mitmproxy, DevTools, Gradle: izingqimba ezintathu ngemuva kwe-VPN
I-loopback ayingeni emhubheni. Hlukanisa uphawu njengomlaleli, isitolo sokwethemba noma isihlungi samaphakethe, bese ulungisa ungqimba olwehlulekile ngempela.
I-VPN iyaxhumana, futhi amathuluzi amathathu angahlobene ahluleka ngezindlela ezintathu ezihlukene ntambama efanayo. i-mitmproxy iyeka ukubona izicelo, i-Chrome yenqaba isihlungi sephutha, futhi i-Gradle iphonsa BindException ngenkathi ibopha isokhethi yasendaweni. Umshwama owabiwe ukuthi umhubhe uvimbela i-localhost. Ngeke: 127.0.0.1 kusingathwa ngaphakathi kwe-kernel futhi akufinyeleli ku-adaptha, ingasaphathwa igethiweyi.
Izingqimba ezintathu, ukwehluleka okuthathu okuhlukene
Okwashintsha nekhasimende akulona uhambo oluya ku-loopback. Kuyiproksi yasendaweni, isitolo sokwethemba somshini kanye nesihlungi samaphakethe, futhi ngakunye kwephula ingxenye ehlukene yohambo lomsebenzi womthuthukisi. Ukubeka uphawu emgqeni ofanele yingxenye enkulu yokuxilonga:
| Symptom | Layer | First check |
|---|---|---|
| Proxy sees no traffic | Local proxy or listener | ss -lntp, or netstat -ano on Windows |
| TLS error in one tool only | Trust store | Which CA bundle does that runtime read? |
| Local bind or connect refused | Packet filter or port owner | Who holds the port, and what rule drops it? |
Cishe wonke umbiko walolu hlobo uqala emgqeni wokugcina futhi ukhuphukele phezulu, okuhlanekezelwe. Umhubhe yiwona kuphela ungqimba okufakazelwe ukuthi awukwazi ukubona ukuhamba kwe-loopback, ngakho kufanele ube nokungabaza okuncane. Qala ngalokho okuboshwe yinqubo, bese ubuza ukuthi iwethemba ziphi izitifiketi, futhi ngemva kwalokho kuphela bheka inqubomgomo kumshini.
Qala ngomlaleli, hhayi ngomhubhe
Lapho 127.0.0.1:8080 iproksi iyeka ukuthola ukuhamba, kwenzeke okunye kokuthathu: ayizange iqale, ibophe elinye imbobo, noma isihlungi sawisa ukuxhumana kwe-loopback. Ukufaka ohlwini amasokhethi alalelayo kuphendula lokho ngomyalo owodwa, futhi kukhombisa ukuthi iyiphi inqubo ephethe umgodi lapho amathuluzi amabili engavumelani ngokuthi ubani wayeqala.
Ikheli lasendaweni ekufuneni umzila liqinisekisa into efanayo ngakolunye uhlangothi. ip route get ngasekupheleni kwe-loopback kubika idivayisi ye-loopback, hhayi umhubhe, okuwumusho owusizo okumele ulondolozwe uma othile ephakamisa ukushintshwa komzila njengesixazululo.
Ungqimba lweproksi: indawo yokusebenza akuwona ukuhlelwa
Amakhasimende amaningi ezinkampani asebenzisa iproksi ye-HTTP futhi alindele ukuthi izinhlelo ziyisebenzise. Ukusetha HTTPS_PROXY kwi-shell kulungisa amathuluzi omugqa womyalo ayihlonipha, futhi akwenzi lutho kuthuluzi elifunda ifayela lalo lokusetha. I-Gradle, i-Selenium ne-gRPC ngayinye ibonisana nokuhlelwa kwayo, futhi iproksi ekhishwe kutheminali eyodwa ayibonakali ku-daemon eqalwe yi-IDE.
Amathuluzi wekhonteyina yindawo evamile lapho lokhu kubonakala khona. I-loopback yekhonteyina ngeyayo, ngakho 127.0.0.1 ngaphakathi kwekhonteyina akusho iproksi yomsingathi, kudingeka ikheli lomsingathi noma isethingi yenethiwekhi yomsingathi. Ukulungisa okusebenza ku-shell kodwa kwehluleke ku-build ngokuvamile kuwumugqa lo, hhayi umhubhe.
