{"id":80500,"date":"2020-05-06T13:42:29","date_gmt":"2020-05-06T11:42:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/protokoly-sftp-i-ftps"},"modified":"2020-05-06T13:42:29","modified_gmt":"2020-05-06T11:42:29","slug":"protokoly-sftp-i-ftps","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/protokoly-sftp-i-ftps","title":{"rendered":"Protokoly SFTP a FTPS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1>\u00davod<\/h1>\n<p><\/p>\n<p>Doslova p\u0159ed t\u00fddnem jsem psal refer\u00e1t na t\u00e9ma uveden\u00e9 v nadpisu a zjistil jsem, \u017ee, jak se \u0159\u00edk\u00e1, v s\u00edti nen\u00ed p\u0159\u00edli\u0161 mnoho pou\u010dn\u00e9 informace. V\u011bt\u0161inou jde o such\u00e1 fakta a n\u00e1vody k nastaven\u00ed. Proto jsem se rozhodl text m\u00edrn\u011b upravit a zve\u0159ejnit ho jako \u010dl\u00e1nek.<\/p>\n<p>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h1>Co je to FTP<\/h1>\n<p><\/p>\n<p>FTP (File Transfer Protocol) \u2013 protokol pro p\u0159enos soubor\u016f po s\u00edti. Je jedn\u00edm z z\u00e1kladn\u00edch protokol\u016f Ethernet. Objevil se v roce 1971 a p\u016fvodn\u011b fungoval v s\u00edt\u00edch DARPA. V sou\u010dasnosti, stejn\u011b jako HTTP, je p\u0159enos soubor\u016f zalo\u017een na modelu skl\u00e1daj\u00edc\u00edm se ze souboru protokol\u016f TCP\/IP (Transmission Control Protocol\/Internet Protocol). Je definov\u00e1n v RFC 959.<\/p>\n<p><\/p>\n<p>Protokol definuje n\u00e1sleduj\u00edc\u00ed:<\/p>\n<\/p>\n<ul>\n<li>Jak se bude prov\u00e1d\u011bt kontrola chyb<\/li>\n<li>Metoda balen\u00ed dat (pokud se balen\u00ed pou\u017e\u00edv\u00e1)<\/li>\n<li>Jak zp\u016fsob za\u0159\u00edzen\u00ed odes\u00edlatele oznamuje, \u017ee dokon\u010dilo zpr\u00e1vu<\/li>\n<li>Jak zp\u016fsob za\u0159\u00edzen\u00ed p\u0159\u00edjemce oznamuje, \u017ee obdr\u017eelo zpr\u00e1vu<\/li>\n<\/ul>\n<p><\/p>\n<h2>Interakce mezi klientem a serverem<\/h2>\n<p><\/p>\n<p>Prozkoumejme podrobn\u011bji procesy, kter\u00e9 se p\u0159i pr\u00e1ci FTP d\u011bj\u00ed. Spojen\u00ed inicializuje interpret protokolu u\u017eivatele. Spr\u00e1va p\u0159enosu prob\u00edh\u00e1 prost\u0159ednictv\u00edm \u0159\u00edd\u00edc\u00edho kan\u00e1lu podle standardu TELNET. P\u0159\u00edkazy FTP generuje interpret protokolu u\u017eivatele a pos\u00edlaj\u00ed se na server. Odpov\u011bdi serveru jsou tak\u00e9 zas\u00edl\u00e1ny u\u017eivateli prost\u0159ednictv\u00edm \u0159\u00edd\u00edc\u00edho kan\u00e1lu. Obecn\u011b m\u00e1 u\u017eivatel mo\u017enost nav\u00e1zat kontakt s interpretem protokolu serveru a prost\u0159edky, kter\u00e9 se li\u0161\u00ed od interpreta u\u017eivatele.<\/p>\n<p><\/p>\n<p>Hlavn\u00ed vlastnost\u00ed FTP je, \u017ee pou\u017e\u00edv\u00e1 dvojn\u00e9 spojen\u00ed. Jedno z nich se pou\u017e\u00edv\u00e1 pro p\u0159enos p\u0159\u00edkaz\u016f na server a prob\u00edh\u00e1 obvykle p\u0159es TCP port 21, kter\u00fd m\u016f\u017ee b\u00fdt zm\u011bn\u011bn. \u0158\u00edd\u00edc\u00ed spojen\u00ed existuje po celou dobu, kdy klient komunikuje se serverem. \u0158\u00edd\u00edc\u00ed kan\u00e1l mus\u00ed b\u00fdt otev\u0159en p\u0159i p\u0159enosu dat mezi stroji. V p\u0159\u00edpad\u011b jeho uzav\u0159en\u00ed se p\u0159enos dat zastav\u00ed. Druh\u00e9 spojen\u00ed prob\u00edh\u00e1 pro p\u0159\u00edm\u00fd p\u0159enos dat. Otev\u00edr\u00e1 se v\u017edy, kdy\u017e se p\u0159en\u00e1\u0161\u00ed soubor mezi klientem a serverem. Pokud se p\u0159en\u00e1\u0161\u00ed v\u00edce soubor\u016f sou\u010dasn\u011b, pro ka\u017ed\u00fd z nich se otev\u00edr\u00e1 sv\u016fj vlastn\u00ed p\u0159enosov\u00fd kan\u00e1l.<\/p>\n<p><\/p>\n<p>FTP m\u016f\u017ee pracovat v aktivn\u00edm nebo pasivn\u00edm re\u017eimu, co\u017e ovliv\u0148uje zp\u016fsob navazov\u00e1n\u00ed spojen\u00ed. V aktivn\u00edm re\u017eimu klient vytv\u00e1\u0159\u00ed \u0159\u00edd\u00edc\u00ed TCP spojen\u00ed se serverem a odes\u00edl\u00e1 serveru svou IP adresu a n\u00e1hodn\u00e9 \u010d\u00edslo klientsk\u00e9ho portu, pot\u00e9 \u010dek\u00e1, a\u017e server nav\u00e1\u017ee TCP spojen\u00ed s touto adresou a \u010d\u00edslem portu. Pokud se klient nach\u00e1z\u00ed za firewallem a nem\u016f\u017ee p\u0159ijmout p\u0159\u00edchoz\u00ed TCP spojen\u00ed, m\u016f\u017ee b\u00fdt pou\u017eit pasivn\u00ed re\u017eim. V tomto re\u017eimu