Ukususa i-key-method kuphrofayela ye-OpenVPN akushintshi lutho

Iphrofayela esebenze iminyaka iyeka ukuthi iqale ngokuzumayo, futhi umyalezo usho umyalo okungekho muntu okhumbulayo ukuthi wawengeziwe: key-method. Umphumela olandelayo wosesho uphakamisa ukwengeza i-key-method 2 ukuze kuhambisane, okuyisicebiso esivela kwesinye isikhathi. Umhlaziyi owenqabe lolo hlu lomunye wamanje, futhi akanakho nhlobo lokho kukhetha. Ukususa uhlu kukhulisa ukuqala, futhi akushintshi lutho endleleni izinhlangothi ezimbili ezivikela ngayo iseshini.

Yileso sikhala phakathi kwalokho okuqukethwe yiphrofayela nalokho okwenziwa iphrothokholi ngempela siyisihloko sonke lapha, futhi sichaza ezinye izinguquko eziningana ezenziwa abantu ngesikhathi esisodwa. Siphinde sichaze ukuthi kungani lezo zinguquko zivame ukufika zingqoqwana elilodwa.

Uphawu wuphutha lokuhlaziya, hhayi ukwehluleka kokuxhawulana

Izinketho zifundwa ngaphambi kokuthi kuthunyelwe noma yiliphi iphakethe. Iphrofayela enomyalo ongaziwa iyahluleka kuleso sigaba, ngakho inqubo ayifinyeleli kunethiwekhi futhi ayikhiqizi nephutha lokuxhawulana. Amagama ngokuvamile akhomba ukukhetha kanye nefayela, okwenza lokhu kube okunye kwamaphutha okulula ukuwakhomba kunomdabu. Akukho phakethe, umzila noma udonga lomlilo oluhilekile.

openvpn --config /etc/openvpn/client/office.ovpn --verb 3 --log /tmp/parse.log
grep -n 'Options error' /tmp/parse.log

Uma umyalezo usho umyalo, ukuxilongwa kuphelile: ifayela liqukethe okuthile okungakwamukeli lokhu kwakhiwa. Uma umyalezo usho indlela yefayela esikhundleni salokho, inkinga i-include noma ukhiye ongekho, okuyingxenye ehlukile yesigaba esifanayo sokuqala.

Lokho okufanele ungakuphethi ngukuthi iklayenti noma iseva idinga imodi yephrothokholi endala. Ukwehluleka kokuhlaziya kuyinkinga yamagama phakathi kwefayela lakho nefayela le-binary, futhi ifayela le-binary kulesi simo limane laphonsa igama elilodwa ohlwini lwalo lwamagama.

Umyalo nefomethi yokudlulisela kuyizinto ezimbili ezihlukene

Ukukhetha kwakudala kwe-key-method kwakukhetha ukuthi ukushintshana kokhiye kwe-TLS kufakwa ogwini kanjani, futhi ukushintshana kwanamuhla kuyindlela yamaphakethe amaningi okwakuyifuna leyo nketho emuva. Ukukhetha kwanyamalala ngoba kwakungasakhethi lutho; ifomethi elaliyisho yaba ukuphela kwayo. Ngakho ukususa uhlu kushiya iseshini isebenzisa uhlaka olufanayo naphambilini. Ukuhlela umbhalo akukwazi ukushintsha lokho kunoma ikuphi uhlangothi.

Yingakho ukubuyisela ifayela le-binary elidala ukuze «kubuyiselwe» indlela 2 kuwukulungisa okungalungile. Akubuyiseli lutho ngaphandle komhlaziyi omdala onezinto ezizenzakalelayo ezindala, futhi kukuthatha izilungiso eza ngemuva kwakho. Ukucabanga okufanayo kuyasebenza ekwephuleni ukuhlolwa kwesitifiketi noma uhlu lwamakhodi ngelithi uxhumano luzobuya.

