{"id":101355,"date":"2021-09-21T16:22:37","date_gmt":"2021-09-21T14:22:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-opublikoval-hiba-nadstrojku-nad-openssh-dlya-avtorizaczii-na-osnove-sertifikatov"},"modified":"2021-09-21T16:22:37","modified_gmt":"2021-09-21T14:22:38","slug":"google-opublikoval-hiba-nadstrojku-nad-openssh-dlya-avtorizaczii-na-osnove-sertifikatov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/google-opublikoval-hiba-nadstrojku-nad-openssh-dlya-avtorizaczii-na-osnove-sertifikatov","title":{"rendered":"Google publikoi HIBA, nj\u00eb shtes\u00eb mbi OpenSSH p\u00ebr autorizimin e bazuar n\u00eb certifikata","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Google publikoi kodin burimor t\u00eb projektit HIBA (Host Identity Based Authorization), q\u00eb ofron nj\u00eb implementim t\u00eb nj\u00eb mekanizmi t\u00eb ri autorizimi p\u00ebr organizimin e qasjes s\u00eb p\u00ebrdoruesve p\u00ebrmes SSH n\u00eb lidhje me hostet (kontrolli n\u00ebse \u00ebsht\u00eb e lejuar ose jo aksesin n\u00eb nj\u00eb burim t\u00eb caktuar gjat\u00eb autentifikimit me \u00e7el\u00ebsa publik\u00eb). Integrimi me OpenSSH sigurohet p\u00ebrmes caktimit t\u00eb p\u00ebrpunuesit HIBA n\u00eb drejtorin\u00eb AuthorizedPrincipalsCommand n\u00eb \/etc\/ssh\/sshd_config. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn BSD. <\/p>\n

HIBA p\u00ebrdor mekanizmat standard\u00eb t\u00eb autentifikimit t\u00eb bazuar n\u00eb certifikata nga OpenSSH p\u00ebr menaxhim t\u00eb p\u00ebrshtatsh\u00ebm dhe qendror t\u00eb autorizimit t\u00eb p\u00ebrdoruesve n\u00eb lidhje me hostet, por nuk k\u00ebrkon p\u00ebr k\u00ebt\u00eb ndryshimin e rregullt t\u00eb skedave authorized_keys dhe authorized_users n\u00eb an\u00ebn e hosteve, me t\u00eb cilat b\u00ebhet lidhja. N\u00eb vend q\u00eb t\u00eb ruaj\u00eb nj\u00eb list\u00eb t\u00eb \u00e7el\u00ebsave publik\u00eb t\u00eb lejuar dhe kushteve t\u00eb aksesit n\u00eb skedar\u00ebt authorized_(keys|users), HIBA integron informacionin p\u00ebr lidhjen e p\u00ebrdoruesve me hostet direkt n\u00eb vet\u00eb certifikatat. N\u00eb ve\u00e7anti, jan\u00eb propozuar zgjerime p\u00ebr certifikatat e hosteve dhe certifikatat e p\u00ebrdoruesve, n\u00eb t\u00eb cilat ruhet parametrat e hosteve dhe kushtet p\u00ebr dh\u00ebnien e qasjes p\u00ebr p\u00ebrdoruesit. <\/p>\n

Kontrolli n\u00eb an\u00ebn e hostit iniciohet p\u00ebrmes thirrjes s\u00eb p\u00ebrpunuesit hiba-chk, t\u00eb caktuar n\u00eb drejtorin\u00eb AuthorizedPrincipalsCommand. Ky p\u00ebrpunues dekodon zgjerimet e integruara n\u00eb certifikata dhe mbi baz\u00ebn e tyre merr nj\u00eb vendim n\u00ebse t\u00eb lejoj\u00eb ose t\u00eb bllokoj\u00eb aksesin. Rregullat e aksesit p\u00ebrcaktohen n\u00eb m\u00ebnyr\u00eb qendrore n\u00eb nivelin e autoritetit t\u00eb certifikimit (CA) dhe integrohen n\u00eb certifikata gjat\u00eb gjenerimit t\u00eb tyre. <\/p>\n