klient pou\u017e\u00edv\u00e1 \u0159\u00eddic\u00ed kan\u00e1l k odesl\u00e1n\u00ed p\u0159\u00edkazu PASV serveru, a pot\u00e9 z\u00edsk\u00e1v\u00e1 od serveru jeho IP adresu a \u010d\u00edslo portu, kter\u00e9 klient pou\u017eije k otev\u0159en\u00ed datov\u00e9ho kan\u00e1lu ze sv\u00e9ho n\u00e1hodn\u00e9ho portu. <\/p>\n<p><\/p>\n<p>M\u016f\u017ee nastat situace, kdy se data mohou p\u0159en\u00e1\u0161et na t\u0159et\u00ed stroj. V tomto p\u0159\u00edpad\u011b u\u017eivatel vytv\u00e1\u0159\u00ed \u0159\u00eddic\u00ed kan\u00e1l se dv\u011bma servery a vytv\u00e1\u0159\u00ed p\u0159\u00edm\u00fd datov\u00fd kan\u00e1l mezi nimi. \u0158\u00eddic\u00ed p\u0159\u00edkazy proch\u00e1zej\u00ed u\u017eivatelsk\u00fdm rozhran\u00edm, zat\u00edmco data p\u0159\u00edmo mezi servery.<\/p>\n<p><\/p>\n<p>P\u0159i p\u0159enosu dat po s\u00edti mohou b\u00fdt pou\u017eity \u010dty\u0159i reprezentace dat:<\/p>\n<p><\/p>\n<ul>\n<li>ASCII \u2013 pou\u017e\u00edv\u00e1 se pro text. Data jsou, pokud je to nutn\u00e9, p\u0159ed p\u0159enosem konvertov\u00e1na ze znakov\u00e9 reprezentace na hostiteli-odes\u00edlateli na \u201eosmi bitov\u00fd ASCII\u201c a (op\u011bt, pokud je to nutn\u00e9) na znakovou reprezentaci p\u0159ij\u00edmaj\u00edc\u00edho hostitele. Konkr\u00e9tn\u011b se m\u011bn\u00ed znaky pro zalomen\u00ed \u0159\u00e1dku. V d\u016fsledku toho tento re\u017eim nen\u00ed vhodn\u00fd pro soubory, kter\u00e9 neobsahuj\u00ed pouze oby\u010dejn\u00fd text.<\/li>\n<li>Bin\u00e1rn\u00ed re\u017eim \u2013 za\u0159\u00edzen\u00ed-odes\u00edlatel odes\u00edl\u00e1 ka\u017ed\u00fd soubor po bitech, zat\u00edmco p\u0159\u00edjemce ukl\u00e1d\u00e1 stream byt\u016f p\u0159i p\u0159ij\u00edm\u00e1n\u00ed. Podpora tohoto re\u017eimu byla doporu\u010dena pro v\u0161echny implementace FTP.<\/li>\n<li>EBCDIC \u2013 pou\u017e\u00edv\u00e1 se pro p\u0159enos oby\u010dejn\u00e9ho textu mezi hostiteli v k\u00f3dov\u00e1n\u00ed EBCDIC. Jinak je tento re\u017eim obdobn\u00fd re\u017eimu ASCII.<\/li>\n<li>Lok\u00e1ln\u00ed re\u017eim \u2013 umo\u017e\u0148uje dv\u011bma po\u010d\u00edta\u010d\u016fm s identick\u00fdmi nastaven\u00edmi pos\u00edlat data ve vlastn\u00edm form\u00e1tu bez konverze na ASCII.<\/li>\n<\/ul>\n<p><\/p>\n<p>P\u0159enos dat m\u016f\u017ee prob\u00edhat v libovoln\u00e9m z t\u011bchto t\u0159\u00ed re\u017eim\u016f:<\/p>\n<p><\/p>\n<ul>\n<li>Streamov\u00fd re\u017eim \u2013 data jsou odes\u00edl\u00e1na jako nep\u0159etr\u017eit\u00fd tok, co\u017e uvol\u0148uje FTP od jak\u00e9koli zpracov\u00e1n\u00ed. Nam\u00edsto toho se ve\u0161ker\u00e9 zpracov\u00e1n\u00ed prov\u00e1d\u00ed pomoc\u00ed TCP. Indik\u00e1tor konce souboru nen\u00ed pot\u0159eba, s v\u00fdjimkou rozd\u011blen\u00ed dat na z\u00e1znamy.<\/li>\n<li>Blokov\u00fd re\u017eim \u2013 FTP rozd\u011bluje data na n\u011bkolik blok\u016f (blok hlavi\u010dky, po\u010det byt\u016f, pole dat) a pot\u00e9 je p\u0159ed\u00e1v\u00e1 p\u0159es TCP.<\/li>\n<li>Re\u017eim komprese \u2013 data jsou komprimov\u00e1na jednotn\u00fdm algoritmem (obvykle k\u00f3dov\u00e1n\u00edm dlouh\u00fdch \u0159ad).<\/li>\n<\/ul>\n<p><\/p>\n<p>FTP server \u2013 to je server, kter\u00fd umo\u017e\u0148uje pou\u017e\u00edv\u00e1n\u00ed protokolu pro p\u0159enos soubor\u016f. M\u00e1 ur\u010dit\u00e9 vlastnosti, kter\u00e9 jej odli\u0161uj\u00ed od b\u011b\u017en\u00fdch webov\u00fdch server\u016f:<\/p>\n<p><\/p>\n<ul>\n<li>Je nutn\u00e1 autentizace u\u017eivatel\u016f<\/li>\n<li>V\u0161echny operace se prov\u00e1d\u011bj\u00ed v r\u00e1mci aktu\u00e1ln\u00ed relace<\/li>\n<li>Mo\u017enost prov\u00e1d\u011bt r\u016fzn\u00e9 akce se souborov\u00fdm syst\u00e9mem<\/li>\n<li>Pro ka\u017ed\u00e9 spojen\u00ed se pou\u017e\u00edv\u00e1 samostatn\u00fd kan\u00e1l<\/li>\n<\/ul>\n<p><\/p>\n<p>FTP klient \u2013 to je program, kter\u00fd umo\u017e\u0148uje p\u0159ipojen\u00ed k vzd\u00e1len\u00e9mu serveru p\u0159es FTP a vykon\u00e1v\u00e1n\u00ed pot\u0159ebn\u00fdch akc\u00ed na n\u011bm se sou\u010d\u00e1stmi souborov\u00e9ho syst\u00e9mu. Klientem m\u016f\u017ee b\u00fdt i prohl\u00ed\u017ee\u010d, do adresn\u00edho \u0159\u00e1dku kter\u00e9ho je t\u0159eba zadat adresu, kter\u00e1 p\u0159edstavuje cestu k ur\u010dit\u00e9mu adres\u00e1\u0159i nebo souboru na vzd\u00e1len\u00e9m serveru podle obecn\u00e9 