ืžืขืœื“ื•ื ื’ ืคื•ืŸ OpenSSH 9.0 ืžื™ื˜ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืคื•ืŸ ืกืงืคึผ ืฆื• ื“ื™ SFTP ืคึผืจืึธื˜ืึธืงืึธืœ

ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ OpenSSH 9.0, ืึทืŸ ืึธืคึฟืŸ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ืึท ืงืœื™ืขื ื˜ ืื•ืŸ ืกืขืจื•ื•ืขืจ ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ื“ื™ SSH 2.0 ืื•ืŸ SFTP ืคึผืจืึธื˜ืึธืงืึธืœืก, ืื™ื– ื“ืขืจืœืื ื’ื˜. ืื™ืŸ ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข, ื“ื™ ืกืงืคึผ ื ื•ืฆืŸ ืื™ื– ืกื•ื•ื™ื˜ืฉื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ ืฆื• ื ื•ืฆืŸ SFTP ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ ื“ื™ ืึทื•ื˜ื“ื™ื™ื˜ื™ื“ SCP / RCP ืคึผืจืึธื˜ืึธืงืึธืœ.

SFTP ื ื™ืฆื˜ ืžืขืจ ืคึผืจื™ื“ื™ืงื˜ืึทื‘ืึทืœ ื ืึธืžืขืŸ ื”ืึทื ื“ืœื™ื ื’ ืžืขื˜ื”ืึธื“ืก ืื•ืŸ ื˜ื•ื˜ ื ื™ืฉื˜ ื ื•ืฆืŸ ืฉืึธืœ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื’ืœืึธื‘ ืคึผืึทื˜ืขืจื ื– ืื™ืŸ ื˜ืขืงืข ื ืขืžืขืŸ ืื•ื™ืฃ ื“ื™ ืื ื“ืขืจืข ื‘ืึทืœืขื‘ืึธืก ื–ื™ื™ึทื˜, ื•ื•ืึธืก ืงืจื™ื™ื™ืฅ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคึผืจืึธื‘ืœืขืžืก. ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ, ื•ื•ืขืŸ ื ื™ืฆืŸ SCP ืื•ืŸ RCP, ื“ืขืจ ืกืขืจื•ื•ืขืจ ื“ื™ืกื™ื™ื“ื– ื•ื•ืึธืก ื˜ืขืงืขืก ืื•ืŸ ื“ื™ืจืขืงื˜ืขืจื™ื– ืฆื• ืฉื™ืงืŸ ืฆื• ื“ืขื ืงืœื™ืขื ื˜, ืื•ืŸ ื“ืขืจ ืงืœื™ืขื ื˜ ื ืึธืจ ื˜ืฉืขืงืก ื“ื™ ืงืขืจืขืงื˜ื ืึทืก ืคื•ืŸ ื“ื™ ืื•ืžื’ืขืงืขืจื˜ ืึทื‘ื“ื–ืฉืขืงืฅ ื ืขืžืขืŸ, ื•ื•ืึธืก, ืื™ืŸ ื“ืขืจ ืึทื•ื•ืขืง ืคื•ืŸ ื’ืขื”ืขืจื™ืง ื˜ืฉืขืงืก ืื•ื™ืฃ ื“ื™ ืงืœื™ืขื ื˜ ื–ื™ื™ึทื˜, ืึทืœืึทื•ื– ื“ื™ ื‘ืึทื ื™ืฆืขืจ. ืกืขืจื•ื•ืขืจ ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืื ื“ืขืจืข ื˜ืขืงืข ื ืขืžืขืŸ ื•ื•ืึธืก ื–ืขื ืขืŸ ืึทื ื“ืขืจืฉ ืคื•ืŸ ื“ื™ ื’ืขื‘ืขื˜ืŸ.

