Kutulutsidwa kwa ma seva a NTP NTPsec 1.2.0 ndi Chrony 4.0 mothandizidwa ndi protocol yotetezedwa ya NTS

Komiti ya IETF (Internet Engineering Task Force) yomwe imapanga ma protocol ndi zomangamanga pa intaneti, anamaliza kupanga RFC ya protocol ya NTS (Network Time Security) ndikusindikiza zomwe zikugwirizana ndi chizindikirocho. RFC 8915. RFC inalandira udindo wa "Proposed Standard", pambuyo pake ntchito idzayamba kupatsa RFC udindo wa ndondomeko yowonongeka (Draft Standard), zomwe zikutanthauza kukhazikika kwathunthu kwa protocol ndikuganizira ndemanga zonse zomwe zaperekedwa.

Kukhazikika kwa NTS ndi gawo lofunikira pakuwongolera chitetezo cha ntchito zolumikizana nthawi ndikuteteza ogwiritsa ntchito kuti asawukidwe omwe amatsanzira seva ya NTP yomwe kasitomala amalumikizana. Kuwongolera kwa zigawenga pokhazikitsa nthawi yolakwika kungagwiritsidwe ntchito kusokoneza chitetezo cha ma protocol ena odziwa nthawi, monga TLS. Mwachitsanzo, kusintha nthawi kungayambitse kutanthauzira molakwika kwa deta yokhudza kutsimikizika kwa ziphaso za TLS. Mpaka pano, NTP ndi symmetric encryption ya njira zoyankhulirana sizinapangitse kuti zitsimikizire kuti kasitomala amalumikizana ndi chandamale osati seva ya NTP yowonongeka, ndipo kutsimikizika kwakukulu sikunayambe kufalikira chifukwa ndizovuta kwambiri kukonza.

NTS imagwiritsa ntchito zinthu zamtundu wachinsinsi wa anthu (PKI) ndipo imalola kugwiritsa ntchito TLS ndi AEAD (Authenticated Encryption with Associated Data) kuti iteteze kuyanjana kwamakasitomala pogwiritsa ntchito NTP (Network Time Protocol). NTS imaphatikizapo ma protocol awiri osiyana: NTS-KE (NTS Key Establishment yosamalira kutsimikizika koyambirira ndi kukambirana kofunikira pa TLS) ndi NTS-EF (NTS Extension Fields, yomwe imayang'anira kubisa ndi kutsimikizira gawo la kulunzanitsa nthawi). NTS imawonjezera magawo angapo okulirapo pamapaketi a NTP ndikusunga zidziwitso zonse za boma kumbali ya kasitomala pogwiritsa ntchito makina a cookie. Network port 4460 imaperekedwa kuti ikonze zolumikizira kudzera pa protocol ya NTS.

Kutulutsidwa kwa ma seva a NTP NTPsec 1.2.0 ndi Chrony 4.0 mothandizidwa ndi protocol yotetezedwa ya NTS

Kukhazikitsa koyamba kwa NTS yokhazikika kumaperekedwa m'mabuku omwe asindikizidwa posachedwa NTPsec 1.2.0 и Chrony 4.0. Chrony imapereka kasitomala wodziyimira pawokha wa NTP ndi kukhazikitsa kwa seva komwe kumagwiritsidwa ntchito kulumikiza nthawi pamagawidwe osiyanasiyana a Linux, kuphatikiza Fedora, Ubuntu, SUSE/openSUSE, ndi RHEL/CentOS. NTPsec ikukula motsogozedwa ndi Eric S. Raymond ndipo ndi foloko ya kukhazikitsidwa kwa protocol ya NTPv4 (NTP Classic 4.3.34), yoyang'ana pakukonzanso maziko a code kuti apititse patsogolo chitetezo (kuyeretsa code yakale, kugwiritsa ntchito njira zopewera kuukira ndi kutetezedwa. ntchito zogwirira ntchito ndi kukumbukira ndi zingwe).

Source: opennet.ru

Kuwonjezera ndemanga