I-duplicate-cn inika amadivayisi amabili ubunikazi obubodwa, hhayi ababili

Kopisha iphrofayela ku-tablet, xhuma, futhi i-laptop iyawa. Faka i-duplicate-cn, zombili zihlala zixhunyiwe, futhi inkinga ibonakala ixazululiwe — kuze kube yilapho amadivayisi amabili elwela ikheli elifanayo lethanele noma i-tablet elahlekile ikhipha i-akhawunti yonke ku-inthanethi. Le nketho ishintsha into eyodwa futhi eyodwa kuphela: ukuthi iseva ivumela isikhathi sesibili ngaphansi kwegama elike layibona. Konke abantu abakulindele ukuthi kukulungise — kusukela ekuzimeleni kwedivayisi kuya ekwabelweni kwekheli ngedivayisi ngayinye kanye nokuhoxiswa okukhethiwe — kusenziwa ngobunikazi, futhi ubunikazi lapha isitifiketi.

Inganekwane: isikhathi sesibili ubunikazi besibili

Umqondo uthi ukuxhumana okubili kufanele kube amaklayenti amabili, futhi amaklayenti amabili kufanele kube amadivayisi amabili anamalungelo awo. Iseva ayikwenzisi lokho ngale ndlela. Ibona igama elilodwa elivamile, futhi uma i-duplicate-cn ivuliwe yamukela isikhathi esingaphezu kwesisodwa esiphilayo esiphethe lelo gama, futhi ngasinye sithola isimo saso sesikhathi ku-daemon.

Akukho lutho kulokho kwamukela okuthinta ukuqinisekiswa kwesitifiketi. Isitifiketi esifanayo sisewubufakazi, ukhiye ofanayo useyikhiye eyimfihlo, futhi noma yimuphi umgomo osuselwe esihlokweni sesitifiketi usaxazululeka kabili kunani elifanayo. Isikhathi sesibili i-socket yesibili, hhayi ubunikazi besibili.

Lowo mehluko awubonakali ngenkathi konke kusebenza. Uba sobala kakhulu ngesikhathi okudingeka ukuhlukanise amadivayisi amabili, futhi ngokuvamile lolo usuku lapho elilodwa lawo lalahleka.

Yini eshintshayo ngempela uma izikhathi ezimbili zabelana ngegama

Ngaphandle kwale nketho, ukuxhumana okusha ngaphansi kwegama elivamile eselve lixhunyiwe kususa isikhathi sangaphambili. Yingakho i-laptop iwa uma i-tablet ixhuma, futhi lokhu ukuvikela okwenziwe ngamabomu ekungacacini, hhayi iphutha. Ngenketho, zombili izikhathi zihlala ziphila futhi iseva izilandelela ngokwehlukana ngesikhathi, hhayi ngedivayisi.

Isikhathi ngasinye sisathola ukuxhumana saso sangaphandle kanye nokhiye waso okuxoxiswene ngawo, ngakho ukuhamba kwesikhathi esisodwa kuyisikhathi esisodwa ngempela. Abakwabelanayo yikho konke okuvela kubufakazi: ukusesha kwemigomo, ukulungiselelwa okuqondene neklayenti, ubunikazi kumarekhodi kanye nokuhoxiswa. Isimo sesikhathi singesokuxhumana futhi siyafa naso, ngenkathi amaqiniso ezingeni lobufakazi ehlala kukho kokubili. Yingakho okukhiphayo kwesimo kungabala igama elifanayo kabili ngenkathi izibali zihlala zihlukene.

Qinisekisa ukuthi ukwakha kwakho kwenzani ngempela ngaphambi kokuklama phezu kwakho, ngoba umphumela wale nketho unqunywa yinketho uqobo hhayi izinganekwane:

grep -n 'duplicate-cn\|client-config-dir\|username-as-common-name' /etc/openvpn/server.conf

Ikheli elimile obucabanga ukuthi ulinikeze

Ukulungiselelwa kweklayenti ngayinye kuseshwa ngegama, futhi yilapho ugibe lukhona. Ifayela le- client-config-dir eliqanjwe ngegama elivamile lisebenza kudivayisi ngayinye esebenzisa lelo gama, ngakho i-ifconfig-push engaphakathi kulo inika amadivayisi womabili ikheli elifanayo lethanele. Isikhathi sesibili kungenzeka singasungulwa, noma sishayisane ngendlela ebukeka njengokwehluleka kokuhamba kwendlela.

