{"id":101168,"date":"2021-09-02T10:23:16","date_gmt":"2021-09-02T08:23:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-vvodit-novye-trebovaniya-dlya-udalyonnogo-podklyucheniya-k-git"},"modified":"2021-09-02T10:23:16","modified_gmt":"2021-09-02T08:23:16","slug":"github-vvodit-novye-trebovaniya-dlya-udalyonnogo-podklyucheniya-k-git","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/github-vvodit-novye-trebovaniya-dlya-udalyonnogo-podklyucheniya-k-git","title":{"rendered":"GitHub introduce noi cerin\u021be pentru conectarea la distan\u021b\u0103 la Git","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub a anun\u021bat implementarea unor modific\u0103ri \u00een serviciu legate de \u00eent\u0103rirea securit\u0103\u021bii protocolului Git utilizat \u00een timpul opera\u021biunilor git push \u0219i git pull prin SSH sau schema 'git:\/\/'. Conexiunile prin https:\/\/ nu vor fi afectate. Odat\u0103 cu implementarea modific\u0103rilor, pentru a v\u0103 conecta la GitHub prin SSH va fi necesar\u0103 o versiune minim\u0103 OpenSSH 7.2 (lansat\u0103 \u00een 2016) sau PuTTY 0.75 (lansat \u00een mai anul curent). De exemplu, compatibilitatea cu clientul SSH din CentOS 6 \u0219i Ubuntu 14.04, a c\u0103ror suport a fost deja \u00eencheiat, va fi afectat\u0103. <\/p>\n

Modific\u0103rile constau \u00een \u00eencetarea suportului pentru conexiunile necriptate la Git (prin 'git:\/\/') \u0219i \u00eent\u0103rirea cerin\u021belor pentru cheile SSH utilizate pentru a accesa GitHub. GitHub va \u00eenceta suportul pentru toate cheile DSA \u0219i algoritmii SSH dep\u0103\u0219i\u021bi, cum ar fi cifrurile CBC (aes256-cbc, aes192-cbc aes128-cbc) \u0219i HMAC-SHA-1. De asemenea, sunt introduse cerin\u021be suplimentare pentru noile chei RSA (utilizarea SHA-1 va fi interzis\u0103) \u0219i se va implementa suportul pentru cheile gazdelor ECDSA \u0219i Ed25519. <\/p>\n

Modific\u0103rile vor fi implementate treptat. Pe 14 septembrie, vor fi generate noi chei gazd\u0103 ECDSA \u0219i Ed25519. Pe 2 noiembrie, suportul pentru noile chei RSA bazate pe SHA-1 va fi oprit (cheile generate anterior vor continua s\u0103 func\u021bioneze). Pe 16 noiembrie, suportul pentru cheile gazd\u0103 bazate pe algoritmul DSA va fi oprit. Pe 11 ianuarie 2022, ca un experiment, suportul pentru algoritmii SSH \u00eenvechi\u021bi \u0219i posibilitatea de accesare necriptat\u0103 vor fi temporar suspendate. Pe 15 martie, suportul pentru algoritmii vechi va fi dezactivat definitiv. <\/p>\n

De asemenea, se remarc\u0103 c\u0103 \u00een baza de cod OpenSSH a fost introdus\u0103 o modificare care dezactiveaz\u0103 \u00een mod implicit gestionarea cheilor RSA bazate pe hash-ul SHA-1 ('ssh-rsa'). Suportul pentru cheile RSA cu hash-uri SHA-256 \u0219i SHA-512 (rsa-sha2-256\/512) r\u0103m\u00e2ne neschimbat. \u00cencetarea suportului pentru cheile 'ssh-rsa' este determinat\u0103 de cre\u0219terea eficien\u021bei atacurilor de coliziune cu prefix dat (costul ob\u021binerii unei coliziuni este estimat la aproximativ 50 de mii de dolari). Pentru a verifica utilizarea ssh-rsa \u00een sistemele dvs., pute\u021bi \u00eencerca s\u0103 v\u0103 conecta\u021bi prin ssh cu op\u021biunea '-oHostKeyAlgorithms=-ssh-rsa'.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Git, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 git push \u0438 git pull \u0447\u0435\u0440\u0435\u0437 SSH \u0438\u043b\u0438 \u0441\u0445\u0435\u043c\u0443 «git:\/\/» (\u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 https:\/\/ \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0435 \u043a\u043e\u0441\u043d\u0443\u0442\u0441\u044f). \u041f\u043e\u0441\u043b\u0435 \u043d\u0430\u0447\u0430\u043b\u0430 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a GitHub \u043f\u043e SSH \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c OpenSSH \u0432\u0435\u0440\u0441\u0438\u0438 7.2 (\u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0432 2016 \u0433\u043e\u0434\u0443) \u0438\u043b\u0438 PuTTY […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101168","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub introduce noi cerin\u021be pentru conectarea la distan\u021b\u0103 la Git | ProHoster","description":"GitHub a anun\u021bat implementarea de modific\u0103ri \u00een serviciu legate de \u00eembun\u0103t\u0103\u021birea protec\u021biei protocolului Git, utilizat \u00een timpul efectu\u0103rii opera\u021biunilor git push \u0219i git pull prin SSH sau schema \"git:\/\/\" (acces\u0103rile prin https:\/\/.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/github-vvodit-novye-trebovaniya-dlya-udalyonnogo-podklyucheniya-k-git","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0432\u0432\u043e\u0434\u0438\u0442 \u043d\u043e\u0432\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a Git | ProHoster","og:description":"GitHub \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u0435\u043c \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Git, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 git push \u0438 git pull \u0447\u0435\u0440\u0435\u0437 SSH \u0438\u043b\u0438 \u0441\u0445\u0435\u043c\u0443 "git:\/\/" (\u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0447\u0435\u0440\u0435\u0437 https:\/\/.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/github-vvodit-novye-trebovaniya-dlya-udalyonnogo-podklyucheniya-k-git","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-02T08:23:16+00:00","article:modified_time":"2021-09-02T08:23:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101168","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-02 08:32:05","updated":"2022-10-03 23:27:13","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101168","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=101168"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101168\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=101168"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=101168"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=101168"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}