P_CONTROL_HARD_RESET_CLIENT_V2 kulu log: ingabe iyiphutha?

Lolu hlu luphindaphinda njalo ngemuva kwemizuzwana embalwa futhi lubukeka njengembangela yakho konke: iphakethe elibizwa nge-control hard reset, elivela kuklayenti elingafinyeleli ndawo. Lokhu akulona iphutha. Umlayezo wokuqala wesikhathi esisha, futhi ukuphindaphinda kuwuphawu lwalokho okunye okwehlulwayo phambili. Ukuhlukanisa okushiwo ilebula nalokho okwenziwa ukuxhumana ngemuva kwalokho kuwukuxilongwa konke.

Ikhodi isho indawo kuphrothokholi

OpenVPN ixhuma izinhlobo eziningi zamaphakethe kusokhethi eyodwa, futhi ikhodi itshela umamukeli ukuthi yiluphi uhlobo aluphethe. Amaphakethe e-hard-reset avula isikhathi, amaphakethe okulawula athwala izinto zokuxhawulana, iziqinisekiso ziqinisekisa ukwamukelwa, futhi amaphakethe edatha athwala umthwalo womhubhe. Ukufunda ibhayithi lokuqala kubonisa ukuthi iphakethe lingena kuphi kulokho kushintshana, futhi izincazelo zamaphakethe kukhodi yomthombo zisho umndeni ngamunye ngokusobala.

Yilokho kuphela ekushoyo. Iphakethe elibhalwe njengokusetha kabusha kokuqala kweklayenti lifakazela ukuthi iphakethe lifinyelele endaweni yakho yokubuka nokuthi uzakwethu ufuna ukuqala isikhathi. Alifakazeli ukuthi iklayenti lithembile isitifiketi sakho, ukuthi ubufakazi balo bamukelwe, noma ukuthi isiteshi sedatha saba usizo.

Isijobelelo V2 wuphawu lwesizukulwane sephrothokholi salowo mndeni wamaphakethe, hhayi inguqulo yomkhiqizo futhi hhayi isethingi oyifakayo. Akukho lutho egameni oluhlobene nokusetha kabusha umhubhe, ukuqala kabusha isevisi noma ukusula ikheshi.

Okwenza iklayenti ngempela ngaleso sikhathi

Iklayenti livula isihlonzi sesikhathi lapho izinhlangothi zombili zizoxhuma khona ukuhamba kokulawula okulandelayo. Uma ukuvikelwa kwesiteshi sokulawula kulungisiwe, lelo phakethe lokuqala selivele lithwala i-HMAC evumela umamukeli ukuthi anqume ukuthi kufanele yini kwenziwe umzamo kukho okusele kokushintshana. Umamukeli ongakwazi ukukuqinisekisa uyalilahla iphakethe buthule, yingakho ukhiye owabiwe ongalungile ubukeka njengeklayenti elikhuluma emoyeni.

Akukho lutho olubonakalayo kumsebenzisi okwenzekile okwamanje. Akukho sitifiketi esiqinisekisiwe, akukho gama lomsebenzisi elinikeziwe futhi akukho ikheli lomhubhe elabelwe. Ukusetha kabusha kuyisethulo sokuxhawulana, ngakho noma yisiphi isinqumo ngokuxhumana ngalesi sikhathi sishesha.

Kumjikelezo wokuxhuma kabusha ongenzi lutho, imininingwane enentshisekelo isikhathi esiphakathi. Iklayenti elizama futhi ngomjikelezo oqinile lingaphambi kokuthuthuka ngokuvamile lenqatshwa ngaphambi kokuthi likwazi ukuqhubeka, futhi isizathu siku-log yozakwethu, hhayi egameni lephakethe.

Kuphi ukwehluleka kwangempela kucashile ngemuva kokusetha kabusha

Funda amalogi amabili ndawonye futhi uthole isigameko sokuqala okungewona ukusetha kabusha. Kuklayenti, ukwehluleka kokuqinisekisa isitifiketi kubikwa ngesizathu esithile: isitifiketi esiphelelwe yisikhathi, igama elingafani noma umkhiphi ongaziwa. Kuseva, ukunqatshwa kobufakazi kubikwa njengokwehluleka kokuqinisekisa ubunikazi nesizathu saso. Kokubili kucace kakhulu kunombono ophindaphindayo weva mayelana nemizamo emisha.

Qhathanisa umzamo owodwa ngesigxivizo sesikhathi esikhundleni sokufunda ilogi ngayinye ngayinye, ngoba ukwehluleka okufanayo kuvela kuzo zombili izindawo ngamagama nangobukhulu obuhlukile. Uzakwethu odelayo uvamise ukusho ukuthi kungani.

Uma kungekho uhlangothi olubika ukunqatshwa futhi ukushintshana kusamile, umngcele wukufinyeleleka hhayi ukuthembana. Ifayela lomlilo elilahla isiqondiso sokubuya, idivayisi yokuhumusha amakheli enethiwekhi ekuphelelwa yisikhathi ukwabiwa kwayo, noma inkinga ye-MTU ebulala amaphakethe amakhulu okuxhawulana — konke lokhu kudala ukushintshana okumile ngaphandle kwanoma yiliphi iphutha lokuqinisekisa ubunikazi.

grep -nE 'VERIFY|AUTH_FAILED|TLS Error|SIGUSR1' /var/log/openvpn*.log

Lokho kusesha akuwona ukuxilongwa ngokwako, kodwa kukuthutha kusuka kulwazimfundo lwephrothokholi kuya esigabeni sangempela sokwehluleka ngendlela eyodwa.

Kungani ukuvala ukuqinisekisa kuwukusabela okungalungile

Uma ukusetha kabusha kuqhubeka kuvela, isixazululo esibonakala sishesha kakhulu ukuvala ukuqinisekiswa kwesitifiketi noma ukushiya ukuvikelwa kwesiteshi sokulawula ukuze kuxhume okuthile. Lokho kushintsha ukwehluleka okuxilongekayo ngokungalungiseki, futhi kushiya ukusetshenziswa kwamukela ozakwethu okwakhiwa ukuze kubanqabe.

Shintsha umngcele ohlulekile ngempela esikhundleni salokho. Inkinga yokuthembana ingeyegunya lesitifiketi kanye nephrofayili elikhomba kulo. Inkinga yesikhathi ingeyewashi. Inkinga yobufakazi ingeyengemuva lokuqinisekisa ubunikazi elakunqabela, futhi uzakwethu ongafinyeleleki ungowomzila phakathi kwamakhosti amabili.

Ikhodi ilusizo engxoxweni yosekelo ngento eyodwa: ikutshela ukuthi uzakwethu ufike lapho ayesefuna khona ukuzama. Okwenzeka ngemuva kwalokho yikho okudinga ukukwazi, futhi kubhalwe kunoma iyiphi ilogi ebhala ukunqatshwa kokuqala okuthile. Qala lapho, futhi umugqa wokusetha kabusha uyeka ukubukeka njengembangela futhi uqala ukubukeka njengesigxivizo sesikhathi.