blokov\u00e9 sch\u00e9matu URL:<\/p>\n<p><\/p>\n<p><code>ftp:\/\/user:pass@address:port\/directory\/file<\/code><\/p>\n<p><\/p>\n<p>Pou\u017eit\u00ed webov\u00e9ho prohl\u00ed\u017ee\u010de v tomto ohledu v\u0161ak umo\u017en\u00ed pouze prohl\u00ed\u017eet nebo stahovat zaj\u00edmav\u00e9 soubory. Aby bylo mo\u017en\u00e9 pln\u011b vyu\u017e\u00edt v\u0161echny v\u00fdhody FTP, je vhodn\u00e9 pou\u017e\u00edt specializovan\u00fd software jako klient. <\/p>\n<p><\/p>\n<p>FTP autentizace pou\u017e\u00edv\u00e1 sch\u00e9ma jm\u00e9no u\u017eivatele\/heslo k poskytnut\u00ed p\u0159\u00edstupu. Jm\u00e9no u\u017eivatele je odesl\u00e1no serveru p\u0159\u00edkazem USER a heslo p\u0159\u00edkazem PASS. Pokud server p\u0159ijme informace poskytovan\u00e9 klientem, po\u0161le klientovi pozv\u00e1n\u00ed a relace za\u010d\u00edn\u00e1. U\u017eivatel\u00e9 mohou, pokud server tuto vlastnost podporuje, vstoupit do syst\u00e9mu bez poskytnut\u00ed p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f, ale server m\u016f\u017ee pro takov\u00e9 relace poskytnout pouze omezen\u00fd p\u0159\u00edstup.<\/p>\n<p><\/p>\n<p>Hostitel, kter\u00fd poskytuje FTP slu\u017eby, m\u016f\u017ee nab\u00eddnout anonymn\u00ed p\u0159\u00edstup k FTP. U\u017eivatel\u00e9 se obvykle p\u0159ihla\u0161uj\u00ed jako \"anonymous\" (na n\u011bkter\u00fdch FTP serverech m\u016f\u017ee b\u00fdt zde citlivost na velikost p\u00edsmen) jako jm\u00e9no u\u017eivatele. P\u0159esto\u017ee u\u017eivatel\u00e9 obvykle mus\u00ed poslat adresu sv\u00e9 elektronick\u00e9 po\u0161ty m\u00edsto hesla, \u017e\u00e1dn\u00e9 ov\u011b\u0159en\u00ed se ve skute\u010dnosti neprov\u00e1d\u00ed. Mnoho FTP hostitel\u016f, kte\u0159\u00ed poskytuj\u00ed aktualizace softwaru, podporuje anonymn\u00ed p\u0159\u00edstup.<\/p>\n<p><\/p>\n<h2>Sch\u00e9ma protokolu<\/h2>\n<p><\/p>\n<p>Interakce mezi \u201eklientem a serverem\u201c p\u0159i FTP p\u0159ipojen\u00ed lze schematicky zn\u00e1zornit n\u00e1sledovn\u011b:<\/p>\n<p>\n<img decoding=\"async\" alt=\"Protokoly SFTP a FTPS\" src=\"\/wp-content\/uploads\/2020\/05\/9513d1898a0938a30b0f87d7956bc98f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h1>Bezpe\u010dn\u00fd FTP<\/h1>\n<p><\/p>\n<p>FTP nebyl p\u016fvodn\u011b navr\u017een jako zabezpe\u010den\u00fd, proto\u017ee byl ur\u010den pro komunikaci mezi n\u011bkolika vojensk\u00fdmi objekty a institucemi. S rozvojem a roz\u0161\u00ed\u0159en\u00edm internetu v\u0161ak vzrostlo riziko nez\u00e1konn\u00e9ho p\u0159\u00edstupu mnohokr\u00e1t. Objevil se po\u017eadavek na ochranu server\u016f p\u0159ed r\u016fzn\u00fdmi typy \u00fatok\u016f. V kv\u011btnu 1999 auto\u0159i RFC 2577 shrnuli zranitelnosti do n\u00e1sleduj\u00edc\u00edho seznamu probl\u00e9m\u016f:<\/p>\n<p><\/p>\n<ul>\n<li>Skryt\u00e9 \u00fatoky (bounce attacks)<\/li>\n<li>Spoofovac\u00ed \u00fatoky (spoof attacks)<\/li>\n<li>\u00datoky hrubou silou (brute force attacks)<\/li>\n<li>Zachyt\u00e1v\u00e1n\u00ed paket\u016f, sniffov\u00e1n\u00ed (packet capture, sniffing)<\/li>\n<li>Z\u00edsk\u00e1n\u00ed port\u016f (port stealing)<\/li>\n<\/ul>\n<p><\/p>\n<p>B\u011b\u017en\u00fd FTP nem\u00e1 mo\u017enost p\u0159en\u00e1\u0161et data za\u0161ifrovan\u011b, co\u017e znamen\u00e1, \u017ee u\u017eivatelsk\u00e1 jm\u00e9na, hesla, p\u0159\u00edkazy a dal\u0161\u00ed informace mohou b\u00fdt ze strany \u00fato\u010dn\u00edk\u016f snadno a rychle odchyceny. B\u011b\u017en\u00e9 \u0159e\u0161en\u00ed tohoto probl\u00e9mu je pou\u017e\u00edvat \u201ebezpe\u010dn\u00e9\u201c verze zraniteln\u00e9ho protokolu (FTPS) s ochranou TLS nebo jin\u00fd, bezpe\u010dn\u011bj\u0161\u00ed protokol, jako je SFTP\/SCP, kter\u00fd je sou\u010d\u00e1st\u00ed v\u011bt\u0161iny realizac\u00ed protokolu Secure Shell.<\/p>\n<p><\/p>\n<h2>FTPS<\/h2>\n<p><\/p>\n<p>FTPS (FTP + SSL) je roz\u0161\u00ed\u0159en\u00ed standardn\u00edho protokolu pro p\u0159enos soubor\u016f, kter\u00e9 p\u0159id\u00e1v\u00e1 do jeho z\u00e1kladn\u00ed funkce vytv\u00e1\u0159en\u00ed \u0161ifrovan\u00fdch relac\u00ed pomoc\u00ed protokolu SSL (Secure Sockets Layer). V sou\u010dasn\u00e9 dob\u011b je zabezpe\u010den\u00ed poskytov\u00e1no jeho pokro\u010dil\u011bj\u0161\u00ed analogi\u00ed TLS (Transport Layer Security).