Ungqimba lokwethemba: ithuluzi lifunda esinye isitolo
Ukuvimba kuwushintsho lwesibili, futhi kukhiqiza amaphutha adukisayo kakhulu. Ikhasimende lethula isitifiketi saso ekuxhumaneni okuhlolwayo, ngakho isiphequluli esithemba impande yenkampani siyaphumelela kuyilapho ithuluzi elinesitolo se-CA elifakiwe lihluleka. Izicelo ze-Python nge-certifi yisimo sasendulo: isitolo sesistimu yokusebenza singase silunge futhi isicelo sihluleke noma kunjalo, ngoba isikhathi sokusebenza asikaze sisifunde. Umbhalo wephutha awuvamile ukukhuluma ngokuvimba, yingakho lo mugqa uxilongwa ngokungalungile njengendawo yokugcina ephukile.
Qhathanisa lokho indawo yokugcina ekwethula ngempela nalokho ithuluzi elikuqinisekisile. openssl s_client kubonisa uchungechunge oluthunyelwe yiseva; umphumela wokuqinisekisa wethuluzi ngokwalo ubonisa lokho elinqumile. Uma zingavumelani, REQUESTS_CA_BUNDLE noma SSL_CERT_FILE kuyisigxobo salokho kusebenza, futhi impande yenkampani kufanele ibe sesitolo esifundwa yileso sikhathi sokusebenza, hhayi endaweni yomhlaba wonke ehlonishwa amathuluzi ambalwa kuphela.
Ukushintsha kwenguqulo okulungisa iphutha le-SSL kuwubufakazi mayelana nenqubomgomo yokwethemba nokubhala ngemfihlo, hhayi mayelana ne-VPN. Ukwehliswa kwenguqulo ye-Python okwenza ikhasimende le-SOAP lisebenze kwashintsha isitolo se-CA esifakiwe kanye nezilungiselelo ze-TLS ezizenzakalelayo; umzila wenethiwekhi awuzange unyake.
Ungqimba lwesihlungi: lungakwazi nokulahla i-loopback
Ushintsho lwesithathu yisihlungi samaphakethe, futhi eminye imikhiqizo ifaka imithetho elahla ukuhamba okungangeni emhubheni. Abalaleli basendaweni bangafakwa. Lokho kuguqula isokhethi esisebenzayo kube ukuxhumana okwenqatshiwe noma okuphelelwe yisikhathi, futhi iphutha elivelayo libonakala njengephutha kuhlelo kunokuba kube inqubomgomo kumshini.
Ukuba ngumnikazi kwembobo kungenye ingxenye yalolu ngqimba. BindException kusho ukuthi isokhethi ayikwazanga ukuvulwa, okuwukwehluleka okuhlukile ekuxhumaneni okwenqatshiwe. Hlola ukuthi enye inqubo isivele iphethe umgodi ngaphambi kokusola isihlungi, bese ufuna umthetho olahla ukuhamba kwasendaweni futhi wengeze imvume emincane kakhulu esekelwa umkhiqizo. Amathuluzi amabili ancintisana ngombobo ofanayo wokulungisa amaphutha akhiqiza umyalezo ofanayo ncamashi nokuvinjwa yinqubomgomo, futhi yinye kuphela yawo elungiswa ukushintshwa kwe-firewall.
Umbobo wokulungisa amaphutha we-Chrome wehluleka emndenini ofanayo. Isiphequluli siyaqala, umshayeli akakwazi ukufinyelela endaweni yokugcina ye-DevTools, futhi umyalezo usho i-DevTools hhayi inethiwekhi. Amafulegi engeziwe okuqalisa kanye nomphathi womshayeli ongadingekile ashintsha ukuthi iyiphi inqubo ephethe umgodi, yingakho ukubasusa kwesinye isikhathi kubonakala kungalungisa i-VPN.
Lungisa ungqimba olwehlulekile
Lungisa ungqimba olwehlulekile, hhayi umhubhe. Umlaleli we-loopback ongafinyeleleki udinga ukuthi umlaleli noma umgodi walo ulungiswe. Isitifiketi esingathenjwa sidinga impande yenkampani efakwe lapho kubheka khona leso sikhathi sokusebenza, kanti okuhlukile kugcinwa kuncane. Isihlungi esilahla ukuhamba kwasendaweni sidinga umthetho wemvume othile esikhundleni sesihlungi esivaliwe, ngoba ukuvala kuvula futhi konke okunye ebekuvikela.
Ukuxhuma kabusha i-VPN akuhloli lutho kulezi zingqimba. Kugcina nje kuphinda kugijime ushintsho olwaziphula, yingakho ukwehluleka okuthathu okufanayo kubuyela emuva ngemuva kokuxhuma kabusha ngakunye futhi kunyamalale ngemuva kokusungulwa kabusha ngakunye okushiya ikhasimende lingasebenzi.