Delegela ukukhishwa kwezitifiketi ze-VPN ngaphandle kokhiye wempande

Ukunikeza umuntu ikhono lokubhalisa amaklayenti e-VPN nokumnikeza ikhophi ephathekayo yokhiye wempande kuyizinto ezimbili ezihlukene, futhi umehluko ubonakala kuphela lapho lowo muntu ehamba noma lowo khiye uvuza. Okokuqala kunikeza umsebenzi ngaphakathi kohlelo lomsebenzi olulawulayo; okwesibili kunikeza ikhono lokwakha ukwethembana noma kuphi, ngaphandle kwe-inthanethi, ngokungapheli. Nquma ukuthi yikuphi okudingwa umsebenzi ngaphambi kokuthinta noma iyiphi into yokhiye. Umshwana wamazinga ngeke ukuphendulele lowo mbuzo.

Bhala umsebenzi wokubhalisa njengemibuzo emithathu: ubani angacela, ubani ugunyaza, futhi yini ingxenye ekhiphayo engayisayina.

Nquma ukuthi iyiphi ikhono olinikezayo

Insizakalo ekhiphayo ingaveza uhlelo lokugunyaza ngenkathi igcina into yokusayina kumnikazi ohlukile. Umshini wokusebenza ugunyaza isicelo sedivayisi, insizakalo isebenzisa inqubomgomo futhi irekhode ukukhishwa, futhi akekho ohilelekile obamba ukhiye we-CA. Bhala phansi ubunikazi obuvunyelwe, abagunyazi kanye nobubanzi balokho insizakalo engakusayina; bese uvikela ukuphathwa kwayo ngokucophelela okufana nokokhiye. Isicelo sokusayina isitifiketi siyisicelo, akusona isinqumo sokugunyaza.

Isitoreji esisekelwa yi-hardware sishintsha ingcuphe yokuthi ukhiye ukopishwe, hhayi isidingo sokugunyaza. Okungathunyelwanga ngaphandle kusho ukuthi ukhiye awukwazi ukukhishwa, futhi akusho ukuthi noma ubani ongashaya i-interface yokusayina unelungelo lesitifiketi. Hlola lezi zimfanelo ezimbili ngokwehlukana.

Isitifiketi esiphakathi sikhawulela igunya

Impande ingaqinisekisa isitifiketi esiphakathi sokukhishwa kwansuku zonke, ukuze umsebenzi ojwayelekile ungabe usathinta ukhiye wempande, inqobo nje uma izinqubo zayo zokusayina nokubuyisela zihlala zivikelwe. Lona umngcele wangempela futhi awumahhala: esinye isitifiketi, omunye ukhiye, okunye ukuvuselelwa kanye nolunye uhlu lokuhoxiswa okufanele lugcinwe. Kusebenzise lapho kumele umkhawulo wokuphatha noma wengcuphe owenziwe ngamabomu. Ukwakha umkhiphi kumlawuli ngamunye kukhiqiza okuningi kukho konke futhi akuthengi lutho uhlelo lomsebenzi olungakunikezanga.

Hlola ukuthi abahloli be-VPN bakha uchungechunge ngendlela oyilindele. Ukuthumela isitifiketi esiphakathi ukwakha uchungechunge nokufaka njenge-anchor ethembekile ngqo kuyizinhlelo ezimbili ezihlukene.

I-pathLen enguziro ayisho lokho ocabangayo

I-RFC 5280 isigaba 4.2.1.9 sichaza imikhawulo eyisisekelo, futhi inkambu yobude bendlela ikhawulela ukuthi zingaki izitifiketi eziphakathi ezingakhishwanga yizona uqobo ezingalandela endleleni evumelekile. Inani elinguziro likhawulela ukujula okuphakathi okwengeziwe; alikakhawuleli inani lezitifiketi zebhizinisi lokugcina. Abantu bakufunda njengezitifiketi ezinguziro ezivunyelwe bese bezibuza ukuthi kungani ukukhishwa kusasebenza. Funda inkambu njengomkhawulo wokujula wama-CA, futhi ukuziphatha kuba okungabikezelwa.

Isigaba esifanayo sisho ukuthi i-anchor yokwethembana iyingxenye yokufakazela indlela, hhayi isitifiketi esivamile ngaphakathi kwendlela. Yingakho ukushicilela ingeno yokuhoxiswa kwempande ezisayine yona kungayisusi ngendlela ethembekile kuso sonke isitoreji.

Ukushiya umsebenzi akukona ukuhlasela kokhiye

Lapho ohambayo ayenayo kuphela i-akhawunti yokuphatha yomuntu siqu, hoxisa lokho kufinyelela nezikhathi zayo ngokusebenzisa inqubo yobunikazi esekelwayo, bese uyabuyekeza umsebenzi kanye nezimvume akhile. Izitifiketi zamaklayenti ezakhishwa ngaphambili azibi ngokungavumelekile ngoba umgunyazi wazo uhambe, futhi ukuzithatha njengezihlaselwe kudala ukubhaliswa kabusha okukhulu nokungadingekile. Ukukhubaza i-akhawunti nakho akukwazi ukwenza ukhiye wokusayina okopishiwe ungasebenzi, ngakho impendulo incike ekutheni iyiphi ikhono ebeligciniwe.

Lapho isitifiketi esiphakathi sihlaselwe, igunya laso kufanele lihoxiswe futhi bonke ubunikazi esababalela kufanele bushintshwe, ngokwenqubomgomo eqhutshwa umhloli. Ukwethembana kwempande kudinga impendulo yako, ngoba i-anchor ihlala ezitorejini zokwethembana okungenzeka unagazo.

Yamukela umklamo ngezehlakalo ezine eziqondile: idivayisi efanelekile iyabhalisa, isicelo esingagunyaziwe siyenqatshwa, umshini wokusebenza osusiwe awusakwazi ukukhipha, futhi umkhiphi osewathatha umhlalaphansi akasanikezi ukufinyelela. Leyo miphumela emine iyi-runbook.