Kuskuren curl 77: wuraren tabbatar da takardar shaida a shigar VPN

Kuna manna umarnin shigarwa na layi ɗaya daga wata jagora, danna Enter kuma ku sami curl: (77). Saƙon ya ambaci wuraren tabbatar da takardar shaida, don haka ilhami ita ce a ɗauka cewa takardar shaidar mai ba da VPN ta lalace sannan a nemi tutar da ke tsallake tabbatarwa. Wannan fassarar ba daidai ba ce, kuma yin aiki da ita yana mai da matsalar fayil ta gida shawarar tsaro. Bari mu koma tun daga farko.

Mataki 1: karanta abin da lambar ke nufi

Kuskure 77 ya shafi shigarwar CA ta gida: curl bai iya karanta ko loda kayan takardar shaidar da aka gaya masa ya amince da su ba. Kuskure 60 shine na ɗaya bangaren, lokacin da sarkar uwar garken ba ta inganta. Suna fitowa kusa da juna a cikin jagorori kuma suna nufin abubuwa masu saɓani.

Idan fitowar ku ta ce 77, uwar garken ba ta taɓa zama matsalar ba. Abokin ciniki bai iya buɗe fayil ɗin da yake so ya yi amfani da shi don dubawa ba, kuma wannan matsalar hanya ce, izini ko fakiti a injin ku.

Mataki 2: karanta umarnin da kuka kwafa

Umarnin da aka kwafa suna ɓoye haruffa. Ƙaramin -l shine --list-only, wanda ya shafi lissafin ka’idoji. Babban -L shine --location, wanda ke bin juyar da HTTP. Ba wasu rubutun dabam ba ne, kuma jagorar da ke rubuta ɗaya yayin da take kwatanta ɗayan tana tura mutane hanyar juyawa da ba a taɓa nufi ba.

Bin juyawa ba ya gyara hanyar ajiyar amincewa, kuma ba ya tabbatar da cewa uwar garken ƙarshe ita ce mawallafin da kuke nufi. Idan umarnin ya fito daga post ɗin dandalin tattaunawa, sake buga shi daga umarnin aikin da kansa maimakon amincewa da abin da aka manna.

Mataki 3: gano wace shigarwar CA wannan ginin ke amfani da ita

Fara da gano binary ɗin, domin amsar ta dogara da yadda aka haɗa shi:

curl --version

Yi rikodin sigar da TLS backend. Ginin da ke amfani da ajiyar amincewa ta asali yana karanta ajiyar tsarin ta ɗakin karatu na TLS, yayin da ginin da aka nufa zuwa gaɗa yana karanta fayil. Bayyanannen --cacert, saitin CURL_CA_BUNDLE ko murfin shell na iya wuce ɗayan, don haka shigar da fakiti bazai taɓa fayil ɗin da ke gazawa da gaske ba.

Don ajiyar da ta dogara da fayil, duba abubuwa uku a jere: shin hanyar tana nan, shin asusun da ke kira zai iya karanta ta, kuma shin tana ɗauke da kayan CA da kuke tsammani. Gaɗa mai kuskuren izini tana gazawa kamar wadda babu, kuma dukansu suna gazawa kafin wata tattaunawa ta hanyar sadarwa game da uwar garken.

Mataki 4: gyara shigarwar, ba tabbatarwa ba

Mayar da tsarin amincewa da ake tallafawa ta hannun wanda ya mallake shi: fakitin rarraba, sarrafa tsarin ku, ko canjin yanayi da aka rubuta. Manufar ita ce shigarwar CA mai iya karantawa kuma daidai ga wannan binary ɗin.

Kada ku canza URL zuwa HTTP, kada ku ƙara --insecure, kuma kada ku amince da takardar shaidar da aka kwafa daga wani saukar da ba a bayyana ba. Kowanne daga waɗannan canje-canjen yana canza abin da kuke shirye ku karɓa maimakon gyara abin da curl bai iya karantawa ba, kuma canjin yakan fi tsawon rai fiye da lamarin.

Bayanin lambobin shine katalojin kuskuren curl, kuma ya isa a karanta shi da kyau sau ɗaya.

Mataki 5: sauke, duba, sannan aiwatar

Kawo mai shigarwa cikin fayil maimakon tura shi cikin shell a cikin umarni ɗaya. Wannan canji ɗaya yana raba jigilar da za ku iya dubawa daga lambar da ke gudana da ikonku.

curl -fL -o vpn-installer.sh https://example.invalid/install.sh
file vpn-installer.sh
head -n 40 vpn-installer.sh

Duba cewa amsar ita ce rubutun da kuke tsammani ba shafin kuskuren HTML ba, sanarwar juyawa ko fayil mara komai. Idan mawallafin ya ba da checksum ko sa hannu, tabbatar da shi ta hanyar tsarin fitar da su da aka rubuta, ba wata ƙimar da aka kawo a cikin zaren dandalin guda ɗaya ba.

Ka tuna abin da HTTPS ya yi da abin da bai yi ba. Ya tabbatar da jigilar zuwa uwar garken da kuka tuntuɓa; bai duba abin da ke cikin rubutun ba, kuma ba ya gaya muku ko mawallafin abin dogaro ne.

Mataki 6: raba matakan shigarwa daban

Saukar da fayil, shigar da abokin ciniki, saita rami da tabbatar da hanyoyi ayyuka huɗu ne da nau’ikan gazawa huɗu daban-daban. Yin su ɗaya bayan ɗaya yana nufin kuskure daga baya a jeri yana da sanannen dalili ɗaya maimakon ’yan takara huɗu.

Idan shigarwar ta yi nasara kuma ramin ya tashi, tabbatar da hanyoyi da wata manufa ta gaske kafin ku rufe tikitin. An gyara kuskuren curl lokacin da curl -I https://example.invalid mai sauƙi ya sake aiki, ba lokacin da mai shigarwa ya daina gunaguni ba.