{"id":96270,"date":"2020-10-10T01:42:13","date_gmt":"2020-10-09T23:42:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts"},"modified":"2020-10-10T01:42:13","modified_gmt":"2020-10-09T23:42:13","slug":"vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","title":{"rendered":"NTP-serverite NTPsec 1.2.0 ja \u0421hrony 4.0 v\u00e4ljaandmine, mis toetab turvalist protokolli NTS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

IETF (Internet Engineering Task Force) komitee, mis tegeleb interneti protokollide ja arhitektuuri arendamisega, on l\u00f5petanud<\/a><\/noindex> NTS (Network Time Security) protokolli jaoks RFC koostamine ja seotud spetsifikatsiooni avaldamine identifikaatoriga RFC 8915<\/a><\/noindex>. RFC sai staatuse «Eetteatise standard», p\u00e4rast mida algab t\u00f6\u00f6, et anda RFC-le mustandi standardi (Draft Standard) staatus, mis t\u00e4hendab protokolli t\u00e4ielikku stabiliseerimist ja k\u00f5igi esitatud m\u00e4rkuste arvestamist. <\/p>\n

NTS-i standardiseerimine on oluline samm t\u00e4pset aega s\u00fcnkroonivate teenuste turvalisuse t\u00f5stmiseks ja kasutajate kaitsmiseks NTP-serveri simuleerimise r\u00fcnnakute eest, millega klient \u00fchendub. Kurjategijate manipuleerimine vale ajaga v\u00f5ib kahjustada teiste protokollide turvalisust, mis arvestavad aega, n\u00e4iteks TLS. N\u00e4iteks v\u00f5ib aja muutmine p\u00f5hjustada vale t\u00f5lgendamise TLS-sertifikaatide kehtivuse andmetes. Siiani ei ole NTP ja s\u00fcmmeetriline kanalite kr\u00fcpteerimine v\u00f5imaldanud tagada, et klient suhtleb sihtserveriga, mitte vale NTP-serveriga, ja v\u00f5tmeautentimine ei ole levinud, kuna see on liiga keeruline seadistada.<\/p>\n

NTS kasutab avalike v\u00f5tmete infrastruktuuri (PKI) elemente ja v\u00f5imaldab kasutada TLS-i ning autentitud kr\u00fcpteerimist AEAD (Authenticated Encryption with Associated Data) NTP-protokolli (Network Time Protocol) kaudu kliendi ja serveri vahelise suhtluse kr\u00fcptograafiliseks kaitseks. NTS sisaldab kahte eraldi protokolli: NTS-KE (NTS v\u00f5tme loomine, et t\u00f6\u00f6delda algautentimist ja v\u00f5tmete kokkulepet TLS-i peal) ja NTS-EF (NTS laiendatud v\u00e4ljad, mis vastutavad aja s\u00fcnkroniseerimise seansi kr\u00fcpteerimise ja autentimise eest). NTS lisab NTP-pakettidesse mitu t\u00e4iendavat v\u00e4lja ja hoiab kogu olekuinfot ainult kliendi poolel, kasutades k\u00fcpsise edastamise mehhanismi. NTS-protokolli kaudu \u00fchenduste t\u00f6\u00f6tlemiseks on eraldatud v\u00f5rguport 4460.<\/p>\n

\"NTP-serverite<\/a><\/noindex><\/center><\/p>\n

Esimesed standardiseeritud NTS-i teostused on v\u00e4lja pakutud hiljuti avaldatud v\u00e4ljaannetes NTPsec 1.2.0<\/a><\/noindex> ja \u0421hrony 4.0<\/a><\/noindex>. \u0421hrony<\/a><\/noindex> on iseseisev NTP-klienti ja serveri rakendus, mida kasutatakse t\u00e4psete aja s\u00fcnkroniseerimiseks erinevates Linuxi distributsioonides, sealhulgas Fedora, Ubuntu, SUSE\/openSUSE ja RHEL\/CentOS. NTPsec<\/a><\/noindex> areneb<\/a><\/noindex> Eric S. Raymondi juhtimisel ja on NTPv4 (NTP Classic 4.3.34) protokolli standardrakenduse fork, mis keskendub koodibaasi \u00fcmbertegemisele turvalisuse suurendamiseks (vana koodi on puhastatud, r\u00fcnnakute ennetamise meetodeid on rakendatud ja m\u00e4lu ning stringide t\u00f6\u00f6tlemiseks on kasutusele v\u00f5etud turvalised funktsioonid).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 RFC \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS (Network Time Security) \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043d\u0438\u043c \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c RFC 8915. RFC \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0441\u0442\u0430\u0442\u0443\u0441 «\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430», \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043d\u0430\u0447\u043d\u0451\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u043f\u043e \u043f\u0440\u0438\u0434\u0430\u043d\u0438\u044e RFC \u0441\u0442\u0430\u0442\u0443\u0441\u0430 \u0447\u0435\u0440\u043d\u043e\u0432\u043e\u0433\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 (Draft Standard), \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043f\u043e\u043b\u043d\u0443\u044e \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 \u0438 \u0443\u0447\u0451\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":96271,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-96270","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V\u00e4ljaandmine NTP-serverite NTPsec 1.2.0 ja Chrony 4.0, mis toetavad turvalist protokolli NTS | ProHoster","description":"IETF (Internet Engineering Task Force) komitee, mis tegeleb interneti protokollide ja arhitektuuri arendamisega, on l\u00f5petanud.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a NTP-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 NTPsec 1.2.0 \u0438 \u0421hrony 4.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 NTS | ProHoster","og:description":"\u041a\u043e\u043c\u0438\u0442\u0435\u0442 IETF (Internet Engineering Task Force), \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0438 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u0437\u0430\u0432\u0435\u0440\u0448\u0438\u043b.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-ntp-serverov-ntpsec-1-2-0-i-shrony-4-0-s-podderzhkoj-zashhishhyonnogo-protokola-nts","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-09T23:42:13+00:00","article:modified_time":"2020-10-09T23:42:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"96270","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:47:23","updated":"2022-10-01 20:34:45","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/96270","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=96270"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/96270\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/96271"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=96270"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=96270"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=96270"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}