I-AWS Client VPN ayivulwa ku-Linux? Fanisha i-runtime

Ufaka iphakethe le-AWS Client VPN ku-Ubuntu, walisebenzisa, futhi wathola iphutha lesilayishi mayelana nelabhulali eyabiwe engekho ngaphambi kokuba kufundwe noma iyiphi iphrofayela. Umzwelo wokuqala ukuthatha leyo labhulali kusuka kunguqulo endala bese uqhubeka. Lokho ngokuvamile kushintsha ukuncika okukodwa okuphukile ngesistimu engasahambisani nesizindalwazi sayo samaphakethe. Ukwehluleka kokuvula kuwumbuzo womngcele wokusekelwa, hhayi wenethiwekhi.

Iphutha lisho ilabhulali, hhayi inethiwekhi

Iklayenti le-VPN lesikrini sekhompyutha kufanele lilayishe i-runtime yalo ngaphambi kokuba libheke iphrofayela yakho noma iphoyinti lakho lokugcina. Uma isilayishi esiguqukayo singakwazi ukuxazulula uphawu, inqubo iyafa ngomzuzwana wokuqala futhi iwindi alibonakali neze. Asikho isilinganiso sokuhlela iphrofayela, umsebenzi we-DNS noma izinguquko zomzila ezifinyelela leso sigaba. Funda umlayezo ngokwezwi nezwi, ngoba ukutshela ngqo ukuthi iyiphi into isilayishi ebiyifuna.

Yileyo ndlela futhi ohlukanisa ngayo imindeni emibili yokwehluleka. Into eyabiwe engekho iyinkinga yokupakisha kumphathi wakho, kuyilapho ukunqatshwa kokuqinisekisa kuyisinqumo sohlangothi lwesevisi esifika kamuva kakhulu kulandelaniso.

Kokubili kuphetha ngewindi elivalayo, yingakho kuhlanganiswa emibikweni yephutha.

Izishintshi zokuhwebelana kwembulunga yonke ziyinkinga ehlukile

Amaphutha akhuluma nge-ICU noma ukuhwebelana kwembulunga yonke avela ku-runtime ye-.NET ngaphansi kwezinye izakhiwo zeklayenti, hhayi ku-stack ye-TLS. Ukusetha isishintshi sokuhwebelana okungaguquki kushintsha indlela leyo mkhathi ephethe ngayo idatha yamasiko, futhi akunikezi i-libssl engekho. Ukuyisebenzisa ukuthulisa iphutha le-TLS kukushiya neklayenti eliqalayo bese lihluleka kwenye indawo.

Gcina kokubili kubhokisi ezihlukene: enye ishintsha ukuziphatha kwe-runtime, enye yanelisa isixhumi. Ukwelula isandla sokuqala lapho unesibili kuwumkhuba okufanele uwushiye.

Uma umphathi wekhempuyutha engakwazi ngempela ukunikeza i-runtime edingekayo, impendulo esekelwayo ingumphathi omunye, hhayi oguquliwe.

Kungani ukungenisa i-OpenSSL endala kubuyela emuva

Ukukopisha i-libssl ne-libcrypto kusuka ekusabalaliseni okudala kuye ku-/usr/lib kusebenza kaningi ngokwanele ukulinga. Kubeka futhi ilabhulali ngaphandle kokulawulwa umphathi wamaphakethe, ngakho konke ukubuyekezwa kokuphepha okulandelayo kuyayigeja noma kuyashayisana nayo. Kumphathi osebenza nebhrawuza noma iklayenti le-SSH, ushintshe i-stack yokubethela yezinhlelo ezingazange zikucele lokho.

Indlela esekelwayo ingumthombo wamaphakethe obhalisiwe kanye nokuxazululwa kwencike kuwo okunqunyiwe kunguqulo yakho yohlelo lokusebenza kanye nesakhiwo. Bheka izidingo zeklayenti le-AWS le-Linux kanye namanothi okukhishwa kwenguqulo oyifakayo, ngoba imatrix yokusekelwa ihamba phakathi kwezinguqulo.

Isixazululo sakudala se-forum isithombe sohlu lwenguqulo olulodwa, akusona isiqinisekiso sokuhambisana.

Gcina incazelo yesevisi yomhlinzeki

Ezinye iziqondiso zikunikeza iyunithi ye-systemd encane ukuze ithathe indawo yeyunithi epakishiwe. Leyo yunithi ivamise ukulahla ama-agumenti, izilungiselelo zokuqinisa kanye nokuhlanganiswa umhlinzeki akwengeza kamuva, futhi ukwehluleka okuvelayo kuvela endaweni ongayixhumanisi nokuhlela.

Uma udinga ushintsho, sebenzisa i-drop-in esikhundleni salokho: ifayela elincane lokubhala ngaphezulu kusigaba se-.d seyunithi elengeza noma elishintsha umyalo owodwa, nencazelo yokuthi kungani likhona nokuthi lingabuyiselwa kanjani. Ifayela lomhlinzeki lihlala lingashintshiwe, futhi ukubuyekezwa kwephakethe okulandelayo akukuchithi ngasese umsebenzi wakho futhi akukuphindi.

Bhala indlela yokubhala ngaphezulu kumanothi akho, ngoba umlawuli olandelayo uzobheka lapho kuqala.

Fakazela ukuvula ngaphambi kokulungisa imizila

Yenza iklayenti liqale ngokuthembekile ngephrofayela evunyiwe, bese ungena, bese uqinisekisa ithumbu, futhi yilapho-ke ubheka imizila, i-DNS nezinsiza zangasese. Isigaba ngasinye sikhiqiza ubufakazi baso, futhi ukuzihlanganisa kwenza inkinga ye-runtime ibonakale njengenkinga yomzila. Uma udinga ukusekelwa umhlinzeki, thatha umcimbi wokuqala owusizo esikhundleni sesithombe sesikrini sewindi elivalayo.

Ungalokothi unamathisele ukhiye wangasese noma iphrofayela ephelele enemininingwane yokungena egxilile njengempahla yokuxilonga.

Umbuzo owodwa uxazulula iningi lamathikithi: ingabe inguqulo yeklayenti efakiwe isasekelwa kule nguqulo yohlelo lokusebenza? Uma kungenjalo, ukulungisa kuyipheya elisekelwayo, hhayi okunye ukuzingela ilabhulali.