A fost lansat\u0103 versiunea OpenSSH 8.8, o implementare deschis\u0103 a clientului \u0219i serverului pentru a lucra cu protocoalele SSH 2.0 \u0219i SFTP. Aceast\u0103 versiune se remarc\u0103 prin dezactivarea, prin defect, a posibilit\u0103\u021bii de a utiliza semn\u0103turi digitale bazate pe chei RSA cu hash SHA-1 («ssh-rsa»). <\/p>\n
\u00cencetarea suportului pentru semn\u0103turile «ssh-rsa» este determinat\u0103 de cre\u0219terea eficien\u021bei atacurilor de coliziune cu prefix dat (costul de a genera o coliziune este estimat la aproximativ 50 de mii de dolari). Pentru a verifica utilizarea ssh-rsa \u00een sistemele dvs., pute\u021bi \u00eencerca s\u0103 v\u0103 conecta\u021bi prin ssh cu op\u021biunea «-oHostKeyAlgorithms=-ssh-rsa». Suportul pentru semn\u0103turile RSA cu hash-uri SHA-256 \u0219i SHA-512 (rsa-sha2-256\/512), care sunt acceptate din OpenSSH 7.2, a r\u0103mas neschimbat. <\/p>\n
\u00cen majoritatea cazurilor, \u00eencetarea suportului pentru «ssh-rsa» nu va necesita ac\u021biuni manuale din partea utilizatorilor, deoarece \u00een OpenSSH, setarea UpdateHostKeys a fost activat\u0103 \u00een mod implicit, permi\u021b\u00e2nd clien\u021bilor s\u0103 treac\u0103 automat la algoritmi mai fiabili. Pentru migrare se aplic\u0103 extensia protocolului «hostkeys@openssh.com», care permite server<\/a> dup\u0103 autentificare, s\u0103 informeze clientul despre toate cheia disponibil\u0103 ale gazdelor. \u00cen cazul \u00een care se conecteaz\u0103 la gazde cu versiuni foarte vechi de OpenSSH, pe partea clientului, se poate restabili op\u021bional posibilitatea de a utiliza semn\u0103turile «ssh-rsa», ad\u0103ug\u00e2nd \u00een ~\/.ssh\/config: Host nume_vechi_gazd\u0103 HostkeyAlgorithms +ssh-rsa \tPubkeyAcceptedAlgorithms +ssh-rsa <\/p>\n Noua versiune a rezolvat, de asemenea, o problem\u0103 de securitate, cauzat\u0103 de faptul c\u0103 \u00een sshd, \u00eencep\u00e2nd cu lansarea OpenSSH 6.2, grupul de utilizatori nu era ini\u021bializat corect la executarea comenzilor specificate \u00een directivele AuthorizedKeysCommand \u0219i AuthorizedPrincipalsCommand. Directivele specificate ar trebui s\u0103 asigure executarea comenzilor de c\u0103tre un alt utilizator, dar, \u00een realitate, acestea mo\u0219teneau lista grupurilor utilizate la pornirea sshd. Poten\u021bial, un astfel de comportament, \u00een prezen\u021ba unor set\u0103ri sistemice specifice, permitea procesului lansat s\u0103 dob\u00e2ndeasc\u0103 privilegii suplimentare \u00een sistem. <\/p>\n \u00cen nota de lansare a noului release a fost publicat\u0103 \u0219i o avertizare privind inten\u021bia de a schimba implicit utilitarul scp pentru a folosi SFTP \u00een locul protocolului \u00eenvechit SCP\/RCP. SFTP utilizeaz\u0103 metode de gestionare a numelui mai predictibile \u0219i nu folose\u0219te procesarea de glob pentru numele fi\u0219ierelor prin shell pe partea cealalt\u0103 a host-ului, ceea ce creeaz\u0103 probleme de securitate. \u00cen special, atunci c\u00e2nd se aplic\u0103 SCP \u0219i RCP serverul<\/a> decide ce fi\u0219iere \u0219i directoare s\u0103 trimit\u0103 clientului, iar clientul doar verific\u0103 corectitudinea numelui obiectelor returnate, ceea ce, \u00een absen\u021ba unor verific\u0103ri adecvate pe partea clientului, permite serverului s\u0103 transmit\u0103 alte nume de fi\u0219iere, diferite de cele solicitate. Protocolul SFTP nu are aceste probleme, dar nu suport\u0103 expunerea c\u0103ilor speciale, cum ar fi «~». Pentru a remedia aceast\u0103 diferen\u021b\u0103, \u00een lansarea anterioar\u0103 OpenSSH, a fost propus\u0103 o nou\u0103 extensie a protocolului SFTP pentru a expune c\u0103ile ~ \u0219i ~user\/. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.8, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u0435\u043d \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 RSA-\u043a\u043b\u044e\u0447\u0435\u0439 \u0441 \u0445\u044d\u0448\u0435\u043c SHA-1 («ssh-rsa»). \u041f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 «ssh-rsa» \u043e\u0431\u0443\u0441\u043b\u043e\u0432\u043b\u0435\u043d\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u043e\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0441 \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u043c \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c (\u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u0438 \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0432 50 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432). \u0414\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101430","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea OpenSSH 8.8 cu dezactivarea suportului pentru semn\u0103turi digitale rsa-sha | ProHoster","description":"A fost lansat\u0103 versiunea OpenSSH 8.8, o implementare deschis\u0103 a clientului \u0219i serverului pentru protocolul SSH 2.0 \u0219i SFTP.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-8-8-s-otklyucheniem-podderzhki-czifrovyh-podpisej-rsa-sha","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.8 \u0441 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 rsa-sha | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.8, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-8-8-s-otklyucheniem-podderzhki-czifrovyh-podpisej-rsa-sha","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-26T20:22:36+00:00","article:modified_time":"2021-09-26T20:22:36+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101430","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-26 20:28:50","updated":"2026-02-09 21:42:00","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101430","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=101430"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101430\/revisions"}],"predecessor-version":[{"id":172943,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101430\/revisions\/172943"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=101430"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=101430"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=101430"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"