Ukubethelwa kocingo kwe-Firebird 3 ne-VPN kuyimikhawulo emibili

I-VPN iyaxhuma, iklayenti livula isikhathi sokusebenza, futhi wonke umuntu ucabanga ukuthi ukuxhumana kwedathabhasi kuvikelekile. Izinto ezintathu ezahlukene zisanda kuhlanganiswa. Ukuthi isilaleli sifinyeleleka ngempela yini, ukuthi iseva yamukele umsebenzisi yini, nokuthi i-Firebird yaxoxisana ngokubethelwa kocingo yini kuyizindlela ezahlukene ezinobufakazi obuhlukene. Ithubhu liphendula okokuqala kuphela, futhi kuphela emithonjeni oyivumelayo.

Imikhawulo emibili, futhi ayihlangani

Umkhawulo we-VPN uvikela amaphakethe phakathi kweklayenti nesango. Ukubethelwa kocingo kwe-Firebird kuvikela iphrothokholi yedathabhasi phakathi kwelabhulali yeklayenti nenqubo yeseva. Kokubili kungaba khona, futhi akukho okunye okuthatha indawo yokunye.

Uma ithubhu liphela ngaphambi komsingathi wedathabhasi, ithrafikhi engaphesheya kwayo ivikelwa kuphela yilokho okwaxoxiswana ngakho yisikhathi sedathabhasi. Kulelo gebe lapho ukubuyekezwa ngokuvamile kuthola khona isimangaliso. Umdwebo wethubhu uphela esangweni, futhi ukuxhumana okuthwala umbuzo wakho kuyaqhubeka ngaphesheya kwaso. Noma ubani ofunda lowo mdwebo kamuva uzuzwa lelo cabango njengefa.

Umkhawulo wokuqala: ubani angavula isilaleli

Khomba ikheli langempela leseva kanye nechweba elilungisiwe, okuyi-3050 uma lingashintshiwe, bese uvumela imithombo ye-VPN egunyaziwe kuphela ezindongeni zomlilo zomsingathi nezenethiwekhi. Cabangela noma yikuphi ukuhunyushwa kwekheli esangweni le-VPN, futhi unikeze umsingathi wedathabhasi indlela yokubuya eya echibini lamaklayenti uma isango lihlukile.

Bese ufakazela okungetive. Indlela yangaphandle okufanele yenqatshwe kumele iqhubeke yenqatshiwe, ngoba ukuvula ithubhu akusikhawuleli isilaleli se-Firebird ngokwaso.

Umkhawulo wesibili: i-Firebird ixoxisana ngani

I-Firebird 3 yethula uhlaka lokubethelwa kocingo olunenqubomgomo yeseva engakhubazwa, inikwe amandla noma iphoqelelwe. Inqubomgomo ibeka izinga eliphansi. Isikhathi sangempela sisancike kulabhulali yeklayenti elayishwa uhlelo kanye nezengezo ezisekelwa yizinhlangothi zombili.

Emanothini okukhishwa kwe-Firebird 3 i-Arc4 ifakwe ohlwini njengesengezo sokubethelwa kocingo esizenzakalelayo salokho kukhishwa. I-Arc4 iyisizenzakalelayo somlando, hhayi isincomo se-cipher yesimanje, futhi ayiyona into efanayo nokuvikelwa kwe-VPN kwangaphandle.

Ukuqinisekiswa kungukuhluka kwesithathu kuleyo nxoxiswano. Iseva yamukela iqoqo lezengezo zokuqinisekiswa, ilabhulali yeklayenti inikeza ingxenye yawo, futhi kokubili kumele kuhlangane.

Ugibe lwe-Legacy_Auth

Ukusekela i-Legacy_Auth kudinga ukukhululeka kwenqubomgomo yeseva yokubethela okuyimpoqo esizenzakalelayo. Leyo yindleko yokuhambisana ebhaliwe, futhi yingakho ukwehlisa inqubomgomo ukuze kuthulisiwe iphutha lokuxhumana kuwushintsho lwezokuphepha hhayi ukulungisa.

Uma iklayenti lehluleka ngokuzumayo ngemuva kokuthuthukiswa kweseva, qhathanisa uhlu lwezengezo ngaphambi kokwenza buthaka noma yini. Ukwehluleka ngokuvamile ukungafani kwenxoxiswano, futhi impendulo isengezo esisekelwayo ezinhlangothini zombili.

Hlola ukuxhumana okubalulekile

Kukwakhiwo olunikeza okuguqukayo komongo, lo mbuzo ubika isimo sokubethelwa kokuxhumana kwamanje:

SELECT RDB$GET_CONTEXT('SYSTEM', 'WIRE_ENCRYPTED')
FROM RDB$DATABASE;

Kuyisebenzisa ngokuxhumana kohlelo uqobo, hhayi ngesikhathi somphathi kuseva efanayo. Ukuxhumana komphathi okubethelwe akusho lutho mayelana nesikhathi selabhulali yeklayenti elinye, futhi ukwakhiwa okudala okungasekeli okuguqukayo akusibufakazi bokuthi ukubethela kucishiwe.

Qopha ndawonye inguqulo yelabhulali yeklayenti, ukwakhiwa kweseva kanye nomphumela, ngoba akukho kukodwa kwalokho okufundekayo kukodwa.

Izimvume kanye nendlela yokuthuthukisa

Ukukhawulela imithombo nokubethela ukuthutha akuthathi indawo yokuqinisekiswa noma yezimvume zelungelo elincane. Hlola izimvume zomsebenzisi ojwayelekile wedathabhasi ezintweni azithintayo ngempela.

Ekugcineni, thwala ukusatshalaliswa kwesikhathi eside njengombuzo wokunakekela. Ithubhu alenzi ilabhulali yeklayenti ephelelwe yisikhathi iphephe unomphela, futhi indlela yokuthuthukisa esekelwayo ishibhile kunokuthola ukuthi isengezo esiyidingayo sisusiwe.