Ukuhlola okuwusizo inguqulo kanye nokucushwa okuhlaziyiwe, hhayi ukuba khona kwegama efayeleni:

openvpn --version | head -n 1
grep -rn 'key-method' /etc/openvpn/ 2>/dev/null

Yini okufanele isuswe, futhi kusukela kuyiphi ifayela

Hlela ifayela elifundwa ngempela yinqubo esebenzayo, futhi lelo fayela kuphela. Ezinhlelweni ezipakishwe, lokhu ngokuvamile kuyiphrofayela esemkhakheni weklayenti noma wesweva oshiwo i-unit, hhayi ikhophi esemkhakheni wakho wasekhaya oyigcina njengesethenjwa. Iphrofayela ekhiqiziwe ingase yakhiwe kabusha kusukela kwithempulethi, ngakho ushintsho olwenziwe kuphela ekhophini esetshenzisiwe luzobuya ngemuva kokusebenza kokulungiselela okulandelayo.

Susa uhlu oludlulekile bese ushiya indawo yokugcina, izitifiketi, inqubomgomo yamakhodi kanye nezilungiselelo zomzila wokulawula njengoba zinjalo. Lezi izinketho ezisekelwayo ezidingwa yinqubo, futhi azihilelekile ephutheni lokuhlaziya. Uma iphrofayela efanayo iqukethe eminye imiyalo ongayazi, hlola ngayinye ngokuqhathanisa nenguqulo oyisebenzisayo esikhundleni sokususa iqembu lazo kuze kuqale inqubo.

Bese uqala isibonelo esihloselwe bese ufunda umphumela waso wokuqala. Ukuqala okumsulwa lapho isilaleli sikhona kuwukuqinisekisa ukuthi lesi sigaba siphelile; ukuhlolwa kweklayenti ngemuva kwalokho kuphendula omunye umbuzo.

Iphrofayela enqatshiwe neklayenti elinqatshiwe zibukeka zifana

Ukwehluleka okubili kudala imicu yokusekelwa efanayo futhi kudinga ubufakazi obuhlukile. Iseva enqaba ukucushwa kwayo uqobo ayiqali neze, ngakho akukho klayenti elingaxhuma kuyo. Iseva eqala kahle futhi enqaba iklayenti elilodwa iyasebenza, futhi ilogi yayo iqukethe isizathu: inkinga yesitifiketi, ukukhetha okugxushiwe iklayenti elingakwamukeli, nokungafani kwamakhodi.

Ukukhetha okususiwe akusona ukuxilongwa kwesimo sesibili, futhi ukubambelela kukho kuchitha ihora elifanayo kabili. Uma ilogi yeklayenti ikhombisa ukwenqatshwa yiseva, funda lokho kwengatshwa; uma ikhombisa iphutha lendawo, iphrofayela yeklayenti yiyo ifayela okufanele lihlolwe. Ukubambelela kumyalo ongasekho kubambezela zombili iziphenyo ngokulinganayo.

Imibuzo yokuhambisana uhlu olungakaze luyiphendule

Amaphrofayela azungezayo nalo myalo ngokuvamile athwala indaba ngeplathifomu ethile, futhi indaba iphila isikhathi eside kunesizathu sobuchwepheshe. Iklayenti leselula noma ledeskithophu lisadinga iphrofayela ephelele esekelwayo: uchungechunge lwezitifiketi oluthembekile, ukubethela kwedatha okwamukelwa yizinhlangothi zombili, imodi yomzila wokulawula eyenziwa yizinhlangothi zombili, futhi akukho miyalo enqatshwa ukwakhiwa kweklayenti. Akukho kulokhu okunqunywa ukuba khona noma ukungabi khona kohlu lwakudala lwe-key-method.

Ukucindezela kuwumbuzo wenqubomgomo ohlukile onesimo esifanayo. Ukususa uhlu lwe-key-method akusho lutho ngokuthi umyalo wokucindezela usekelwa noma wamukelekile yini ekusetshenzisweni kwakho, futhi izinqumo zombili kufanele zithathwe ngokuzimela. Ukususa izilungiselelo eziningana ezihlobene nokuphepha ngesikhathi esisodwa kuze kuxhume okuthile iyona ndlela iphrofayela esebenzayo eba iphrofayela engachazwanga.

Gcina irekhodi elifushane walokho okususile nokuthi kungani: ukukhetha, inguqulo eyakunqaba, kanye nomyalo owabonisa iphutha. Umuntu olandelayo ozothola iphrofayela njengefa uzodinga zona kanye lezo zinto ezintathu, futhi ukuzibhala manje kushibhe kunokuzakha kabusha kamuva.