iOS IKEv2 kuya ku-strongSwan: asikho isiphakamiso esikhethiwe, lungisa uhlu

I-iPhone ikhuphula umhubhe, igethiweyi ayiphenduli ngalutho, futhi ifoni ikhombisa ukwehluleka okujwayelekile. Ilogi ye-strongSwan icace kakhulu: no proposal chosen. Lowo mlayezo usho ukuthi izinhlu ezimbili zamakhodi okubhala amukelekayo azikaze zihlangane, ngakho ukushintshana kwaphela ngaphambi kokuba ukuqinisekiswa kuqale. Le nkinga yokufanisa, futhi isisombululo ukwenza izinhlu zihlangane.

Lapho igethiweyi imemezela khona inqubomgomo yayo

I-strongSwan ibhala inqubomgomo yayo kusimo, futhi uphawu lwesibabazo ekugcineni lunquma ukuthi leyo nqubomgomo ifundwa kanjani. Ngophawu uhlu luphelele: yilawo mabhuku kuphela amukelekayo, akukho okunye. Ngaphandle kophawu umugqa ofanayo uwuhlu lokuncamela, futhi idemoni ingakhetha into obungayihlosile. Buza ukuthi yiluphi uhlobo olufakiwe ngaphambi kokuhumusha noma yini, ngoba zombili ziphatha ngendlela ehlukile iklayenti elifanayo. Bhala umugqa oqondile, kuhlanganise uphawu, futhi uhlole ngawo.

Iklayenti elinikeza uhlu olubanzi lusengaxhuma kugethiweyi eboshelwe, inqobo nje uma inhlanganisela eyodwa ivela kuzo zombili izinhlangothi. Okungeke kwenzeke ukuxoxisana ngaphandle kwesethi eboshelwe.

Yingakho iphrofayili ekhotshelwe kwesinye isicelo se-VPN ingase isebenze lapho eyakho ingasebenzi khona: leso sicelo sathumela olunye uhlu.

Amagama kufanele afane, hhayi ukuba ngcono

Ukuhumusha okubili kudida abantu abadlulisa amanani besuka ku-strongSwan baya ku-iOS. I-algorithms yobuqotho ebhalwe njenge-SHA1 esiphakamisweni se-IKE ihamba ngendlela yayo emfushane, i-iOS iyibiza ngokuthi .SHA96. Iqembu le-Diffie-Hellman elibhalwe njenge-modp1024 iqembu 2, i-iOS ilibiza ngokuthi .group2. Ukufaka i-SHA-256 noma iqembu 14 ngeke kuxoxisane negethiweyi eyamukela kuphela ipheya elidala. Iklayenti kufanele ichaze i-algorithms efanayo, hhayi enamandla kakhulu.

Setha lawo manani ngokusobala ku-NEVPNProtocolIKEv2. Amanani azimiso angase abe banzi noma abe mncane kunecomputheli oyishintshayo, futhi umehluko ubonakala kuphela lapho ukuxhawulana kwezandla kwehluleka.

Isiphakamiso sengane sehluleka kamuva futhi ngokuthula

Hlela nesihlanganiso sokuphepha sengane, hhayi i-IKE kuphela. Lapho kufana kuphela amapharamitha e-IKE, umhubhe uqinisekisa bese ungathwali thrafiki, okuwukwehluleka okuthule kakhulu kunokwenqatshwa. Setha ukubethela, ubuqotho, iqembu kanye nokuphila kwengane esigabeni esisodwa. Gcina ukuphila kweklayenti kulingana noma ngaphansi kwenani legethiweyi, ngoba ukuphikelela kokude kukhiqiza umlayezo ofanayo we-no proposal chosen kwesinye isizathu. Ukungafani lapho kubonakala kufana nokwe-ukungafani kwe-IKE kulogi.

Hlola ukuthi iphrofayili iqinisekisa ngezitifiketi noma ngemfihlo eyabiwe ngenkathi usemisebenzini yokuhlela. Ukwenqatshwa kwesiphakamiso nokwenqatshwa kokuqinisekisa kuvela emigqeni ehlukile, futhi ukulungisa okungalungile kudla usuku. Hlola ngokuxhumana okusha ngemuva kwakho konke ukushintsha, okuguquguqukayo okukodwa ngesikhathi, ngoba isimo esigciniwe sifihla ukuthi iyiphi ipharamitha eshintshile.

Shiya isethi endala kuphela ngesikhathi lapho idingeka khona

Ukubophela i-SHA-1 neqembu lamabhithi angu-1024 kuyibhuloho, hhayi indawo yokuyofika. Womabili asasakwazi ukusetshenziswa, futhi amaklayenti amasha angase awenqabe ngokuphelele, okusho ukuthi iphrofayili izohluleka kudivayisi elandelayo ngaphandle kwanoma yikuphi ukushintsha ohlangothini lwakho. Thatha ukubophela njengokwesikhashana futhi ukubhale lokho embhalweni.

Uma i-strongSwan ingeyakho, engeza isiphakamiso sesimanje futhi uvumele zombili izinhlangothi zixoxisane zikhuphuke ngenkathi umbhalo omdala usala wedivayisi ezindala. Funda okukhishwayo kwesimo sedemoni ukuze ubone ukuthi iyiphi isethi esetshenziswe yikho konke ukuxhumana. Bese ususa ukubophela ohlangothini lweklayenti uma ipheya yesimanje isiqinisekisiwe. Umhubhe ophakamayo awanele njengobufakazi, ngoba ungaphakama kusethi obuzama ukuyihoxisa. Imibhalo ye-strongSwan ye-IKEv2 ichaza ukwakheka kwesiphakamiso kanye nophawu lwe-strict.