{"id":36033,"date":"2019-10-31T22:09:16","date_gmt":"2019-10-31T19:09:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej\/"},"modified":"2019-10-31T22:09:16","modified_gmt":"2019-10-31T19:09:16","slug":"vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","title":{"rendered":"Publication de GnuPG 2.2.17 avec des modifications pour contrer les attaques sur les serveurs de cl\u00e9s","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Publi\u00e9<\/a><\/noindex> publication de l'outil GnuPG 2.2.17<\/a><\/noindex> (GNU Privacy Guard), conforme aux normes OpenPGP (RFC-4880<\/a><\/noindex>) et S\/MIME, et fournissant des utilitaires pour le chiffrement des donn\u00e9es, le travail avec des signatures \u00e9lectroniques, la gestion des cl\u00e9s et l'acc\u00e8s aux d\u00e9p\u00f4ts de cl\u00e9s publics. Rappelons que la branche GnuPG 2.2 est positionn\u00e9e comme une version en d\u00e9veloppement, o\u00f9 de nouvelles fonctionnalit\u00e9s continuent d'\u00eatre ajout\u00e9es, tandis que la branche 2.1 ne permet que des corrections de bogues.<\/p>\n

La nouvelle version propose des mesures pour contrer l'attaque sur les serveurs de cl\u00e9s<\/a><\/noindex>, entra\u00eenant un blocage de GnuPG et rendant impossible la poursuite de son utilisation jusqu'\u00e0 la suppression du certificat probl\u00e9matique de la cl\u00e9 locale ou la recr\u00e9ation du magasin de certificats \u00e0 partir de cl\u00e9s publiques v\u00e9rifi\u00e9es. La protection ajout\u00e9e repose sur l'ignorance par d\u00e9faut de toutes les signatures num\u00e9riques tierces des certificats obtenues \u00e0 partir des serveurs de stockage de cl\u00e9s. Rappelons que tout utilisateur peut ajouter sa signature num\u00e9rique pour n'importe quel certificat sur le serveur de stockage de cl\u00e9s, ce qui est utilis\u00e9 par des malfaiteurs pour cr\u00e9er pour le certificat de la victime un nombre \u00e9norme de telles signatures (plus de cent mille), dont le traitement perturbe le fonctionnement normal de GnuPG.<\/p>\n

L'ignorance des signatures num\u00e9riques tierces est r\u00e9gie par l'option \u00ab self-sigs-only \u00bb, qui permet de t\u00e9l\u00e9charger uniquement les signatures de leurs cr\u00e9ateurs pour les cl\u00e9s. Pour r\u00e9tablir le comportement ancien, la configuration \u00ab keyserver-options no-self-sigs-only,no-import-clean \u00bb peut \u00eatre ajout\u00e9e dans gpg.conf. Si, au cours du fonctionnement, l'importation d'un certain nombre de blocs provoque un d\u00e9bordement du stockage local (pubring.kbx), GnuPG active automatiquement le mode d'ignorance des signatures num\u00e9riques (\u00ab self-sigs-only,import-clean \u00bb) au lieu d'afficher une erreur. <\/p>\n

Pour mettre \u00e0 jour les cl\u00e9s en utilisant le m\u00e9canisme Web Key Directory<\/a><\/noindex> (WKD) une option \u00ab \u2014locate-external-key \u00bb a \u00e9t\u00e9 ajout\u00e9e, qui peut \u00eatre utilis\u00e9e pour recr\u00e9er le stockage de certificats \u00e0 partir de cl\u00e9s publiques v\u00e9rifi\u00e9es. Lors de l'ex\u00e9cution de l'op\u00e9ration \u00ab \u2014auto-key-retrieve \u00bb, le m\u00e9canisme WKD est d\u00e9sormais pr\u00e9f\u00e9r\u00e9 aux serveurs de cl\u00e9s. L'essence du fonctionnement de WKD consiste \u00e0 placer les cl\u00e9s publiques sur le web, en les liant au domaine sp\u00e9cifi\u00e9 dans l'adresse e-mail. Par exemple, pour l'adresse \u00ab test@example.com \u00bb, la cl\u00e9 peut \u00eatre t\u00e9l\u00e9charg\u00e9e via le lien \u00ab https:\/\/example.com\/.well-known\/openpgpkey\/hu\/183d7d5ab73cfceece9a5594e6039d5a \u00bb.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f GnuPG 2.2.17 (GNU Privacy Guard), \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c\u0438 OpenPGP (RFC-4880) \u0438 S\/MIME, \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u044f\u043c\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u043c \u043a\u043b\u044e\u0447\u0435\u0439. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432\u0435\u0442\u043a\u0430 GnuPG 2.2 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432\u044b\u043f\u0443\u0441\u043a, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0432 \u0432\u0435\u0442\u043a\u0435 2.1 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36033","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Publication de GnuPG 2.2.17 avec des modifications pour contrer les attaques sur les serveurs de cl\u00e9s | ProHoster","description":"La sortie de l'outil GnuPG a \u00e9t\u00e9 publi\u00e9e.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a GnuPG 2.2.17 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u044e\u0447\u0435\u0439 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f GnuPG.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:16+00:00","article:modified_time":"2019-10-31T19:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36033","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:43:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:51:23","updated":"2026-01-22 01:43:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/36033","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=36033"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/36033\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=36033"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=36033"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=36033"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}