{"id":52210,"date":"2019-11-03T00:00:00","date_gmt":"2019-11-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/v-openssh-dobavlena-podderzhka-universalnoj-dvuhfaktornoj-autentifikatsii"},"modified":"2020-02-18T13:59:53","modified_gmt":"2020-02-18T10:59:53","slug":"v-openssh-dobavlena-podderzhka-universalnoj-dvuhfaktornoj-autentifikatsii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/v-openssh-dobavlena-podderzhka-universalnoj-dvuhfaktornoj-autentifikatsii","title":{"rendered":"N\u00eb OpenSSH \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr autentifikimin univers t\u00eb dyfisht.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb kodin baz\u00eb t\u00eb OpenSSH shtuar<\/a><\/noindex> mb\u00ebshtetje eksperimentale p\u00ebr dy faktor\u00ebt e autentikimit duke p\u00ebrdorur pajisje q\u00eb mb\u00ebshtesin protokollin U2F<\/a><\/noindex>, i zhvilluar nga aleanca FIDO<\/a><\/noindex>. U2F lejon krijimin e tokeneve t\u00eb lira harduerike p\u00ebr t\u00eb konfirmuar pranin\u00eb fizike t\u00eb p\u00ebrdoruesit, me t\u00eb cilat nd\u00ebrveprohet p\u00ebrmes USB, Bluetooth ose NFC. Pajisje t\u00eb tilla promovohen si nj\u00eb mjet p\u00ebr autentikim me dy faktor\u00eb n\u00eb faqe, tashm\u00eb mb\u00ebshteten nga shfletuesit kryesor\u00eb dhe l\u00ebshohen nga prodhues t\u00eb ndrysh\u00ebm, duke p\u00ebrfshir\u00eb Yubico, Feitian, Thetis dhe Kensington.<\/p>\n

P\u00ebr t\u00eb nd\u00ebrvepruar me pajisjet q\u00eb konfirmojn\u00eb pranin\u00eb e p\u00ebrdoruesit, n\u00eb OpenSSH \u00ebsht\u00eb shtuar nj\u00eb tip i ri \u00e7el\u00ebsi \"sk-ecdsa-sha2-nistp256@openssh.com\" (\"ecdsa-sk\"), n\u00eb t\u00eb cilin p\u00ebrdoret algoritmi i n\u00ebnshkrimit digjital ECDSA (Algoritmi i N\u00ebnshkrimit Digjital me Korrente Eliptike) me kurb\u00ebn eliptike NIST P-256 dhe hash-in SHA-256. Procedurat e nd\u00ebrlidhjes me token\u00ebt jan\u00eb transferuar n\u00eb nj\u00eb bibliotek\u00eb nd\u00ebrmjet\u00ebsore, e cila ngarkohet n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme me bibliotek\u00ebn p\u00ebr mb\u00ebshtetje PKCS#11 dhe \u00ebsht\u00eb nj\u00eb mb\u00ebshtjell\u00ebse mbi bibliotek\u00ebn. libfido2<\/a><\/noindex>, q\u00eb ofron mjete p\u00ebr komunikim me tokenet mbi USB (mb\u00ebshtet protokollet FIDO U2F\/CTAP 1 dhe FIDO 2.0\/CTAP 2). Biblioteka nd\u00ebrmjet\u00ebse e p\u00ebrgatitur nga zhvilluesit e OpenSSH libsk-libfido2 u p\u00ebrfshi<\/a><\/noindex> si pjes\u00eb thelb\u00ebsore e libfido2, ashtu si drejtuesi HID<\/a><\/noindex> p\u00ebr OpenBSD.<\/p>\n

P\u00ebr t\u00eb aktivizuar U2F mund t\u00eb p\u00ebrdoret nj\u00eb prerje e fresk\u00ebt e kodit nga repoja<\/a><\/noindex> OpenSSH dhe dega HEAD e bibliotek\u00ebs libfido2<\/a><\/noindex>, n\u00eb t\u00eb cil\u00ebn tashm\u00eb \u00ebsht\u00eb e p\u00ebrfshir\u00eb shtresa e nevojshme p\u00ebr OpenSSH.
\nLibfido2 mb\u00ebshtet funksionimin n\u00eb OpenBSD, Linux, macOS dhe Windows. <\/p>\n

P\u00ebr autentifikimin dhe gjenerimin e \u00e7el\u00ebsit, \u00ebsht\u00eb e nevojshme t\u00eb vendosni variablin e mjedisit SSH_SK_PROVIDER, duke treguar aty rrug\u00ebn p\u00ebr libsk-libfido2.so (export SSH_SK_PROVIDER=\/path\/to\/libsk-libfido2.so), ose t\u00eb definoni bibliotek\u00ebn p\u00ebrmes konfigurimit SecurityKeyProvider, dhe pastaj t\u00eb ekzekutoni \"ssh-keygen -t ecdsa-sk\" ose, n\u00ebse \u00e7el\u00ebsat jan\u00eb krijuar dhe konfiguruar tashm\u00eb, t\u00eb lidheni me serverin duke p\u00ebrdorur \"ssh\". Kur ekzekutoni ssh-keygen, \u00e7ifti i krijuar i \u00e7el\u00ebsave do t\u00eb ruhet n\u00eb \"~\/.ssh\/id_ecdsa_sk\" dhe mund t\u00eb p\u00ebrdoret nj\u00ebsoj si \u00e7el\u00ebsat e tjer\u00eb. <\/p>\n

