{"id":42941,"date":"2020-02-17T14:41:56","date_gmt":"2020-02-17T11:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f"},"modified":"2020-02-17T14:41:56","modified_gmt":"2020-02-17T11:41:56","slug":"reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f","title":{"rendered":"L\u00ebshimi i OpenSSH 8.2 me mb\u00ebshtetje p\u00ebr tokenet e autentikimit me dy faktor\u00eb FIDO\/U2F","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pas pas kat\u00ebr muaj zhvillimi <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.mindrot.org\/pipermail\/openssh-unix-announce\/2020-February\/000138.html\">u paraqit<\/a><\/noindex> l\u00ebshimi <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openssh.com\/\">OpenSSH 8.2<\/a><\/noindex>, implementimi t\u00eb hapur t\u00eb klientit dhe serverit p\u00ebr pun\u00eb sipas protokolleve SSH 2.0 dhe SFTP. <\/p>\n<p>P\u00ebrmir\u00ebsimi kryesor n\u00eb l\u00ebshimin e OpenSSH 8.2 ishte mund\u00ebsia e p\u00ebrdorimit t\u00eb autentifikimit me dy faktor\u00eb p\u00ebrmes pajisjeve q\u00eb mb\u00ebshtesin protokollin <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A3%D0%BD%D0%B8%D0%B2%D0%B5%D1%80%D1%81%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F_%D0%B4%D0%B2%D1%83%D1%85%D1%84%D0%B0%D0%BA%D1%82%D0%BE%D1%80%D0%BD%D0%B0%D1%8F_%D0%B0%D1%83%D1%82%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%86%D0%B8%D1%8F\">U2F<\/a><\/noindex>, e zhvilluar nga aleanca  <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/FIDO_Alliance\">FIDO<\/a><\/noindex>. U2F lejon krijimin e token\u00ebve fizik\u00eb t\u00eb lir\u00eb p\u00ebr t\u00eb konfirmuar pranin\u00eb fizike t\u00eb p\u00ebrdoruesit, me t\u00eb cil\u00ebt nd\u00ebrveprohet p\u00ebrmes USB, Bluetooth ose NFC. K\u00ebto pajisje promovohen si nj\u00eb mjet p\u00ebr autentifikimin me dy faktor\u00eb n\u00eb faqe, mb\u00ebshteten tashm\u00eb nga shfletuesit kryesor\u00eb dhe prodhohen nga disa prodhues, p\u00ebrfshir\u00eb Yubico, Feitian, Thetis dhe Kensington.<\/p>\n<p>P\u00ebr interaksion me pajisjet q\u00eb konfirmojn\u00eb pranin\u00eb e p\u00ebrdoruesit, n\u00eb OpenSSH jan\u00eb shtuar lloje t\u00eb reja \u00e7el\u00ebsash \u2018ecdsa-sk\u2019 dhe \u2018ed25519-sk\u2019, t\u00eb cilat p\u00ebrdorin algoritmet e n\u00ebnshkrimit digjital ECDSA dhe Ed25519, s\u00eb bashku me hash-in SHA-256. Procedurat e interaksionit me token\u00ebt jan\u00eb t\u00eb mbledhura n\u00eb nj\u00eb bibliotek\u00eb nd\u00ebrmjet\u00ebse, e cila ngarkohet n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me bibliotek\u00ebn q\u00eb mb\u00ebshtet PKCS#11 dhe \u00ebsht\u00eb nj\u00eb mb\u00ebshtetje mbi bibliotek\u00ebn. <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Yubico\/libfido2\">libfido2<\/a><\/noindex>, e cila ofron mjete p\u00ebr komunikim me token\u00ebt mbi USB (mb\u00ebshteten protokollet FIDO U2F\/CTAP 1 dhe FIDO 2.0\/CTAP 2). Biblioteka nd\u00ebrmjet\u00ebse libsk-libfido2 e p\u00ebrgatitur nga zhvilluesit e OpenSSH <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Yubico\/libfido2\/commit\/601565cbfab772e4adda2d6de1d7f46e9d913193\">\u00ebsht\u00eb p\u00ebrfshir\u00eb<\/a><\/noindex> u p\u00ebrfshi n\u00eb p\u00ebrb\u00ebrjen kryesore t\u00eb libfido2, ashtu si <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Yubico\/libfido2\/commit\/5a1d1c33bff0d84fc56bb7f9dd166dbee294cb77\">drejtp\u00ebrdrejtori HID<\/a><\/noindex> p\u00ebr OpenBSD.