OpenSSH 8.2 ืžืขืœื“ื•ื ื’

OpenSSH ืื™ื– ืึท ื’ืึทื ืฅ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ SSH 2.0 ืคึผืจืึธื˜ืึธืงืึธืœ, ืื•ื™ืš ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ SFTP ืฉื˜ื™ืฆืŸ.

ื“ืขืจ ืžืขืœื“ื•ื ื’ ื›ื•ืœืœ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ FIDO / U2F ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืึธื˜ืขื ื˜ืึทืงื™ื™ื˜ืขืจื–. FIDO ื“ืขื•ื•ื™ืกืขืก ื–ืขื ืขืŸ ืื™ืฆื˜ ื’ืขืฉื˜ื™ืฆื˜ ืื•ื ื˜ืขืจ ื“ื™ ื ื™ื™ึทืข ืฉืœื™ืกืœ ื˜ื™ื™ืคึผืก "ecdsa-sk" ืื•ืŸ "ed25519-sk", ืฆื•ื–ืึทืžืขืŸ ืžื™ื˜ ื“ื™ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืกืขืจื˜ื™ืคื™ืงืึทืฅ.

ื“ืขืจ ืžืขืœื“ื•ื ื’ ื›ื•ืœืœ ืึท ื ื•ืžืขืจ ืคื•ืŸ ืขื ื“ืขืจื•ื ื’ืขืŸ ื•ื•ืึธืก ืงืขืŸ ื•ื•ื™ืจืงืŸ ื™ื’ื–ื™ืกื˜ื™ื ื’
ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทื ื–:

  • ืจื™ืžื•ื•ื•ื™ื ื’ "ssh-rsa" ืคึฟื•ืŸ CASignatureAlgorithms ืจืฉื™ืžื•ืช. ืื™ืฆื˜, ื•ื•ืขืŸ ืกื™ื™ื ื™ื ื’ ื ื™ื™ึท ืกืขืจื˜ื™ืคื™ืงืึทืฅ, "rsa-sha2-512" ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜;
  • ื“ื™ diffie-hellman-group14-sha1 ืึทืœื’ืขืจื™ื“ืึทื ืื™ื– ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ ืคึฟืึทืจ ื‘ื™ื™ื“ืข ื“ื™ ืงืœื™ืขื ื˜ ืื•ืŸ ื“ื™ ืกืขืจื•ื•ืขืจ;
  • ื•ื•ืขืŸ ื ื™ืฆืŸ ื“ื™ ืคึผืก ื ื•ืฆืŸ, ื“ื™ sshd ืคึผืจืึธืฆืขืก ื˜ื™ื˜ืœ ืื™ืฆื˜ ื“ื™ืกืคึผืœื™ื™ื– ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืงืึทื ืขืงืฉืึทื ื– ื•ื•ืึธืก ืคึผืจื•ึผื•ื•ื˜ ืฆื• ืึธื˜ืขื ื˜ืึทืงื™ื™ื˜ ืื•ืŸ ื“ื™ ืœื™ืžืึทืฅ ืงืึทื ืคื™ื’ื™ืขืจื“ ืžื™ื˜ ืžืึทืงืกืกื˜ืึทืจื˜ื•ืคึผืก;
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื ื™ื™ึท ืขืงืกืขืงื•ื˜ืึทื‘ืœืข ื˜ืขืงืข ssh-sk-helper. ืขืก ืื™ื– ื“ื™ื–ื™ื™ื ื“ ืฆื• ื™ื–ืึธืœื™ืจืŸ FIDO / U2F ืœื™ื™ื‘ืจืขืจื™ื–.

ืขืก ืื™ื– ืื•ื™ืš ืžื•ื“ื™ืข ืึทื– ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ SHA-1 ื›ืึทืฉื™ื ื’ ืึทืœื’ืขืจื™ื“ืึทื ื•ื•ืขื˜ ื‘ืึทืœื“ ื–ื™ื™ืŸ ื“ื™ืกืงืึทื ื˜ื™ื ื™ื•ื“.

ืžืงื•ืจ: linux.org.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’