{"id":101168,"date":"2021-09-02T10:23:16","date_gmt":"2021-09-02T08:23:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-vvodit-novye-trebovaniya-dlya-udalyonnogo-podklyucheniya-k-git"},"modified":"2021-09-02T10:23:16","modified_gmt":"2021-09-02T08:23:16","slug":"github-vvodit-novye-trebovaniya-dlya-udalyonnogo-podklyucheniya-k-git","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/github-vvodit-novye-trebovaniya-dlya-udalyonnogo-podklyucheniya-k-git","title":{"rendered":"GitHub po prezanton k\u00ebrkesa t\u00eb reja p\u00ebr lidhje t\u00eb larg\u00ebta me Git","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
GitHub shpalli nj\u00eb njoftim p\u00ebr ndryshimet e b\u00ebra n\u00eb sh\u00ebrbim, t\u00eb lidhura me forcimin e mbrojtjes s\u00eb protokollit Git, i cili p\u00ebrdoret gjat\u00eb operacioneve git push dhe git pull p\u00ebrmes SSH ose skem\u00ebs «git:\/\/» (n\u00eb lidhje me https:\/\/, ndryshimet nuk do t\u00eb ndikojn\u00eb). Pas fillimit t\u00eb ndryshimeve, p\u00ebr t'u lidhur me GitHub p\u00ebrmes SSH do t\u00eb nevojitet t\u00eb pakt\u00ebn OpenSSH versioni 7.2 (l\u00ebshuar n\u00eb vitin 2016) ose PuTTY versioni 0.75 (l\u00ebshuar n\u00eb maj t\u00eb k\u00ebtij viti). P\u00ebr shembull, do t\u00eb prishet kompatibiliteti me klientin SSH t\u00eb p\u00ebrfshir\u00eb n\u00eb CentOS 6 dhe Ubuntu 14.04, p\u00ebrkrahja e t\u00eb cilave tashm\u00eb \u00ebsht\u00eb ndaluar. <\/p>\n
Ndryshimet p\u00ebrfshijn\u00eb ndalimin e mb\u00ebshtetjes p\u00ebr k\u00ebrkesat e pakriptura n\u00eb Git (p\u00ebrmes «git:\/\/») dhe forcimin e k\u00ebrkesave p\u00ebr \u00e7el\u00ebsat SSH q\u00eb p\u00ebrdoren kur lidhen me GitHub. GitHub do t\u00eb ndaloj\u00eb mb\u00ebshtetje p\u00ebr t\u00eb gjitha \u00e7el\u00ebsat DSA dhe algoritmet SSH t\u00eb vjetra, si\u00e7 jan\u00eb cifrat CBC (aes256-cbc, aes192-cbc, aes128-cbc) dhe HMAC-SHA-1. P\u00ebr m\u00eb tep\u00ebr, vendosen k\u00ebrkesa shtes\u00eb p\u00ebr \u00e7elsat e rinj RSA (do t\u00eb ndalohet p\u00ebrdorimi i SHA-1) dhe implementohet mb\u00ebshtetje p\u00ebr \u00e7el\u00ebsat host ECDSA dhe Ed25519. <\/p>\n
Ndryshimet do t\u00eb zbatohen gradualisht. M\u00eb 14 Shtator do t\u00eb krijohen \u00e7el\u00ebsa t\u00eb rinj host ECDSA dhe Ed25519. M\u00eb 2 N\u00ebntor do t\u00eb ndalohet mb\u00ebshtetja p\u00ebr \u00e7el\u00ebsat e rinj RSA t\u00eb bazuar n\u00eb SHA-1 (\u00e7el\u00ebsat e m\u00ebparsh\u00ebm do t\u00eb vazhdojn\u00eb t\u00eb funksionojn\u00eb). M\u00eb 16 N\u00ebntor mb\u00ebshtetja p\u00ebr \u00e7el\u00ebsat e hosteve t\u00eb bazuar n\u00eb algoritmin DSA do t\u00eb ndaloj\u00eb. M\u00eb 11 Janar 2022, si nj\u00eb eksperiment, do t\u00eb ndalohet p\u00ebrkoh\u00ebsisht mb\u00ebshtetja p\u00ebr algoritmet e vjetra SSH dhe mund\u00ebsia e k\u00ebrkesave pa kriptim. M\u00eb 15 Mars mb\u00ebshtetja p\u00ebr algoritmet e vjetra do t\u00eb \u00e7aktivizohet p\u00ebrfundimisht. <\/p>\n
P\u00ebrve\u00e7 k\u00ebsaj, mund t\u00eb theksohet se \u00ebsht\u00eb b\u00ebr\u00eb nj\u00eb ndryshim n\u00eb kodin burimor t\u00eb OpenSSH q\u00eb ndalon p\u00ebrpunimin e \u00e7el\u00ebsave RSA t\u00eb bazuar n\u00eb hashing SHA-1 («ssh-rsa»). Mb\u00ebshtetje p\u00ebr \u00e7el\u00ebsat RSA me hashing SHA-256 dhe SHA-512 (rsa-sha2-256\/512) \u00ebsht\u00eb l\u00ebn\u00eb pa ndryshime. Ndalimi i mb\u00ebshtetjes p\u00ebr \u00e7el\u00ebsat «ssh-rsa» \u00ebsht\u00eb i lidhur me rritjen e efikasitetit t\u00eb sulmeve t\u00eb kolizionit me nj\u00eb prefiks t\u00eb caktuar (kostoja e gjetjes s\u00eb nj\u00eb kolizioni vler\u00ebsohet t\u00eb jet\u00eb rreth 50,000 dollar\u00eb). P\u00ebr t\u00eb kontrolluar p\u00ebrdorimin e ssh-rsa n\u00eb sistemet tuaja, mund t\u00eb provoni t\u00eb lidheni p\u00ebrmes ssh me opsionin «-oHostKeyAlgorithms=-ssh-rsa». \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"