{"id":36033,"date":"2019-10-31T22:09:16","date_gmt":"2019-10-31T19:09:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej\/"},"modified":"2019-10-31T22:09:16","modified_gmt":"2019-10-31T19:09:16","slug":"vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","title":{"rendered":"Wydanie GnuPG 2.2.17 z poprawkami do zwalczania atak\u00f3w na serwery kluczy","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/lists.gnupg.org\/pipermail\/gnupg-announce\/2019q3\/000439.html\">Opublikowano<\/a><\/noindex>  wydanie narz\u0119dzi  <noindex><a rel=\"nofollow\" href=\"https:\/\/gnupg.org\/\">GnuPG 2.2.17<\/a><\/noindex> (GNU Privacy Guard), zgodny z normami OpenPGP (<noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc4880\">RFC-4880<\/a><\/noindex>) oraz S\/MIME, dostarczaj\u0105c narz\u0119dzi do szyfrowania danych, obs\u0142ugi podpis\u00f3w elektronicznych, zarz\u0105dzania kluczami oraz dost\u0119pu do publicznych magazyn\u00f3w kluczy. Przypominamy, \u017ce ga\u0142\u0105\u017a GnuPG 2.2 jest pozycjonowana jako rozwijaj\u0105ca si\u0119 wersja, w kt\u00f3rej wci\u0105\u017c dodawane s\u0105 nowe funkcje, natomiast w ga\u0142\u0119zi 2.1 wprowadzane s\u0105 wy\u0142\u0105cznie poprawki.<\/p>\n<p>W nowej wersji zaproponowano \u015brodki przeciwdzia\u0142ania <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51006\">atakom na serwery kluczy<\/a><\/noindex>, prowadz\u0105cym do zawieszenia GnuPG i uniemo\u017cliwiaj\u0105cym dalsz\u0105 prac\u0119 do momentu usuni\u0119cia problematycznego certyfikatu z lokalnego magazynu lub odtworzenia magazynu certyfikat\u00f3w na podstawie zweryfikowanych kluczy publicznych. Nowa ochrona opiera si\u0119 na ca\u0142kowitym ignorowaniu domy\u015blnie wszystkich zewn\u0119trznych podpis\u00f3w cyfrowych certyfikat\u00f3w uzyskanych z serwer\u00f3w przechowywania kluczy. Przypomnijmy, \u017ce ka\u017cdy u\u017cytkownik mo\u017ce doda\u0107 swoj\u0105 podpis cyfrowy do serwera przechowywania kluczy dla dowolnych certyfikat\u00f3w, co jest wykorzystywane przez przest\u0119pc\u00f3w do tworzenia ogromnej liczby takich podpis\u00f3w dla certyfikatu ofiary (ponad sto tysi\u0119cy), co zak\u0142\u00f3ca normalne dzia\u0142anie GnuPG.<\/p>\n<p>Ignorowanie zewn\u0119trznych podpis\u00f3w cyfrowych jest regulowane opcj\u0105 &#171;self-sigs-only&#187;, kt\u00f3ra pozwala na \u0142adowanie tylko w\u0142asnych podpis\u00f3w ich tw\u00f3rc\u00f3w. Aby przywr\u00f3ci\u0107 stare zachowanie, w gpg.conf mo\u017cna doda\u0107 ustawienie &#171;keyserver-options no-self-sigs-only,no-import-clean&#187;. Je\u015bli podczas pracy zostanie zarejestrowany import takiej liczby blok\u00f3w, kt\u00f3ra spowoduje przepe\u0142nienie lokalnego magazynu (pubring.kbx), GnuPG zamiast wy\u015bwietlenia b\u0142\u0119du automatycznie aktywuje tryb ignorowania podpis\u00f3w cyfrowych (&#171;self-sigs-only,import-clean&#187;). <\/p>\n<p>Do aktualizacji kluczy z u\u017cyciem mechanizmu <noindex><a rel=\"nofollow\" href=\"https:\/\/wiki.gnupg.org\/WKD\">Web Key Directory<\/a><\/noindex> (WKD) dodano opcj\u0119 &#171;&#8212;locate-external-key&#187;, kt\u00f3r\u0105 mo\u017cna wykorzysta\u0107 do rekonstrukcji magazynu certyfikat\u00f3w na podstawie zweryfikowanych kluczy publicznych. Podczas wykonywania operacji &#171;&#8212;auto-key-retrieve&#187; mechanizm WKD jest teraz bardziej preferowany ni\u017c serwery kluczy. Idea dzia\u0142ania WKD polega na umieszczaniu kluczy publicznych w sieci web w powi\u0105zaniu z domen\u0105 podan\u0105 w adresie e-mail. Na przyk\u0142ad dla adresu &#171;test@example.com&#187; klucz mo\u017ce by\u0107 pobrany za pomoc\u0105 linku &#171;https:\/\/example.com\/.well-known\/openpgpkey\/hu\/183d7d5ab73cfceece9a5594e6039d5a&#187;.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>\u0179r\u00f3d\u0142o: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51067\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f GnuPG 2.2.17 (GNU Privacy Guard), \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0433\u043e \u0441\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c\u0438 OpenPGP (RFC-4880) \u0438 S\/MIME, \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u044f\u043c\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430\u043c\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u043c \u043a\u043b\u044e\u0447\u0435\u0439. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432\u0435\u0442\u043a\u0430 GnuPG 2.2 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432\u044b\u043f\u0443\u0441\u043a, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438, \u0432 \u0432\u0435\u0442\u043a\u0435 2.1 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36033","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f GnuPG.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"pl_PL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a GnuPG 2.2.17 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u044e\u0447\u0435\u0439 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f GnuPG.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:09:16+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:09:16+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Wydanie GnuPG 2.2.17 z zmianami maj\u0105cymi na celu przeciwdzia\u0142anie atakom na serwery kluczy | ProHoster","description":"Opublikowane wydanie narz\u0119dzi GnuPG.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a GnuPG 2.2.17 \u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0442\u0438\u0432\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043a\u043b\u044e\u0447\u0435\u0439 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f GnuPG.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-gnupg-2-2-17-s-izmeneniyami-dlya-protivostoyaniya-atake-na-servery-klyuchej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:09:16+00:00","article:modified_time":"2019-10-31T19:09:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36033","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 01:43:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:51:23","updated":"2026-01-22 01:43:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/36033","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=36033"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/36033\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=36033"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=36033"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=36033"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}