N\u00eb an\u00ebn e autoritetit t\u00eb certifikimit, mbahet nj\u00eb list\u00eb e p\u00ebrbashk\u00ebt e sakt\u00ebsive t\u00eb disponueshme (hosteve t\u00eb cil\u00ebve u \u00ebsht\u00eb lejuar lidhja) dhe nj\u00eb list\u00eb e p\u00ebrdoruesve t\u00eb cil\u00ebve u \u00ebsht\u00eb lejuar t\u00eb shfryt\u00ebzojn\u00eb k\u00ebto sakt\u00ebsi. P\u00ebr gjenerimin e certifikatave t\u00eb verifikuara me informacion t\u00eb integruar mbi sakt\u00ebsit\u00eb, \u00ebsht\u00eb propozuar nj\u00eb utilitar hiba-gen, dhe funksionaliteti i nevojsh\u00ebm p\u00ebr krijimin e nj\u00eb autoriteti t\u00eb certifikimit \u00ebsht\u00eb transferuar n\u00eb nj\u00eb skenar iba-ca.sh. <\/p>\n

Gjat\u00eb lidhjes s\u00eb p\u00ebrdoruesit, atributet e specifikuara n\u00eb certifikat\u00ebn konfirmohen nga n\u00ebnshkrimi digjital i autoritetit t\u00eb certifikimit, q\u00eb lejon kryerjen e t\u00eb gjitha kontrollove plot\u00ebsisht n\u00eb an\u00ebn e hostit q\u00eb \u00ebsht\u00eb duke u lidhur, pa b\u00ebr\u00eb thirrje n\u00eb sh\u00ebrbime t\u00eb jashtme. Lista e \u00e7eljive publike t\u00eb autoritetit t\u00eb certifikimit q\u00eb l\u00ebshon certifikatat SSH tregohet p\u00ebrmes direktiv\u00ebs TrustedUserCAKeys. <\/p>\n

P\u00ebrve\u00e7 lidhjes s\u00eb drejtp\u00ebrdrejt\u00eb t\u00eb p\u00ebrdoruesve me hostet, HIBA lejon caktimin e rregullave m\u00eb fleksibile t\u00eb aksesit. P\u00ebr shembull, informacioni si lokacioni dhe tipi i sh\u00ebrbimit mund t\u00eb lidhen me hostet, dhe kur caktohen rregullat e aksesit p\u00ebr p\u00ebrdoruesit, mund t\u00eb lejohet lidhja me t\u00eb gjitha hostet me nj\u00eb tip sh\u00ebrbimi t\u00eb caktuar ose me hostet n\u00eb nj\u00eb vend t\u00eb specifikuar.

\"Google<\/center>
\"Google<\/center>
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 HIBA (Host Identity Based Authorization), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e SSH \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a \u0445\u043e\u0441\u0442\u0430\u043c (\u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0440\u0430\u0437\u0440\u0435\u0448\u0451\u043d \u0438\u043b\u0438 \u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e\u043c\u0443 \u0440\u0435\u0441\u0443\u0440\u0441\u0443 \u043f\u0440\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043a\u043b\u044e\u0447\u0430\u043c). \u0418\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 OpenSSH \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 HIBA \u0432 \u0434\u0438\u0440\u0435\u043a\u0442\u0438\u0432\u0435 AuthorizedPrincipalsCommand \u0432 \/etc\/ssh\/sshd_config. \u041a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":101356,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101355","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google publikoi HIBA, nj\u00eb shtes\u00eb mbi OpenSSH p\u00ebr autorizim mbi baz\u00ebn e certifikatave | ProHoster","description":"Kompania Google publikoi kodin burimor t\u00eb projektit HIBA (Host Identity Based Authorization), q\u00eb ofron nj\u00eb implementim t\u00eb mekanizmit t\u00eb shtuar t\u00eb autorizimit p\u00ebr organizimin e aksesit t\u00eb p\u00ebrdoruesve p\u00ebrmes SSH n\u00eb lidhje me.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-opublikoval-hiba-nadstrojku-nad-openssh-dlya-avtorizaczii-na-osnove-sertifikatov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b HIBA, \u043d\u0430\u0434\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u043d\u0430\u0434 OpenSSH \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0435 \u0442\u0435\u043a\u0441\u0442\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 HIBA (Host Identity Based Authorization), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u043e SSH \u0432 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0435 \u043a.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/google-opublikoval-hiba-nadstrojku-nad-openssh-dlya-avtorizaczii-na-osnove-sertifikatov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-21T14:22:38+00:00","article:modified_time":"2021-09-21T14:22:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101355","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-21 14:52:03","updated":"2022-10-02 02:36:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101355","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=101355"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101355\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/101356"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=101355"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=101355"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=101355"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}