Ichibi eliguquguqukayo liziphatha kangcono ngesikhathi esithile, ngoba isikhathi ngasinye sinikwa ikheli elivela echibini ngokuzimela. Lokho akukuniki ikheli elizinzile ngedivayisi ngayinye, futhi akukuniki umgomo ngedivayisi ngayinye ohlobene nalelo kheli.

Uma ukusetshenziswa kusebenzisa i-username-as-common-name, ukhiye wokusesha uba igama lomsebenzisi eliqinisekisiwe esikhundleni sesihloko sesitifiketi, futhi ukushayisana okufanayo kulandela noma ubani ongena kabili. Igama eliqhuba ukulungiselelwa kufanele lihluke ngedivayisi ngayinye ukuze ukulungiselelwa ngedivayisi ngayinye kube nencazelo.

Okungenakukwenziwa ubunikazi obabiwe ngesikhathi sokukhipha

Ukuhoxiswa kusebenza esitifiketini, hhayi egameni elibonisiwe futhi hhayi esikhathini. Hoxisa leso sitifiketi futhi idivayisi ngayinye ephethe ikhophi ilahlekelwa ukufinyelela ngasikhathi sinye, kuhlanganise naleyo ese-ofisini okungekho muntu ofuna ukuyiphazamisa. Yigcine futhi idivayisi elahlekile iyaqhubeka nokusebenza, ngoba akukho lutho kuphrothokholi oluyihlukanisa nekhophi evunyiwe.

Amarekhodi nawo azuza ukungacaci okufanayo. Okukhiphayo kwesimo kubonisa igama elivamile nekheli langempela, futhi kokubili kungaba ngedivayisi noma yiliphi kulawa amabili. Ukubuyekezwa kwesigameko okudinga ukwazi ukuthi imuphi umshini wenze ini akukwazi ukuphendula lowo mbuzo kusukela kumarekhodi e-VPN uqobo, noma ngabe izinga lamarekhodi linikeza imininingwane engakanani.

Akukho ndlela yokuzungeza ngokubhala ngemfihlo kulokhu. Amadivayisi amabili anikeza isitifiketi esifanayo, kuseva, umhlanganyeli ofanayo kabili, futhi noma yiluphi uhlelo olusho okuhlukile luyisivumelwano samagama hhayi ukulawula.

Nini ukwabelana kulungile, futhi ungakukhawulela kanjani

Ukwabelana kunezinto ezisemthethweni: i-akhawunti yaselabhu esetshenziswa imishini eminingi yokuhlola, noma ikhaya lapho amadivayisi ephethwe ndawonye futhi imininingwane yokuhoxiswa ingabalulekile. Kulezo zimo, vula inketho ngamabomu, gcina ubufakazi obabiwe ngaphandle komgomo ngedivayisi ngayinye, futhi unikeze ichibi isikhala ukuze izikhathi zingashayisani ekhelini.

Kukho konke okudinga amakheli ahlukene, amarekhodi ahlukene noma ukukhipha okuhlukile, khipha izitifiketi ezihlukene ngendlela ejwayelekile yokubhalisa. Lokho kunikeza uhlelo ngalunye olulandelayo into ehlukile engasetshenzelwa, futhi inketho ayisaba nokubaluleka ngoba amagama asevele ehlukile.

Noma yiyiphi indlela oyikhethayo, hlola imodeli yokuphatha hhayi ukungena. Xhuma amadivayisi womabili, qinisekisa ukuthi anamakheli ahlukene, bese ulingisa ukulahleka futhi uhlole ukuthi ungakhipha eyodwa kuphela kuzo. Incwadi ye-openvpn(8) ichaza ububanzi benketho; inqubo yakho yokukhipha ichaza ukuthi ukwabelana kwamukeleka ngempela yini.