SecureBox Pro-ssh&terminal

Roumen Petrov

Mayelana nalolu hlelo lokusebenza

I-SecureBox Pro iwuhlelo lokusebenza olunikeza imiyalo evikelekile yegobolondo(ssh) nemiyalo eyengeziwe yokuphatha okhiye, izitifiketi ze-X.509, izinhlabamkhosi nokunye.
Njengoba kucaciswe ku-RFC4251: "I-Shell Evikelekile (i-SSH) iyiphrothokholi yokungena ngemvume okukude okuphephile nezinye izinsiza zenethiwekhi ezivikelekile ngenethiwekhi engavikelekile."

Ngokufanayo nenguqulo engeyona eyochwepheshe, i-SecureBox Pro ihlanganiswe nohlu oluphelele lwemiyalo ye-PKIX-SSH ne-OpenSSL.
Ngokungafani nenguqulo engeyona eyochwepheshe, uhlelo lokusebenza luhlanganiswe ne-emulator yokugcina kanye nesixhumi esibonakalayo somsebenzisi(izikrini) zokuphathwa kokuxhumeka kwegobolondo okuvikelekile, ubunikazi, izikhathi njll.

Uhlelo lokusebenza lusekela "Ukukhanya"(okuzenzakalelayo), "Okumnyama" noma "Isistimu" yetimu yemodi njengoba "Uhlelo" luxhunywe kumodi yokuzenzakalelayo yedivayisi.

Kusuka kuzikrini zohlelo lokusebenza umsebenzisi angachaza imingcele yokuxhumeka kwegobolondo okuvikelekile
futhi uvule ngokuqondile ukuxhumana kwegobolondo okuvikelekile (amaseshini we-ssh).
Iseshini ye-ssh ngayinye ivulwa ewindini letheminali elihlukile.
Amawindi etheminali (amaseshini) angashintshwa ngokuswayipha noma ngokuqondile kumenyu yokuzulazula.

Ezinye izikrini zohlelo lokusebenza zenza kube lula ukuphathwa kobunikazi bomsebenzisi(okhiye be-ssh) abasetshenziswe "Indlela Yokuqinisekisa Ukhiye Womphakathi".
Ukuphatha kuhlanganisa ukusebenzelana kokuthekelisa ukuze wabelane (ukuthumela) ingxenye yomphakathi yokhiye kumlawuli wamaseva egobolondo elivikelekile.
Ukusebenza kokungenisa kuvumela umsebenzisi ukuthi angenise okhiye abayimfihlo ngokukhetha amafayela ngokuqondile noma ukuthumela kwezinye izinhlelo zokusebenza.

Isicelo sinikeza ukufinyelela kukhonsoli yendawo (itheminali).
Itheminali yendawo isebenzisa i-build-in kudivayisi ngayinye ye-android ezelwe-igobolondo.
Umsebenzisi angasebenzisa isethi yesistimu yomyalo wegobolondo ukuphatha amafayela, izinqubo, idivayisi nokunye.
Futhi umsebenzisi angasebenzisa yonke imiyalo ehlanganiswe nohlelo lokusebenza.

Izikrini zetheminali zisebenzisa enye yezinhlelo zombala ezichazwe ngaphambilini ezifana nokuthi "I-Dark Pastels", "Solarized Light", "Solarized Dark" nokunye. Usayizi wombhalo ungaphansi kokuthandwa ngumsebenzisi.
Kusukela kumenyu yokuqukethwe kwesikrini umsebenzisi angenza kusebenze ukusebenza kwebhodi lokunamathisela, ukuthumela umsebenzi noma ukhiye wokulawula, ukubonisa/ukufihla ikhibhodi, ukuze athole "i-CPU wake" noma izikhiya ze-"Wi-Fi" futhi anamathisele amazwibela weskripthi segobolondo.
Amazwibela atholakala kusetshenziswa ubuchwepheshe obukhethekile be-Android - kungaba kusuka kubahlinzeki bamadokhumenti noma abahlinzeki bokuqukethwe.
Futhi ingatholwa ohlelweni lwefayela kodwa kumadivayisi amasha i-OS ikhawulela ukufinyelela kuphela kudatha yohlelo lokusebenza.


I-PKIX-SSH ehlanganisiwe inikezela ngohlu olubanzi kakhulu lwama-algorithms okhiye asekelwayo, ama-chippers, ama-macs
yephrothokholi yegobolondo evikelekile.
Ama-algorithms asekelwe okhiye basesidlangalaleni, asuselwe kuhlelo lokhiye basesidlangalaleni, yilawa:
Ed25519 : ssh-ed25519
I-EC : ecdsa-sha2-nistp256, ecdsa-sha2-nistp384, ecdsa-sha2-nistp521
RSA : rsa-sha2-256, rsa-sha2-512, ssh-rsa
I-DSA: ssh-dss
Okhiye bokuhlela baphathwa ngokugcwele kusukela kuzikrini zohlelo lokusebenza.
Ngaphezu kwalokho kwe-EC ne-RSA kungasetshenziswa okhiye abaphethwe idivayisi.
Ngaphezu kwalokho i-PKIX-SSH isekela ama-algorithms asuselwe kuzitifiketi ze-X.509:
I-EC : x509v3-ecdsa-sha2-nistp256, x509v3-ecdsa-sha2-nistp384, x509v3-ecdsa-sha2-nistp521
RSA : x509v3-rsa2048-sha256, x509v3-ssh-rsa, x509v3-sign-rsa
Ed25519 : x509v3-ssh-ed25519
I-DSA : x509v3-ssh-dss, x509v3-sign-dss
Le sethi yama-algorithms ingasetshenziswa kuphela uma ubunikazi(ukhiye) obususelwa ku-X.509 bungenisiwe.

Ngohlelo olungcono losekelo luhlinzeka ngokusebenza kwengxoxo ye-ssh "ask-pass".
Ngokungafani nebhokisi ledeskithophu lihlotshaniswa nesikrini seseshini yegobolondo evikelekile.


Ithuluzi lomugqa womyalo we-OpenSSL linikeza imiyalo eyisizayo yokuphathwa kokhiye, izitifiketi ze-X.509, izinhlabamkhosi nokunye.
Kubandakanya, kodwa akupheleli lapho,
imiyalo yokuphatha ebalulekile njenge-genpkey ne-pkey, i-ec ne-ecparam, i-rsa, i-dsa ne-dsaparam,
imiyalo yokusebenza ngokhiye - pkeyutl,
imiyalo yokulawula idatha ebalulekile - pkcs12, pkcs8 kanye ne-pkcs7,
imiyalo yokuphatha izitifiketi ze-X.509, uhlu lokuhoxiswa kanye neziphathimandla - x509, crl kanye ne-ca,
isikhathi isitembu igunya ithuluzi - ts.


Phawula: uhlu oluphelele lwemiyalo okuhlanganisa namakhasi okwenziwa ngesandla luyatholakala kusizindalwazi sohlelo lokusebenza.

Yini entsha

Compliant with Material design rules.
User interface supports X.509 based identities - registered by new "import" functionality. Accepted are identities in PKCS#12, PKCS#8 and Legacy formats.
Import uses new "File Selection" activity. Activity is available for other application and allows user to browse file system and select a file on "pick" request.
Packaged with PKIX-SSH v11.6 - fixes crash on 64-bit Android OS-es.
For other improvements and bug fixes see project page.