OpenSSH kuita kwakazara kweSSH 2.0 protocol, kusanganisirawo SFTP rutsigiro.
Kuburitswa uku kunosanganisira rutsigiro rweFIDO/U2F hardware authenticators. FIDO zvishandiso zvave kutsigirwa pasi pemhando nyowani "ecdsa-sk" uye "ed25519-sk", pamwe chete nezvitupa zvinoenderana.
Kuburitswa uku kunosanganisira shanduko dzinoverengeka dzinogona kukanganisa zviripo
zvigadziriso:
- Kubvisa "ssh-rsa" kubva kuCASsignatureAlgorithms zvinyorwa. Iye zvino, pakusaina zvitupa zvitsva, "rsa-sha2-512" ichashandiswa nekusingaperi;
- Iyo diffie-hellman-group14-sha1 algorithm yakabviswa kune vese mutengi uye sevha;
- Paunenge uchishandisa iyo ps utility, iyo sshd process title zvino inoratidza nhamba yekubatanidza kuedza kutendesa uye miganhu inogadziriswa uchishandisa MaxStartups;
- Yakawedzera faira idzva rinogoneka ssh-sk-helper. Yakagadzirirwa kupatsanura FIDO/U2F maraibhurari.
Zvakaziviswawo kuti tsigiro yeSHA-1 hashing algorithm ichakurumidza kumiswa.
Source: linux.org.ru