Iphutha lerejista le-Easy-RSA ku-Windows: hlola umbono werejista

Ifayela le-batch liyeka ngomlayezo othi “Uhlelo alukwazanga ukuthola ukhiye noma inani lerejista elishiwo” futhi wonke umuntu ucabanga ukuthi isiphathimandla sezitifiketi siphukile. Akusinjalo, noma okungenani akukabi njalo: iskripthi sehlulekile ngesikhathi sifuna isoftware, ngaphambi kokucela i-Easy-RSA ukuthi yenze noma yini ngokhiye. Lokho kuhleleka kubalulekile, ngoba kusho ukuthi ukulungiswa kuyinkinga yokufuna futhi i-PKI iyisibukeli nje. Ukufunda umugqa ohlulekile ukuxilonga konke, futhi kuthatha isikhathi esincane kunanoma iyiphi indlela yokweqa.

Iphutha lenzeka ngaphambi kokuthi i-CA ithintwe

Amafayela amadala e-batch e-Easy-RSA 2 athola i-OpenSSL noma ukufakwa kwe-OpenVPN ngokubuza irejista, bese ebeka izinto eziguquguqukayo ngokusekelwe kulokho akutholayo. Uma umbuzo ungabe usabuya nalutho, iskripthi siyeka ngaphambi kokuthi noma yikuphi ukusebenza kwesitifiketi kuqale.

Ngakho-ke umlayezo mayelana nokhiye werejista uwubufakazi mayelana nemvelo yeskripthi, hhayi mayelana nefolda ye-CA.

Imibono emibili yerejista, ifayela elilodwa le-batch

Inqubo ye-32-bit nenqubo ye-64-bit zingabona imibono ehlukene yerejista, futhi ifayela le-batch elicabanga eyodwa lingaphuthelwa ukufakwa okukhona kwelinye. Lezi ziqhathaniso zokufunda kuphela zibonisa umehluko kukhiye wakudala osetshenziswa amanye amaskripthi amadala:

reg query "HKLM\SOFTWARE\OpenVPN" /reg:32
reg query "HKLM\SOFTWARE\OpenVPN" /reg:64

Incwadi yokubhekisela ye-reg query ichaza izikhethi zombono. Gxuma kokubili endaweni efanayo neskripthi esihlulekile, ngoba umbono uncike endleleni inqubo eqala ngayo kanye namafulegi. Uma ukufakwa kukhona embonweni owodwa kuphela, qhathanisa indlela ekukhomba ngayo namathuluzi afakiwe ngaphambi kokushintsha noma yini. Ukhiye okhona kodwa okhomba ifolda endala yokufakwa kuwukwehluleka okuhlukile kukhiye ongekho.

Uma kungekho mbono onakho lokho kufakwa, umfakeli akakaze akwakhe, futhi ukwakha inani ngesandla ngeke kwenza amathuluzi asebenze.

Ungangezi i-/reg:64 ngaphandle kwemibandela

Isixazululo esihehayo ukwengeza isikhethi se-64-bit kumbuzo ngamunye bese uqhubeka. Kokunye ukufakwa lokho kulungile, kwezinye kuthumela iskripthi embonweni ongenalutho ngempela.

Shintsha ukufuna kuphela ngemva kokubona ukuthi yimuphi umbono ophethe inani elilindelekile.

Ukuthola akukona ukulungisa i-PKI

Leli phutha alifakazi ukuthi isitifiketi se-CA, ukhiye wokusayina, ifayela lezinombolo zelandelano noma isizindalwazi sokuhoxiswa konakele. Ukugxuma i-clean-all ekopishwe encwadini endala kuzobhubhisa isethi ehluke ngokuphelele yezinto kuyilapho ukufuna kusala kuphukile. Gcina le misebenzi emibili ihlukene ekhanda lakho nakuthikithi. Uma ukusebenza kwesitifiketi kwehluleka kamuva, kukala ngobufakazi bakho.

Yenza ikhophi yokuphepha yefolda ye-CA ngaphambi kwanoma yikuphi ukuhlola, ngisho nalokho oqinisekile ukuthi kufundwa kuphela.

Ukuthuthela ku-Easy-RSA 3 wukufuduka

Ukufakwa okunakekelwayo kufanele kusebenzise isiqalisi nendlela yokuhlela yephakethe lamanje, futhi i-Easy-RSA 3 akuwona umsebenzi ofanayo wefayela le-batch njenge-Easy-RSA 2. Ukuqala kwayo okusheshayo kwe-PKI entsha akusiwona umyalelo wokufuduka kumandla akhona. Ngaphambi kokushintsha izinguqulo, gcina impahla ye-CA kanye namarekhodi okukhishwa nokuhoxiswa, futhi landela umhlahlandlela wokuthuthukisa wale nguqulo. Ukuqalisa i-CA yokushintsha ngaphakathi kwefolda egunyaziwe ukuze iphutha lokuthola amathuluzi linyamalale iyinketho embi kakhulu ohlwini.

Ushintsho lwenguqulo wuphrojekthi; iphutha lerejista iwusuku olulodwa ntambama.

Isiqhathaniso esixazulula ngempela

Bhala izinto ezine bese uziqhathanisa ngqo:

• Iyiphi iskripthi eyagxuma, futhi wumuphi umugqa ohlulekile.
• Wumuphi umbono werejista owubuzwa yilowo mugqa.
• Iyiphi indlela yefayela elisebenzayo eyayilindelwe iskripthi.
• Yikuphi ukufakwa okukhona ngempela emshinini.

Uma lezo zine zivumelana, iphutha alisekho, futhi noma iyiphi inkinga yesitifiketi esele ingafundwa ngobufakazi bayo kunokuba kusolwe i-CA.