Sirrin da ba shi da inganci matsalar kwantena ce, ba ka'idar kalmar sirri ba
Wataƙila bayanan shiga da aka ƙi ba su taɓa isa ƙofar ba. Kwatanta kwantenan shigarwa, matakin tabbatarwa da kuma asusun kansa da farko.
Ganin saƙon da ya ce sirri ba shi da inganci yakan haifar da ƙarshe ɗaya: VPN ba ya son alamomin rubutu. Wannan ƙarshen yawanci kuskure ne, domin saƙon yakan fito daga kulawa ta gida kafin kowace ƙofa ta duba asusun. Zane biyu suna isar da kalmar sirri ɗaya, filin hoto da fayil ɗin bayanan shiga, kuma suna gazawa a wurare daban-daban. Kwatanta kwantenan kafin ka sauƙaƙa kalmar sirri da ta kasance daidai tun farko.
Kuskuren yana zuwa kafin ƙofar
Tabbatarwa ta gida, rumbun sirri da aka kulle, wakili da ya ɓace da fayil ɗin bayanan shiga mara kyau duk suna haifar da gazawar da mai amfani ke fuskanta a matsayin ƙi ɗaya. Babu ɗayansu da ya shafi uwar garken tabbatarwa. Ƙin da ƙofar kanta ke yi wani lamari ne daban, kuma yawanci yana zuwa da saƙo daban da lokaci daban. Yana faruwa ne bayan ramin ya wanzu kuma an aika bayanan shiga.
Don haka tambaya ta farko ba wace haruffa suka halatta ba ce, amma a ina ƙoƙarin ya tsaya. Abokin ciniki da bai taɓa buɗe haɗi ba, babu wanda ya ƙi shi. Rubuta matakin da ka gani, domin kowane mataki na gaba ya dogara da wannan rabe-raben.
Bambancin yana kuma canza wanda zai gyara. Matsalar kwantena ta na'urar ce da mai ita, yayin da ƙin asusu na wanda ke tafiyar da tsarin tabbatarwa.
Kwatanta kwantenan, ba haruffa ba
Filin kalmar sirri na hoto, shigarwar sarƙar maɓalli, fayil ɗin bayanan shiga mai layi biyu da sirrin aikin sarrafa kansa kowanne yana ɗauke da ƙima ɗaya a cikin ambulan daban. Ambulan yana da nasa ka'idoji, kuma waɗannan ka'idojin ne yawanci ke karyewa. Ƙimar ba safai ta zama matsala ba; isar da ƙimar ita ce matsala. Ka raba tunanin biyu kuma ganewar cutar za ta fi guntu.
| Where the value stops | What you see | What you check | Who owns the fix |
|---|---|---|---|
| GUI field or managed profile | A validation message before any connection opens | The selected authentication mode and whether the field holds the secret or the username | The device owner or the profile author |
| Keychain or secret agent | A prompt that keeps reappearing, or an agent error | Whether the agent is unlocked and holds an entry for this profile | The user who owns the keychain |
| Two-line credential file | A prompt for a password that was already supplied | Line count, line order and whether a trailing newline is present | Whoever generated the file |
| Shell argument or environment | Works interactively but fails in automation | Whether the shell expanded, trimmed or logged the value | Whoever wrote the automation |
Zaɓuɓɓukan abokin ciniki na OpenVPN 2.6 na al'umma sun bayyana wannan fayil ɗin layi biyu don auth-user-pass, gami da halin da layin kalmar sirri ba ya nan: abokin ciniki yakan nemi shi. Wannan daki-daki ɗaya yana bayyana rukuni na rahotanni irin na neman kalmar sirri da na riga na bayar. Yana kuma gaya maka cewa layi na biyu da ba komai a ciki yanayi ne mai ma'ana, ba zaɓin tsari marar lahani ba.
