I-OpenSSH iyithuluzi lokuxhumana elihamba phambili lokungena ngemvume ukude usebenzisa iphrothokholi ye-SSH
Ngemva kwezinyanga eziyisithupha zokuthuthukiswa , kwamenyezelwa ukukhishwa kwenguqulo entsha ye-OpenSSH 9.1 , inguqulo ebonakala ngokuqukethe ukulungiswa kwamaphutha, okuhlanganisa ukulungiswa kobuthakathaka obuningana obungaba khona obubangelwa izinkinga zememori.
Kulabo abangajwayelene ne-OpenSSH, iyiqoqo lezinhlelo zokusebenza ezivumela ukuxhumana okubethelwe ngenethiwekhi kusetshenziswa iphrothokholi ye-SSH. Yadalwa njengendlela ehlukile yamahhala nevulekile yohlelo lwe-Secure Shell oluyimfihlo.
Izici ezintsha eziyinhloko ze-OpenSSH 9.1
Kule nguqulo entsha ye-OpenSSH 9.1, njengoba kushiwo ekuqaleni, inguqulo iyalungisa futhi phakathi kwezinkinga ezixazululwe kulokhu kukhishwa, isibonelo, ikhambi lokugcwala kwe-byte eyodwa kukhodi yokucubungula amabhena e-SSH kusevisi ye-ssh-keyscan.
Enye inkinga exazululwe kule nguqulo entsha ye-OpenSSH 9.1 kwakuwukubiza kabili umsebenzi we-free() uma kwenzeka iphutha lapho kubalwa ama-hashes amafayela kukhodi yokudala nokuqinisekisa amasignesha edijithali ku-utility ye-ssh-keygen.
Ngaphezu kwalokho, kuthiwa iphrojekthi ephathekayo I-OpenSSH manje isayina ukuthi izibophezele futhi ikhiphe amathegi isebenzisa ukusekelwa kwakamuva kokusayina kwe-git SSH. Okhiye bokusayina bohlu lonjiniyela bafakwe endaweni yokugcina njenge-.git_allowed_signers futhi isayinwe ngokhiye we-PGP osasetshenziselwa ukusayina
khulula ama-artifact, ngakho-ke kungase kube nenkinga yokungahambisani.
Ngokuphathelene nezinguquko ezenzekayo, kushiwo ukuthi iziqondiso ze-SetEnv kumafayela wokucushwa kwe-ssh_config kanye ne-sshd_config manje zisebenzisa inani lokuvela kokuqala kwe-environment variable uma ichazwa izikhathi eziningi ekucushweni (ngaphambilini, ukuvela kokugcina kwasetshenziswa).
Ngokubiza insiza ye-ssh-keygen ngefulegi elithi "-A" (elikhiqiza zonke izinhlobo zokhiye bokusingatha ngokuzenzakalela), ukukhiqizwa kokhiye be-DSA, abangakaze basetshenziswe ngokuzenzakalelayo iminyaka eminingana, kukhutshaziwe.
I-sftp-server kanye ne-sftp zisebenzisa isandiso se- " [email protected] " ukuvumela iklayenti ukuthi licele amagama abasebenzisi namagama eqembu ahambisana nesethi ethile yezihlonzi zezinombolo (i-uid kanye ne-gid). Ku-sftp, lesi sandiso sisetshenziselwa ukubonisa amagama lapho kufakwa ohlwini okuqukethwe kwesikhombisi.
I-sftp-server isebenzisa isandiso "sesiqondisi sasekhaya" ukuze yandise izindlela ze-~/ kanye ne-~user/, okuyindlela ehlukile yesandiso " [email protected] " esasiphakanyiswe ngaphambilini ngezinjongo ezifanayo (isandiso "sesiqondisi sasekhaya" sasiphakanyiswe ukuze sibekwe ezingeni elifanayo futhi sesivele sivunyelwe amanye amakhasimende).
Ku -sftp, izimpikiswano ezengeziwe ziyavunyelwa kunketho ethi "-D" (isb., "/usr/libexec/sftp-server -el debug3"), kuyilapho i-ssh-keygen ivumela ukusetshenziswa kwe-"-U" (kusetshenziswa i-ssh-agent) kanye nokusebenza kwe-"-Y sign" ukunquma ukuthi okhiye abazimele babekwe ku-ssh-agent.
Ezinye izinguquko ezenziwe kule nguqulo entsha zifaka:
- Kwengezwe ikhono le-ssh-keygen ne-sshd ukuze ucacise isikhathi se-UTC lapho kunqunywa isitifiketi nezikhawu zokuqinisekisa eziyinhloko, ngaphezu kwesikhathi sesistimu.
- Shayela kabili ku-free() lapho uphatha amaphutha kuhlelo lokusebenza lokhiye we-ssh.
- Umyalelo we-RequiredRSasize wengezwe ku-ssh naku-sshd, okukuvumela ukuthi uchaze usayizi omncane ovunyelwe wokhiye be-RSA. Ku-sshd, okhiye abancane kunalokhu bazozitshwa, kuyilapho kokuthi ssh, bazonqamula uxhumano.
- Uhlelo oluphathekayo lwe-OpenSSH luguqulelwe ukuze lusebenzise okhiye be-SSH ukuze basayine ngedijithali ukuzibophezela nomaka ku-Git.
Okokugcina, uma unesithakazelo sokufunda okwengeziwe, ungathola imininingwane kusixhumanisi esilandelayo.
Ungayifaka kanjani i-OpenSSH 9.1 ku-Linux?
Kulabo abanesifiso sokufaka le nguqulo entsha ye-OpenSSH ezinhlelweni zabo, okwamanje bangakwenza lokho ngokulanda ikhodi yomthombo bese beyihlanganisa kumakhompyutha abo.
Lokhu kungenxa yokuthi inguqulo entsha ayikafakwa ezindaweni zokugcina izimpahla ezinkulu ze-Linux. Ukuze uthole ikhodi yomthombo, ungasebenzisa isixhumanisi esilandelayo.
Uma ukulanda sekuqediwe, manje sizokhipha i-compress iphakheji ngomyalo olandelayo:
tar -xvf kuvulwa-9.1.tar.gz
Sifaka umkhombandlela owakhiwe:
cd kuvulwa-9.1
Futhi singenza ukuhlanganiswa ngemiyalo elandelayo:
./configure --prefix = / opt --sysconfdir = / etc / ssh yenza ukufaka