<\/p>\n<p><\/p>\n<h3>SSL<\/h3>\n<p><\/p>\n<p>Protokol SSL byl navr\u017een spole\u010dnost\u00ed Netscape Communications v roce 1996 s c\u00edlem zajistit bezpe\u010dnost a ochranu soukrom\u00ed internetov\u00fdch p\u0159ipojen\u00ed. Protokol podporuje autentifikaci (ov\u011b\u0159en\u00ed identity) klienta a serveru, nez\u00e1vis\u00ed na aplikac\u00edch a je transparentn\u00ed pro protokoly HTTP, FTP a Telnet.<\/p>\n<p><\/p>\n<p>Protokol SSL Handshake se skl\u00e1d\u00e1 ze dvou f\u00e1z\u00ed: ov\u011b\u0159en\u00ed identity serveru a nepovinn\u00e9 ov\u011b\u0159en\u00ed identity klienta. V prvn\u00ed f\u00e1zi server v odpov\u011bdi na \u017e\u00e1dost klienta ode\u0161le sv\u016fj certifik\u00e1t a \u0161ifrovac\u00ed parametry. Pot\u00e9 klient vygeneruje master kl\u00ed\u010d, za\u0161ifruje ho ve\u0159ejn\u00fdm kl\u00ed\u010dem serveru a ode\u0161le serveru. Server de\u0161ifruje master kl\u00ed\u010d sv\u00fdm soukrom\u00fdm kl\u00ed\u010dem a potvrzuje svou autenticitu klientovi t\u00edm, \u017ee mu vr\u00e1t\u00ed zpr\u00e1vu podepsanou master kl\u00ed\u010dem klienta.<\/p>\n<p><\/p>\n<p>N\u00e1sleduj\u00edc\u00ed \u00fadaje jsou \u0161ifrov\u00e1ny a ov\u011b\u0159ov\u00e1ny kl\u00ed\u010di z\u00edskan\u00fdmi na z\u00e1klad\u011b tohoto hlavn\u00edho kl\u00ed\u010de. Ve druh\u00e9m kroku, kter\u00fd nen\u00ed povinn\u00fd, server pos\u00edl\u00e1 klientovi \u017e\u00e1dost, a klient potvrzuje serveru svou autenticitu t\u00edm, \u017ee vrac\u00ed \u017e\u00e1dost s vlastn\u00edm digit\u00e1ln\u00edm podpisem a certifik\u00e1tem ve\u0159ejn\u00e9ho kl\u00ed\u010de.<\/p>\n<p><\/p>\n<p>SSL podporuje r\u016fzn\u00e9 kryptografick\u00e9 algoritmy. P\u0159i navazov\u00e1n\u00ed spojen\u00ed se pou\u017e\u00edv\u00e1 kryptografick\u00fd syst\u00e9m s ve\u0159ejn\u00fdm kl\u00ed\u010dem RSA. Po v\u00fdm\u011bn\u011b kl\u00ed\u010d\u016f se pou\u017e\u00edv\u00e1 mnoho r\u016fzn\u00fdch \u0161ifer: RC2, RC4, IDEA, DES a TripleDES. Tak\u00e9 se pou\u017e\u00edv\u00e1 MD5 \u2014 algoritmus pro vytv\u00e1\u0159en\u00ed otisk\u016f zpr\u00e1v. Syntaxe certifik\u00e1t\u016f ve\u0159ejn\u00e9ho kl\u00ed\u010de je pops\u00e1na ve standardu X.509.<\/p>\n<p><\/p>\n<p>Jednou z d\u016fle\u017eit\u00fdch v\u00fdhod SSL je jeho \u00fapln\u00e1 nez\u00e1vislost na platform\u011b a softwaru. Protokol je navr\u017een na principech p\u0159enositelnosti a ideologie jeho konstrukce nez\u00e1vis\u00ed na aplikac\u00edch, v jejich\u017e r\u00e1mci je pou\u017e\u00edv\u00e1n. Krom\u011b toho je d\u016fle\u017eit\u00e9, \u017ee nad protokolem SSL mohou b\u00fdt transparentn\u011b vrstveny dal\u0161\u00ed protokoly; bu\u010f pro dal\u0161\u00ed zv\u00fd\u0161en\u00ed ochrany c\u00edlov\u00fdch informa\u010dn\u00edch tok\u016f, nebo pro p\u0159izp\u016fsoben\u00ed kryptografick\u00fdch schopnost\u00ed SSL pro n\u011bjak\u00fd jin\u00fd, konkr\u00e9tn\u00ed \u00fakol.<\/p>\n<p><\/p>\n<h3>SSL p\u0159ipojen\u00ed<\/h3>\n<p>\n<img decoding=\"async\" alt=\"Protokoly SFTP a FTPS\" src=\"\/wp-content\/uploads\/2020\/05\/5c002ffba19382c1d3b330d7c948692b.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Poskytovan\u00fd bezpe\u010dn\u00fd kan\u00e1l SSL m\u00e1 t\u0159i hlavn\u00ed vlastnosti: <\/p>\n<p><\/p>\n<ul>\n<li>Kan\u00e1l je soukrom\u00fd. \u0160ifrov\u00e1n\u00ed se pou\u017e\u00edv\u00e1 pro v\u0161echny zpr\u00e1vy po jednoduch\u00e9m dialogu, kter\u00fd slou\u017e\u00ed k ur\u010den\u00ed tajn\u00e9ho kl\u00ed\u010de.<\/li>\n<li>Kan\u00e1l je autentizovan\u00fd. Serverov\u00e1 \u010d\u00e1st dialogu je v\u017edy autentizov\u00e1na, zat\u00edmco klientsk\u00e1 \u010d\u00e1st se autentizuje voliteln\u011b.<\/li>\n<li>Kan\u00e1l je spolehliv\u00fd. P\u0159enos zpr\u00e1v zahrnuje kontrolu integrity (s pou\u017eit\u00edm MAC).<\/li>\n<\/ul>\n<p><\/p>\n<h3>Charakteristiky FTPS<\/h3>\n<p><\/p>\n<p>Existuj\u00ed dv\u011b implementace FTPS, kter\u00e9 pou\u017e\u00edvaj\u00ed r\u016fzn\u00e9 metody zaji\u0161t\u011bn\u00ed bezpe\u010dnosti: <\/p>\n<p><\/p>\n<ul>\n<li>Nep\u0159\u00edm\u00e1 metoda p\u0159edpokl\u00e1d\u00e1 pou\u017eit\u00ed standardn\u00edho protokolu SSL s nav\u00e1z\u00e1n\u00edm relace p\u0159ed odesl\u00e1n\u00edm dat, co\u017e naopak naru\u0161uje kompatibilitu s b\u011b\u017en\u00fdmi FTP klienty a servery. Pro zp\u011btnou kompatibilitu s klienty, kte\u0159\u00ed FTPS nepodporuj\u00ed, se pro \u0159\u00eddic\u00ed spojen\u00ed pou\u017e\u00edv\u00e1 TCP port 990 a pro p\u0159enos dat port 989. To umo\u017e\u0148uje uchovat standardn\u00ed port 21 pro FTP protokol. Tato metoda je pova\u017eov\u00e1na za zastaralou.