Alamomin zance wani rufi ne kuma: alamomin zance a cikin fayil ɗin bayanan shiga na fili ana adana su a matsayin bayanai, yayin da harsashi ke cire su kafin shirin ya ga komai. Hali ɗaya ba shi da lahani a wuri ɗaya kuma yana da tsari a wani wuri. Tebur ba zai iya gaya maka wane kwantena abokin cinikinka ya yi amfani da shi ba, don haka karanta saitin abokin cinikin kansa kafin ka zaɓi layi.
Hutun layi ma na tsari ne. Fayil mai filaye da layi ke raba ba zai iya ɗaukar ƙima da ke ɗauke da sabon layi ba, kuma wannan iyakancewar tsarin ce, ba hukunci kan ƙarfin kalmar sirri ba. Yi amfani da hanyar isar da tsarin da aka goyi bayan tura, maimakon yanke sirrin don ya dace da fayil na wucin gadi.
Gina fayil ɗin bayanan shiga ba tare da lalacewar harsashi ba
Hanyar gida mafi aminci tana ajiye sirrin daga tarihin harsashi da jerin hujjojin tsari. Karanta filayen biyu ta hanyar hulɗa, sannan rubuta layukan biyu da abokin ciniki ke tsammani. Sauran komai na iya kasancewa a cikin fayil ɗin saitin da ke da sauƙin dubawa.
read -r VPN_USER
read -rs VPN_PASS
printf '%s\n%s\n' "$VPN_USER" "$VPN_PASS" > /etc/openvpn/client/creds
chmod 600 /etc/openvpn/client/creds
openvpn --config /etc/openvpn/client/office.conf --auth-user-pass /etc/openvpn/client/credsUmarnin biyu na farko suna karanta sunan mai amfani sannan kalmar sirri ba tare da nuna ta ba, na uku yana rubuta layukan biyu, na huɗu yana ƙuntata fayil ɗin, na ƙarshe kuma yana fara abokin ciniki da wannan fayil. Lura cewa read -r yana kiyaye bayanan baya, kuma irin wannan daki-daki ne ke mayar da kalmar sirri mai aiki zuwa wadda ba ta aiki idan an bar ta.
Guji gina fayil ɗin da sauyi marar zance ko takardar nan da ke cike da faɗaɗawar harsashi. Dukansu na iya canza haruffa kafin su isa fayil ɗin, kuma gazawar da ke haifarwa tana kama da ƙin VPN domin kalmar sirri a faifai da gaske ta bambanta da wadda ka sani. Idan kana zargin haka, kwatanta tsawon fayil ɗin a bayti da ƙimar da ake tsammani, ba tare da buga sirrin kansa ba. Bambanci na bayti ɗaya ko biyu shi ne alamar hatsarin zance.
Karanta matakin daga kuskure na farko
Ka riƙe saƙon farko na musamman daga ƙoƙari ɗaya, sannan ka rarraba shi. Kuskuren tabbatarwa na gida, maɓallin sirri da ya ɓace, wakilin sirri da ba ya samuwa da gazawar tabbatarwa a ƙofa sakamako huɗu ne daban-daban da masu su huɗu. Ɗaya ne kawai daga cikinsu ya shafi asusun.
Idan da gaske ƙofar tana ƙin bayanan shiga da aka isar daidai, duba asusun, tsarin tabbatarwa da duk ƙalubalen da ake buƙata tare da mai gudanarwa. Gazawar tabbatarwa ta gama-gari ba ta ambaci harafin da aka hana ba.
Ka dawo da ƙimar da aka amince da ita ta hanyar da ta dace, maimakon rage ta zuwa haruffa da lambobi. Ka'idar kalmar sirri ta mai gudanarwa ce, kuma hanyar keke-keke da ke kayar da ita a asirce ba gyara ba ce. Tana kuma ɓoye ainihin lahani daga mutum na gaba, wanda zai fuskanci irin wannan kuskure da kalmar sirri mafi rauni kuma ba wani tunani mafi kyau.