e9mu koment\u00e1\u0159i kl\u00ed\u010de p\u0159i extrakci ve\u0159ejn\u00e9ho kl\u00ed\u010de z priv\u00e1tn\u00edho;\n<li class=\"l\"> Do ssh-keygen byla p\u0159id\u00e1na mo\u017enost pou\u017e\u00edt p\u0159\u00edznak \u201e-v\u201c p\u0159i vyhled\u00e1v\u00e1n\u00ed kl\u00ed\u010d\u016f (nap\u0159\u00edklad \u201essh-keygen -vF host\u201c), jeho\u017e uveden\u00ed vede k v\u00fdstupu p\u0159ehledn\u00e9 signatury hostitele.\n<li class=\"l\"> Byla p\u0159id\u00e1na mo\u017enost vyu\u017eit\u00ed <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/PKCS_8\">PKCS8<\/a><\/noindex> jako alternativn\u00ed form\u00e1t pro ukl\u00e1d\u00e1n\u00ed priv\u00e1tn\u00edch kl\u00ed\u010d\u016f na disku. V\u00fdchoz\u00ed form\u00e1t z\u016fst\u00e1v\u00e1 PEM, p\u0159i\u010dem\u017e PKCS8 m\u016f\u017ee b\u00fdt u\u017eite\u010dn\u00fd pro dosa\u017een\u00ed kompatibility s extern\u00edmi aplikacemi.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Zdroj: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51640\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.1, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0432 \u043d\u043e\u0432\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 ssh, sshd, ssh-add \u0438 ssh-keygen. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043a\u043e\u0434\u0435 \u043f\u0430\u0440\u0441\u0438\u043d\u0433\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0441 \u0442\u0438\u043f\u043e\u043c XMSS \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u0430 \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u0430\u044f, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-38754","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.5 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.5\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:25:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:25:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Release OpenSSH 8.1 | ProHoster","description":"Po \u0161esti m\u011bs\u00edc\u00edch v\u00fdvoje byl vyd\u00e1n release","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.1 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0448\u0435\u0441\u0442\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/reliz-openssh-8-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:25:45+00:00","article:modified_time":"2019-10-31T19:25:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38754","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 23:17:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:04:29","updated":"2026-01-23 23:17:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38754","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=38754"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/38754\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=38754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=38754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=38754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}