ะŸั€ะพั‚ะพะบะพะป SFTP ะปะธัˆั‘ะฝ ัƒะบะฐะทะฐะฝะฝั‹ั… ะฟั€ะพะฑะปะตะผ, ะฝะพ ะฝะต ะฟะพะดะดะตั€ะถะธะฒะฐะตั‚ ั€ะฐัะบั€ั‹ั‚ะธะต ัะฟะตั†ะฟัƒั‚ะตะน, ั‚ะฐะบะธั… ะบะฐะบ ยซ~/ยป. ะ”ะปั ัƒัั‚ั€ะฐะฝะตะฝะธั ะดะฐะฝะฝะพะณะพ ั€ะฐะทะปะธั‡ะธั ะฝะฐั‡ะธะฝะฐั ั OpenSSH 8.7 ะฒ ั€ะตะฐะปะธะทะฐั†ะธะธ SFTP-ัะตั€ะฒะตั€ะฐ ะฟะพะดะดะตั€ะถะธะฒะฐะตั‚ัั ั€ะฐััˆะธั€ะตะฝะธะต ะฟั€ะพั‚ะพะบะพะปะฐ ยซ[ืื™ืžืขื™ืœ ื‘ืืฉื™ืฆื˜]" ืฆื• ื™ืงืกืคึผืึทื ื“ ื“ื™ ~/ ืื•ืŸ ~ ื‘ืึทื ื™ืฆืขืจ/ ืคึผืึทื˜ืก.

ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ SFTP, ื™ื•ื–ืขืจื– ืงืขืŸ ืื•ื™ืš ื˜ืจืขืคืŸ ื™ื ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ื“ื™ ื ื•ื™ื˜ ืฆื• ื˜ืึธืคึผืœ-ืึทื ื˜ืœื•ื™ืคืŸ ืกืคึผืขืฆื™ืขืœืข ืคึผืึทื˜ ื™ืงืกืคึผืึทื ืฉืึทืŸ ืื•ืชื™ื•ืช ืื™ืŸ SCP ืื•ืŸ RCP ืจื™ืงื•ื•ืขืก ืฆื• ืคืึทืจืžื™ื™ึทื“ืŸ ื–ื™ื™ืขืจ ื™ื ื˜ืขืจืคึผืจื™ื˜ื™ื™ืฉืึทืŸ ื“ื•ืจืš ื“ื™ ื•ื•ื™ื™ึทื˜ ื–ื™ื™ึทื˜. ืื™ืŸ SFTP, ืึทื–ืึท ื™ืกืงื™ื™ืคึผื™ื ื’ ืื™ื– ื ื™ื˜ ืคืืจืœืื ื’ื˜ ืื•ืŸ ืขืงืกื˜ืจืข ืงื•ื•ืึธื˜ืขืก ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืึท ื“ืึทื˜ืŸ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ื˜ืขื•ืช. ืื™ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืฆื™ื™ื˜, ื“ื™ OpenSSH ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืืคื’ืขื–ืื’ื˜ ืฆื• ืœื™ื™ื’ืŸ ืึท ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ืฆื• ืจืขืคึผืœืึทืงื™ื™ื˜ ื“ื™ ื ืึทื˜ื•ืจ ืคื•ืŸ ืกืงืคึผ ืื™ืŸ ื“ืขื ืคืึทืœ, ืึทื–ื•ื™ ื˜ืึธืคึผืœ ื™ืกืงื™ื™ืคึผื™ื ื’ ืื™ื– ื’ืขื”ืืœื˜ืŸ ืึท ืคืœืึธ ื•ื•ืึธืก ืื™ื– ื ื™ืฉื˜ ื–ื™ื ืขืŸ ืฆื• ืื™ื‘ืขืจื—ื–ืจืŸ.

ืื ื“ืขืจืข ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ ื“ื™ ื ื™ื™ึทืข ืžืขืœื“ื•ื ื’:

