Ukhiye we-IPsec owabiwe ngaphambili: amabhayithi angemuva kwentambo oyibhalile
Izinhlangothi ezimbili zingaba nezintambo ezibukeka zifana futhi zikhiqize okhiye abehlukene. Hlola uhlobo lwensimu, noma yikuphi ukubhalwa kwekhodi namabhayithi okugcina ngaphambi kokwenza noma yini ibe buthakathaka.
Abaphathi ababili baqhathanisa imfihlo esikrinini, bayavuma ukuthi iyafana, kanti umhubhe usahluleka ekuqinisekiseni. Intambo abayiqhathanisayo akuyona inani alifaka nhlangothi ngayinye ekukhiqizweni kokhiye. Phakathi kwezinhlamvu ozibonayo namabhayithi ehashi yeprothokholi kunohlobo lwensimu, ukubhalwa kombhalo, umhleli kanye nebhodhi yokunamathisela, futhi noma yikuphi kwalokhu kune kungashintsha okokufaka ngaphandle kokushintsha ukubukeka. Qhathanisa amabhayithi futhi umehluko uvame ukuvela ngemizuzwana.
Isango lenza ini ngale ntambo
Ukhiye owabiwe ngaphambili awuthunyelwa ngenethiwekhi bese uqhathaniswa. Uhlangothi ngalunye lufaka ikhophi yalo yasendaweni ekukhiqizweni kokhiye kokushintshana kwe-IKE, futhi imithwalo yokuqinisekisa ekhiqizwayo iyaqinisekiswa noma cha. Leso sakhiwo sisho ukuthi amakhophi amabili kufanele afane ngamabhayithi hhayi nje abukeke efana, futhi sisho nokuthi ukwehluleka kubikwa esigabeni sokuqinisekisa hhayi njengomlayezo wephasiwedi engalungile.
Ngakho umbuzo ousizo awukaze ube «ngabe lezi zibukeka zifana» kodwa «yikuphi ukulandelana okunembile kwamabhayithi okuhashwa yikuphi ukuqaliswa».
Amabhayithi engeziwe avela kuphi
Umgqa omusha wokugcina uyisoni esijwayelekile, futhi ucasha obala ngoba izihleli eziningi zingeza eyodwa ngokungabonakali lapho ifayela ligcinwa. Isikhala sokuqala noma sokugcina esinamathiselwe kusuka kuwindi lokuxoxa senza okufanayo, futhi kanjalo nenkulumo eqondile eshintshelwe yiprogramu yokucubungula amagama. Akukho kulokhu okushintsha ukuqhathanisa okubonakalayo okwenziwa umuntu.
Qhathanisa ngethuluzi elibonisa amabhayithi hhayi ama-glyph. printf '%s' "$PSK" | xxd | tail -2 liphrinta ukuphela kwenani nge-hex, lapho 0a noma 20 elahlekile libonakala khona. Kwenze nhlangothi zombili bese uqhathanisa ama-dump amabili eceleni. Kwenze ezintweni zokuhlola ezikhiqiziwe, hhayi emfihlweni yokukhiqiza oyishiya emlandweni we-shell.
Okubhalwe ngekhodi akusho ukuthi kufihliwe
Ukuthunyelwa kwesimo kwesinye isikhathi kuthwala imfihlo ngokubhalwa kwekhodi eyisisekelo, kwesinye isikhathi ngokunqamuka kwemigqa njalo ngezinhlamvu ezingamashumi ayisithupha noma ezingamashumi ayisikhombisa nesithupha futhi kwesinye isikhathi ngokugcwalisa. Uma uhlangothi olulodwa lulindele amabhayithi akhodiwe futhi wena unamathisela umbhalo obhalwe ngekhodi, awuthumelanga iphasiwedi ehlukile, uthumele ende kakhulu eyakhiwe ngezinhlamvu ezinyatheliswayo. I-Base64 ayinikezi imfihlo nhlobo, yingakho imfihlo ebhalwe ngekhodi ingalokothi inamathiselwe kunkundla ukuze kutholakale umbono wesibili.
Isichazamazwi se-IPSec sakwa-Apple siyisibonelo esiusizo sokuthi uhlobo lubalulekile: sibhala SharedSecret njengedatha yendlela yokuqinisekisa ngemfihlo eyabiwe kumithwalo ye-L2TP ne-Cisco IPsec. Lokho kuyisici esithile emthwalweni othile, hhayi insimu yombhalo evamile ongayisebenzisa futhi kwenye iprothokholi ethi ngokuzumeka icela imfihlo.
Umkhawulo okushiwoyo ungowenhlanganisela eyodwa
Imibiko emidala yomkhawulo wezinhlamvu ezingamashumi amathathu nambili kuklayenti eyodwa yakwa-Apple iyimibiko yangempela yenguqulo yeklayenti eyodwa, iprothokholi kanye nesimo sephrofayela. Akuwona umkhawulo jikelele wazo zonke izinkundla zakwa-Apple, wonke umhlinzeki nayo yonke iprothokholi. Hlola inguqulo, uhlobo lomthwalo kanye nemfuneko yesango ndawonye, bese uhlola ekuhlelweni okuvunyelwe esikhundleni sokucabanga kusuka kuchungechunge. Bhala inhlanganisela ehloliwe kurekhodi yezinguquko, ngoba uma kungenjalo umuntu olandelayo uzocaphuna uchungechunge olufanayo ngokuzethemba okungaphezu kwalokho olukufanele.
Uma umkhawulo usebenza ngempela, impendulo iwumklamo wezifakazelo osekelwayo ohambisana nawo, hhayi inguqulo efingqiwe yemfihlo eqinile. Ukusika ukhiye wokukhiqiza ukuze kuhlangatshezwane nomkhawulo ocatshangelwayo kwehlisa amandla awo unomphela futhi kukhiqiza uhlelo okubhalwe kulo okungasahambisani nokuphepha kwalo.
Lungisa isethulo, hhayi amandla
Lapho ukuqinisekisa kwehluleka ngemva kokuqinisekiswa kwesethulo, funda inqubomgomo esebenzayo esigabeni sokuqinisekisa: iyiphi indlela okuxoxiswana ngayo, ubuphi ubunikazi bozakwethu obulindelekile, nokuthi isango liyahambisana yini nokuxhumana ocabanga ukuthi kukhona. Ukuqagela okuba buthakathaka kancane kancane akusona ukuxilonga, kuwukwehliswa okunensa okunethikithi losekelo elinanyathiselwe.
Uma izifakazelo ezidingekayo zingakwazi ukuhlangabezana nezinga lenhlangano, shintsha umklamo ube ngowokwazi. Imfihlo eyabiwe ene-entropy eyanele, ekhiqizwe kanye, egcinwe ensimini ephethwe futhi engagcina ukushicilelwa, iyimpendulo enhle ngokuphelele; inguqulo yayo emfushane ayiyona.