Me ya sa cryptoapicert ke kasawa a OpenVPN 3 da Connect a Windows

Kuna kwafa bayanin martabar OpenVPN 2 mai aiki zuwa sabon abokin ciniki na Windows, kuma ba a ƙara ba da takardar shaidar da tsohon abokin ciniki ya samo da kansa ba. Layin da ya sa hakan ya yi aiki zaɓi ne na Windows kawai wanda ke cikin abokin ciniki na Community 2, kuma sabuwar aikace-aikacen wata shiri ce dabam mai hanyar shaida dabam. Bayanin martabar bai canza ba sai wannan layi ɗaya, kuma wannan ne ya sa bambancin ke da wuyar gani.

An haɗa matakai uku a cikin wancan rahoton: abokin ciniki na Community, babban ɗakin karatu, da frontend ɗin da wani ya shigar. Ɗaya ne kawai cikinsu ya taɓa fahimtar umarnin.

Abin da zaɓin ke nufi a inda yake

A cikin abokin ciniki na Community OpenVPN 2 a Windows, cryptoapicert yana ambatar takardar shaida da abokin ciniki ya kamata ya samo a cikin ajiyar takardun shaida ta Windows maimakon a cikin fayil. Wannan jin daɗi ne na musamman ga Windows, kuma yana aiki saboda wancan abokin ciniki ya san yadda ake lissafa ajiyar sannan ya ba da maɓallin da aka samu ga TLS ɗinsa. Don haka umarnin wani ɓangare ne na harshen daidaitawar wancan abokin ciniki, ba sifa ce ta yarjejeniyar OpenVPN ba. Babu wani abu a cikin tsarin watsawa da ke ɗauke da shi.

Kwafi layi ɗaya cikin wata aikace-aikace kuma kun kwafi kalmar da sabon shirin zai iya yin bincike, yin watsi da ita ko ƙi ta. Umarni ba siffar yarjejeniya ba ce, kuma wannan ba ma siffar kowane abokin ciniki ba ce da ke magana da OpenVPN.

Abin da babban ɗakin karatu ke bayarwa maimakon haka

OpenVPN 3 Core ɗakin karatu ne da sauran aikace-aikace ke saka a ciki, kuma yana kula da shaidar waje ta hanyar API maimakon neman ajiya. Aikace-aikacen da ke saka shi yana ba da sarkar takardun shaida sannan daga baya ya nemi ɗakin karatu ya sa hannu da maɓallin waje, kuma ɗakin karatu yana kira zuwa aikace-aikacen don yin hakan. Wannan ƙira ce mafi gama gari, kuma yana nufin frontend ɗin ne ke ƙayyade waɗanne masu bayarwa suke wanzuwa. A cikin yadda ɗakin karatu da kansa ke sarrafa zaɓuɓɓuka, cryptoapicert yana bayyana cikin umarnin da ba a aiwatar da su ba, wanda ya yi daidai da wannan rabo na alhakin.

Kasancewar waɗannan kiran dawowa ba ya nufin cewa wata aikace-aikacen da aka tattara tana lissafa ajiyar sirri na mai amfani na yanzu, tana goyan bayan wani mai ba da maɓalli, ko za ta iya kammala buƙatar katin wayo. Waɗannan halayen frontend ne, kuma kowanne dole ne frontend ɗin ya rubuta shi.

Abin da frontend ɗin Windows ke yi maimakon haka

OpenVPN Connect yana bin wata hanya: mai aiki yana shigo da fayil ɗin PKCS#12 wanda ke ɗauke da takardar shaida da maɓallinta na sirri zuwa cikin OpenVPN Certificate Store da aka ƙirƙira don wannan manufar, sannan ya sanya takardar shaidar waje ga bayanin martabar. Wannan mataki ne na shigo da fayil da gangan, ba gano ta atomatik ba na duk abin da ke cikin ajiyar sirri. Bambancin yana da muhimmanci sa’ad da wani ya ɗauka cewa takardar shaidar da aka shigar don wata manufa za ta bayyana kawai a cikin jerin abokin ciniki.

Shigo da fayil ɗin yana da sakamako ga manufar maɓalli kuma, domin fitar da maɓalli cikin fayil ɗin P12 shi ne ainihin abin da aka ƙera maɓallin da ba a fitarwa don hana shi. Tambayar manufa ce ba daidaitawa ba, kuma ta cancanci amsa kafin wani ya gwada shigo da fayil ɗin.

Zaɓi hanyar da ta dace da manufar maɓallin

Idan an iya fitar da shaidar kuma manufar ta yarda da shigo da fayil ɗin da aka rubuta, yi amfani da tsarin rajista mai kariya na ƙungiyar kuma ka riƙe P12 na ɗan lokaci da kalmar sirrinsa daga cikin rajistan ayyuka da rubutun. Idan maɓallin ba zai taɓa barin katin wayo ko mai bayarwa mai kariya ba, zaɓi haɗin abokin ciniki da mai bayarwa da ke goyan bayan wannan buƙatar a bayyane, ko sami tabbaci daga mai siyarwa don sigar da ka shigar. Babban reshe ɗaya ba madadin ɗayan ba ne.

Ƙara umarnin zuwa bayanin martabar ba zai iya samar da haɗin kai da aikace-aikacen ba shi da shi ba. Sabon sigar abokin ciniki ma ba lalle ne ya ƙara shi ba, domin iyawar ta frontend ɗin kansa ce.

Da zarar maɓallin gida ya yi aiki, uwar garken har yanzu yana duba asalin takardar shaida, sarkar, da izini. Maɓallin gida mai amfani da asalin VPN da aka karɓa sakamako ne daban-daban, kuma kiyaye su dabam shi ne ke hana iyakar frontend ɗin zama manufar takardar shaida mai rauni.