<\/p>\n<p>P\u00ebr autentikimin dhe gjenerimin e \u00e7el\u00ebsit, duhet t\u00eb sakt\u00ebsohet n\u00eb cil\u00ebsimet parametri \u2018SecurityKeyProvider\u2019 ose t\u00eb vendoset variabla e ambientit SSH_SK_PROVIDER, duke specifikuar rrug\u00ebn p\u00ebr n\u00eb bibliotek\u00ebn e jashtme libsk-libfido2.so (export SSH_SK_PROVIDER=\/path\/to\/libsk-libfido2.so). \u00cbsht\u00eb e mundur t\u00eb nd\u00ebrtohet openssh me mb\u00ebshtetje t\u00eb integruar p\u00ebr bibliotek\u00ebn k\u00ebrcuese (--with-security-key-builtin), n\u00eb k\u00ebt\u00eb rast \u00ebsht\u00eb e nevojshme t\u00eb vendoset parametri \u2018SecurityKeyProvider=internal\u2019.<br \/>\nM\u00eb pas, duhet t\u00eb ekzekutohet \u2018ssh-keygen -t ecdsa-sk\u2019 ose, n\u00ebse \u00e7el\u00ebsat jan\u00eb krijuar dhe konfiguruar tashm\u00eb, t\u00eb lidhet me serverin duke p\u00ebrdorur \u2018ssh\u2019. Kur ekzekutohet ssh-keygen, \u00e7ifti i \u00e7el\u00ebsave t\u00eb krijuar do t\u00eb ruhet n\u00eb \u2018~\/.ssh\/id_ecdsa_sk\u2019 dhe mund t\u00eb p\u00ebrdoret si\u00e7 b\u00ebhet me \u00e7el\u00ebsat e tjer\u00eb. <\/p>\n<p>\u00c7el\u00ebsi i hapur (id_ecdsa_sk.pub) duhet t\u00eb kopjohet n\u00eb server n\u00eb skedarin authorized_keys. N\u00eb an\u00ebn e serverit kontrollohet vet\u00ebm n\u00ebnshkrimi digjital, dhe interaksioni me token\u00ebt b\u00ebhet nga ana e klientit (n\u00eb server nuk \u00ebsht\u00eb e nevojshme t\u00eb instalohet libsk-libfido2, por serveri duhet t\u00eb mb\u00ebshtes\u00eb llojin e \u00e7el\u00ebsave \u2018ecdsa-sk\u2019). \u00c7el\u00ebsi i mbyllur i gjeneruar (id_ecdsa_sk) n\u00eb thelb \u00ebsht\u00eb nj\u00eb descriptor \u00e7el\u00ebsi q\u00eb formon \u00e7el\u00ebsin e v\u00ebrtet\u00eb vet\u00ebm n\u00eb kombinim me sekuenc\u00ebn sekrete, t\u00eb ruajtur nga tokeni U2F. N\u00eb rast se \u00e7el\u00ebsi id_ecdsa_sk bie n\u00eb duar t\u00eb nj\u00eb sulmuesi, p\u00ebr t\u00eb kaluar autentikimin atij do t'i nevojitet gjithashtu akses n\u00eb tokenin hardware, pa t\u00eb cilin \u00e7el\u00ebsi i mbyllur i ruajtur n\u00eb skedarin id_ecdsa_sk \u00ebsht\u00eb i padobish\u00ebm. <\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, si\u00e7i parazgjedhje, gjat\u00eb kryerjes s\u00eb operacioneve t\u00eb \u00e7do lloji me \u00e7el\u00ebsat (si gjat\u00eb gjenerimit, ashtu edhe gjat\u00eb autentikimit) k\u00ebrkohet nj\u00eb konfirmim lokal fizik i pranis\u00eb s\u00eb p\u00ebrdoruesit, p\u00ebr shembull, ofrohet t\u00eb prek\u00eb sensorin n\u00eb token, i cili e v\u00ebshtir\u00ebson realizimin e sulmeve t\u00eb larg\u00ebta ndaj sistemeve me token t\u00eb lidhur. Si nj\u00eb hap tjet\u00ebr mbrojtjeje, gjat\u00eb procesit t\u00eb nisjes, ssh-keygen gjithashtu mund t\u00eb k\u00ebrkoj\u00eb nj\u00eb fjal\u00ebkalim p\u00ebr qasje n\u00eb skedarin me \u00e7el\u00ebsin. <\/p>\n<p>N\u00eb versionin e ri t\u00eb OpenSSH gjithashtu \u00ebsht\u00eb shpallur transferimi i