Munguva pfupi yapfuura Vagadziri veOpenSSH vakangozivisa iyo vhezheni 8.0 cheichi chishandiso chekuchengetedza kure kure neiyo SSH protocol inenge yakagadzirira kubudiswa.
Damian Miller, mumwe wevanogadzira hukuru hweprojekiti, anongodaidzwa kuti nharaunda yemushandisi zvekushandisa izvi saka vanogona kuzviedza sezvo, nemaziso akakwana, zvese zvikanganiso zvinogona kubatwa munguva.
Vanhu vanosarudza kushandisa iyi nyowani vhezheni vanozogona Kwete chete ivo vanozokubatsira kuyedza kuita uye kuona bugs pasina kukundikana, iwe zvakare unokwanisa kuwana matsva matsva kubva kwakasiyana maodha.
Padanho rekuchengetedza, semuenzaniso, matanho ekuderedza e scp protocol kushaya simba akaunzwa mune iyi nyowani vhezheni yeOpenSSH.
Mukuita, kuteedzera mafaera ne scp kunenge kwakachengetedzeka muOpenSSH 8.0 nekuti kuteedzera mafaera kubva kure dhairekitori kune dhairekitori renzvimbo kuchakonzera scp kutarisa kana mafaira akatumirwa neserura achienderana nechikumbiro chakapihwa.
Kana nzira iyi ikasaitwa, server yekurwisa yaigona, nepfungwa, kukanzura chikumbiro ichi nekuendesa mafaera akashata pachinzvimbo cheavo vakatanga vakumbira.
Nekudaro, kunyangwe paine matanho ekuderedza aya, OpenSSH haikurudzire kushandiswa kweiyo scp protocol, nekuti "yechinyakare, isingachinjiki, uye yakaoma kugadzirisa."
"Tinokurudzira kushandisa zvimisikidzo zvemazuva ano sftp uye rsync pakuendesa mafaira," Miller akayambira.
Chii ichi chitsva cheOpenSSH chinopa?
Mupakeji «Nhau» yeiyi vhezheni itsva inosanganisira dzinoverengeka shanduko dzinogona kukanganisa masisitimu aripo.
Somuenzaniso, padanho rambotaurwa reiyo scp protocol, sezvo iyi protocol yakavakirwa kune iri kure shell, hapana imwe nzira yechokwadi yekuti mafaera akatamiswa kubva kumutengi anoenderana neiyo kubva kuseva.
Kana paine mutsauko pakati peiyo generic mutengi uye sevha yekuwedzera, mutengi anogona kuramba mafaera kubva kuseva.
Neichi chikonzero, iyo OpenSSH timu yakapa scp ine nyowani "-T" mureza iyo inoremadza vatengi-padivi cheki kuti vadzorezve kurwisa kwakatsanangurwa pamusoro.
Pane demond sshd nhanho: timu yeOpenSSH yakabvisa rutsigiro rweakadzvinyirirwa "host / port" syntax.
Iyo yakatsaurwa-yakakamurwa inomiririra / chiteshi yakawedzerwa muna 2001 pachinzvimbo cheiyo "host: port" syntax yevashandisi ve IPv6.
Nhasi slash syntax iri nyore kuvhiringidzwa neCIDR notation, inoenderanawo neOpenSSH.
Zvimwe zvitsva
Naizvozvo, zvinokurudzirwa kubvisa iyo yekumberi slash notation kubva kuTeereraAddress uye PermitOpen. Pamusoro peichi chinjo, isu tine maficha matsva akawedzerwa kuOpenSSH 8.0. Izvi zvinosanganisira:
Nzira yekuyedza yekuchinjana kwakakosha kwequantum makomputa akaonekwa mune iyi vhezheni.
Chinangwa cheiri basa ndechekugadzirisa matambudziko ekuchengetedza anogona kumuka kana uchigovera makiyi pakati pemapato, zvichipiwa kutyisidzirwa mukufambira mberi kwetekinoroji, sekuwedzera kwesimba remakomputa emachina, algorithms nyowani emakomputa ehuwandu.
Kuti uite izvi, nzira iyi inovimba neiyo quantum kiyi yekuparadzira mhinduro (yakapfupikiswa QKD muChirungu).
Mhinduro iyi inoshandisa zvivakwa zvakawanda kuchinjisa ruzivo rwepachivande, senge kiyi yekristptographic.
Mukutaura, kuyera iyo quantum system inoshandura iyo system. Zvakare, kana mubiridzi akaedza kutora krisptographic kiyi yakaburitswa kuburikidza nekuitwa kweQKD, zvaizosiya zvigunwe zvemunwe zveOepnSSH.
Kune rumwe rutivi, saizi yekumusoro yeiyo RSA kiyi iyo yakagadziridzwa kuita makumi matatu nemakumi matatu nemaviri emabhiti.
Pane dzimwe nhau dzakataurwa ndedzinotevera:
- Kuwedzera rutsigiro rweECDSA makiyi muPKCS tokeni
- mvumo ye "PKCS11Provide = hapana" kudarika zviitiko zvinotevera zvePKCS11Paira rairo mu ssh_config.
- Meseji yegogi inowedzerwa kumamiriro ezvinhu uko kubatana kwatyoka mushure mekuyedza kumhanyisa rairo apo sshd_config ForceCommand = yemukati-sftp kudzvinyirira kuri kushanda.
Kuti uwane rumwe ruzivo, izere runyorwa rwezvimwe zvinowedzerwa uye zvigadziriso zvebug zviripo pane yepamutemo peji.
Kuti uedze iyi vhezheni itsva unogona kuenda kune inotevera chinongedzo.