Ngenxa yemicimbi enxulumene nokutyikitywa kwezitshixo kwi-OpenPGPInguqulelo ye-OpenPGP ikhutshiwe (RFC-4880) kunye ne-S / MIME ehambelana nemigangatho ye-GnuPG 2.2.17 (Guard Guard yabucala), ebonelela ngezixhobo zokubethela idatha, iisiginitsha ze-elektroniki, ulawulo oluphambili, kunye nokufikelela kwiivenkile eziphambili zikawonkewonke.
Olu hlaziyo lwenziwe ukusukela ukuphela kukaJuni Amanye amalungu kwaye asondele kuluntu lwe-OpenPGP babhengeze ukuba izitshixo zabo zikawonke-wonke bezizaliswe ngamanzi atyikityo, kwezinye iimeko ezifikelela ngaphezulu kwe-150.000 ngexesha lokupapashwa kweli nqaku, ukongeza zonke ezi tyikityo ziyahambelana phakathi koninzi lweeseva ezikhoyo.
Kananjalo, ukuba nenani elikhulu lotyikityo kwiqhosha loluntu akufuneki kuchaphazele ukusebenza komgaqo olandelwayo, nangona kunjalo, iinkqubo ezininzi kunye neenkqubo ezisebenzisa i-OpenPGP azenzelwanga ukuphatha ngaphezulu kwesiginitsha kwisityikityi sikarhulumente, ke xa kusetyenzwa Izitshixo zezikhukula zithatha ixesha elide okanye zixhomekeke, zinika i-OpenPGP ukuba ingenakusebenziseka xa uhlaziya, ungenisa ngaphakathi, okanye usebenzisa izitshixo zoluntu ezisengozini.
Le ngxaki ixeliwe kwixa elidlulileyo njengemeko yokuba sesichengeni ngenxa yesigqibo sokuyilwa sokuvumela nabani na ukuba asayine izitshixo zoluntu zabanye abantu. Le "mpazamo yoyilo" khange ilungiswe kwaye kude kube ngoku ayikathotyelwa.
Inguqulelo entsha yeGnuPG ifika ukusombulula ingxaki
Inguqulelo entsha iphakamisa amanyathelo okulwa uhlaselo lweeseva eziphambili, ebangela ukuba i-GnuPG ixhome kwaye iphephe ukuqhubeka nomsebenzi de isatifikethi sengxaki sisuswe kwivenkile yasekhaya okanye isitolo sevenkile siphinde senziwe ngokusekwe kumaqhosha oluntu aqinisekisiweyo.
Ukhuseleko olongezelelekileyo lusekwe kugqityelo olungagqibekanga lwazo zonke iisiginitsha zedijithali izatifikethi zomntu wesithathu ezifunyenwe kwiseva zokugcina ezingundoqo.
Kubalulekile ukuba ukhumbule ukuba nawuphina umsebenzisi angongeza utyikityo lwedijithali kwizatifikethi ezingalunganga kwivenkile yesitshixo, esetyenziswa ngabahlaseli ukwenza inani elikhulu lala masiginesha (ngaphezulu kwekhulu lamawaka) isatifikethi sexhoba, apho ukuqhubekeka kuphazamisa Umsebenzi oqhelekileyo we-GnuPG.
Ukungahoyi iisiginitsha yomntu wesithathu yedijithali ilawulwa kukhetho "lwe-auto-sigs-only", evumela kuphela iisayineli zabadali bazo ukuba balayishwe izitshixo.
Ukubuyisela indlela yokuziphatha yakudala kwi-gpg.conf ungongeza ubumbeko «keyserver-options no-self-sigs-only, no-import-clean«.
Kwangelo xesha, ukuba ngexesha lomsebenzi, ukungeniswa kwenani leebhloko kulungisiwe, okuya kuthi kubangele ukugcwala kokugcina kwendawo (i-pubring.kbx), i-GnuPG endaweni yokubonisa impazamo, isebenze ngokuzenzekelayo indlela yokungahoyi iisiginitsha idijithali ("ii-auto-firs, ukungenisa ngaphakathi-ukucoceka").
Ukuhlaziya amaqhosha usebenzisa indlela esisiseko yeWebhu (WKD), ukhetho '--locate-external-key', Esinokusetyenziselwa ukwenza kwakhona ivenkile yesitifiketi esekwe kumaqhosha oluntu aqinisekisiweyo.
Ngomsebenzi «--auto-key-retrieve«, Inkqubo yeWKD ngoku ikhethwayo kwiiseva eziphambili.
Umongo we-WKD kukubeka izitshixo zikawonkewonke kwiwebhu ngekhonkco kwidomeyini echazwe kwidilesi ye-imeyile.
Umzekelo, kwidilesi «test@example.com«, Isitshixo sinokukhutshelwa ngekhonkco«https://example.com/.well-known/openpgpkey/hu/183d7d5ab73cfceece9a5594e6039d5a«.
Uyifaka njani i-GnuPG 2.2.17 kwi-Ubuntu nakwiziphumo?
Okwangoku inguqulelo entsha ye-GnuPG 2.2.17 ayifumaneki kwindawo yokugcina esemthethweni Ubuntu, Ke ngoko, kwabo bakhetha le ndlela yokufaka, kuya kufuneka balinde ukuba iphakheji ihlaziywe, mhlawumbi phakathi evekini kwaye iphakheji iyafumaneka.
Kulungiselelwe abo sele befuna ukwenza uhlaziyo ukusombulula iingxaki, kufuneka bakhuphele ikhowudi yemvelaphi yeGnuPG kwiwebhusayithi yayo esemthethweni, ikhonkco yile.
Emva koko kuya kufuneka ukuba bavule iziphu ezikhutshelweyo kwaye bazibeke kwisiphelo sendlela ngaphakathi kwifolda enesiphumo.
Unokwenza oku ngokuchwetheza kwisiphelo sendlela osivulileyo:
tar xvzf gnupg-2.2.17.tar.bz2
Emva koko siza kungena kwifolda eyenziwe nge:
cd gnupg-2.2.17
Kwisiphelo, kuya kufuneka bachwetheze le miyalelo ilandelayo:
./configure make make check make install