Bol vydan\u00fd OpenSSH 9.7, otvoren\u00e1 implement\u00e1cia klienta a servera pre pr\u00e1cu s protokolmi SSH 2.0 a SFTP. V navrhnutej verzii sa za\u010dala implement\u00e1cia zmien, ktor\u00e9 predch\u00e1dzaj\u00fa bud\u00facemu ukon\u010deniu podpory k\u013e\u00fa\u010dov zalo\u017een\u00fdch na algoritme DSA. V OpenSSH 9.7 je k dispoz\u00edcii mo\u017enos\u0165 vypn\u00fa\u0165 DSA u\u017e po\u010das kompil\u00e1cie, no predvolen\u00e9 zostavenie st\u00e1le podporuje DSA. V \u010fal\u0161ej verzii, pl\u00e1novanej na j\u00fan, sa predvolen\u00e9 re\u017eimy kompil\u00e1cie zmenia na vypnutie DSA, a na za\u010diatku roka 2025 bude realiz\u00e1cia DSA odstr\u00e1nen\u00e1 z k\u00f3dovej z\u00e1kladne. <\/p>\n
Pou\u017e\u00edvanie DSA k\u013e\u00fa\u010dov bolo predvolene ukon\u010den\u00e9 e\u0161te v roku 2015, no k\u00f3d na podporu DSA sa predvolene kompiloval a umo\u017enil obnovi\u0165 DSA prostredn\u00edctvom nastaven\u00ed. Zauj\u00edmav\u00e9 je, \u017ee algoritmus DSA je jedin\u00fdm povinn\u00fdm na implement\u00e1ciu v protokole SSHv2. Toto po\u017eiadavku bolo pridan\u00e9, preto\u017ee v \u010dase vytv\u00e1rania a schva\u013eovania protokolu SSHv2 v\u0161etky alternat\u00edvne algoritmy podliehali patentom. Odvtedy sa situ\u00e1cia zmenila, patenty s\u00favisiace s RSA prestali plati\u0165, bol pridan\u00fd algoritmus ECDSA, ktor\u00fd je v\u00fdkonnej\u0161\u00ed a bezpe\u010dnej\u0161\u00ed ako DSA, a taktie\u017e EdDSA, ktor\u00fd je bezpe\u010dnej\u0161\u00ed a r\u00fdchlej\u0161\u00ed ako ECDSA. <\/p>\n
Jedn\u00fdm z hlavn\u00fdch d\u00f4vodov na pokra\u010dovanie podpory DSA bola zachovanie kompatibility so zastaran\u00fdmi zariadeniami. V s\u00fa\u010dasnosti s\u00fa n\u00e1klady na pokra\u010dovanie podpory nebezpe\u010dn\u00e9ho algoritmu DSA neudr\u017eate\u013en\u00e9 a jeho odstr\u00e1nenie podpor\u00ed ukon\u010denie jeho podpory v in\u00fdch realiz\u00e1ci\u00e1ch SSH a kryptografick\u00fdch kni\u017eniciach. <\/p>\n
Okrem zmien s\u00favisiacich s DSA nov\u00fd vydanie pon\u00faka nov\u00fd typ \u010dasov\u00fdch limitov v ssh a sshd, ktor\u00fd sa aktivuje nastaven\u00edm hodnoty \u201eglobal\u201c v direkt\u00edve ChannelTimeout. V novom re\u017eime OpenSSH sleduje v\u0161etky otvoren\u00e9 kan\u00e1ly a zatvor\u00ed ich naraz, ak v nich po\u010das ur\u010dit\u00e9ho \u010dasov\u00e9ho obdobia neprebiehal prenos. Napr\u00edklad, ke\u010f s\u00fa na hostite\u013eovi s\u00fa\u010dasne otvoren\u00e9 kan\u00e1ly pre SSH rel\u00e1ciu a presmerovanie x11, nov\u00fd re\u017eim umo\u017e\u0148uje okam\u017eit\u00e9 uzavretie oboch kan\u00e1lov, ak s\u00fa neakt\u00edvne, namiesto samostatn\u00e9ho sledovania \u010dasov\u00fdch limitov pre ka\u017ed\u00fd kan\u00e1l. Medzi zmenami sa tie\u017e uv\u00e1dza v\u00fdznamn\u00e9 zlep\u0161enie testovania kompatibility s projektom PuTTY. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0431\u0443\u0434\u0443\u0449\u0435\u043c\u0443 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA. \u0412 OpenSSH 9.7 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f DSA \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438, \u043d\u043e \u0441\u0431\u043e\u0440\u043a\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 DSA \u043f\u043e\u043a\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0430. \u0412 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114258","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH 9.7 | ProHoster","description":"Bol iba vydan\u00fd OpenSSH 9.7, otvoren\u00e1 implement\u00e1cia klienta a servera pre pr\u00e1cu s protokolmi SSH 2.0 a SFTP.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-openssh-9-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 9.7 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/reliz-openssh-9-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-11T22:25:48+00:00","article:modified_time":"2024-03-11T22:25:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/114258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=114258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/114258\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=114258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=114258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=114258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"