  • Ssh ืื•ืŸ sshd ื”ืึธื‘ืŸ ืึท ื›ื™ื™ื‘ืจื™ื“ ืฉืœื™ืกืœ ื•ื•ืขืงืกืœ ืึทืœื’ืขืจื™ื“ืึทื ืขื ื™ื™ื‘ืึทืœื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜ "[ืื™ืžืขื™ืœ ื‘ืืฉื™ืฆื˜]"(ECDH/x25519 + NTRU Prime), ืงืขื’ื ืฉื˜ืขืœื™ืง ืฆื• ืคึผื™ืงื™ื ื’ ืื•ื™ืฃ ืงื•ื•ืึทื ื˜ื•ื ืงืึธืžืคึผื™ื•ื˜ืขืจืก ืื•ืŸ ืงืึทืžื‘ื™ื™ื ื“ ืžื™ื˜ ECDH/x25519 ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ืžืขื’ืœืขืš ืคึผืจืึธื‘ืœืขืžืก ืื™ืŸ NTRU Prime ื•ื•ืึธืก ืงืขืŸ ืื•ื™ืคืฉื˜ื™ื™ืŸ ืื™ืŸ ื“ืขืจ ืฆื•ืงื•ื ืคึฟื˜. ืื™ืŸ ื“ืขืจ ืจืฉื™ืžื” ืคื•ืŸ ืงืขืงืกืึทืœื’ืึธืจื™ื˜ืžืก, ื•ื•ืึธืก ื“ื™ื˜ืขืจืžืึทื ื– ื“ื™ ืกื“ืจ ืื™ืŸ ื•ื•ืึธืก ืฉืœื™ืกืœ ื•ื•ืขืงืกืœ ืžืขื˜ื”ืึธื“ืก ื–ืขื ืขืŸ ืื•ื™ืกื’ืขืงืœื™ื‘ืŸ, ื“ืขืจ ื“ืขืจืžืื ื˜ ืึทืœื’ืขืจื™ื“ืึทื ืื™ื– ืื™ืฆื˜ ื’ืขืฉื˜ืขืœื˜ ืขืจืฉื˜ืขืจ ืื•ืŸ ื”ืื˜ ืึท ื”ืขื›ืขืจ ื‘ื™ืœื›ืขืจืงื™ื™ึทื˜ ื•ื•ื™ ื“ื™ ECDH ืื•ืŸ DH ืึทืœื’ืขืจื™ื“ืึทืžื–.

    ืงื•ื•ืึทื ื˜ื•ื ืงืึธืžืคึผื™ื•ื˜ืขืจืก ื”ืึธื‘ืŸ ื ืึธืš ื ื™ืฉื˜ ืจื™ื˜ืฉื˜ ื“ื™ ืžื“ืจื’ื” ืคื•ืŸ ืงืจืึทืงื™ื ื’ ื˜ืจืื“ื™ืฆื™ืื ืขืœืŸ ืฉืœื™ืกืœืขืŸ, ืึธื‘ืขืจ ื ื™ืฆืŸ ื›ื™ื™ื‘ืจื™ื“ ื–ื™ื›ืขืจื”ื™ื™ื˜ ื•ื•ืขื˜ ื‘ืึทืฉื™ืฆืŸ ื™ื•ื–ืขืจื– ืคื•ืŸ ืื ืคืืœืŸ ื•ื•ืึธืก ืึทืจื™ื™ึทื ืฆื™ืขืŸ ืกื˜ืึธืจื™ื ื’ ื™ื ื˜ืขืจืกืขืคึผื˜ืึทื“ SSH ืกืขืฉืึทื ื– ืื™ืŸ ื“ืขืจ ื”ืึธืคืขื ื•ื ื’ ืึทื– ื–ื™ื™ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื“ืขืงืจื™ืคึผื˜ื™ื“ ืื™ืŸ ื“ืขืจ ืฆื•ืงื•ื ืคึฟื˜ ื•ื•ืขืŸ ื“ื™ ื ื•ื™ื˜ื™ืง ืงื•ื•ืึทื ื˜ื•ื ืงืึธืžืคึผื™ื•ื˜ืขืจืก ื•ื•ืขืจืŸ ื‘ื ื™ืžืฆื.

  • ื“ื™ "ืงืึธืคึผื™-ื“ืึทื˜ืึท" ื’ืขืฉืคึผืจื™ื™ื˜ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• sftp-server, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื ืึธื›ืžืึทื›ืŸ ื“ืึทื˜ืŸ ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ืขืจ ื–ื™ื™ึทื˜, ืึธืŸ ื˜ืจืึทื ืกื™ื˜ื™ื ื’ ืขืก ืฆื• ื“ืขื ืงืœื™ืขื ื˜, ืื•ื™ื‘ ื“ื™ ืžืงื•ืจ ืื•ืŸ ืฆื™ืœ ื˜ืขืงืขืก ื–ืขื ืขืŸ ืื•ื™ืฃ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืกืขืจื•ื•ืขืจ.
  • ื“ื™ "ืงืคึผ" ื‘ืึทืคึฟืขืœ ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ื“ื™ sftp ื ื•ืฆืŸ ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ื“ืขื ืงืœื™ืขื ื˜ ืฆื• ืฆื™ื™ื›ืขื ืขืŸ ื˜ืขืงืขืก ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ืขืจ ื–ื™ื™ึทื˜.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’