{"id":42941,"date":"2020-02-17T14:41:56","date_gmt":"2020-02-17T11:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f"},"modified":"2020-02-17T14:41:56","modified_gmt":"2020-02-17T11:41:56","slug":"reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f","title":{"rendered":"L\u00ebshimi i OpenSSH 8.2 me mb\u00ebshtetje p\u00ebr token\u00ebt e autentifikimit dy-faktor\u00ebsh FIDO\/U2F","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Pas kat\u00ebr muajsh zhvillimi <noindex><a rel=\"nofollow\" href=\"https:\/\/lists.mindrot.org\/pipermail\/openssh-unix-announce\/2020-February\/000138.html\">\u00ebsht\u00eb paraqitur<\/a><\/noindex> l\u00ebshimi <noindex><a rel=\"nofollow\" href=\"http:\/\/www.openssh.com\/\">OpenSSH 8.2<\/a><\/noindex>, implementimi i hapur i klientit dhe serverit p\u00ebr t\u00eb punuar me protokollet SSH 2.0 dhe SFTP. <\/p>\n<p>P\u00ebrmir\u00ebsimi kryesor n\u00eb l\u00ebshimin e OpenSSH 8.2 \u00ebsht\u00eb mund\u00ebsia e p\u00ebrdorimit t\u00eb autentifikimit dy-faktosh n\u00ebp\u00ebrmjet pajisjeve q\u00eb mb\u00ebshtesin protokollin <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%A3%D0%BD%D0%B8%D0%B2%D0%B5%D1%80%D1%81%D0%B0%D0%BB%D1%8C%D0%BD%D0%B0%D1%8F_%D0%B4%D0%B2%D1%83%D1%85%D1%84%D0%B0%D0%BA%D1%82%D0%BE%D1%80%D0%BD%D0%B0%D1%8F_%D0%B0%D1%83%D1%82%D0%B5%D0%BD%D1%82%D0%B8%D1%84%D0%B8%D0%BA%D0%B0%D1%86%D0%B8%D1%8F\">U2F<\/a><\/noindex>, i zhvilluar nga aleanca  <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/FIDO_Alliance\">FIDO<\/a><\/noindex>. U2F lejon krijimin e tokeneve t\u00eb lira harduerike p\u00ebr t\u00eb konfirmuar pranin\u00eb fizike t\u00eb p\u00ebrdoruesit, me t\u00eb cilat nd\u00ebrveprohet p\u00ebrmes USB, Bluetooth ose NFC. Pajisje t\u00eb tilla promovohen si nj\u00eb mjet p\u00ebr autentikim me dy faktor\u00eb n\u00eb faqe, tashm\u00eb mb\u00ebshteten nga shfletuesit kryesor\u00eb dhe l\u00ebshohen nga prodhues t\u00eb ndrysh\u00ebm, duke p\u00ebrfshir\u00eb Yubico, Feitian, Thetis dhe Kensington.<\/p>\n<p>P\u00ebr nd\u00ebrveprimin me pajisjet q\u00eb konfirmojn\u00eb pranin\u00eb e p\u00ebrdoruesit, n\u00eb OpenSSH jan\u00eb shtuar lloje t\u00eb reja \u00e7el\u00ebsash 'ecdsa-sk' dhe 'ed25519-sk', t\u00eb cilat p\u00ebrdorin algoritmet e n\u00ebnshkrimit digjital ECDSA dhe Ed25519, n\u00eb kombinim me hash-in SHA-256. Procedurat e nd\u00ebrveprimit me tokent jan\u00eb transferuar n\u00eb nj\u00eb bibliotek\u00eb nd\u00ebrmjet\u00ebse, e cila ngarkohet n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me bibliotek\u00ebn p\u00ebr mb\u00ebshtetje PKCS#11 dhe \u00ebsht\u00eb nj\u00eb mb\u00ebshtetje mbi bibliotek\u00ebn. <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Yubico\/libfido2\">libfido2<\/a><\/noindex>, q\u00eb ofron mjete p\u00ebr komunikim me tokenet mbi USB (mb\u00ebshtet protokollet FIDO U2F\/CTAP 1 dhe FIDO 2.0\/CTAP 2). Biblioteka nd\u00ebrmjet\u00ebse e p\u00ebrgatitur nga zhvilluesit e OpenSSH libsk-libfido2 <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Yubico\/libfido2\/commit\/601565cbfab772e4adda2d6de1d7f46e9d913193\">u p\u00ebrfshi<\/a><\/noindex> si pjes\u00eb thelb\u00ebsore e libfido2, ashtu si <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/Yubico\/libfido2\/commit\/5a1d1c33bff0d84fc56bb7f9dd166dbee294cb77\">drejtuesi HID<\/a><\/noindex> p\u00ebr OpenBSD.