<\/li>\n<li>Explicitn\u00ed p\u0159\u00edstup je mnohem pohodln\u011bj\u0161\u00ed, proto\u017ee vyu\u017e\u00edv\u00e1 standardn\u00ed FTP p\u0159\u00edkazy, ale p\u0159i odpov\u011bdi \u0161ifruje data, co\u017e umo\u017e\u0148uje pou\u017e\u00edt jedno a to sam\u00e9 \u0159\u00edd\u00edc\u00ed spojen\u00ed jak pro FTP, tak pro FTPS. Klient mus\u00ed explicitn\u011b po\u017e\u00e1dat server o zabezpe\u010den\u00fd p\u0159enos dat a pot\u00e9 schv\u00e1lit zp\u016fsob \u0161ifrov\u00e1n\u00ed. Pokud klient nepo\u017e\u00e1d\u00e1 o zabezpe\u010den\u00fd p\u0159enos, m\u00e1 FTPS server pr\u00e1vo jak uchovat, tak uzav\u0159\u00edt nezabezpe\u010den\u00e9 spojen\u00ed. Mechanismus vyjedn\u00e1v\u00e1n\u00ed identifikace a ochrany dat byl p\u0159id\u00e1n pod RFC 2228, kter\u00e9 zahrnuje nov\u00fd FTP p\u0159\u00edkaz AUTH. A\u010dkoliv tento standard v\u00fdslovn\u011b neur\u010duje mechanismy ochrany, definuje, \u017ee zabezpe\u010den\u00e9 spojen\u00ed by m\u011bl iniciovat klient pomoc\u00ed v\u00fd\u0161e popsan\u00e9ho algoritmu. Pokud server nepodporuje zabezpe\u010den\u00e1 spojen\u00ed, m\u011bl by b\u00fdt vr\u00e1cen k\u00f3d chyby 504. FTPS klienti mohou z\u00edskat informace o podporovan\u00fdch serverov\u00fdch protokolech ochrany pomoc\u00ed p\u0159\u00edkazu FEAT, nicm\u00e9n\u011b server nen\u00ed povinen zve\u0159ej\u0148ovat, jak\u00e9 \u00farovn\u011b zabezpe\u010den\u00ed podporuje. Nejb\u011b\u017en\u011bj\u0161\u00ed FTPS p\u0159\u00edkazy jsou AUTH TLS a AUTH SSL, kter\u00e9 poskytuj\u00ed ochranu TLS a SSL odpov\u00eddaj\u00edc\u00edm zp\u016fsobem.<\/li>\n<\/ul>\n<p><\/p>\n<h2>SFTP<\/h2>\n<p><\/p>\n<p>SFTP (Secure File Transfer Protocol) \u2013 protokol aplika\u010dn\u00ed vrstvy pro p\u0159enos soubor\u016f, kter\u00fd funguje nad zabezpe\u010den\u00fdm kan\u00e1lem. Nesm\u00ed b\u00fdt zam\u011b\u0148ov\u00e1n se (Simple File Transfer Protocol), kter\u00fd m\u00e1 stejnou zkratku. Zat\u00edmco FTPS je prost\u011b roz\u0161\u00ed\u0159en\u00edm FTP, SFTP je samostatn\u00fd a nijak nesouvisej\u00edc\u00ed protokol, kter\u00fd jako z\u00e1klad vyu\u017e\u00edv\u00e1 SSH (Secure Shell \u2013 zabezpe\u010den\u00e1 \u0161elma).<\/p>\n<p><\/p>\n<h3>Secure Shell<\/h3>\n<p><\/p>\n<p>V\u00fdvojem protokolu se zab\u00fdvala jedna ze skupin IETF nazvan\u00e1 Secsh. Pracovn\u00ed dokumentace k nov\u00e9mu protokolu SFTP se nestala ofici\u00e1ln\u00edm standardem, nicm\u00e9n\u011b byla aktivn\u011b pou\u017e\u00edv\u00e1na p\u0159i v\u00fdvoji aplikac\u00ed. V pr\u016fb\u011bhu doby bylo vyd\u00e1no \u0161est verz\u00ed protokolu. Postupn\u00e9 zvy\u0161ov\u00e1n\u00ed jeho funkcionality v\u0161ak vedlo k tomu, \u017ee 14. srpna 2006 bylo rozhodnuto o ukon\u010den\u00ed pr\u00e1ce na rozvoji protokolu v souvislosti se spln\u011bn\u00edm hlavn\u00edho c\u00edle projektu (v\u00fdvoj SSH) a nedostatkem dostate\u010dn\u00e9 \u00farovn\u011b odbornosti pro p\u0159echod k v\u00fdvoji plnohodnotn\u00e9ho protokolu vzd\u00e1len\u00e9ho souborov\u00e9ho syst\u00e9mu.<\/p>\n<p><\/p>\n<p>SSH je s\u00ed\u0165ov\u00fd protokol, kter\u00fd umo\u017e\u0148uje vzd\u00e1len\u00e9 \u0159\u00edzen\u00ed opera\u010dn\u00edho syst\u00e9mu a tunelov\u00e1n\u00ed TCP p\u0159ipojen\u00ed (nap\u0159\u00edklad pro p\u0159enos soubor\u016f). Je funk\u010dn\u011b podobn\u00fd protokol\u016fm Telnet a rlogin, ale na rozd\u00edl od nich \u0161ifruje ve\u0161ker\u00fd provoz, v\u010detn\u011b p\u0159en\u00e1\u0161en\u00fdch hesel. SSH umo\u017e\u0148uje v\u00fdb\u011br r\u016fzn\u00fdch \u0161ifrovac\u00edch algoritm\u016f. Klienti SSH a servery SSH jsou dostupn\u00e9 pro v\u011bt\u0161inu s\u00ed\u0165ov\u00fdch opera\u010dn\u00edch syst\u00e9m\u016f.