Amaphrofayili e-IKEv2 VPN ku-Android awawomsebenzisi, hhayi awedivayisi

Isisho esithi VPN eyakhelwe ngaphakathi ku-Android sihlanganisa izinto ezimbili ezingahlobene: ukuqaliswa kweprothokholi okusetshenziswa yipulatifomu egameni lakho, kanye nohlobo lwezilungiselelo umkhiqizi anqume ukuluveza. Lezi akuzona into eyodwa, futhi akukho kuzo okuqinisekisa ukuthi ithuneli lingelomsebenzisi ozinhlelo zakhe zilidinga. Ukuhlelwa kwenzeka kumsebenzisi othile ngephakethe elishayayo elithile, futhi konke okulandela kuthola leyo ngqikithi njengefa. Funda uchungechunge lobunikazi ngaphambi kokufunda isikrini sezilungiselelo.

Yini ipulatifomu ekwakhela yona

Kusukela ku-Android 11 ipulatifomu iveza ukuhlelwa kwe-VPN nge-VpnManager. Uhlelo olugunyaziwe luchaza iphrofayili ye-IKEv2, futhi ipulatifomu yona ngokwayo iqhuba ukushintshana kwe-IPsec ne-IKE, ngakho uhlelo aluthinti amaphakethe nhlobo. Lowo umahluko obalulekile kuhlelo lwe-VPN olwakho, oluqalisa i-VpnService futhi lwakha ithuneli kunqubo yalo.

val profile = Ikev2VpnProfile.Builder(serverAddress, identity)
    .setAuthUsernamePassword(user, secret, rootCa)
    .build()
getSystemService(VpnManager::class.java).provisionVpnProfile(profile)

Ucingo olungenhla luwumdwebo wesimo hhayi ibhlokhi ongalikopisha: umakhi unezindlela ezimbalwa zokuqinisekisa, ziyahluka ngezinga le-API, futhi iphrofayili iphethe nensiza yokuthembela yesitifiketi seseva. Okubalulekile embuzweni wobunikazi kuncane kune-syntax.

Izici ezimbili zilandelwa yilo mklamo. Iphrofayili iyidatha, ngakho ingahlelwa umphathi esikhundleni sokuthayipha ngesandla. Futhi ithuneli liyingxenye yepulatifomu, ngakho libonakala ezinhlelweni njengenethiwekhi enokuthutha kwe-VPN hhayi njengesokhethi yohlelo olunye.

Ubunikazi umsebenzisi kuqala, bese kuba iphakethe

Abasebenzisi abaningi ku-Android ukwehlukanisa kwangempela, hhayi ilebula. Iphrofayili yomsebenzi ingumsebenzisi ohlukile onamaphakethe akhe afakiwe, idatha yezinhlelo yakhe, i-keystore yakhe kanye nezikhonkwane zakhe zokuthembela. Umkhiqizo ofanayo ofakwe zombili izindawo uyizimo ezimbili ezinamakhodi omsebenzisi ahlukene, ngisho noma izithonjana zesiqalisi namagama omkhiqizo zifana.

Ukuhlelwa kubhaliswa kuyo iphakethe elishayayo kulowo msebenzisi. Ngakho uhlelo lokuhlela olusebenza kuphrofayili yomuntu siqu ludala ithuneli lomuntu siqu, futhi izinhlelo zomsebenzi kuphrofayili yomsebenzi aziboni lutho kulo. Okuhlukile nakho kuyiqiniso, yingakho ithuneli lephrofayili yomsebenzi lingabonakali ezinhlelweni zomuntu siqu ngaphandle kwenqubomgomo ecacile esho okunye.

Isilawuli senqubomgomo yedivayisi singahlela egameni lephrofayili ephethwe, futhi lokho kuchaza ukufakwa okungekho muntu ehhovisi okhumbulayo ukuthi wakudala. Uma uhlola ifoni, lowo ungumnikazi ongase abe khona wephrofayili ephenduke yampunga, futhi akusiwona umsebenzi wakho ukuyisusa njengokuhlola.

Amasango amathathu ngaphambi kokuba iphakethe linyakaze

Isango lokuqala igunya: abaphathi kufanele bavumele i-VPN ngokuphelele, futhi ezinye izinto zokusetshenziswa zikhawulela uhlobo kanye nokuba khona. Lesibili ubunikazi: isitifiketi sekhasimende noma ubufakazi kufanele kube khona kumsebenzisi ongumnikazi wephrofayili, ngoba isitifiketi esingeniswe ku-keystore yomuntu siqu asibonakali kuphrofayili yomsebenzi.