<\/p>\n<p>P\u00ebr autentifikim dhe gjenerimin e \u00e7el\u00ebsit, \u00ebsht\u00eb e nevojshme t\u00eb specifikohet n\u00eb cil\u00ebsimet parametri 'SecurityKeyProvider' ose t\u00eb vendoset variabla e ambientit SSH_SK_PROVIDER, duke treguar rrug\u00ebn drejt bibliotek\u00ebs s\u00eb jashtme libsk-libfido2.so (export SSH_SK_PROVIDER=\/path\/to\/libsk-libfido2.so). \u00cbsht\u00eb e mundur t\u00eb nd\u00ebrtohet openssh me mb\u00ebshtetje t\u00eb integruar p\u00ebr bibliotek\u00ebn nd\u00ebrmjet\u00ebse (--with-security-key-builtin), n\u00eb k\u00ebt\u00eb rast \u00ebsht\u00eb e nevojshme t\u00eb vendoset parametri 'SecurityKeyProvider=internal'.<br \/>\nM\u00eb pas, duhet t\u00eb p\u00ebrmendet 'ssh-keygen -t ecdsa-sk' ose, n\u00ebse \u00e7el\u00ebsat tashm\u00eb jan\u00eb krijuar dhe konfiguruar, t\u00eb lidheni me serverin duke p\u00ebrdorur 'ssh'. Gjat\u00eb ekzekutimit t\u00eb ssh-keygen, \u00e7ifti i krijuar i \u00e7el\u00ebsave do t\u00eb ruhet n\u00eb '~\/ .ssh\/id_ecdsa_sk' dhe mund t\u00eb p\u00ebrdoret si \u00e7do \u00e7el\u00ebs tjet\u00ebr. <\/p>\n<p>\u00c7el\u00ebsi publik (id_ecdsa_sk.pub) duhet t\u00eb kopjohet n\u00eb server n\u00eb skedarin authorized_keys. N\u00eb an\u00ebn e serverit, verifikohet vet\u00ebm n\u00ebnshkrimi digjital, nd\u00ebrsa nd\u00ebrveprimi me tokent b\u00ebhet n\u00eb an\u00ebn e klientit (n\u00eb server nuk \u00ebsht\u00eb e nevojshme t\u00eb instalohet libsk-libfido2, por serveri duhet t\u00eb mb\u00ebshtes\u00eb llojin e \u00e7el\u00ebsave 'ecdsa-sk'). \u00c7el\u00ebsi privat i krijuar (id_ecdsa_sk) n\u00eb thelb \u00ebsht\u00eb nj\u00eb descriptor \u00e7el\u00ebsi, q\u00eb formon \u00e7el\u00ebsin real vet\u00ebm n\u00eb kombinim me nj\u00eb sekuenc\u00eb sekrete t\u00eb ruajtur n\u00eb an\u00ebn e tokentit U2F. N\u00ebse \u00e7el\u00ebsi id_ecdsa_sk bie n\u00eb duar t\u00eb nj\u00eb sulmuesi, p\u00ebr t\u00eb kaluar autentikimin, atij gjithashtu do t'i nevojitet qasje n\u00eb tokentin harduerik, pa t\u00eb cilin \u00e7el\u00ebsi privat i ruajtur n\u00eb skedarin id_ecdsa_sk nuk ka vler\u00eb. <\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, nga defaulti, gjat\u00eb \u00e7do operacioni me \u00e7el\u00ebsat (si gjat\u00eb gjenerimit, ashtu edhe gjat\u00eb identifikimit) k\u00ebrkohet nj\u00eb konfirmim lokal i pranish\u00ebm fizikisht nga p\u00ebrdoruesi, p\u00ebr shembull, duke ofruar t\u00eb preket sensori n\u00eb token, e cila e b\u00ebn m\u00eb t\u00eb v\u00ebshtir\u00eb kryerjen e sulmeve t\u00eb larg\u00ebta n\u00eb sistemet me token t\u00eb lidhur. Si nj\u00eb barrier\u00eb tjet\u00ebr mbrojt\u00ebse n\u00eb faz\u00ebn e nisjes, ssh-keygen gjithashtu mund t\u00eb k\u00ebrkoj\u00eb nj\u00eb fjal\u00ebkalim p\u00ebr akses n\u00eb skedarin e \u00e7el\u00ebsit. <\/p>\n<p>N\u00eb versionin e ri t\u00eb OpenSSH, gjithashtu u shpall kalimi i algoritmeve q\u00eb p\u00ebrdorin hash SHA-1 n\u00eb statusin e t\u00eb vjetruarve, n\u00eb lidhje me <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52149\">rritjen<\/a><\/noindex> efektiven dhe kollizionet me nj\u00eb prefiks t\u00eb caktuar (kostoja e gjetjes s\u00eb kolizionit vler\u00ebsohet rreth 45 mij\u00eb dollar\u00eb). N\u00eb nj\u00eb nga publikimet e ardhshme planifikohet t\u00eb \u00e7aktivizohet si parazgjedhje mund\u00ebsia e p\u00ebrdorimit t\u00eb algoritmit t\u00eb n\u00ebnshkrimeve dixhitale me \u00e7el\u00ebs publik \u00abssh-rsa\u00bb, i cili p\u00ebrmendet n\u00eb RFC origjinal p\u00ebr protokollin SSH dhe mbetet i zakonsh\u00ebm n\u00eb praktik\u00eb (p\u00ebr t\u00eb verifikuar p\u00ebrdorimin e ssh-rsa n\u00eb sistemet tuaja, mund t\u00eb provoni t\u00eb lidhni me ssh me opsionin \u00ab-oHostKeyAlgorithms=-ssh-rsa\u00bb.<\/p>\n<p>P\u00ebr t\u00eb leht\u00ebsuar kalimin n\u00eb algoritme t\u00eb reja n\u00eb OpenSSH, n\u00eb nj\u00eb nga versionet e ardhshme do t\u00eb aktivizohet si parazgjedhje konfigurimi UpdateHostKeys, i cili do t\u00eb lejoj\u00eb automatikisht kalimin e klient\u00ebve n\u00eb algorithmat m\u00eb t\u00eb sigurta. Mes algoritmeve t\u00eb rekomanduara p\u00ebr migrim jan\u00eb p\u00ebrmendur rsa-sha2-256\/512 n\u00eb baz\u00eb t\u00eb RFC8332 RSA SHA-2 (i mb\u00ebshtetur nga OpenSSH 7.2 dhe p\u00ebrdorur si parazgjedhje), ssh-ed25519 (i mb\u00ebshtetur nga OpenSSH 6.5) dhe ecdsa-sha2-nistp256\/384\/521 n\u00eb baz\u00eb t\u00eb RFC5656 ECDSA (i mb\u00ebshtetur nga OpenSSH 5.7).<\/p>\n<p>N\u00eb versionin OpenSSH 8.2, mund\u00ebsia e lidhjes duke p\u00ebrdorur 'ssh-rsa' ende \u00ebsht\u00eb l\u00ebn\u00eb, por ky algorit\u00ebm \u00ebsht\u00eb hequr nga lista CASignatureAlgorithms, e cila p\u00ebrcakton algoritmet e lejueshme p\u00ebr n\u00ebnshkrimin digjital t\u00eb certifikatave t\u00eb reja. Po ashtu, algoritmi diffie-hellman-group14-sha1 \u00ebsht\u00eb hequr nga algoritmet standarde t\u00eb shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave. V\u00ebrehet se p\u00ebrdorimi i SHA-1 n\u00eb certifikata \u00ebsht\u00eb i lidhur me nj\u00eb rrezik t\u00eb shtuar, pasi sulmuesi ka koh\u00eb t\u00eb pakufizuar p\u00ebr t\u00eb k\u00ebrkuar nj\u00eb kolizion p\u00ebr nj\u00eb certifikat\u00eb ekzistuese, nd\u00ebrsa koha e sulmit n\u00eb \u00e7el\u00ebsat e hostit \u00ebsht\u00eb e kufizuar nga koh\u00ebzgjatja e lidhjes (LoginGraceTime). <\/p>\n<p>Gjat\u00eb ekzekutimit t\u00eb ssh-keygen tani, algoritmi rsa-sha2-512 p\u00ebrdoret si standard, duke filluar nga OpenSSH 7.2, gj\u00eb q\u00eb mund t\u00eb krijoj\u00eb probleme me kompatibilitetin kur p\u00ebrpiqet t\u00eb p\u00ebrpunoj\u00eb certifikata t\u00eb n\u00ebnshkruara n\u00eb OpenSSH 8.2 n\u00eb sisteme me versione m\u00eb t\u00eb vjetra t\u00eb OpenSSH (p\u00ebr t'u anashkaluar problemi gjat\u00eb krijimit t\u00eb n\u00ebnshkrimit, mund t\u00eb specifikohet qart\u00eb 'ssh-keygen -t ssh-rsa' ose t\u00eb p\u00ebrdoren algoritmet ecdsa-sha2-nistp256\/384\/521, t\u00eb mb\u00ebshtetura q\u00eb nga OpenSSH 5.7).