\u00c7el\u00ebsi publik (id_ecdsa_sk.pub) duhet t\u00eb kopjohet n\u00eb server n\u00eb skedarin authorized_keys. T\u00eb dh\u00ebnat e n\u00ebnshkruar digjitale kontrollohen vet\u00ebm n\u00eb an\u00ebn e serverit, nd\u00ebrsa nd\u00ebrveprimi me token\u00ebt realizohet n\u00eb an\u00ebn e klientit (n\u00eb server nuk nevojitet t\u00eb instalohet libsk-libfido2, por serveri duhet t\u00eb mb\u00ebshtes\u00eb tipin e \u00e7el\u00ebsave \"ecdsa-sk\"). \u00c7el\u00ebsi privat i gjeneruar (id_ecdsa_sk) n\u00eb thelb \u00ebsht\u00eb nj\u00eb descriptor i \u00e7el\u00ebsit, q\u00eb formon \u00e7el\u00ebsin real vet\u00ebm n\u00eb kombinim me nj\u00eb varg sekret, t\u00eb ruajtur n\u00eb an\u00ebn e tokenit U2F.<\/p>\n

N\u00eb rast se \u00e7el\u00ebsi id_ecdsa_sk i bie n\u00eb duar t\u00eb nj\u00eb sulmuesi, p\u00ebr t\u00eb p\u00ebrfunduar autentifikimin, ai gjithashtu do t\u00eb k\u00ebrkoj\u00eb qasje n\u00eb tokenin harduerik, pa t\u00eb cilin \u00e7el\u00ebsi i mbyllur i ruajtur n\u00eb skedarin id_ecdsa_sk \u00ebsht\u00eb i padobish\u00ebm. P\u00ebrve\u00e7 k\u00ebsaj, si rregull, gjat\u00eb ekzekutimit t\u00eb \u00e7do operacioni me \u00e7el\u00ebsat (si gjat\u00eb gjenerimit ashtu edhe gjat\u00eb autentifikimit) k\u00ebrkohet konfirmimi lokal i pranis\u00eb fizike t\u00eb p\u00ebrdoruesit, p\u00ebr shembull, ofrohet q\u00eb t\u00eb prek\u00ebsh sensorin n\u00eb token, gj\u00eb q\u00eb e v\u00ebshtir\u00ebson kryerjen e sulmeve t\u00eb larg\u00ebta n\u00eb sistemet me token t\u00eb lidhur. Si nj\u00eb mas\u00eb tjet\u00ebr mbrojtjeje, n\u00eb faz\u00ebn e nisjes s\u00eb ssh-keygen mund t\u00eb caktohet gjithashtu nj\u00eb fjal\u00ebkalim p\u00ebr qasje n\u00eb skedarin e \u00e7el\u00ebsit. <\/p>\n

\u00c7el\u00ebsi U2F mund t\u00eb shtohet n\u00eb ssh-agent p\u00ebrmes \"ssh-add ~\/.ssh\/id_ecdsa_sk\", por ssh-agent duhet t\u00eb jet\u00eb nd\u00ebrtuar me mb\u00ebshtetje p\u00ebr \u00e7el\u00ebsat \"ecdsa-sk\", duhet t\u00eb ket\u00eb nj\u00eb mb\u00ebshtjell\u00ebs libsk-libfido2 dhe agjenti duhet t\u00eb ekzekutohet n\u00eb sistemin, n\u00eb t\u00eb cilin lidhet tokeni.
\nNj\u00eb tip i ri \u00e7el\u00ebsi \"ecdsa-sk\" \u00ebsht\u00eb shtuar sepse formati ecdsa-\u00e7el\u00ebsave OpenSSH ndryshon nga formati U2F p\u00ebr n\u00ebnshkrimet digjitale ECDSA duke pasur fusha shtes\u00eb.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b U2F, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0430\u043b\u044c\u044f\u043d\u0441\u043e\u043c FIDO. U2F \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0440\u043e\u0433\u0438\u0435 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 USB, Bluetooth \u0438\u043b\u0438 NFC. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u044e\u0442\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445, \u0443\u0436\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u043c\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0442\u0441\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52210","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Mb\u00ebshtetje p\u00ebr autentifikimin dy-faktorik universalis \u00ebsht\u00eb shtuar n\u00eb OpenSSH | ProHoster","description":"N\u00eb baz\u00ebn e kodit OpenSSH \u00ebsht\u00eb shtuar mb\u00ebshtetje eksperimentale p\u00ebr autentikimin me dy faktor\u00eb p\u00ebrdorim.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-openssh-dobavlena-podderzhka-universalnoj-dvuhfaktornoj-autentifikatsii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0439 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0412 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/v-openssh-dobavlena-podderzhka-universalnoj-dvuhfaktornoj-autentifikatsii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-02T21:00:00+00:00","article:modified_time":"2020-02-18T10:59:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52210","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 02:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:47:23","updated":"2026-01-24 02:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=52210"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52210\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=52210"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=52210"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=52210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}