<\/p>\n<p><\/p>\n<p>SSH umo\u017e\u0148uje bezpe\u010dn\u00fd p\u0159enos prakticky jak\u00e9hokoli jin\u00e9ho s\u00ed\u0165ov\u00e9ho protokolu v nechr\u00e1n\u011bn\u00e9m prost\u0159ed\u00ed. Takto lze nejen vzd\u00e1len\u011b pracovat na po\u010d\u00edta\u010di prost\u0159ednictv\u00edm p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku, ale tak\u00e9 p\u0159en\u00e1\u0161et \u0161ifrovan\u00fdm kan\u00e1lem zvukov\u00fd nebo video stream (nap\u0159\u00edklad z webov\u00e9 kamery). SSH tak\u00e9 m\u016f\u017ee pou\u017e\u00edvat kompresi p\u0159en\u00e1\u0161en\u00fdch dat pro jejich n\u00e1sledn\u00e9 \u0161ifrov\u00e1n\u00ed, co\u017e je u\u017eite\u010dn\u00e9 nap\u0159\u00edklad pro vzd\u00e1len\u00e9 spu\u0161t\u011bn\u00ed klient\u016f X Window System.<\/p>\n<p><\/p>\n<p>Prvn\u00ed verze protokolu, SSH-1, byla vyvinuta v roce 1995 v\u00fdzkumn\u00edkem Tatu Ulj\u00f6nem z Technick\u00e9 univerzity Helsinky (Finsko). SSH-1 byl naps\u00e1n pro zaji\u0161t\u011bn\u00ed v\u011bt\u0161\u00ed ochrany soukrom\u00ed ne\u017e protokoly rlogin, telnet a rsh. V roce 1996 byla vyvinuta bezpe\u010dn\u011bj\u0161\u00ed verze protokolu, SSH-2, kter\u00e1 nen\u00ed kompatibiln\u00ed se SSH-1. Protokol z\u00edskal je\u0161t\u011b v\u011bt\u0161\u00ed popularitu a do roku 2000 m\u011bl p\u0159ibli\u017en\u011b dva miliony u\u017eivatel\u016f. V sou\u010dasnosti se pod term\u00ednem \u201eSSH\u201c obvykle rozum\u00ed pr\u00e1v\u011b SSH-2, proto\u017ee prvn\u00ed verze protokolu se vzhledem k z\u00e1sadn\u00edm nedostatk\u016fm dnes t\u00e9m\u011b\u0159 nepou\u017e\u00edv\u00e1. V roce 2006 byl protokol schv\u00e1len pracovn\u00ed skupinou IETF jako internetov\u00fd standard.<\/p>\n<p><\/p>\n<p>Existuj\u00ed dv\u011b b\u011b\u017en\u00e9 realizace SSH: komer\u010dn\u00ed a bezplatn\u00e1 svobodn\u00e1. Bezplatn\u00e1 realizace se naz\u00fdv\u00e1 OpenSSH. K roku 2006 pou\u017e\u00edvalo 80 % po\u010d\u00edta\u010d\u016f v s\u00edti Internet pr\u00e1v\u011b OpenSSH. Komer\u010dn\u00ed realizaci vyv\u00edj\u00ed organizace SSH Communications Security, kter\u00e1 je stoprocentn\u00ed dce\u0159inou spole\u010dnost\u00ed korporace Tectia a je bezplatn\u00e1 pro nekomer\u010dn\u00ed pou\u017eit\u00ed. Tyto realizace obsahuj\u00ed prakticky shodn\u00fd soubor p\u0159\u00edkaz\u016f.<\/p>\n<p><\/p>\n<p>Protokol SSH-2, na rozd\u00edl od protokolu telnet, odol\u00e1v\u00e1 \u00fatok\u016fm na odposlech provozu (\"sniffing\"), ale nen\u00ed odoln\u00fd proti \u00fatok\u016fm \"\u010dlov\u011bk uprost\u0159ed\". Protokol SSH-2 je tak\u00e9 odoln\u00fd v\u016f\u010di \u00fatok\u016fm p\u0159ipojen\u00ed uprost\u0159ed (angl. session hijacking), proto\u017ee nen\u00ed mo\u017en\u00e9 se p\u0159ipojit k ji\u017e vytvo\u0159en\u00e9 relaci nebo ji odchytit.<\/p>\n<p><\/p>\n<p>Aby se p\u0159ede\u0161lo \u00fatok\u016fm \"\u010dlov\u011bk uprost\u0159ed\" p\u0159i p\u0159ipojen\u00ed k hostiteli, jeho\u017e kl\u00ed\u010d je\u0161t\u011b nen\u00ed zn\u00e1my klientovi, klientsk\u00fd software zobrazuje u\u017eivateli \"otisk kl\u00ed\u010de\" (angl. key fingerprint). Doporu\u010duje se d\u016fkladn\u011b zkontrolovat otisk kl\u00ed\u010de zobrazen\u00fd klientsk\u00fdm softwarem ve srovn\u00e1n\u00ed s otiskem kl\u00ed\u010de serveru, ide\u00e1ln\u011b z\u00edskan\u00fdm p\u0159es spolehliv\u00e9 komunika\u010dn\u00ed kan\u00e1ly nebo osobn\u011b.<\/p>\n<p><\/p>\n<p>Podpora SSH je realizov\u00e1na ve v\u0161ech UNIX-podobn\u00fdch syst\u00e9mech a na v\u011bt\u0161in\u011b z nich jsou mezi standardn\u00edmi n\u00e1stroji dostupn\u00e9 klienti a servery ssh. Existuje mnoho implementac\u00ed SSH klient\u016f i pro ne-UNIX OS. Protokol z\u00edskal velkou popularitu po \u0161irok\u00e9m rozvoji analyz\u00e1tor\u016f provozu a zp\u016fsob\u016f naru\u0161ov\u00e1n\u00ed lok\u00e1ln\u00edch s\u00edt\u00ed jako alternativn\u00ed bezpe\u010dn\u00e9 \u0159e\u0161en\u00ed k protokolu Telnet pro spr\u00e1vu d\u016fle\u017eit\u00fdch uzl\u016f.<\/p>\n<p><\/p>\n<h3>Spojen\u00ed s pou\u017eit\u00edm SSH<\/h3>\n<p><\/p>\n<p>Pro pou\u017eit\u00ed SSH je pot\u0159eba SSH server a SSH klient. Server naslouch\u00e1 p\u0159ipojen\u00edm od klientsk\u00fdch stroj\u016f a po nav\u00e1z\u00e1n\u00ed spojen\u00ed prov\u00e1d\u00ed autentizaci, po kter\u00e9 za\u010d\u00edn\u00e1 obsluhovat klienta. Klient se pou\u017e\u00edv\u00e1 pro vstup na vzd\u00e1len\u00fd stroj a vykon\u00e1v\u00e1n\u00ed p\u0159\u00edkaz\u016f.<\/p>\n<p>\n<img decoding=\"async\" alt=\"Protokoly SFTP a FTPS\" src=\"\/wp-content\/uploads\/2020\/05\/2370127e0483cf579c3ae461819ada7c.