Ingabe uyayidinga i-Easy-RSA ye-OpenVPN? Kuncike ekutheni ubani ongumnikazi we-CA
I-Easy-RSA iwukuhamba komsebenzi wezitifiketi, hhayi isendlalelo sokubethela. Yiqhathanise nomkhiphi osewusebenza kakade ngaphambi kokwengeza i-CA yesibili ku-VPN yakho.
Isifundo sithi faka i-Easy-RSA ngaphambi kokusetha i- OpenVPN, ngakho abantu bacabanga ukuthi zombili ziyisethi eyodwa. Akunjalo. I-Easy-RSA iyithuluzi lokuphatha i-PKI eliqhuba i-OpenSSL; i-OpenVPN ingumhubhe. Enye inquma ukuthi ubani okufanele athenjwe, enye ihambisa amaphakethe.
Ukuqhathanisa okubalulekile akukhona ukuthi iyiphi ithuluzi engcono. Kodwa ukuthi ubani ongumnikazi womkhiphi enhlanganweni yakho.
Yini ngempela i-Easy-RSA
Lo msebenzi uzichaza njengethuluzi lokuphatha i-PKI ye-X.509, kanti i-OpenSSL yenza umsebenzi we-cryptography. Lokho kusho ukuthi ihlanganisa ukukhiqizwa kokhiye, izicelo zesitifiketi, inqubomgomo yokusayina nokuhoxiswa endleleni yamafolda ephindwayo. Ayengezi isendlalelo sokubethela emhubheni okhona, futhi ayenzi i-RSA ibe namandla ukwedlula ukhiye ofanayo okhiqizwe elinye ithuluzi elinekhono. Engikwenzayo ukwenza ukuhamba komsebenzi kuhlolwe.
Lokho kuyinzuzo yangempela, kodwa ingeyokusebenza hhayi eye-cryptography.
Landela ikhompyutha ephathwayo eyodwa ekubhaliseni
Ikhompyutha ephathwayo entsha izakhela ukhiye wayo bese ithumela isicelo sesitifiketi, ngakho ukhiye oyimfihlo awusoze washiya idivayisi. Umkhiphi ube esesayina leso sicelo ngohlobo olukhetha izandiso ezifanele indima yeklayenti. Ku-Easy-RSA lokho ./easyrsa sign-req client laptop-a.
Umsebenzisi kusafanele anqume ukuthi lo muntu ufanele ukufinyelela. Alikho ithuluzi lokusayina elithola ilungelo egameni elijwayelekile.
Isitifiketi esisayiniwe sibuyela kudivayisi ephethe ukhiye ohambisanayo, futhi ukusetshenziswa kwe-VPN kunikeza ngokwahlukile ukuthembela kuseva, ukuhlolwa kobuwena, inqubomgomo yenethiwekhi nezidingo ze-akhawunti. Ifayela elikufolda lokuphuma lomkhiphi alifakazeli lutho kwalokho. Ukuxhawulana okuqediwe kuphela okwenza lokho.
Landela leyo khompyutha ephathwayo uma iphuma
Ukususwa yikhona lapho ukukhetha komkhiphi kuvela khona ngempela. Ukuhamba komsebenzi okusebenzisekayo kukhombisa isitifiketi, kurekhoda ukuhoxiswa futhi kukhiqize lokho izinhlelo ezithembele kukho ezikudingayo ukuze zisenqabe. I-Easy-RSA ihlukanisa ./easyrsa revoke laptop-a ne- ./easyrsa gen-crl, futhi isinyathelo sesibili yisona abantu abasikhohlwayo. Ukukhiqiza i-CRL kumkhiphi akukuyisi kunoma yisiphi isiqinisekisi se-VPN.
Ukusabalalisa, ukuziphatha ekulayisheni kabusha nokuthi kwenzeka ini kumaseshini asevele esunguliwe kuyizinqumo zokusetshenziswa, hhayi izici zethuluzi.
Leyo gebe iwukuphikisana okusebenzayo kokuhamba komsebenzi okuzinzile ngaphezu kwenqwaba yemiyalo ye-openssl engahleliwe. Ingxenye enzima yokuqhuba umkhiphi akusona isitifiketi sokuqala. Ukugcina amarekhodi okukhishwa, amakhophi okusekela, izibuyekezo nokususwa kuhambisana ngenkathi amadivayisi engena futhi ephuma.
Uma umkhiphi usevele ukhona
Uma inhlangano yakho isivele isebenzisa insizakalo yezitifiketi evunyiwe, bhalisa ngayo. Ukwakha i-CA yesibili ngenxa yokuthi isifundo sasihlanganisa imiyalo ye-Easy-RSA kudala umsebenzi wokusabalalisa ukuthembela, umsebenzi wamakhophi okusekela kanye nenye into okufanele ihoxiswe ngendlela efanele.
Umkhiphi wendawo uyisibopho sokuqhuba i-CA, hhayi ibhokisi lokumaka kumhlahlandlela wokusetha.
Nini i-Easy-RSA iyisinqumo esifanele
Kokusetshenziswa kwangasese okuncane okudinga ngempela umkhiphi waso, i-Easy-RSA inikeza ukuhamba komsebenzi okugxilile ngaphandle kokuhlanganisa yonke into ngesandla. Umhlahlandlela wasekuqaleni we-Easy-RSA uhlanganisa izinyathelo zesicelo, ukusayina, ukuhoxiswa ne-CRL ngokulandelana. Gcina impahla yokusayina ye-CA kumnikazi wayo oqokiwe; amaklayenti adinga imininingwane yawo yokungena nokuthembela komphakathi okuhambisayo, hhayi ikhophi yokhiye wokusayina.
Idizayini ye-OpenVPN esekelwe ku-PIN ingenye ilungiselelo elisemthethweni lokuthembela, hhayi i-PKI ephukile elindele ukulungiswa. Futhi ukungena ku-akhawunti akususi isidingo sokuqinisekisa iseva ngaphansi kwanoma yiluphi uhlelo lokusebenza olukhethile.
Phendula imibuzo emine ngaphambi kokukhetha: ubani ogunyaza ubuwena obusha, ukhiye wabo oyimfihlo uhlala kuphi, isitifiketi sifinyelela kanjani kuklayenti, nokuthi ubuwena osewuthathwe umhlalaphansi buyeka kanjani ukwamukelwa.