Objavljena je razli\u010dica OpenSSH 9.7, odprte implementacije odjemalca in stre\u017enika za delovanje po protokolih SSH 2.0 in SFTP. V predlagani razli\u010dici so se za\u010dela uvajati spremembe, ki so predhodnice prihodnjemu prenehanju podpore za klju\u010de, ki temeljijo na algoritmu DSA. V OpenSSH 9.7 je na voljo mo\u017enost za onemogo\u010ditev DSA v fazi sestavljanja, vendar je privzeta zgradba \u0161e vedno obdr\u017eala podporo za DSA. V naslednji izdaji, predvideni za junij, bo na\u010din sestavljanja spremenjen na privzeto onemogo\u010deno DSA, izvajanje DSA pa bo na za\u010detku leta 2025 odstranjeno iz kode. <\/p>\n
Privzeto je uporaba DSA klju\u010dev prenehala \u017ee leta 2015, vendar se je koda za podporo DSA privzeto sestavljala in omogo\u010dila vrnitev DSA preko nastavitev. Upo\u0161tevati je treba, da je algoritem DSA edini obvezni za izvajanje v protokolu SSHv2. Tak\u0161no zahtevano je bilo vklju\u010deno, ker so bili med ustvarjanjem in potrjevanjem protokola SSHv2 vsi alternativni algoritmi pod dejstvom patentov. Od takrat se je situacija spremenila, patenti, povezani z RSA, so prenehali veljati, dodan je algoritem ECDSA, ki znatno preka\u0161a DSA po zmogljivosti in varnosti, prav tako pa EdDSA, ki je varnej\u0161i in hitrej\u0161i od ECDSA. <\/p>\n
Edini dejavnik, zakaj so \u0161e naprej podpirali DSA, je bila ohranitev zdru\u017eljivosti s zastarelimi napravami. V dana\u0161njih razmerah stro\u0161ki nadaljnjega vzdr\u017eevanja nevarnega algoritma DSA ne upravi\u010dujejo sebe in njegova odstranitev bo spodbudila prenehanje podpore DSA v drugih izvedbah SSH in kriptografskih knji\u017enicah. <\/p>\n
Poleg sprememb, povezanih z DSA, novo izdanje ponuja nov tip \u010dasovnih prekinitev v ssh in sshd, ki se vklju\u010duje z dolo\u010danjem vrednosti \u201eglobal\u201c v direktivi ChannelTimeout. V novem na\u010dinu OpenSSH spremlja vse odprte kanale in jih zapre naenkrat, \u010de v vseh njih za dolo\u010den \u010das ni bilo prometa. Na primer, ko so na gostitelju hkrati odprti kanali za SSH-sejo in preusmerjanje x11, nov na\u010din omogo\u010da, da se zaprejo oba kanala, \u010de sta neaktivna, namesto da bi se lo\u010deno spremljala \u010dasovna prekinitev za vsak kanal. Kot spremembo lahko omenimo tudi znatno izbolj\u0161anje testiranja zdru\u017eljivosti s projektom PuTTY. \u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u0412 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0430\u0447\u0430\u043b\u043e\u0441\u044c \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0431\u0443\u0434\u0443\u0449\u0435\u043c\u0443 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA. \u0412 OpenSSH 9.7 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0446\u0438\u044f \u0434\u043b\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f DSA \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0438, \u043d\u043e \u0441\u0431\u043e\u0440\u043a\u0430 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 DSA \u043f\u043e\u043a\u0430 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0430. \u0412 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u0435, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114258","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Razli\u010dica OpenSSH 9.7 | ProHoster","description":"Objavljena je razli\u010dica OpenSSH 9.7, odprte izvedbe odjemalca in stre\u017enika za delovanje preko protokolov SSH 2.0 in SFTP.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/reliz-openssh-9-7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 9.7 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 9.7, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/reliz-openssh-9-7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-11T22:25:48+00:00","article:modified_time":"2024-03-11T22:25:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/114258","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=114258"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/114258\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=114258"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=114258"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=114258"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"