algoritmeve q\u00eb p\u00ebrdorin hash SHA-1 n\u00eb kategorin\u00eb e algoritmeve t\u00eb vjetra, lidhur me <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52149\">p\u00ebrmir\u00ebsimin<\/a><\/noindex> efikasiteti i sulmeve t\u00eb kolizionit me nj\u00eb prefiks t\u00eb caktuar (kostoja e gjetjes s\u00eb kolizionit vler\u00ebsohet t\u00eb jet\u00eb rreth 45 mij\u00eb dollar\u00eb). Nj\u00eb nga numrat e ardhsh\u00ebm planifikon t\u00eb \u00e7aktivizoj\u00eb si parazgjedhje mund\u00ebsin\u00eb e p\u00ebrdorimit t\u00eb algoritmit t\u00eb n\u00ebnshkrimit digjital me \u00e7el\u00ebsa publik\u00eb \u00abssh-rsa\u00bb, i cili p\u00ebrmendet n\u00eb RFC origjinal p\u00ebr protokollin SSH dhe mbetet i p\u00ebrhapur gjer\u00ebsisht n\u00eb praktik\u00eb (p\u00ebr t\u00eb kontrolluar p\u00ebrdorimin e ssh-rsa n\u00eb sistemet tuaja, mund t\u00eb provoni t\u00eb lidheni p\u00ebrmes ssh me opsionin \u00ab-oHostKeyAlgorithms=-ssh-rsa\u00bb).<\/p>\n<p>P\u00ebr t\u00eb leht\u00ebsuar kalimin n\u00eb algoritmet e reja n\u00eb OpenSSH, n\u00eb nj\u00eb nga versionet e ardhshme, do t\u00eb jet\u00eb e mundur t\u00eb aktivizohet parazgjedhur konfigurimi UpdateHostKeys, i cili do t\u00eb lejoj\u00eb automatikisht nd\u00ebrrimin e klient\u00ebve n\u00eb algoritme m\u00eb t\u00eb sigurta. Mes algoritmeve t\u00eb rekomanduara p\u00ebr migrim, p\u00ebrmenden rsa-sha2-256\/512 bazuar n\u00eb RFC8332 RSA SHA-2 (e mb\u00ebshtetur nga OpenSSH 7.2 dhe p\u00ebrdoret parazgjedhur), ssh-ed25519 (e mb\u00ebshtetur nga OpenSSH 6.5) dhe ecdsa-sha2-nistp256\/384\/521 bazuar n\u00eb RFC5656 ECDSA (e mb\u00ebshtetur nga OpenSSH 5.7).<\/p>\n<p>N\u00eb versionin OpenSSH 8.2, mund\u00ebsia p\u00ebr lidhje duke p\u00ebrdorur &#171;ssh-rsa&#187; \u00ebsht\u00eb ende e pranishme, por ky algorit\u00ebm \u00ebsht\u00eb hequr nga lista e CASignatureAlgorithms q\u00eb p\u00ebrcakton algoritmet e lejuara p\u00ebr n\u00ebnshkrimin digital t\u00eb certifikatave t\u00eb reja. Po ashtu, algoritmi diffie-hellman-group14-sha1 \u00ebsht\u00eb hequr nga algoritmet e mb\u00ebshtetura si standard p\u00ebr shk\u00ebmbimin e \u00e7el\u00ebsave. Vlen t\u00eb theksohet se p\u00ebrdorimi i SHA-1 n\u00eb certifikata \u00ebsht\u00eb i lidhur me nj\u00eb rrezik shtes\u00eb, pasi sulmuesi ka koh\u00eb t\u00eb pakufizuar p\u00ebr t\u00eb k\u00ebrkuar nj\u00eb kolizion p\u00ebr nj\u00eb certifikat\u00eb ekzistuese, nd\u00ebrsa koha e sulmit ndaj \u00e7el\u00ebsave t\u00eb host-it \u00ebsht\u00eb e kufizuar nga koha e skadimit t\u00eb lidhjes (LoginGraceTime). <\/p>\n<p>Gjat\u00eb ekzekutimit t\u00eb ssh-keygen, tani p\u00ebr default aplikohet algoritmi rsa-sha2-512, i cili s\u00eb pari \u00ebsht\u00eb mb\u00ebshtetur q\u00eb nga OpenSSH 7.2, gj\u00eb q\u00eb mund t\u00eb krijoj\u00eb probleme me pajtueshm\u00ebrin\u00eb kur p\u00ebrpiqeni t\u00eb trajtoni certifikata t\u00eb n\u00ebnshkruara n\u00eb OpenSSH 8.2 n\u00eb sisteme me versione m\u00eb t\u00eb vjetra t\u00eb OpenSSH (p\u00ebr t\u00eb shmangur problemin gjat\u00eb krijimit t\u00eb n\u00ebnshkrimit, mund t\u00eb tregoni qart\u00eb &#171;ssh-keygen -t ssh-rsa&#187; ose t\u00eb p\u00ebrdorni algoritmet e ecdsa-sha2-nistp256\/384\/521, t\u00eb mb\u00ebshtetura q\u00eb nga OpenSSH 5.7).