Ir public\u0113ts OpenSSH 9.7 izlai\u017e, atv\u0113rt\u0101 klienta un servera realiz\u0101cija SSH 2.0 un SFTP protokolu darb\u012bbai. Ierosin\u0101taj\u0101 versij\u0101 s\u0101kts veikt izmai\u0146as, kas priek\u0161laic\u012bgi nosaka DSA algoritma atsl\u0113gu atbalsta p\u0101rtraukumu. OpenSSH 9.7 pied\u0101v\u0101 opciju izsl\u0113gt DSA kompil\u0101cijas posm\u0101, ta\u010du noklus\u0113juma versija joproj\u0101m saglab\u0101 DSA atbalstu. N\u0101kamaj\u0101 laidien\u0101, kas paredz\u0113ts j\u016bnij\u0101, kompil\u0101cijas re\u017e\u012bms tiks main\u012bts uz DSA izsl\u0113g\u0161anu noklus\u0113jum\u0101, bet 2025. gada s\u0101kum\u0101 DSA realiz\u0101cija tiks piln\u012bb\u0101 iz\u0146emta no koda b\u0101zes. <\/p>\n
DSA atsl\u0113gu lieto\u0161ana tika p\u0101rtraukta jau 2015. gad\u0101, ta\u010du kods DSA atbalsta nodro\u0161in\u0101\u0161anai joproj\u0101m tika veidots noklus\u0113juma re\u017e\u012bm\u0101, \u013caujot atjaunot DSA, izmantojot iestat\u012bjumus. J\u0101piebilst, ka DSA algoritms ir vien\u012bgais oblig\u0101ti \u012bstenojams SSHv2 protokol\u0101. \u0160\u0101ds pras\u012bjums tika iek\u013cauts, jo SSHv2 protokola izstr\u0101des laik\u0101 visi alternat\u012bvie algoritmi bija pak\u013cauti patentu pras\u012bb\u0101m. Kop\u0161 t\u0101 laika situ\u0101cija ir main\u012bjusies, ar RSA saist\u012btie patenti ir beigu\u0161ies, pievienots ECDSA algoritms, kas b\u016btiski p\u0101rsp\u0113j DSA gan veiktsp\u0113jas, gan dro\u0161\u012bbas zi\u0146\u0101, k\u0101 ar\u012b EdDSA, kas ir dro\u0161\u0101ks un \u0101tr\u0101ks nek\u0101 ECDSA. <\/p>\n
Vien\u012bgais faktors, kas mudin\u0101ja turpin\u0101t DSA atbalstu, bija sader\u012bbas saglab\u0101\u0161ana ar novecoju\u0161\u0101m ier\u012bc\u0113m. Pa\u0161reiz\u0113j\u0101s realit\u0101t\u0113s izmaksas, kas saist\u012btas ar b\u012bstam\u0101 DSA algoritma atbalsta turpin\u0101\u0161anu, nav pamatotas, un t\u0101 iz\u0146em\u0161ana stimul\u0113s DSA atbalsta p\u0101rtrauk\u0161anu cit\u0101s SSH realiz\u0101cij\u0101s un kriptogr\u0101fiskaj\u0101s bibliot\u0113k\u0101s. <\/p>\n
Papildus DSA saist\u012btajiem uzlabojumiem jaunaj\u0101 laidien\u0101 tiek pied\u0101v\u0101ts jauns veids, k\u0101 iestat\u012bt laika izsistienus ssh un sshd, aktiviz\u0113jot to, izmantojot 'global' v\u0113rt\u012bbu direkt\u012bv\u0101 ChannelTimeout. Jaunaj\u0101 re\u017e\u012bm\u0101 OpenSSH izseko visus atv\u0113rtos kan\u0101lus un sl\u0113dz tos visus reiz\u0113, ja visos nav bijusi satiksme noteikt\u0101 laika posm\u0101. Piem\u0113ram, kad serverim vienlaic\u012bgi ir atv\u0113rti kan\u0101li SSH sesijai un x11 p\u0101radres\u0113\u0161anai, jaunais re\u017e\u012bms \u013cauj sl\u0113gt abus kan\u0101lus, ja tie nav akt\u012bvi, nevis atsevi\u0161\u0137i izsekojot katra kan\u0101la laika izsistienus. No uzlabojumiem ir ar\u012b iev\u0113rojami uzlabota sader\u012bbas test\u0113\u0161ana ar PuTTY projektu. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0431\u0443\u0434\u0443\u0449\u0435\u043c\u0443 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA. \u0412 OpenSSH 9.7 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f DSA \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438, \u043d\u043e \u0441\u0431\u043e\u0440\u043a\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 DSA \u043f\u043e\u043a\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0430. \u0412 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114258","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 9.7 izlai\u0161ana | ProHoster","description":"Ir public\u0113ts OpenSSH 9.7 izlai\u017e, atv\u0113rt\u0101 klienta un servera realiz\u0101cija SSH 2.0 un SFTP protokolu darb\u012bbai.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-9-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 9.7 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/reliz-openssh-9-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-11T22:25:48+00:00","article:modified_time":"2024-03-11T22:25:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/114258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=114258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/114258\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=114258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=114258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=114258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Avots: opennet.lv<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"