Ukukhutshwa kwe-GnuPG 2.2.17 kunye neenguqu zokuhlasela ukuhlaselwa kwiiseva eziphambili

ipapashiwe ukukhutshwa kwezixhobo zokusebenza I-GnuPG 2.2.17 (iGNU yabucala), iyahambelana nemigangatho ye-OpenPGP (I-RFC-4880) kunye ne-S/MIME, kwaye ibonelela ngezixhobo zokufihla idatha, ukusebenza ngeesignesha zombane, ulawulo oluphambili kunye nokufikelela kwiivenkile eziphambili zoluntu. Njengesikhumbuzo, isebe le-GnuPG 2.2 libekwe njengokhupho lophuhliso oluqhubeka nokongeza iimpawu ezintsha;

Umba omtsha uphakamisa amanyathelo okuchasa ukuhlaselwa kwiiseva eziphambili, ebangela ukuba i-GnuPG ijingale kwaye ingakwazi ukuqhubeka nokusebenza de isatifikethi esiyingxaki sicinywe kwivenkile yasekuhlaleni okanye ivenkile yesatifikethi yenziwe ngokutsha ngokusekelwe kwizitshixo zikawonke-wonke eziqinisekisiweyo. Ukhuseleko olongezelelweyo lusekwe ekungahoyweni ngokupheleleyo ngokungagqibekanga zonke iisignitsha zedijithali zomntu wesithathu ezifunyenwe kwiiseva eziphambili zokugcina. Masikhumbule ukuba nawuphi na umsebenzisi unokongeza esakhe isiginitsha yedijithali kwizatifikethi ezingafunekiyo kumncedisi ophambili wokugcina, osetyenziswa ngabahlaseli ukwenza inani elikhulu lemisayino enjalo (ngaphezu kwekhulu lamawaka) kwisatifikethi sexhoba, ukusetyenzwa kwayo. iphazamisa ukusebenza kwesiqhelo kwe GnuPG.

Ukungahoyi iisignesha zedijithali zomntu wesithathu kulawulwa yinketho ethi "self-sigs-only", evumela kuphela iisayinwe zabadali ukuba zilayishwe kwizitshixo. Ukubuyisela ukuziphatha kwakudala, unokongeza "ukhetho lwe-keyserver-olukhethayo-kuphela, akukho-ngenisa-icocekile" kwi-gpg.conf. Ngaphezu koko, ukuba ngexesha lokusebenza kuchongiwe ukungenisa kwenani leebhloko, okuya kubangela ukuphuphuma kogcino lwendawo (pubring.kbx), endaweni yokubonisa impazamo, iGnuPG ijika ngokuzenzekelayo imowudi yokungahoyi utyikityo lwedijithali (β€œself-sigs -kuphela, ngaphandle-kucocekile ").

Ukuhlaziya izitshixo usebenzisa indlela Uvimba weefayili zeWebhu (WKD) Yongeza i-"--locate-external-key" ukhetho olunokusetyenziselwa ukwenza kwakhona ugcino lwesatifikethi ngokusekelwe kwizitshixo eziqinisekisiweyo zikawonke-wonke. Xa usenza umsebenzi "--auto-key-retrieve", indlela ye-WKD ngoku ikhethwa ngaphezu kweeseva eziphambili. Undoqo we-WKD kukubeka izitshixo zikawonke-wonke kwiwebhu ngekhonkco kwisizinda esichazwe kwidilesi yeposi. Umzekelo, kwidilesi "[imeyile ikhuselwe]"Isitshixo sinokukhutshelwa ngekhonkco "https://example.com/.well-known/openpgpkey/hu/183d7d5ab73cfceece9a5594e6039d5a".

umthombo: opennet.ru

Yongeza izimvo