I-Nebula idinga amafayela amathathu: i-CA, isitifiketi somsokheli kanye nokhiye womsokheli

Uma unikeza umuntu uhlu lwe-Nebula, ngokuvamile ukopisha konke, kuhlanganise nefayela okufanele lingaphumi esiteshini sakho somsebenzi nakancane. Ukudideka kuyaqondakala, ngoba amafayela amathathu ebhulokhi ye-PKI yomsokheli ayafana futhi amabili kuwo yizitifiketi. Ngayinye iphendula umbuzo ohlukile, futhi amabili kuphela ayo angena ku-node. Hlukanisa ngeqhaza ngaphambi kokukopisha noma yini.

Amafayela amathathu, imisebenzi emithathu ehlukene

Isitifiketi se-CA siyisisekelo sokwethembana: sitshela umsokheli ukuthi yiziphi iziphathimandla okufanele azethembe lapho omunye umsokheli ethula ubunikazi bakhe. Isitifiketi somsokheli siwubufakazi bawo u-node uqobo, sisayinwe yileyophiphathimandla. Ukhiye womsokheli uyingxenye yangasese ehambisanayo, futhi ungowomshini oyedwa ngqo. I-node enesitifiketi se-CA kanye nombhangqwana wayo ingangena ku-overlay futhi ikhombise ukuthi ingubani. I-node enokhiye womunye umuntu nayo ingazenza lowo muntu, futhi lokho kuwukwehluleka okwenzelwe ukuthi lokhu kuhlelo kukuvimbe.

Ngakho-ke ukukopisha uhlu lomsokheli olusebenzayo kumshini wesibili akulona indlela emfushane. Kubuwubunikazi obuphindwe kabili obunomphumela ongalindeleka.

Ukhiye wokusayina awuhambi nanini

Ukhiye wokusayina we-CA awuyona ingxenye yanoma yikuphi ukumiswa komsokheli. Wakha ubunikazi obusha, futhi noma ubani onayo angakhipha isitifiketi sanoma yiliphi ikheli le-overlay nanoma yiliphi iqembu. Ontanga badinga kuphela isitifiketi se-CA esisesidlangalaleni ukuze baqinisekise amasiginesha, ngakho-ke ingxenye yangasese ayinawo nhlobo umsebenzi kuklayenti. Yigcine emshinini lapho kukhishwa khona izitifiketi, futhi thinta ikhophi eyenzeke ngephutha njengesigameko, hhayi njengelula.

Uma abantu abaningi bedinga ukukhipha izitifiketi, banikeze inqubo esikhundleni sekhophi yokhiye. Ukhiye wokusayina owabiwe kukhompyutha ephathekayo uyigunya okungekho muntu ongalihlola noma alihoxise.

Yini engaphakathi kwesitifiketi somsokheli

Isitifiketi somsokheli sihlanganisa nokhiye okungaphezu kwegama lefayela. Sithwala ikheli le-overlay le-node, igama layo nobulungu beqembu, konke kusayiniwe ukuze ontanga bakwazi ukunquma ukuthi bayayamukela yini. Yikho ukushintsha igama lomsokheli kusho ukukhipha isitifiketi esisha, hhayi ukuhlela umugqa wokumiswa.

nebula-cert print -path host.crt kukhombisa lokho okwakhiphwa ngempela. Kufunde ngaphambi kokucabanga ukuthi isitifiketi sithwala ikheli obuhlosile.

Ukulayisha kabusha akwanele njalo

Ezinye izilungiselelo ze-PKI zilayishwa kabusha ngesignali, kanti ezinye azilayishwa.Isitifiketi esishintshile ikheli le-overlay yiso isimo esijwayelekile esidinga ukuqalisa kabusha inqubo esikhundleni sokulayisha kabusha.

Qinisekisa ukuthi yimiphi imikhondo inqubo esebenzayo eyivulile ngempela, hhayi kuphela imikhondo ebizwa yifayela lokumiswa. Bese ushintsha ubufakazi obubodwa, uqinisekise ukuxhumana namalogi, bese kuthi ngemva kwalokho uthinte okulandelayo. Ukulayisha kabusha okubonakala kuyimpumelelo ngesikhathi isitifiketi esidala sisememori kudala ukungafani okubonakala njengenkinga yomzila. Ukuqalisa kabusha akubizi; ukulungisa ubunikazi okusabonwa yingxenye ye-overlay ngendlela endala akubizi kancane.

Ukususa ubunikazi kudinga uhlu lwezivinjelwe

Ukushintsha ubufakazi obulahlekile noma obudaluliwe kunezingxenye ezimbili. Isitifiketi esisha sibuyisela ukufinyelela, futhi ubunikazi obudala kufanele buyeke ukwamukelwa. Lezi zinto ezihlukene, futhi ukwenza okokuqala kuphela kushiya ubufakazi obusengozini busasebenza.

Uhlu lwezivinjelwe luyifayela olusabalalisa kubasokheli, hhayi into elethwa yi-lighthouse ngokwayo. Hlela ukuthi luzofinyelela kanjani ku-node ngayinye, kuhlanganise nalezo ezingaxhunyiwe namuhla, futhi urekhode ukuthi yiziphi izigxivizo zeminwe ozivimbile. Jikelezisa ukhiye emshinini okhiphayo futhi gcina imininingwane yesitifiketi esisha kanye nerekhodi lomsokheli. Ukuhoxiswa okukhona kuphela emshinini owuhlelile akulona ukuhoxiswa.