Utgivelsen av OpenSSH 9.7 er publisert, den \u00e5pne implementeringen av klient og server for bruk med SSH 2.0 og SFTP-protokollene. I denne versjonen har det blitt gjort endringer som forbereder en fremtidig avvikling av st\u00f8tten for DSA-n\u00f8kkelbaserte algoritmer. OpenSSH 9.7 gir muligheten til \u00e5 deaktivere DSA under kompilering, men standardbygget beholder fortsatt st\u00f8tte for DSA. I neste utgave, planlagt til juni, vil standardbyggemodus endres til \u00e5 deaktivere DSA, og i begynnelsen av 2025 vil DSA-implementeringen bli fjernet fra kodebasen. <\/p>\n
Bruken av DSA-n\u00f8kler ble som standard avviklet allerede i 2015, men koden for \u00e5 st\u00f8tte DSA l\u00f8p med i standardbygget og tillot \u00e5 gjenopprette DSA via innstillinger. Det er bemerkelsesverdig at DSA-algoritmen er den eneste som er obligatorisk i protokollen SSHv2. Denne forpliktelsen ble lagt til ettersom alle alternative algoritmer var underlagt patenter da protokollen SSHv2 ble opprettet og vedtatt. Siden den gang har situasjonen endret seg, og patenter knyttet til RSA har utl\u00f8pt, algoritmen ECDSA har blitt lagt til, som er betydelig mer effektiv og sikker enn DSA, samt EdDSA, som er sikrere og raskere enn ECDSA. <\/p>\n
Den eneste faktoren for \u00e5 opprettholde st\u00f8tten for DSA har v\u00e6rt behovet for \u00e5 bevare kompatibilitet med utdaterte enheter. I dagens situasjon rettferdiggj\u00f8r ikke kostnadene for \u00e5 fortsette st\u00f8tte for den usikre DSA-algoritmen seg, og dens fjerning vil stimulere til \u00e5 avslutte st\u00f8tten for DSA i andre SSH-implementasjoner og kryptografiske biblioteker. <\/p>\n
I tillegg til endringer knyttet til DSA, introduserer den nye utgiveren en ny type tidsavbrudd i ssh og sshd, som aktiveres ved \u00e5 angi verdien \u00abglobal\u00bb i direktivet ChannelTimeout. I den nye modusen overv\u00e5ker OpenSSH alle \u00e5pne kanaler og lukker dem samtidig hvis det ikke har v\u00e6rt noe trafikk i alle disse over en angitt tidsperiode. For eksempel, n\u00e5r det er \u00e5pnet kanaler til verten for b\u00e5de SSH-\u00f8kt og x11-viderekobling, gj\u00f8r den nye modusen det mulig \u00e5 lukke begge kanalene samtidig hvis de er inaktive, i stedet for \u00e5 overv\u00e5ke tidsavbrudd separat for hver kanal. Blant endringene bemerkes ogs\u00e5 en betydelig forbedring i kompatibilitetstesting med prosjektet PuTTY. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0431\u0443\u0434\u0443\u0449\u0435\u043c\u0443 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA. \u0412 OpenSSH 9.7 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f DSA \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438, \u043d\u043e \u0441\u0431\u043e\u0440\u043a\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 DSA \u043f\u043e\u043a\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0430. \u0412 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114258","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 9.7 utgivelse | ProHoster","description":"OpenSSH 9.7 er utgitt, en \u00e5pen implementering av klient og server for arbeid med SSH 2.0- og SFTP-protokollene.","canonical_url":"https:\/\/prohoster.info\/no\/blog\/news\/reliz-openssh-9-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nn_NO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 9.7 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/no\/blog\/news\/reliz-openssh-9-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-11T22:25:48+00:00","article:modified_time":"2024-03-11T22:25:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/114258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/comments?post=114258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/posts\/114258\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/media?parent=114258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/categories?post=114258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/no\/wp-json\/wp\/v2\/tags?post=114258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"