Kalmar sirri ta VPN daidai ba za ta iya maye gurbin takardar shaidar da ta ɓace ba

Bayanan shiga daidai ne, bayanin martaba ana shigo da shi cikin tsafta, kuma haɗin yana gazawa kafin tabbatarwa ta cika. A Windows saƙon na iya zama kuskure 798, game da takardar shaidar da ba a samo don hanyar EAP ba. A OpenVPN tarihin abokin ciniki yana nuna musafaha na TLS wanda ba ya gamsar da uwar garke. Dukansu suna bayyana abu ɗaya da ya ɓace: takardar shaidar abokin ciniki da ya kamata abokin ciniki ya gabatar.

Kalmar sirri tana tabbatar da sanin wani sirri; takardar shaida tana tabbatar da mallakar maɓalli, kuma ɗaya ba ya maye gurbin ɗayan.

Kalmar sirri ba ita ce matsalar ba

Kuskure 798 gazawar neman takardar shaida ce. An nemi abokin ciniki takardar shaidar da ta dace da hanyar tabbatarwar da aka saita, ya bincika ajiyarsa kuma bai sami wani abu mai amfani ba. Wannan na iya nufin takardar shaidar ba ta nan, tana nan ba tare da maɓallin sirrinta ba, ta ƙare, ko an ajiye ta inda binciken bai isa ba. Sake gwada kalmar sirri ba zai iya canza ɗaya daga cikin waɗannan yanayi ba, shi ya sa kuskuren yake dawowa ko da bayanan shiga daidai ne.

Karanta saƙon kafin ka yi aiki da shi. Kin amincewa da bayanan shiga, gazawar neman takardar shaida da gazawar musafaha na TLS abubuwa uku ne daban-daban, kuma ɗaya ne kawai ya shafi kalmar sirri.

Abin da ajiyar abokin ciniki dole ta ƙunsa

Abubuwa biyu ne ke ciki. Dole a shigar da takardar shaidar abokin ciniki ga mai amfanin da ke tafiyar da abokin cinikin VPN, tare da maɓallin sirrinta, kuma dole a amince da tushen da ya bayar. Fayil na .cer yana ƙunshe da takardar shaidar jama'a kawai, don haka ba zai iya tabbatar da komai shi kaɗai ba. A cikin mai kula da takardun shaida na Windows, asalin abokin ciniki yana cikin ajiyar sirri ta mai amfani na yanzu, kuma tushen yana cikin ajiyar tushen da aka amince da su.

Shigar da asalin cikin ajiyar na'ura, ko cikin ajiyar tushe kawai, ba ya cika binciken da aka yi nufin ajiyar sirri ta mai amfani. Duba ajiyar, alamar maɓallin sirri da kwanakin inganci tare, sannan ka sake kunna abokin ciniki domin ya sake karanta ajiyar.

Kayayyaki biyu, bayanin shiga ɗaya da ya ɓace

Uwargiyar OpenVPN suna buƙatar takardar shaidar abokin ciniki bisa tsohuwar dabi'a. Ƙara auth-user-pass ga abokin ciniki yana aika sunan mai amfani da kalmar sirri, kuma musafaha na TLS har yanzu yana neman takardar shaida, don haka kalmar sirri ita kaɗai ba za ta iya kammala haɗin a ƙarƙashin verify-client-cert require ba. Ana iya saita uwar garken don kada ta buƙaci kowa, wanda ke mai da kalmar sirri ita kaɗai bayanin shiga na abokin ciniki kuma wannan raguwa ce ta gaske a ƙarfi. Shell script a bayan auth-user-pass-verify na iya tabbatar da bayanan shiga, kuma yana buƙatar a kunna aiwatar da script, wanda ke mai da shi ƙira mafi haɗari fiye da ingantaccen tushen tabbatarwa.

Bayanan martabar da ya dogara da kalmar sirri kawai shima ya dogara da zaɓuɓɓukan da aka tura, waɗanda su kuma suka dogara da kunna hanyar ja.

Kada ka gyara takardar shaidar da ta ɓace ta hanyar kashe dubawa

Abin sha'awa shi ne a sassauta tabbatarwa domin saƙon ya ɓace. Wannan yana cire ikon da yake yin aikinsa kuma yana barin haɗin da ba ya tabbatar da abin da yake iƙirari. Idan ƙofar ta canza tushenta kwanan nan, sake saukar da fakitin abokin ciniki maimakon gyara bayanin martaba, domin tsohon fakitin na iya ɗauke da tsohon tushen har yanzu. Idan zaɓin tabbatarwa da takardar shaida ba ya cikin editan bayanin martaba, ƙila sigar Windows da aka shigar ba ta nuna wannan hanyar ba; sabunta tsarin maimakon gyara XML da hannu.

Rubuta wace ajiya ta riƙe takardar shaidar, wane mai amfani ya tafiyar da abokin ciniki da ko maɓallin sirri na nan. Waɗannan uku suna bayyana kusan kowane irin wannan gazawar.

Kalmar sirri ta yi kyau. Bayanin shigan da hanyar take buƙata a zahiri yana wani wuri dabam.