{"id":96270,"date":"2020-10-10T01:42:13","date_gmt":"2020-10-09T23:42:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts"},"modified":"2020-10-10T01:42:13","modified_gmt":"2020-10-09T23:42:13","slug":"vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","title":{"rendered":"NTP-serverite NTPsec 1.2.0 ja Chrony 4.0 v\u00e4ljalase, mis toetab kaitstud protokolli NTS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

IETF (Internet Engineering Task Force) komitee, mis tegeleb interneti protokollide ja arhitektuuri arendamisega, on l\u00f5petanud<\/a><\/noindex> NTS (Network Time Security) protokolli jaoks RFC v\u00e4ljat\u00f6\u00f6tamine ja seotud spetsifikatsiooni avaldamine identifikaatoriga RFC 8915<\/a><\/noindex>. RFC sai staatuse «Ettekande standardina», p\u00e4rast mida algab t\u00f6\u00f6 RFC staatuse andmiseks kavandatud standardina (Draft Standard), mis t\u00e4hendab tegelikult protokolli t\u00e4ielikku stabiliseerimist ja k\u00f5igi esitatud m\u00e4rkuste arvestamist. <\/p>\n

NTS-i standardiseerimine on oluline samm ajas\u00fcnkroonimise teenuste turvalisuse parandamiseks ja kasutajate kaitsmiseks NTP-serverit, millega klient \u00fchendub, vale esitlemise r\u00fcnnakute eest. \u00dcksikasjalikud r\u00fcnnakud vale aja seadistamisega v\u00f5ivad h\u00e4irida teiste ajast s\u00f5ltuvate protokollide, nagu TLS, turvalisust. N\u00e4iteks vale aja seadmine v\u00f5ib viia ekslike t\u00f5lgendusteni TLS-sertifikaatide tegevuste kohta. Seni ei ole NTP ja simmeetriline sidemeede suutnud tagada, et klient suhtleb \u00f5ige, mitte vale NTP-serveriga, kuna v\u00f5tme autentimine pole laialdaselt levinud, kuna see on liiga keeruline seadistada.<\/p>\n

NTS kasutab avalike v\u00f5tmete infrastruktuuri (PKI) elemente ning v\u00f5imaldab TLS-i ja autentimisega kr\u00fcpteerimist AEAD (Authenticated Encryption with Associated Data) NTP (Network Time Protocol) protokolli kaudu kliendi ja serveri vaheline suhtlemine kr\u00fcpteerida. NTS h\u00f5lmab kahte eraldi protokolli: NTS-KE (NTS Key Establishment, mis tegeleb algse autentimise ja v\u00f5tme kokkulepe TLS-i tasemel) ja NTS-EF (NTS Extension Fields, mis vastutab aja s\u00fcnkroniseerimise seansi kr\u00fcpteerimise ja autentimise eest). NTS lisab NTP-pakettidesse mitmeid laiendatud v\u00e4lju ning s\u00e4ilitab kogu staatuse teabe ainult kliendi poolel, kasutades k\u00fcpsiste edastusmehhanismi. NTS-i protokolli \u00fchenduste t\u00f6\u00f6tlemiseks on m\u00e4\u00e4ratud v\u00f5rguport 4460.<\/p>\n

\"NTP-serverite<\/a><\/noindex><\/center><\/p>\n

Standardiseeritud NTS-i esimesed teostused pakuti hiljuti avaldatud v\u00e4ljaannetes NTPsec 1.2.0<\/a><\/noindex> ja \u0421hrony 4.0<\/a><\/noindex>. \u0421hrony<\/a><\/noindex> pakub s\u00f5ltumatut NTP-klientide ja -serverite teostust, mida kasutatakse t\u00e4pse aja s\u00fcnkroniseerimiseks erinevates Linuxi distributsioonides, sealhulgas Fedora, Ubuntu, SUSE\/openSUSE ja RHEL\/CentOS. NTPsec<\/a><\/noindex> arendatakse<\/a><\/noindex> Eric Reymondi (Eric S. Raymond) juhtimisel ja on NTPv4 protokolli (NTP Classic 4.3.34) viidatud teostuse haru, mis keskendub koodibaasi \u00fcmberkujundamisele turvalisuse suurendamiseks (vanade koodide puhastamine, r\u00fcnnakute ennetamise meetodite rakendamine, ning m\u00e4lu ja stringidega t\u00f6\u00f6tamiseks kaitstud funktsioonide kasutamine).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 RFC \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS (Network Time Security) \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0438\u043c \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c RFC 8915. RFC \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0442\u0430\u0442\u0443\u0441 «\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430», \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u043d\u0451\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u043e \u043f\u0440\u0438\u0434\u0430\u043d\u0438\u044e RFC \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u0447\u0435\u0440\u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 (Draft Standard), \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u043d\u0443\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0438 \u0443\u0447\u0451\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":96271,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-96270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 NTP-seerverite NTPsec 1.2.0 ja \u0421hrony 4.0 v\u00e4ljalaskmine koos toetusega kaitstud protokollile NTS | ProHoster","description":"IETF (Internet Engineering Task Force) komitee, mis tegeleb interneti protokollide ja arhitektuuri arenguga, on l\u00f5petanud NTS (Network Time Security) protokolli jaoks RFC v\u00e4ljat\u00f6\u00f6tamise ning avaldanud seotud spetsifikatsiooni identifikaatoriga RFC 8915. RFC sai 'Ehk soovitusliku standardi' staatuse, p\u00e4rast mida algab t\u00f6\u00f6 RFC staatuse mustandi standardina saavutamiseks, mis t\u00e4hendab protokolli t\u00e4ielikku stabiliseerimist ja arvestamist","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a NTP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 NTPsec 1.2.0 \u0438 \u0421hrony 4.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS | ProHoster","og:description":"\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 RFC \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS (Network Time Security) \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0438\u043c \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c RFC 8915. RFC \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0442\u0430\u0442\u0443\u0441 "\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430", \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u043d\u0451\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u043e \u043f\u0440\u0438\u0434\u0430\u043d\u0438\u044e RFC \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u0447\u0435\u0440\u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 (Draft Standard), \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u043d\u0443\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0438 \u0443\u0447\u0451\u0442","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-09T23:42:13+00:00","article:modified_time":"2020-10-09T23:42:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96270","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:47:23","updated":"2022-10-01 20:34:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/96270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=96270"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/96270\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/96271"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=96270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=96270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=96270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}