Iphutha le-curl 77: izindawo zokuqinisekisa isitifiketi ekufakweni kwe-VPN

Unamathisela umyalo womugqa owodwa wesifaki osuka kusifundo, ucindezela u-Enter bese uthola curl: (77). Umlayezo ukhuluma ngezindawo zokuqinisekisa isitifiketi, ngakho umuzwa wokuqala ukucabanga ukuthi isitifiketi somhlinzeki we-VPN siphukile bese ufuna ifulegi eledlula ukuqinisekisa. Lokho kufunda akulungile, futhi ukwenza ngakho kuguqula inkinga yefayela lendawo ibe yisinqumo sokuphepha. Ake sibuyele emuva kusukela ekuqaleni.

Isinyathelo 1: funda ukuthi le nombolo isho ukuthini

Iphutha 77 liphathelene nokokufakwayo kwe-CA yendawo: i-curl ayikwazanga ukufunda noma ukulayisha okokufakwayo kwesitifiketi eyayitshelwe ukuba ikuthembe. Iphutha 60 yilelo eliphathelene nohlangothi olunye, lapho uchungechunge lweseva lungaqinisekiswa. Zombili zivela zodwa zodwa ezifundweni futhi zisho okuhlukile.

Uma okukhiphayo kusho u-77, iseva yayingakaze ibe yinkinga. Iklayenti alikwazanga ukuvula ifayela ebelifuna ukulisebenzisa ekuhloleni, futhi lokhu kuyinkinga yendlela, imvume noma ukupakisha emshinini wakho.

Isinyathelo 2: funda umyalo oyikopisile

Imiyalo ekopishiwe ifihla izinhlamvu. Uhlamvu oluncane -l lusho --list-only, olusebenza ekufakweni kohlu lwemigomo. Uhlamvu olukhulu -L lusho --location, olulandela ukuhlanjululwa kwe-HTTP. Lokhu akuzona izindlela zokupela ezihlukile, futhi isifundo esibhala esisodwa sibe sichaza esinye sihambisa abantu endleleni yokuhlanjululwa eyayingakaze ihlosiwe.

Ukulandela ukuhlanjululwa akulungisi indlela yesitoreji sokuthemba futhi akufakazeli ukuthi umsingathi wokugcina ungumshicileli obewuqondile. Uma umyalo uvela kusithakazelo sefolumu, phinda uwubhale kusukela emiyalweni yephrojekthi uqobo esikhundleni sokuthemba okunanyathisiwe.

Isinyathelo 3: thola ukuthi leso sakhiwo sisebenzisa okuphi kokokufakwayo kwe-CA

Qala ngokubona i-binary, ngoba impendulo incike ekutheni yahlanganiswa kanjani:

curl --version

Bhala inguqulo kanye ne-TLS backend. Isakhiwo esisebenzisa isitoreji sokuthemba somdabu sifunda isitoreji sohlelo ngelabhulali ye-TLS, kanti isakhiwo esikhomba kubundle sifunda ifayela. --cacert esicacile, isilungiselelo CURL_CA_BUNDLE noma isembozo se-shell kungadlula kokunye kwakho kokubili, ngakho ukufakwa kwephakethe kungenzeka kungayithinti ifayela elihluleka ngempela.

Esitorejini esisekelwe efayeleni, hlola izinto ezintathu ngokulandelana: ngabe indlela ikhona, ngabe i-akhawunti ebiza umyalo iyakwazi ukuyifunda, nokuthi iqukethe yini okokufakwayo kwe-CA okulindele. Iphakethe elinemvume engalungile lihluleka ngendlela efanayo nelingekho, futhi womabili ahluleka ngaphambi kwanoma yingxoxo yenethiwekhi ngeseva.

Isinyathelo 4: lungisa okokufakwayo, hhayi ukuqinisekisa

Buyisela ukulungiselelwa kokuthemba okusekelwayo ngokusebenzisa umnikazi wakho: iphakethe lokusabalalisa, ukuphathwa kwakho kokulungiselelwa noma okuguquguqukayo kwemvelo okubhaliwe. Umgomo ukuze kube nokokufakwayo kwe-CA okufundekayo nokulungile kulelo binary.

Ungayishintshi i-URL ibe yi-HTTP, ungangezi --insecure, futhi ungathembi isitifiketi esikopishwe kusilandiwo esingachazwanga. Ngakunye kwalokhu kushintsha kushintsha lokho ozimisele ukukwamukela esikhundleni sokulungisa lokho i-curl engakwazanga ukukufunda, futhi ushintsho ngokuvamile luphila isikhathi eside kunesigameko.

Isithenjwa sezinombolo ikhathalogi yamaphutha e-curl, futhi ifushane ngokwanele ukuba ifundwe kahle kanye.

Isinyathelo 5: landa, bheka, bese usebenzisa

Landa isifaki efayeleni esikhundleni sokulihambisa ngepayipi ku-shell emyalweni ofanayo. Lokho kushintsha okukodwa kuhlukanisa ukudluliswa ongakuhlola kusuka kukhodi esebenza ngamalungelo akho.

curl -fL -o vpn-installer.sh https://example.invalid/install.sh
file vpn-installer.sh
head -n 40 vpn-installer.sh

Hlola ukuthi impendulo iyiskripthi obekusilindele hhayi ikhasi lephutha le-HTML, isaziso sokuhlanjululwa noma ifayela elingenalutho. Uma umshicileli enikeza i-checksum noma isiginesha, qinisekisa ngokusebenzisa inqubo yawo yokukhishwa ebhaliwe hhayi inani elicashunwe emucu wokufanayo wefolumu.

Khumbula ukuthi i-HTTPS yenzani nokuthi ayizange yenzani. Yaqinisekisa ukudluliswa kuya kumsingathi oxhumene naye; ayizange ihlole okuqukethwe yiskripthi futhi ayikutsheli ukuthi umshicileli uthembekile yini.

Isinyathelo 6: hlukanisa izinyathelo zokufaka

Ukulanda ifayela, ukufaka iklayenti, ukulungiselela ithaneli nokuqinisekisa imizila kuyimisebenzi emine enezindlela ezine ezahlukene zokwehluleka. Ukuyenza ngayinye ngayinye kusho ukuthi iphutha elizayo kulandelana linembangela eyodwa ecacile esikhundleni sabangeneleli abane.

Uma ukufaka kuphumelela futhi ithaneli likhuphuka, qinisekisa imizila kanye nomgomo owodwa wangempela ngaphambi kokuvala ithikithi. Iphutha le-curl lilungiswa lapho curl -I https://example.invalid elula lisebenza futhi, hhayi lapho isifaki siyeka ukukhononda.