<\/p>\n<p>Ndryshime t\u00eb tjera:<\/p>\n<ul>\n<li class=\"l\"> N\u00eb sshd_config \u00ebsht\u00eb shtuar direktiva Include, e cila lejon p\u00ebrfshirjen e p\u00ebrmbajtjes s\u00eb skedareve t\u00eb tjera n\u00eb pozit\u00ebn aktuale t\u00eb skedarit t\u00eb konfigurimit (kur caktohet emri i skedarit, p\u00ebrdorimi i maskave glob \u00ebsht\u00eb i lejuesh\u00ebm);\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb shtuar opsioni &#171;no-touch-required&#187;, i cili \u00e7aktivizon nevoj\u00ebn p\u00ebr nj\u00eb konfirmim fizik t\u00eb aksesit n\u00eb token gjat\u00eb krijimit t\u00eb \u00e7el\u00ebsit;\n<li class=\"l\"> N\u00eb sshd_config \u00ebsht\u00eb shtuar direktiva PubkeyAuthOptions, e cila bashkon opsione t\u00eb ndryshme t\u00eb lidhura me autentifikimin me \u00e7el\u00ebsa publik. Aktualisht mb\u00ebshtetet vet\u00ebm flag-u &#171;no-touch-required&#187; p\u00ebr t\u00eb shmangur verifikimin e pranis\u00eb fizike gjat\u00eb autorizimit me nj\u00eb token. Po ashtu, n\u00eb skedarin authorized_keys \u00ebsht\u00eb shtuar opsioni &#171;no-touch-required&#187;;\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb shtuar opsioni &#171;-O write-attestation=\\\/path&#187;, i cili lejon regjistrimin e certifikatave shtes\u00eb t\u00eb attestimit FIDO gjat\u00eb krijimit t\u00eb \u00e7el\u00ebsave. OpenSSH p\u00ebr momentin nuk p\u00ebrdor k\u00ebto certifikata, por ato mund t\u00eb p\u00ebrdoren m\u00eb von\u00eb p\u00ebr t\u00eb verifikuar vendndodhjen e \u00e7el\u00ebsit n\u00eb nj\u00eb depo t\u00eb besueshme harduerike;\n<li class=\"l\"> N\u00eb konfigurimet e ssh dhe sshd p\u00ebrmes direktiv\u00ebs IPQoS tani \u00ebsht\u00eb e mundur vendosja e modit t\u00eb prioritetizimit t\u00eb trafikut <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc8622\">LE DSCP<\/a><\/noindex> (Lower-Effort Per-Hop Behavior);\n<li class=\"l\"> N\u00eb ssh, kur \u00ebsht\u00eb vendosur vlera &#171;AddKeysToAgent=yes&#187;, n\u00ebse \u00e7el\u00ebsi nuk p\u00ebrmban nj\u00eb fush\u00eb me koment, ai do t\u00eb shtohet n\u00eb ssh-agent me si koment rrug\u00ebn drejt \u00e7el\u00ebsit. N\u00eb<br \/>\nssh-keygen dhe ssh-agent, si komente gjithashtu tani p\u00ebrdoren etiketat PKCS#11 dhe emri i subjektit X.509 n\u00eb vend t\u00eb rrug\u00ebs p\u00ebr bibliotek\u00ebn;<\/p>\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb shtuar mund\u00ebsia e eksportit PEM p\u00ebr \u00e7el\u00ebsat DSA dhe ECDSA;\n<li class=\"l\"> \u00cbsht\u00eb shtuar nj\u00eb skedar ekzekutues i ri ssh-sk-helper, q\u00eb p\u00ebrdoret p\u00ebr izolimin e bibliotek\u00ebs p\u00ebr aksesin n\u00eb tokenat FIDO\/U2F;\n<li class=\"l\"> N\u00eb ssh dhe sshd \u00ebsht\u00eb shtuar opsioni i nd\u00ebrtimit &#171;&#8212;with-zlib&#187; p\u00ebr kompilimin me mb\u00ebshtetje p\u00ebr bibliotek\u00ebn zlib;\n<li class=\"l\"> N\u00eb p\u00ebrputhje me k\u00ebrkes\u00ebn RFC4253, n\u00eb bannerin e shfaqur gjat\u00eb lidhjes \u00ebsht\u00eb siguruar shfaqja e nj\u00eb paralajm\u00ebrimi p\u00ebr ndalimin e aksesit p\u00ebr shkak t\u00eb tejkalimit t\u00eb limiteve MaxStartups. P\u00ebr