A fost publicat\u0103 lansarea OpenSSH 9.7, o implementare deschis\u0103 a clientului \u0219i serverului pentru lucrul cu protocoalele SSH 2.0 \u0219i SFTP. \u00cen versiunea propus\u0103, s-au \u00eenceput modific\u0103rile care preced \u00eencet\u0103rii viitoare a suportului pentru cheile bazate pe algoritmul DSA. OpenSSH 9.7 ofer\u0103 o op\u021biune pentru dezactivarea DSA \u00een timpul compil\u0103rii, dar construc\u021bia implicit\u0103 cu suport pentru DSA este p\u0103strat\u0103 deocamdat\u0103. \u00cen urm\u0103toarea lansare, programat\u0103 pentru luna iunie, modul de construc\u021bie va fi schimbat pentru a dezactiva DSA implicit, iar la \u00eenceputul anului 2025 implementarea DSA va fi eliminat\u0103 din baza de cod. <\/p>\n
Prin defini\u021bie, utilizarea cheilor DSA a fost \u00eentrerupt\u0103 \u00een 2015, dar codul de suport pentru DSA a fost compilat implicit \u0219i a permis restabilirea DSA prin configura\u021bii. Este notabil c\u0103 algoritmul DSA este singurul obligatoriu de implementat \u00een protocolul SSHv2. Aceast\u0103 cerin\u021b\u0103 a fost ad\u0103ugat\u0103 deoarece, \u00een timpul cre\u0103rii \u0219i aprob\u0103rii protocolului SSHv2, toate algoritmii alternativi erau supu\u0219i brevetelor. De atunci, situa\u021bia s-a schimbat, brevetele legate de RSA au expirat, a fost ad\u0103ugat algoritmul ECDSA, care dep\u0103\u0219e\u0219te semnificativ DSA \u00een ceea ce prive\u0219te performan\u021ba \u0219i securitatea, precum \u0219i EdDSA, care este mai sigur \u0219i mai rapid dec\u00e2t ECDSA. <\/p>\n
Singurul factor care a continuat s\u0103 sus\u021bin\u0103 DSA a fost men\u021binerea compatibilit\u0103\u021bii cu dispozitivele \u00eenvechite. \u00cen realit\u0103\u021bile actuale, costurile de continuare a suportului pentru algoritmul nesigur DSA nu se justific\u0103 \u0219i eliminarea sa va stimula \u00eencetarea suportului pentru DSA \u00een alte implement\u0103ri SSH \u0219i biblioteci criptografice. <\/p>\n
Pe l\u00e2ng\u0103 modific\u0103rile legate de DSA, noua versiune propune un nou tip de timeout pentru ssh \u0219i sshd, activat prin setarea valorii \u201eglobal\u201d \u00een directiva ChannelTimeout. \u00cen acest nou mod, OpenSSH urm\u0103re\u0219te toate canalele deschise \u0219i le \u00eenchide simultan dac\u0103, pe parcursul unei perioade specificate, nu a existat trafic \u00een toate acestea. De exemplu, atunci c\u00e2nd la gazd\u0103 sunt deschise simultan canale pentru sesiunea SSH \u0219i redirec\u021bionarea x11, noul mod permite \u00eenchiderea ambele canale dac\u0103 acestea sunt inactive, \u00een loc de a urm\u0103ri separat timeout-urile pentru fiecare canal. De asemenea, s-au remarcat \u00eembun\u0103t\u0103\u021biri semnificative \u00een testarea compatibilit\u0103\u021bii cu proiectul PuTTY. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0431\u0443\u0434\u0443\u0449\u0435\u043c\u0443 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA. \u0412 OpenSSH 9.7 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f DSA \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438, \u043d\u043e \u0441\u0431\u043e\u0440\u043a\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 DSA \u043f\u043e\u043a\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0430. \u0412 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114258","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Versiunea OpenSSH 9.7 | ProHoster","description":"A fost publicat\u0103 versiunea OpenSSH 9.7, o implementare open-source a clientului \u0219i serverului pentru protocoalele SSH 2.0 \u0219i SFTP.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-9-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 9.7 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/reliz-openssh-9-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-11T22:25:48+00:00","article:modified_time":"2024-03-11T22:25:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/114258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=114258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/114258\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=114258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=114258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=114258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"