Tsekani malonda
Nkhani

iOS 7.0.6 ndi SSL zosintha zambiri

Daniel Hruska
10

Masiku angapo apitawo, Apple idatulutsa zana Kusintha kwa iOS 7.0.6, za kumasulidwa kumene tinakudziwitsani. Ambiri mwina anadabwa kuti pomwe anamasulidwanso akale iOS 6 (mtundu 6.1.6) ndi Apple TV (mtundu 6.0.2). Ichi ndi chigamba chachitetezo, kotero Apple sakanatha kusinthira gawo la zida zake zokha. Kuphatikiza apo, vutoli limakhudzanso OS X. Malinga ndi mneneri wa Apple Trudy Muller, zosintha za OS X zidzatulutsidwa posachedwa.

Kodi nchifukwa ninji pali chinyengo chochuluka chozungulira chosinthachi? Cholakwika mu kachidindo kachitidwe kameneka kamalola kutsimikizira kwa seva kuti kulambalale pakatumizidwa kotetezedwa pagawo lachiyanjano lachitsanzo cha ISO/OSI. Makamaka, cholakwika ndikukhazikitsa koyipa kwa SSL pagawo lomwe kutsimikizira satifiketi ya seva kumachitika. Ndisanafotokoze zambiri, ndimakonda kufotokoza mfundo zazikuluzikulu.

SSL (Secure Socket Layer) ndi protocol yomwe imagwiritsidwa ntchito polumikizana motetezeka. Imakwaniritsa chitetezo pogwiritsa ntchito kubisa ndi kutsimikizika kwa maphwando olankhulana. Kutsimikizira ndikutsimikizira zomwe zaperekedwa. M'moyo weniweni, mwachitsanzo, mumatchula dzina lanu (chidziwitso) ndikuwonetsa ID yanu kuti munthu winayo atsimikizire (kutsimikizirani). Kutsimikizika kumagawika m’chitsimikiziro, chimene chiri chitsanzo chabe chokhala ndi chizindikiritso cha dziko, kapena chizindikiritso, pamene munthu amene akufunsidwayo angadziŵe chizindikiritso chanu popanda inu kum’fikitsira icho pasadakhale.

Tsopano nditha kufika ku satifiketi ya seva. M'moyo weniweni, satifiketi yanu ikhoza kukhala, mwachitsanzo, khadi ya ID. Chilichonse chimakhazikitsidwa ndi asymmetric cryptography, pomwe mutu uliwonse uli ndi makiyi awiri - achinsinsi komanso pagulu. Kukongola konse kwagona kuti uthengawo ukhoza kusungidwa ndi kiyi yapagulu ndikusindikizidwa ndi kiyi yachinsinsi. Izi zikutanthauza kuti mwini wake yekha wa kiyi yachinsinsi ndi amene angasinthe uthengawo. Panthawi imodzimodziyo, palibe chifukwa chodandaula za kusamutsa chinsinsi chachinsinsi kumagulu onse olankhulana. Satifiketiyo ndiye fungulo lapagulu la mutu wophatikizidwa ndi chidziwitso chake ndikusainidwa ndi oyang'anira certification. Ku Czech Republic, mmodzi mwa akuluakulu a certification ndi, mwachitsanzo, Česká Pošta. Chifukwa cha satifiketi, iPhone imatha kutsimikizira kuti ikulankhulana ndi seva yomwe wapatsidwa.

SSL imagwiritsa ntchito kubisa kwa asymmetric pokhazikitsa kulumikizana, komwe kumatchedwa Kugwirana chanza kwa SSL. Pakadali pano, iPhone yanu imatsimikizira kuti ikulankhulana ndi seva yopatsidwa, ndipo nthawi yomweyo, mothandizidwa ndi kubisa kwa asymmetric, kiyi yofananira imakhazikitsidwa, yomwe idzagwiritsidwe ntchito pazolumikizana zonse zotsatira. Symmetric encryption ndi yachangu. Monga momwe zalembedwera kale, cholakwikacho chimachitika kale pakutsimikizira seva. Tiyeni tiwone ma code omwe amachititsa kuti dongosololi likhale pachiwopsezo.

static OSStatus
SSLVerifySignedServerKeyExchange(SSLContext *ctx, bool isRsa,
SSLBuffer signedParams, uint8_t *signature, UInt16 signatureLen)

{
   OSStatus err;
   …

   if ((err = SSLHashSHA1.update(&hashCtx, &serverRandom)) != 0)
       goto fail;
   if ((err = SSLHashSHA1.update(&hashCtx, &signedParams)) != 0)
       goto fail;
       goto fail;
   if ((err = SSLHashSHA1.final(&hashCtx, &hashOut)) != 0)
       goto fail;
   …

fail:
   SSLFreeBuffer(&signedHashes);
   SSLFreeBuffer(&hashCtx);
   return err;
}

Mu chikhalidwe chachiwiri if mukhoza kuwona malamulo awiri pansipa kulephera;. Ndipo chimenecho ndi chopunthwitsa. Khodi iyi ndiye imapangitsa kuti lamulo lachiwiri lichitidwe panthawi yomwe satifiketi iyenera kutsimikiziridwa kulephera;. Izi zimapangitsa kuti chikhalidwe chachitatu chidumphe if ndipo sipadzakhala kutsimikizira kwa seva konse.

Zotsatira zake ndikuti aliyense wodziwa zachiwopsezochi atha kupatsa iPhone yanu satifiketi yabodza. Inu kapena iPhone yanu, mudzaganiza kuti mukulumikizana ndi encrypted, pomwe pali wowukira pakati panu ndi seva. Kuukira koteroko kumatchedwa kuukira munthu wapakati, omwe amamasulira pafupifupi m'Chicheki ngati kuukira munthu wapakati kapena munthu mwa. Kuwukira pogwiritsa ntchito cholakwika ichi mu OS X ndi iOS chitha kuchitidwa ngati wowukirayo ndi wozunzidwayo ali pa netiweki yomweyo. Choncho, ndi bwino kupewa pagulu Wi-Fi Intaneti ngati simunasinthe iOS wanu. Ogwiritsa ntchito a Mac ayenerabe kusamala za maukonde omwe amalumikizana nawo komanso masamba omwe amayendera pamanetiwekiwo.

Ndizosakhulupirira kuti cholakwika chachikulu choterechi chikadakhala bwanji mumitundu yomaliza ya OS X ndi iOS. Kungakhale kuyesa kosagwirizana kwa code yolembedwa bwino. Izi zikutanthauza kuti wokonza mapulogalamu ndi oyesa alakwitsa. Izi zitha kuwoneka ngati sizokayikitsa kwa Apple, ndiye zongoyerekeza kuti cholakwikachi ndi chakumbuyo, chotchedwa. khomo lakumbuyo. Si chifukwa chachabe chimene amanena kuti zabwino backdoors kuoneka ngati wochenjera zolakwa. Komabe, awa ndi malingaliro osatsimikizirika okha, kotero tidzaganiza kuti wina anangolakwitsa.

Ngati simukudziwa ngati makina anu kapena msakatuli wanu ali ndi kachilomboka, pitani patsambali gotofail.com. Monga mukuonera mu zithunzi pansipa, Safari 7.0.1 mu Os X Mavericks 10.9.1 lili cholakwika, pamene Safari mu iOS 7.0.6 chirichonse chiri bwino.

Zida: iMore, REUTERS
Gwero
Zokambirana
Mitu: , , , , , , , , ,

Zogwirizana



Ambiri amawerenga zolemba

.