Lesithathu imvume nenqubomgomo. Umsebenzisi ngokuvamile ugunyaza ukuxhumana okokuqala lapho kusetshenziswa, futhi umphathi angakwazi ukukubophela njengokuhlala kuvuliwe, uma kufuneka ngokukhiya ukuze uhambo lungaphumi ngaphandle kwethuneli. Lezo zilungiselelo zinquma okwenzekayo uma ithuneli liwile, futhi leyo ingxenye abasebenzisi abayiqaphelayo.

Ububanzi yindawo lapho lezi zintathu zihlangana khona. Iphrofayili inquma isango nokuzazisa, kuyilapho isendlalelo senqubomgomo sinquma ukuthi yiziphi izinhlelo ezingasebenzisa ithuneli nokuthi uhambo luyaphoqelelwa yini ukudlula kulo. Ngakho amafoni amabili anamakheli esango afanayo angaziphatha ngendlela ehluke kakhulu.

Kungani ukuxhumana komuntu siqu kungambheki izinhlelo zomsebenzi

Uhambo olusuka kuhlelo lomsebenzi lwakheka kumsebenzisi womsebenzi, futhi inqubomgomo yenethiwekhi esebenzayo ngeyayo lowo msebenzisi. Ithuneli elisungulwe kuphrofayili yomuntu siqu aliyithwali, kungakhathaliseki ukuthi isikhombisi sibukeka siphilile kangakanani. Lelo qiniso elilodwa lichaza iningi lemibiko lapho umsebenzisi afunga ukuthi i-VPN ixhunyiwe kodwa uhlelo oluthile luhluleka ukufinyelela isevisi yangaphakathi.

Ukuxazululwa kwamagama kulandela umngcele ofanayo. Izijobelelo ze-DNS zangasese nezikhonkwane zokuthembela zezomsebenzisi ngamunye, ngakho igama lomsingathi wangaphakathi elixazululwayo kuphrofayili yomuntu siqu lingehluleka kuphrofayili yomsebenzi ngisho nangethuneli elibonakala lilingana, ngoba inqubomgomo yesixazululi nesitoreji se-CA kuyizinto ezihlukene.

Qinisekisa ekubhalisweni kwangempela, hhayi efonini yaselabhorethri

Kudivayisi, qala ngokuthola umnikazi wokufakwa: muphi umsebenzisi, liphi iphakethe, nokuthi iphrofayili livela kumhlinzeki wepulatifomu noma kuhlelo olusebenzisa isevisi yalo ye-VPN. Bese uqinisekisa ukuthi ubunikazi iphrofayili elikulindele bukhona ngempela ku-keystore yalowo msebenzisi.

Hlola umjikelezo wokuphila, hhayi ukuxhumana kuphela. Ngena, vula isitoreji sobufakazi, vumela iphrofayili yomsebenzi ukuthi ime okwesikhashana kusihlwa, bese uyibuyisela futhi uhlole ukuthi ithuneli liyabuya ngaphandle kokuthinta ngesandla. Iphrofayili yomsebenzi evala ngemuva kwesikhathi somsebenzi ihamba nethuneli layo, futhi lokho kungukuziphatha okulindelekile hhayi iphutha, inqobo nje uma isimo esilindelekile sokungatholakali sibhaliwe.

Ekugcineni, hlola uhlelo lomsebenzi ngokwalo ngokumelene nendawo yokugcina yangaphakathi eyaziwayo bese uqhathanisa nomphumela wephrofayili yomuntu siqu. Zombili zivunyelwe ukwehluka; okungavunyelwe ukwehluka imodeli yobunikazi. Uma ithuneli lingelomsebenzisi okungeyena, ukukhishwa kabusha kwesitifiketi ngeke kukulungise.

Ungayiphoqeleli indaba ngokuqalisa imisebenzi yezilungiselelo efihliwe ukuze uveze imenyu, futhi ungakopishi okhiye abangasese phakathi kwamaphrofayili ukuze ukuxhumana kubonakale. Incwadi ye-VpnManager ichaza ukuthi oshayayo uvunyelwe ukuhlela ini; uma indlela egunyaziwe ingasihlanganisi isimo sakho, leso yisinqumo somphathi hhayi inkinga yezilungiselelo.