Jerin takardun shaida na VPN: abin da rijistar CA ke iya tabbatarwa
Fayil a kan uwar garke, rijistar CA, jerin sokewa da teburin zaman suna amsa tambayoyi daban-daban. Ka raba su lokacin da kake jera shaidun VPN.
Kofarka tana karbar takardar shaidar abokin ciniki da ba ta taba gani ba, domin abin da aka saita ta da shi mai bayarwa ne amintacce, kuma takardar tana zuwa yayin musafaha. Haka ne ya kamata ka’idar ta yi aiki, kuma shi ya sa jerin fayiloli a kan uwar garke ya zama mummunan jeri. Mai bayarwa ya san abin da ya kirkira, uwar garke ta san abin da ya hada, kuma yanayin sokewa ya san abin da aka janye. Jerin da ya hada wadannan rikodi uku yana karshe da ikirarin wani abu da babu dayansu ya fada.
Kofa tana amincewa da mai bayarwa, ba jerin fayiloli ba
Tabbatarwa tana kwatanta takardar da aka gabatar da anka na amincewa, don haka shaida da mai bayarwa daya ya kirkira jiya tana hadawa ba tare da ta taba kasancewa a faifan uwar garke ba. Babu abin da ake bukatar kwafi domin hakan ta faru, kuma babu wanda zai amince da ita da hannu. Don haka rikodin uwar garke da kanta suna bayyana zuwa, ba yawan shaidun da za su iya zuwa ba.
Rabin da ya koma baya shi ma ba shi da dadi. Fayil na iya dauke da takardun da suka kare, wadanda aka soke, da shaidun da aka bayar don na’urorin da ba a taba tura su ba. Kidaya fayiloli yana amsa nawa fayiloli suke, wanda tambaya ce da babu wanda ya yi. Ka fara daga rikodin da ke dauke da ma’ana maimakon haka.
Tambayoyi hudu, rikodi hudu daban-daban
Kowane nau’in rikodi yana amsa tambaya daya da kyau da sauran da muni, shi ya sa rahoton da ya hada su yake kama da cikakke alhali yana da kuskure a wata hanya ta musamman. Teburin da ke kasa yana jera su bisa tambayar da suke warwarewa, ba bisa tsarin da ke samar da su ba.
| Question you are answering | Where the answer lives | How quickly it changes | What it will never show |
|---|---|---|---|
| Was this identity ever created? | The issuer's issuance database | Only when something is issued | Whether the device still exists |
| Is a copy sitting on this host? | The paths you actually inspected | Whenever anyone copies files | Certificates that were never copied here |
| Has the issuer withdrawn it? | Published revocation state | When the issuer next publishes | Withdrawals that are not published yet |
| Is it connected right now? | The live session table | Continuously | Anything about past or future sessions |
Ajiyar takardun shaida na jama’a ba asiri ba ce, tunda ba ta dauke da maballan sirri, amma kuma ba abin rabawa ba ce. Batutuwa da sunayen na’urori suna bayyana bayanan aiki, kuma rahoton ya kamata ya kasance tare da masu bukatarsa. Maballan sirri suna kasancewa gaba daya a wajen jerin, domin jerin yana bukatar bayanan meta, ba takardun izini ba.
Mai bayarwa da lambar jeri su ne kawai maballi mai tsayawa
Ana sake amfani da batutuwa kuma ana sake amfani da sunayen fayiloli, don haka sunan da ya bayyana na’ura daya bara na iya bayyana wata a yanzu. Babu dayansu da ya zama maballi, kuma rahoton da aka gina a kan dayansu zai karshe hada shaida biyu a layi daya.
Biyun mai bayarwa da lambar jeri suna bayyana takarda ta musamman, kuma duka filayen suna fitowa daga takardar kanta. Rubuta su tare da batun, kwanakin inganci, tushen da kwafin ya fito, da mutum ko na’urar da ke da alhakin. Kara yanayin sokewa da turawa a matsayin filaye daban tare da lokutan lura nasu, domin takarda da ke cikin lokacin ingancinta ba ta samun izini kai tsaye ba. Wadannan gaskiyoyi biyu suna rayuwa a tsarin daban, kuma hada su yana ɓoye yanayin da aka janye shaida alhali fayilinta yana kama da sabo.
Karanta takarda daya a lokaci daya
Alamar duniya da ke bazuwa a cikin fayil ba hanyar sako ba ce, kuma tana ɓoye wane fayil ya samar da wane fitarwa. Karanta bayanan meta ga kowace takarda, kuma karanta gefen sokewa daga kayan aikin kanta. Bayanin OpenSSL x509 yana lissafa filayen da waɗannan zaɓuɓɓukan ke bugawa.
openssl x509 -in <cert>.pem -noout -issuer -serial -subject -dates -fingerprint -sha256
openssl crl -in <issuer>.crl -noout -text | head -n 40Don PKI na Easy-RSA da ake sarrafawa, tambayi rumbun adana bayanan bayarwa ta hanyar aikin da kayan aikin ke tallafawa maimakon ɗaukan tsarin fayiloli, kuma ka rike asalin a matsayin karantawa kawai yayin da ake tattara jerin. Tsarin rijistar yana da tsari sosai don kidaya shigarwar ingantattu da lissafa waɗanda aka janye ba tare da buɗe rumbun da hannu ba.
grep -c '^V' pki/index.txt
grep '^R' pki/index.txt | cut -f4,5Jerin da zai tsira daga bayarwa ta gaba
Zubar da fayil sau ɗaya yana tsufa a lokacin da aka bayar da takarda ta gaba, don haka gina rahoton daga aikin bayarwa kuma bar shi ya sabunta a matsayin wani ɓangare na aiki na yau da kullum. Wannan kuma yana sa rahoton ya zama mai sake samarwa, wanda ke da muhimmanci lokacin da mutane biyu suka sami sabani kan abin da aka bayar.
Yi amfani da sakamakon don shawarwarin sabuntawa da ficewa, ba a matsayin aikin tebur ba. Share kwafin gida ba ya lalata kwafin nesa da suka riga suka wanzu. Janye shaidar ta hanyar aikin sokewa da izini da aka saita, sannan rubuta janyewar tare da kwananta. Shaidar da ta ɓace daga uwar garke amma mai bayarwa har yanzu ya amince da ita ba a fitar da ita ba, kuma wannan bambanci ne ke raba ingantaccen jeri da wanda kawai ke kwantar da hankali.