<\/p>\n<p>Ndryshime t\u00eb tjera:<\/p>\n<ul>\n<li class=\"l\"> N\u00eb sshd_config \u00ebsht\u00eb shtuar direktiva Include, e cila lejon t\u00eb p\u00ebrfshihen p\u00ebrmbajtjet e skedave t\u00eb tjera n\u00eb pozitat aktuale t\u00eb skedarit t\u00eb konfigurimit (kur p\u00ebrcaktohet emri i skedarit, lejohet p\u00ebrdorimi i maskave glob);\n<li class=\"l\"> Nj\u00eb opsion \u00ebsht\u00eb shtuar n\u00eb ssh-keygen 'no-touch-required', i cili fik mund\u00ebsin\u00eb e konfirmimit fizik t\u00eb qasjes n\u00eb token gjat\u00eb gjenerimit t\u00eb \u00e7el\u00ebsit.\n<li class=\"l\"> N\u00eb sshd_config \u00ebsht\u00eb shtuar direktiva PubkeyAuthOptions, e cila bashkon opsione t\u00eb ndryshme t\u00eb lidhura me autentifikimin p\u00ebrmes \u00e7el\u00ebsave publik\u00eb. Aktualisht mb\u00ebshtetet vet\u00ebm flag 'no-touch-required' p\u00ebr t\u00eb anashkaluar verifikimin e pranis\u00eb fizike gjat\u00eb autorizimit me token. Po ashtu, n\u00eb skedarin authorized_keys \u00ebsht\u00eb shtuar opsioni 'no-touch-required';\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb shtuar opsioni '-O write-attestation=\/path', i cili lejon regjistrimin e certifikatave t\u00eb tjera t\u00eb atestimit FIDO gjat\u00eb gjenerimit t\u00eb \u00e7el\u00ebsave. OpenSSH aktualisht nuk i p\u00ebrdor k\u00ebto certifikata, por ato mund t\u00eb p\u00ebrdoren m\u00eb von\u00eb p\u00ebr t\u00eb verifikuar vendndodhjen e \u00e7el\u00ebsit n\u00eb nj\u00eb depo t\u00eb besueshme harduerike.\n<li class=\"l\"> N\u00eb konfigurimet ssh dhe sshd, p\u00ebrmes direktiv\u00ebs IPQoS tani \u00ebsht\u00eb e mundur t\u00eb vendosni modin e prioritetit t\u00eb trafikut. <noindex><a rel=\"nofollow\" href=\"https:\/\/tools.ietf.org\/html\/rfc8622\">LE DSCP<\/a><\/noindex> (Lower-Effort Per-Hop Behavior);\n<li class=\"l\"> N\u00eb ssh, kur vendoset vlera 'AddKeysToAgent=yes', n\u00ebse \u00e7el\u00ebsi nuk p\u00ebrmban fush\u00ebn e komenteve, ai do t\u00eb shtohet n\u00eb ssh-agent me sh\u00ebnimin e rrug\u00ebs s\u00eb \u00e7el\u00ebsit si koment.<br \/>\nssh-keygen dhe ssh-agent, si komente n\u00eb \u00e7el\u00ebs tashm\u00eb p\u00ebrdoren gjithashtu etiketat PKCS#11 dhe emri i subjektit X.509 n\u00eb vend t\u00eb rrug\u00ebs s\u00eb bibliotek\u00ebs;<\/p>\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb shtuar mund\u00ebsia e eksportit PEM p\u00ebr \u00e7el\u00ebsat DSA dhe ECDSA;\n<li class=\"l\"> \u00cbsht\u00eb shtuar nj\u00eb skedar i ri ekzekutues ssh-sk-helper, i p\u00ebrdorur p\u00ebr izolimin e bibliotek\u00ebs p\u00ebr qasje n\u00eb tokenat FIDO\/U2F;\n<li class=\"l\"> N\u00eb ssh dhe sshd \u00ebsht\u00eb shtuar opsioni i nd\u00ebrtimit '--with-zlib' p\u00ebr t'u kompaktuar me mb\u00ebshtetje p\u00ebr bibliotek\u00ebn zlib;\n<li class=\"l\"> Sipas k\u00ebrkes\u00ebs RFC4253, banneri i shfaqur gjat\u00eb lidhjes siguron nj\u00eb paralajm\u00ebrim p\u00ebr bllokimin e aksesit p\u00ebr shkak t\u00eb kalimit t\u00eb kufijve MaxStartups. P\u00ebr t\u00eb thjeshtuar diagnostikimin, n\u00eb titullin e procesit sshd, i duksh\u00ebm kur p\u00ebrdoret utilitari ps, \u00ebsht\u00eb siguruar shfaqja e numrit t\u00eb lidhjeve aktualisht t\u00eb autentikuara dhe gjendja e kufirit MaxStartups;\n<li class=\"l\"> N\u00eb ssh dhe ssh-agent, gjat\u00eb thirrjes s\u00eb programit p\u00ebr t\u00eb treguar nj\u00eb ftes\u00eb, e