{"id":121004,"date":"2024-12-17T15:46:01","date_gmt":"2024-12-17T13:46:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia"},"modified":"2024-12-17T15:46:01","modified_gmt":"2024-12-17T13:46:01","slug":"pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","title":{"rendered":"Esimene stabiilne v\u00e4ljaanne PGP-t\u00f6\u00f6riistade komplektist sq project Sequoialt","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

P\u00e4rast seitsme aasta pikkust arendust on valmis saanud k\u00e4surea t\u00f6\u00f6riistade komplekt sq 1.0, mis on m\u00f5eldud OpenPGP artefaktide t\u00f6\u00f6tlemiseks. T\u00f6\u00f6riistade komplekti on valmistanud Sequoia PGP projekt, mis arendab ka funktsioonide raamatukogu OpenPGP standardi (RFC-4880) rakendamiseks. V\u00e4ljaanne 1.0 m\u00e4rgib projekti esimest stabiilset v\u00e4ljaannet, mis t\u00e4histab koodibaasi stabiliseerimist ja muudatuste l\u00f5petamist, mis rikkusid \u00fchilduvust. Kood on kirjutatud Rust keeles ja jagatakse GPLv2+ litsentsi alusel. <\/p>\n

T\u00f6\u00f6riistade komplekt on lisatud Red Hat Enterprise Linux 10 jagamisse, et olla alternatiiv GnuPG-le, ja seda kasutatakse PGP t\u00f6\u00f6tlemiseks DNF ja RPM pakihaldurites, samuti kasutatakse seda vaikimisi eksperimenteerus APT pakihalduri haru puhul, kui s\u00fcsteemis on Sequoia komponente. Sequoia arendajate loodud v\u00f5tme server Hagrid on kasutusel keys.openpgp.org teenuses. <\/p>\n

Sequoia projekt loodi kolme GnuPG arendaja poolt g10code'ist, mis spetsialiseerub kr\u00fcptos\u00fcsteemide auditile ja GnuPG laienduste arendamisele. Projekti eesm\u00e4rgiks on arhitektuuri \u00fclevaatamine ning uute tehnoloogiate rakendamine koodibaasi turvalisuse ja usaldusv\u00e4\u00e4rsuse suurendamiseks. Lisaks Rust keele kasutamisele m\u00e4lu viga t\u00f5en\u00e4osuse v\u00e4hendamiseks on Sequoias rakendatud lisakaitsevead API tasemel. N\u00e4iteks ei v\u00f5imalda API juhuslikult ekspordida salajase v\u00f5tme materjali ja kaitseb oluliste toimingute vahelej\u00e4tmise eest digitaalsete allkirjade v\u00e4rskendamisel. T\u00e4iendavaks isolatsiooniks kasutatakse teenuste eraldamist eraldi protsessides, mis t\u00f6\u00f6tlevad avatud ja suletud v\u00f5tmeid. <\/p>\n

Lisaks andmete kr\u00fcpteerimisele, elektrooniliste allkirjade t\u00f6\u00f6tlemisele ja v\u00f5tmete haldamise funktsioonidele, mis sarnanevad gpg v\u00f5imetega, pakub sq ka detsentraliseeritud avalike v\u00f5tmete infrastruktuuri (PKI). PKI-d kasutatakse sertifikaatide ja s\u00f5numite autentimiseks ning see v\u00f5imaldab veenduda, et saadud avalik v\u00f5ti ja vastu v\u00f5etud s\u00f5num on seotud nimetatud autoriga, mitte ei ole loodud pahatahtliku isiku poolt. <\/p>\n

Sertifikaadiga laadimisel aadressilt keys.openpgp.org v\u00f5i m\u00f5nelt muult v\u00f5tme serverilt, salvestab utiliit sq automaatselt sertifikaadi teabe kohalikule s\u00fcsteemile ja kasutab seda teavet j\u00e4rgnevate toimingute k\u00e4igus vale sertifikaatide tuvastamiseks. Tuleb m\u00e4rkida, et rakendatud s\u00fcsteemi saab kasutada sarnase jaotatud sertifitseerimiskeskuse (CA) loomiseks, mis katab erinevad v\u00f5tme serverid. <\/p>\n

N\u00e4iteks enne Qubesi OS-i laaditud kogumite autentimise kontrollimist v\u00f5ib kasutaja esmalt kontrollida Qubesi sertifikaati, mis on saadaval projekti Qubes peamiselt v\u00f5tme serverilt: sq network search https:\/\/keys.qubes-os.org\/keys\/qubes-release-4.2-signing-key.asc <\/p>\n

Antud k\u00e4sk laadib sertifikaadi serverist keys.qubes-os.org ja seej\u00e4rel kontrollib selle olemasolu tuntud v\u00f5tme serverites, nagu keys.openpgp.org ja keyserver.ubuntu.com, v\u00f5i \u00fcritab seda hankida WKD (Web Key Directory) ja DANE (DNS-Based Authentication of Named Entities) mehhanismide abil. Seej\u00e4rel v\u00f5rdleb utiliit saadud sertifikaate ja kui need on seotud sama omanikuga, pakub see kasutada k\u00e4sku «sq pki link add», et salvestada sertifikaat lokaals\u00fcsteemi edasiseks kontrollimiseks. P\u00e4rast salvestamist loetakse sertifikaat usaldusv\u00e4\u00e4rseks ja montaa\u017eite allalaadimiseks, mille usaldusv\u00e4\u00e4rsust on kontrollitud, piisab k\u00e4sklusest: sq download —signature-url https:\/\/mirrors.edge.kernel.org\/qubes\/iso\/Qubes-R4.2.3-x86_64.iso.asc —url https:\/\/mirrors.edge.kernel.org\/qubes\/iso\/Qubes-R4.2.3-x86_64.iso —output \/tmp\/qubes.iso
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0441\u043b\u0435 \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 sq 1.0, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438 OpenPGP. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Sequoia PGP, \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u043c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 OpenPGP (RFC-4880). \u0412\u044b\u043f\u0443\u0441\u043a 1.0 \u043e\u0442\u043c\u0435\u0447\u0435\u043d \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0438\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c. \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121004","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Esimene stabiilne PGP t\u00f6\u00f6riistade sq v\u00e4ljaanne Sequoia projektilt | ProHoster","description":"P\u00e4rast seitsme aasta arendust on v\u00e4lja antud k\u00e4surea t\u00f6\u00f6riista sq 1.0 versioon, mis on m\u00f5eldud OpenPGP artefaktide haldamiseks.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 PGP-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f sq \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Sequoia | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 sq 1.0, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438 OpenPGP.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-17T13:46:01+00:00","article:modified_time":"2024-12-17T13:46:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121004","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 08:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:57:19","updated":"2026-01-23 08:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121004","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=121004"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/121004\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=121004"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=121004"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=121004"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}