Ukukopisha isitifiketi se-VPN akukukopishi ukhiye

Uhambo luqala ohlwini lwezitifiketi zeklayenti, lapho umbhalo ubonisa igama, umkhiphi kanye nosuku lokuphela futhi akukho okunye. Yikhiphe, yingenise kudivayisi yesibili, futhi uxhumano luyaliwa ngoba iklayenti alikwazi ukufakazela ukuthi liphethe ukhiye wangasese. Ifayela likopishwe ngokuphelele; iphutha liwukulindela ukuthi isitifiketi siziphathele ukhiye waso. Funda ibhokisi lengxoxo lokukhipha ngaphambi kokukhetha ifomethi, bese uhlola ifayela oyitholile ngempela.

Ukuchofoza kabili, izinto ezimbili ezihluke ngokuphelele.

Funda ibhokisi lengxoxo lokukhipha, hhayi isijobelelo sefayela

Ukukhipha isitifiketi nge-DER noma nge-PEM kuqukethe ukhiye womphakathi kanye nezimangalo zobunikazi ezisayiniwe, okuyikho okudingwa iseva ukuze ithembe wena nokudingwa iklayenti ukuze iqinisekise iseva. Iphakethe le-PKCS#12 iyisitsha esingaphethe isitifiketi, uchungechunge lwaso kanye nokhiye wangasese ohambisanayo, kuvikelwe ngephasiwedi, nakuba kungadalwa ngaphandle kokhiye.

I-PEM iwukufakwa kombhalo kuphela, akusiso isithembiso mayelana nokuqukethwe. Isijobelelo esifanayo singachaza isitifiketi esisodwa noma ifayela elinamabhulokhi amaningi anamalebula, futhi izinketho zokukhipha ziyona enqumayo.

Ngakho umbuzo owusizo awusoze waba ukuthi yisiphi isijobelelo ositholile, kodwa ukuthi yimaphi amabhulokhi asefayeleni. Iphakethe elikhishelwe ngaphandle kokhiye lihlala liyiphakethe. Hlola okuqukethwe, hhayi ukuthandwa kwefomethi.

Hlola ukuthi utholani ngempela

Funa amalebula ngaphambi kokungenisa noma yini, bese ufunda izinkambu zesitifiketi ukuze uqinisekise ukuthi uphethe ubuphi ubunikazi. Yenza izihlolo kufayela elizongenisa ngempela. Ziphinde ngemva kokukhipha kabusha ngakunye, ngoba izinketho zingahluka.

grep -E 'BEGIN (CERTIFICATE|PRIVATE KEY|ENCRYPTED PRIVATE KEY)' bundle.pem
openssl x509 -in client.crt -noout -subject -issuer -dates
openssl pkey -in client.key -noout -text | head -5
openssl pkcs12 -info -in client.p12 -noout

Ukukhipha okunebhulokhi lesitifiketi kuphela kuyinto yomphakathi futhi akukwazi ukuqinisekisa. Ibhulokhi lokhiye elingenasitifiketi likushiya ngaphandle kochungechunge olulindelwe yiseva. Ukuphuma kolwazi lwe-PKCS#12 kubika nokuthi ukhiye ukhona yini, futhi lokho kuqeda umbuzo walelefomethi. Kubiza futhi i-algorithm nosayizi wokhiye, futhi kwehluleka ngokuphelele uma kungekho khiye.

Ungalokothi unamathisele ifayela elinokhiye wangasese emculweni wokusekela, emlandelelweni wezinkinga noma engxoxweni, ngisho noma libukeka njengesitifiketi obukade usabelana ngaso. Izithombe zesikrini zephaneli yokhiye zifanelwe wukucophelela okufanayo.

Ukhiye ungahlala endaweni ongakwazi ukuyikopisha

Kumadivayisi aphethwe uhlelo, ukhiye wangasese ungaba kuchungechunge lokhiye lohlelo lokusebenza, kutokheni yehadiwe noma endaweni evikelekile, kanti inqubomgomo iwumaka njengongakwazi ukukhishelwa ngaphandle. Umlawuli wesitifiketi ke ubonisa into yomphakathi ngenkathi imfihlo ihlala endaweni yayo, futhi awekho umyalo wokukhipha ozokhiqiza ikhophi ethwalekayo. Ukubhalisa ngokuphathwa kwamadivayisi eselula kuvame ukusebenza kanjalo ngokwakhiwa.

Lokho wukulawula, hhayi isithiyo okufanele kugwenywe. Akunakwenzeka ukwakha kabusha ukhiye wangasese usuka esitifiketini somphakathi, futhi noma yiliphi ithuluzi elisho lokho lenza okunye.

Bhalisa ubunikazi obusha esikhundleni sokukopisha

Indlela esekelwayo ivamise ukuba ukubhalisa ubunikazi obuhlukile bedivayisi entsha nokuhoxisa obudala lapho ithatha umhlalaphansi, ukuze idivayisi ngayinye ihoxiswe ngokuzimela. Lapho ukukhipha nokhiye kugunyazwe ngempela, phatha ifayela elikhishiwe kanye nephasiwedi yalo njengobufakazi bokusetshenziswa: kubethelwe ngenkathi kungasetshenziswa, kudluliswe ngomzila othembekile, futhi kususwe lapho ukubhalisa sekuphelile.

Qinisekisa ngokuqinisekisa ngobunikazi obungenisiwe, hhayi ngokubuka ukuthi ukungenisa kuphumelele. Iklayenti elamukela isitifiketi somphakathi esitolo saso akufakazelanga lutho mayelana nokhiye.

Qeda ngokuqinisekisa ukuthi iseva yamukela ubunikazi obusha nokuthi obudala busaziphatha ngendlela inqubomgomo eqondile. Kanjalo uhambo luphetha ngobufakazi, hhayi ngefayela elibukeka lilungile.