cila p\u00ebrcaktohet n\u00ebp\u00ebrmjet $SSH_ASKPASS, tani gjithashtu d\u00ebrgohet nj\u00eb flag me tipin e ftes\u00ebs: 'confirm' \u2014 dialog konfirmimi (po\/jo), 'none' \u2014 mesazh informues, 'blank' \u2014 k\u00ebrkesa p\u00ebr fjal\u00ebkalim;\n<li class=\"l\"> N\u00eb ssh-keygen \u00ebsht\u00eb shtuar nj\u00eb operacion i ri me n\u00ebnshkrime digjitale 'find-principals' p\u00ebr t\u00eb k\u00ebrkuar n\u00eb skedarin allowed-signers t\u00eb p\u00ebrdoruesit t\u00eb lidhur me n\u00ebnshkrimin digjital t\u00eb specifikuar.\n<li class=\"l\"> \u00cbsht\u00eb p\u00ebrmir\u00ebsuar mb\u00ebshtetja p\u00ebr izolimin e procesit sshd n\u00eb Linux p\u00ebrmes mekanizmit seccomp: jan\u00eb ndaluar thirrjet sistemore IPC, jan\u00eb lejuar clock_gettime64(), clock_nanosleep_time64 dhe clock_nanosleep().\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=52369\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 OpenSSH 8.2, \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u043c SSH 2.0 \u0438 SFTP. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435\u043c \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 OpenSSH 8.2 \u0441\u0442\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b U2F, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0430\u043b\u044c\u044f\u043d\u0441\u043e\u043c FIDO. U2F \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0440\u043e\u0433\u0438\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-42941","post","type-post","status-publish","format-standard","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.2 c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FIDO\/U2F | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-02-17T11:41:56+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-17T11:41:56+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47L\u00ebshimi OpenSSH 8.2 me mb\u00ebshtetje p\u00ebr tokenet e autentifikimit me dy faktor\u00eb FIDO\/U2F | ProHoster","description":"Pas kat\u00ebr muajsh zhvillimi, po prezantohet publikimi","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0420\u0435\u043b\u0438\u0437 OpenSSH 8.2 c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 FIDO\/U2F | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0442\u044b\u0440\u0451\u0445 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437","og:url":"https:\/\/prohoster.info\/sq\/blog\/reliz-openssh-8-2-c-podderzhkoj-tokenov-dvuhfaktornoj-autentifikaczii-fido-u2f","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-17T11:41:56+00:00","article:modified_time":"2020-02-17T11:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42941","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:51:33","updated":"2022-09-28 14:18:02","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/42941","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=42941"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/42941\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=42941"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=42941"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=42941"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}