{"id":36033,"date":"2019-10-31T22:09:16","date_gmt":"2019-10-31T19:09:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej\/"},"modified":"2019-10-31T22:09:16","modified_gmt":"2019-10-31T19:09:16","slug":"vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/es\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","title":{"rendered":"Lanzamiento de GnuPG 2.2.17 con cambios para contrarrestar ataques a servidores de claves","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publicado<\/a><\/noindex> lanzamiento de la herramienta GnuPG 2.2.17<\/a><\/noindex> (GNU Privacy Guard), compatible con los est\u00e1ndares OpenPGP (RFC-4880<\/a><\/noindex>) y S\/MIME, proporcionando utilidades para la encriptaci\u00f3n de datos, gesti\u00f3n de firmas electr\u00f3nicas, administraci\u00f3n de claves y acceso a almacenes p\u00fablicos de claves. Recordemos que la rama GnuPG 2.2 se posiciona como una versi\u00f3n en desarrollo, donde se contin\u00faan a\u00f1adiendo nuevas funcionalidades, mientras que en la rama 2.1 solo se permiten correcciones.<\/p>\n

La nueva versi\u00f3n ofrece medidas para contrarrestar el ataque a los servidores de claves<\/a><\/noindex>, que provoca la congelaci\u00f3n de GnuPG y la imposibilidad de continuar trabajando hasta que se elimine el certificado problem\u00e1tico del almacenamiento local o se vuelva a crear el almacenamiento de certificados basado en claves p\u00fablicas verificadas. La protecci\u00f3n a\u00f1adida se basa en ignorar por defecto todas las firmas digitales de certificados de terceros obtenidas de los servidores de claves. Recordemos que cualquier usuario puede agregar su firma digital a un servidor de claves para cualquier certificado, lo que es utilizado por los atacantes para crear una cantidad masiva de firmas para el certificado de la v\u00edctima (m\u00e1s de cien mil), cuyo procesamiento interrumpe el funcionamiento normal de GnuPG.<\/p>\n

La opci\u00f3n \u00abself-sigs-only\u00bb regula la ignorancia de las firmas digitales externas, permitiendo la carga solo de las firmas propias de sus creadores. Para restaurar el comportamiento anterior, se puede agregar la configuraci\u00f3n \u00abkeyserver-options no-self-sigs-only,no-import-clean\u00bb en gpg.conf. Si durante el proceso se registra la importaci\u00f3n de un n\u00famero de bloques que provocar\u00e1 un desbordamiento del almacenamiento local (pubring.kbx), GnuPG, en lugar de mostrar un error, activa autom\u00e1ticamente el modo de ignorar las firmas digitales (\u00abself-sigs-only,import-clean\u00bb). <\/p>\n

Para actualizar las claves utilizando el mecanismo Directorio de Claves Web<\/a><\/noindex> Se ha a\u00f1adido la opci\u00f3n \u00ab\u2014locate-external-key\u00bb (WKD), que se puede utilizar para recrear el almac\u00e9n de certificados basado en claves p\u00fablicas verificadas. Al realizar la operaci\u00f3n \u00ab\u2014auto-key-retrieve\u00bb, el mecanismo WKD ahora es m\u00e1s preferible que los servidores de claves. La esencia del funcionamiento de WKD consiste en alojar las claves p\u00fablicas en la web vinculadas al dominio que figura en la direcci\u00f3n de correo electr\u00f3nico. Por ejemplo, para la direcci\u00f3n \u00abtest@example.com\u00bb, la clave puede ser descargada a trav\u00e9s del enlace \u00abhttps:\/\/example.com\/.well-known\/openpgpkey\/hu\/183d7d5ab73cfceece9a5594e6039d5a\u00bb.<\/p>\n

<\/a><\/noindex><\/p>\n

Fuente: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f GnuPG 2.2.17 (GNU Privacy Guard), \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c\u0438 OpenPGP (RFC-4880) \u0438 S\/MIME, \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u044f\u043c\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u043c \u043a\u043b\u044e\u0447\u0435\u0439. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432\u0435\u0442\u043a\u0430 GnuPG 2.2 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432\u044b\u043f\u0443\u0441\u043a, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0432 \u0432\u0435\u0442\u043a\u0435 2.1 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36033","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lanzamiento de GnuPG 2.2.17 con cambios para contrarrestar el ataque a los servidores de claves | ProHoster","description":"Se ha publicado la versi\u00f3n del conjunto de herramientas GnuPG.","canonical_url":"https:\/\/prohoster.info\/es\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"es_ES","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a GnuPG 2.2.17 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u044e\u0447\u0435\u0439 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f GnuPG.","og:url":"https:\/\/prohoster.info\/es\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:16+00:00","article:modified_time":"2019-10-31T19:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36033","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:43:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:51:23","updated":"2026-01-22 01:43:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/36033","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/comments?post=36033"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/posts\/36033\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/media?parent=36033"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/categories?post=36033"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/es\/wp-json\/wp\/v2\/tags?post=36033"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}