{"id":123456,"date":"2025-04-10T03:05:07","date_gmt":"2025-04-10T01:05:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/reliz-openssh-10-0"},"modified":"2025-04-10T03:05:07","modified_gmt":"2025-04-10T01:05:07","slug":"reliz-openssh-10-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/reliz-openssh-10-0","title":{"rendered":"Publikimi i OpenSSH 10.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb publikuar rasti i OpenSSH 10.0, nj\u00eb implementim t\u00eb hapur p\u00ebr klientin dhe serverin p\u00ebr t\u00eb punuar me protokollet SSH 2.0 dhe SFTP. Ndryshimet kryesore: <\/p>\n
\n
\u00cbsht\u00eb hequr mb\u00ebshtetje p\u00ebr n\u00ebnshkrimet digjitale t\u00eb bazuara n\u00eb algoritmin DSA, t\u00eb cilat nuk p\u00ebrputhen me k\u00ebrkesat moderne p\u00ebr siguri. Shpenzimet p\u00ebr vazhdimin e mb\u00ebshtetjes s\u00eb algoritmit t\u00eb siguris\u00eb DSA nuk justifikohen dhe heqja e tij do t\u00eb stimuloj\u00eb nd\u00ebrprerjen e mb\u00ebshtetjes s\u00eb DSA n\u00eb implementime t\u00eb tjera t\u00eb SSH dhe bibliotekave kriptografike. P\u00ebrdorimi i \u00e7el\u00ebsave DSA \u00ebsht\u00eb ndaluar gjithashtu q\u00eb nga viti 2015.\n
Vazhdon ndarja e sshd n\u00eb disa skedar\u00eb ekzekutiv t\u00eb ve\u00e7ant\u00eb. N\u00eb OpenSSH 9.8, procesi sshd u ndan n\u00eb procesin sshd-session, i cili kryen detra t\u00eb lidhura me p\u00ebrpunimin e seancave. N\u00eb OpenSSH 10.0, kodi q\u00eb kryen autentifikimin \u00ebsht\u00eb transferuar nga sshd-session n\u00eb nj\u00eb proces t\u00eb ve\u00e7ant\u00eb sshd-auth. Procesi sshd-auth lejon izolimin shtes\u00eb t\u00eb t\u00eb dh\u00ebnave t\u00eb lidhura me autentifikimin n\u00eb hap\u00ebsir\u00ebn adresore t\u00eb nj\u00eb processi t\u00eb ve\u00e7ant\u00eb, duke mos lejuar qasjen n\u00eb k\u00ebto t\u00eb dh\u00ebna n\u00eb memorie n\u00eb rast sulmesh ndaj kodit q\u00eb p\u00ebrdoret p\u00ebr p\u00ebrpunimin e fazave t\u00eb lidhjes deri n\u00eb p\u00ebrfundimin e autentifikimit. P\u00ebr m\u00eb tep\u00ebr, ky ndryshim paksa redukton konsumimin e memories, pasi kodi i lidhur me autentifikimin tani \u00ebsht\u00eb i pranish\u00ebm n\u00eb memorie vet\u00ebm gjat\u00eb procesit t\u00eb autentifikimit dhe m\u00eb pas shkarkohet pas p\u00ebrfundimit t\u00eb procesit sshd-auth.\n
N\u00eb ssh, n\u00eb m\u00ebnyr\u00eb default, p\u00ebrdoret nj\u00eb algorit\u00ebm hibrid i shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave \u00abmlkem768x25519-sha256\u00bb, rezistent ndaj thyerjes nga kompjuter\u00ebt kuantik\u00eb dhe p\u00ebrb\u00ebhet nga nj\u00eb kombinim i X25519 ECDH dhe algoritmit ML-KEM (CRYSTALS-Kyber), t\u00eb standardizuar nga Instituti Komb\u00ebtar i Standardeve dhe Teknologjis\u00eb i SHBA (NIST). ML-KEM p\u00ebrdor metoda kriptografike q\u00eb bazohen n\u00eb zgjidhjen e problemeve t\u00eb teoris\u00eb s\u00eb rrjetave, koha e zgjidhjes s\u00eb t\u00eb cil\u00ebve nuk ndryshon n\u00eb kompjuter\u00ebt normal\u00eb dhe ata kuantik\u00eb.\n
N\u00eb ssh_config, n\u00eb direktivat SetEnv dhe User \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr z\u00ebvend\u00ebsimin \u00ab%-token\u00bb dhe shpalosjen e variablave t\u00eb mjedisit.\n
N\u00eb ssh_config dhe sshd_config \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr shprehjen \u00abMatch version\u00bb, q\u00eb lejon aplikimin e konfigurimeve n\u00eb var\u00ebsi t\u00eb versionit t\u00eb pranish\u00ebm t\u00eb OpenSSH; p\u00ebr shembull, p\u00ebr t\u00eb lidhur me OpenSSH 10, mund t\u00eb specifikohet \u00abMatch version OpenSSH_10.*\u00bb.\n
\u00abMatch sessiontype\u00bb, q\u00eb lejon aplikimin e konfigurimeve n\u00eb var\u00ebsi t\u00eb llojit t\u00eb seanc\u00ebs s\u00eb k\u00ebrkuar: \u00abshell\u00bb p\u00ebr seancat interaktive, \u00abexec\u00bb p\u00ebr ekzekutimin e komandave, \u00absubsystem\u00bb p\u00ebr sftp dhe \u00abnone\u00bb p\u00ebr tunelimin dhe ridrejktimin e trafikut.\n
\u00abMatch command\u00bb p\u00ebr lidhjen e veprimeve me komandat e specifikuara n\u00eb komand\u00ebn p\u00ebr ekzekutim p\u00ebrmes ssh.\n
'Match tagged \u00ab\u00bb' dhe 'Match command \u00ab\u00bb' p\u00ebr lidhjen me etiketat e zbraz\u00ebta dhe ekzekutimin e ssh pa specifikuar komand\u00ebn q\u00eb do t\u00eb ekzekutohet. <\/ul>\n
N\u00eb sshd_config lejohet p\u00ebrdorimi i maskave n\u00eb rrug\u00ebt e skedar\u00ebve t\u00eb specifikuara n\u00eb direktivat AuthorizedKeysFile dhe AuthorizedPrincipalsFile.\n
N\u00eb klientin ssh \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr opsionin \u00abVersionAddendum\u00bb p\u00ebr t\u00eb shtuar tekst t\u00eb rast\u00ebsish\u00ebm n\u00eb rrjeshtin e numrit t\u00eb versionit (m\u00eb par\u00eb ky opsion ka qen\u00eb i disponuesh\u00ebm vet\u00ebm p\u00ebr server\u00eb<\/a> sshd).\n