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<h3>Srovn\u00e1n\u00ed s FTPS<\/h3>\n<p><\/p>\n<p>Hlavn\u00ed rozd\u00edl mezi SFTP a standardn\u00edm FTP a FTPS je v tom, \u017ee SFTP \u0161ifruje v\u0161echny p\u0159\u00edkazy, u\u017eivatelsk\u00e1 jm\u00e9na, hesla a dal\u0161\u00ed d\u016fv\u011brn\u00e9 informace.<\/p>\n<p><\/p>\n<p>Oba protokoly FTPS a SFTP pou\u017e\u00edvaj\u00ed kombinaci asymetrick\u00fdch algoritm\u016f (RSA, DSA), symetrick\u00fdch algoritm\u016f (DES\/3DES, AES, Twofish atd.), stejn\u011b jako algoritmus v\u00fdm\u011bny kl\u00ed\u010d\u016f. Pro autentizaci FTPS (nebo, pokud budeme p\u0159esn\u011bj\u0161\u00ed, SSL\/TLS podle protokolu FTP) pou\u017e\u00edv\u00e1 certifik\u00e1ty X.509, zat\u00edmco SFTP (SSH protokol) pou\u017e\u00edv\u00e1 SSH kl\u00ed\u010de.<\/p>\n<p><\/p>\n<p>Certifik\u00e1ty X.509 zahrnuj\u00ed ve\u0159ejn\u00fd kl\u00ed\u010d a ur\u010dit\u00e9 informace o certifik\u00e1tu vlastn\u00edka. Tyto informace umo\u017e\u0148uj\u00ed na druh\u00e9 stran\u011b ov\u011b\u0159it integritu samotn\u00e9ho certifik\u00e1tu, jeho pravost a vlastn\u00edka osv\u011bd\u010den\u00ed. Certifik\u00e1ty X.509 maj\u00ed odpov\u00eddaj\u00edc\u00ed soukrom\u00fd kl\u00ed\u010d, kter\u00fd je obvykle uchov\u00e1v\u00e1n odd\u011blen\u011b od certifik\u00e1tu z bezpe\u010dnostn\u00edch d\u016fvod\u016f.<\/p>\n<p><\/p>\n<p>\u0160ifrovac\u00ed kl\u00ed\u010d obsahuje pouze ve\u0159ejn\u00fd kl\u00ed\u010d (odpov\u00eddaj\u00edc\u00ed soukrom\u00fd kl\u00ed\u010d je uchov\u00e1v\u00e1n odd\u011blen\u011b). Neobsahuje \u017e\u00e1dn\u00e9 informace o vlastn\u00edkovi kl\u00ed\u010de. N\u011bkter\u00e9 implementace SSH pou\u017e\u00edvaj\u00ed certifik\u00e1ty X.509 pro autentizaci, ale ve skute\u010dnosti neov\u011b\u0159uj\u00ed celou \u0159et\u011bzec certifik\u00e1t\u016f \u2014 pou\u017e\u00edv\u00e1 se pouze ve\u0159ejn\u00fd kl\u00ed\u010d (co\u017e \u010din\u00ed takovou autentizaci ne\u00faplnou).<\/p>\n<p><\/p>\n<h1>Z\u00e1v\u011br<\/h1>\n<p><\/p>\n<p>Protokol FTP bezesporu st\u00e1le hraje d\u016fle\u017eitou roli v ot\u00e1zce ukl\u00e1d\u00e1n\u00ed a distribuce informac\u00ed v s\u00edti, navzdory sv\u00e9mu uct\u00edvan\u00e9mu v\u011bku. Je to pohodln\u00fd, multifunk\u010dn\u00ed a standardizovan\u00fd protokol. Na jeho z\u00e1klad\u011b byly postaveny mnoh\u00e9 souborov\u00e9 archivy, bez kter\u00fdch by technick\u00e1 pr\u00e1ce nebyla tak efektivn\u00ed. Nav\u00edc je snadno konfigurovateln\u00fd a serverov\u00e9 a klientsk\u00e9 programy existuj\u00ed prakticky pro v\u0161echny aktu\u00e1ln\u00ed i m\u00e9n\u011b roz\u0161\u00ed\u0159en\u00e9 platformy.<\/p>\n<p><\/p>\n<p>Jeho zabezpe\u010den\u00e9 verze naopak \u0159e\u0161\u00ed probl\u00e9m d\u016fv\u011brnosti uchov\u00e1van\u00fdch a p\u0159en\u00e1\u0161en\u00fdch dat v modern\u00edm sv\u011bt\u011b. Oba nov\u00e9 protokoly maj\u00ed sv\u00e9 klady a z\u00e1pory a vykon\u00e1vaj\u00ed pon\u011bkud odli\u0161n\u00e9 role. V oblastech, kde je preferov\u00e1n pr\u00e1v\u011b souborov\u00fd archiv, je vhodn\u011bj\u0161\u00ed pou\u017e\u00edt FTPS, zejm\u00e9na pokud tam ji\u017e d\u0159\u00edve byl pou\u017e\u00edv\u00e1n klasick\u00fd FTP. SFTP je m\u00e9n\u011b roz\u0161\u00ed\u0159en\u00e9 kv\u016fli sv\u00e9 nekompatibilit\u011b se star\u00fdm protokolem, ale je v\u00edce zabezpe\u010den\u00e9 a nab\u00edz\u00ed v\u011bt\u0161\u00ed funkcionalitu, proto\u017ee je sou\u010d\u00e1st\u00ed syst\u00e9mu vzd\u00e1len\u00e9ho \u0159\u00edzen\u00ed.<\/p>\n<p><\/p>\n<h1>Seznam zdroj\u016f<\/h1>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/topref.ru\/referat\/52883.html\">Refer\u00e1t \u201eProtokol FTP. Obecn\u00e9 informace a zvl\u00e1\u0161tnosti\u201c<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/studentlib.com\/referat-191865-protokoly_ssh_cmip_telnet.html\">Refer\u00e1t \u201eProtokoly SSH, CMIP, Telnet\u201c<\/a><\/noindex><\/li>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/works.doklad.ru\/view\/l4Ukh5_LHzk.html\">Refer\u00e1t \u201eSSL\/TLS\u201c<\/a><\/noindex><\/li>\n<\/ul>\n<p>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/500438\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0438\u0441\u043b\u043e\u0432\u0438\u0435 \u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0435\u0444\u0435\u0440\u0430\u0442 \u043f\u043e \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u0442\u0435\u043c\u0435 \u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e, \u0441\u043a\u0430\u0436\u0435\u043c \u0442\u0430\u043a, \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 \u043d\u0435 \u0442\u0430\u043a \u0443\u0436 \u043c\u043d\u043e\u0433\u043e. \u0412 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u0443\u0445\u0438\u0435 \u0444\u0430\u043a\u0442\u044b \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u044f \u0440\u0435\u0448\u0438\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0434\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0442\u0435\u043a\u0441\u0442 \u0438 \u0432\u044b\u043b\u043e\u0436\u0438\u0442\u044c \u0435\u0433\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0442\u0430\u0442\u044c\u0438. \u0427\u0442\u043e \u0442\u0430\u043a\u043e\u0435 FTP FTP (File Transfer Protocol) \u2013 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":80501,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-80500","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0438\u0441\u043b\u043e\u0432\u0438\u0435 \u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0435\u0444\u0435\u0440\u0430\u0442 \u043f\u043e \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u0442\u0435\u043c\u0435 \u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e, \u0441\u043a\u0430\u0436\u0435\u043c \u0442\u0430\u043a, \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 \u043d\u0435 \u0442\u0430\u043a \u0443\u0436 \u043c\u043d\u043e\u0433\u043e.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/protokoly-sftp-i-ftps\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b SFTP \u0438 FTPS | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0438\u0441\u043b\u043e\u0432\u0438\u0435 \u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0435\u0444\u0435\u0440\u0430\u0442 \u043f\u043e \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u0442\u0435\u043c\u0435 \u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e, \u0441\u043a\u0430\u0436\u0435\u043c \u0442\u0430\u043a, \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 \u043d\u0435 \u0442\u0430\u043a \u0443\u0436 \u043c\u043d\u043e\u0433\u043e.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/protokoly-sftp-i-ftps\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-06T11:42:29+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-06T11:42:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Protokoly SFTP a FTPS | ProHoster","description":"P\u0159edmluva P\u0159ed t\u00fddnem jsem psal refer\u00e1t na t\u00e9ma uveden\u00e9 v n\u00e1zvu a narazil jsem na to, \u017ee, \u0159ekn\u011bme, pozn\u00e1vac\u00ed informace na internetu nen\u00ed tolik.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/protokoly-sftp-i-ftps","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b SFTP \u0438 FTPS | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0438\u0441\u043b\u043e\u0432\u0438\u0435 \u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u043d\u0430\u0437\u0430\u0434 \u044f \u043f\u0438\u0441\u0430\u043b \u0440\u0435\u0444\u0435\u0440\u0430\u0442 \u043f\u043e \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435 \u0442\u0435\u043c\u0435 \u0438 \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e, \u0441\u043a\u0430\u0436\u0435\u043c \u0442\u0430\u043a, \u043f\u043e\u0437\u043d\u0430\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0441\u0435\u0442\u0438 \u043d\u0435 \u0442\u0430\u043a \u0443\u0436 \u043c\u043d\u043e\u0433\u043e.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/protokoly-sftp-i-ftps","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-06T11:42:29+00:00","article:modified_time":"2020-05-06T11:42:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"80500","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:16:28","updated":"2022-10-01 20:55:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/80500","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=80500"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/80500\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/80501"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=80500"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=80500"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=80500"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}