t\u00eb thjeshtuar diagnostikimin, n\u00eb titullin e procesit sshd, i duksh\u00ebm gjat\u00eb p\u00ebrdorimit t\u00eb utilitarit ps, \u00ebsht\u00eb siguruar shfaqja e numrit t\u00eb lidhjeve t\u00eb autentikuara n\u00eb at\u00eb moment dhe gjendja e limitit MaxStartups;\n<li class=\"l\"> N\u00eb ssh dhe ssh-agent, kur thirret programa p\u00ebr t\u00eb treguar nj\u00eb ftes\u00eb n\u00eb ekran, e cila caktohet p\u00ebrmes $SSH_ASKPASS, tani d\u00ebrgohet gjithashtu nj\u00eb flamur me tipin e ftes\u00ebs: &#171;confirm&#187; &#8212; dialog konfirmimi (po\/jo), &#171;none&#187; &#8212; mesazh informativ, &#171;blank&#187; &#8212; k\u00ebrkes\u00eb p\u00ebr fjal\u00ebkalim;\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb shtuar nj\u00eb operacion i ri me n\u00ebnshkrime digjitale &#171;find-principals&#187; p\u00ebr t\u00eb k\u00ebrkuar n\u00eb skedarin e allowed-signers t\u00eb p\u00ebrdoruesit, i lidhur me n\u00ebnshkrimin digjital t\u00eb specifikuar;\n<li class=\"l\"> P\u00ebrmir\u00ebsimi i mb\u00ebshtetjes p\u00ebr izolimin e procesit sshd n\u00eb Linux p\u00ebrmes mekanizmit seccomp: jan\u00eb ndaluar thirrjet sistematike IPC, jan\u00eb lejuar clock_gettime64(), clock_nanosleep_time64 dhe clock_nanosleep().\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52369\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.2, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435\u043c \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 OpenSSH 8.2 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b U2F, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0430\u043b\u044c\u044f\u043d\u0441\u043e\u043c FIDO. U2F \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0440\u043e\u0433\u0438\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-42941","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.2 c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FIDO\/U2F | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-17T11:41:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-17T11:41:56+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lan\u00e7imi i OpenSSH 8.2 me mb\u00ebshtetje p\u00ebr token\u00ebt e autentifikimit dyfaktor FIDO\/U2F | ProHoster","description":"Pas kat\u00ebr muajve zhvillimi, lan\u00e7imi \u00ebsht\u00eb prezantuar.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.2 c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FIDO\/U2F | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437","og:url":"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-17T11:41:56+00:00","article:modified_time":"2020-02-17T11:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42941","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:51:33","updated":"2022-09-28 14:18:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/42941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=42941"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/42941\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=42941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=42941"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=42941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}