NM OpenVPN: iphrofayili egciniwe akuyona ifayela lakho le-.ovpn

Ifayela .ovpn elifanayo lixhuma lisuka ku-shell futhi liphelelwa yisikhathi ngemva kokungeniswa ku-NetworkManager. Isiphetho esingokwemvelo ukuthi i-VPN iphukile. Incazelo engenzeka kakhulu incane: i-NetworkManager ayigalile ifayela, ingenise ingxenye yalo kuxhumano olugciniwe, futhi umhubhe osebenzayo usebenzisa leyo datha egciniwe esikhundleni salokho. Lokho ifayela elikushoyo manje akuhlobene nalokho iphrofayili elikugciniwe.

Ifayela akulona iphrofayili

Ukungenisa ukuhumusha, hhayi ukufaka. Izinketho eziqondwayo i-plugin ziba izinkinobho ku-vpn.data sichazamazwi sokuxhumana; izinketho ezingaziqondi ziyalahlwa noma ziqoshwe kwenye indawo, futhi indlela yoqobo iyisithenjwa nje. Ukuhlela ifayela lomthombo ngemva kwalokho akushintshi lutho kuxhumano olugciniwe kakade.

Leli gebe lichaza umkhakha wonke wemibiko: ukhiye owabiwe washintshwa, ifayela labuyekezwa, futhi umhubhe usahluleka. Iphrofayili egciniwe isakhomba endleleni endala noma enanini elidala, futhi umugqa womyalo uyaqhubeka usebenza ngoba ufunda ifayela olihlelile. Amaklayenti amabili, imithombo emibili yeqiniso, futhi kube munye kuphela kuyo ebuyekezwe.

Funda iphrofayili egciniwe, hhayi ibhokisi lengxoxo

nmcli -f connection.id,connection.uuid,vpn.service-type,vpn.data connection show office-vpn

Sebenzisa i-UUID uma amaphrofayili amabili abelana igama, futhi qinisekisa ukuthi uhlobo lwesevisi i-OpenVPN plugin oyilindele, hhayi olunye uhlobo lwe-VPN olwenzeke lwafakwa. Bese uqhathanisa iphoyinti lokugcina, ukuthutha kanye nezithenjwa zesitifiketi nokubiza okusebenzayo.

Inani elibonakala kumhleli wemifanekiso akubona ubufakazi bokuthi lagcinwa. Gcina, vula kabusha futhi ulifunde futhi ngomugqa womyalo; izinkinga zokugcina zomlando ziyisizathu sokuhlola idatha egciniwe, hhayi ubufakazi bokuthi wonke umakhi wamanje unenkinga efanayo. Ukuhlola kubiza umyalo owodwa.

Okhiye ababili, nendlela eyodwa ebalulekile

Okuxhumano olusebenzisa ukuqinisekisa kwe-TLS, i-plugin igcina indlela yokhiye owabiwe ku-ta futhi indlela ku-ta-dir, uma ukusetshenziswa kusebenzisa eyodwa. Kokubili kuhlala kusichazamazwi sedatha sephrofayili, futhi kokubili kufanele kuhambisane nalokho okulindelwe iseva.

Indlela yisinqumo sohlangothi lweseva esivezwa kuklayenti. Ukukhetha eyodwa ngoba iphrofayili eseduze inayo yiyo indlela okhiye osebenzayo aqala ngayo ukwehluleka ukuxhawula. Uma ukulungiselela kweseva kungenayo indlela, iklayenti akufanele iqambe indlela.

Ifayela lokhiye ngokwalo kufanele lifundeke yi-plugin esimeni esisebenza ngaso ngempela. Iphakethe elivaliwe linombono wohlobo lwamafayela ohlukile kunokufakwa kwedeskithophu okujwayelekile, ngakho indlela ekhona ku-shell yakho ingase ingabonakali kusevisi.

Buyekeza okufakiwe okukodwa, hhayi isichazamazwi

nmcli connection modify office-vpn +vpn.data 'ta=/etc/NetworkManager/certs/office-ta.key'
nmcli connection modify office-vpn +vpn.data 'ta-dir=1'

Uphawu lokuhlanganisa olwandulelayo lubuyekeza okufakiwe kwesichazamazwi ngakunye. Ukunikeza vpn.data ngaphandle kwalo kushintsha isichazamazwi sonke, futhi yileyo ndlela ukhiye oyedwa ongekho ophenduka ukulungiselela okugcinwe kahle okuhlanu. Funda iphrofayili kabusha ngemva koshintsho futhi uqinisekise ukuthi okunye okufakiwe kusindile. Isichazamazwi esilahlekelwe iphoyinti lokugcina elikude nezitifiketi zaso siyantambama ende kakhulu kunaleyo oqale ngayo.

Xhuma kabusha ngezilawuli ezijwayelekile futhi ubheke isigaba esihlulekayo. Uma isango lokhiye owabiwe lidlula manje futhi iklayenti libika iphutha lesitifiketi noma lokuqinisekisa umsebenzisi, usudlulele phambili futhi uphenyo olulandelelo luhlukile.

Ungahlanganisi izinhlobo zomgudu wokulawula

tls-auth, tls-crypt, futhi tls-crypt-v2 kuyizinhlelo ezihlukene. Ifayela lokhiye elibukeka lifana alizenzi zishintshana, futhi ukugcwalisa izinkambu ze-TLS-Auth ngoba enye iphrofayili iqukethe ukhiye ohleliwe kukhiqiza iphrofayili ehluleka ngendlela efana nokhiye ongafanele.

Sebenzisa imephu ye-plugin ehambisana nesimo ekulungiseleleni iseva. Uma isimo singacaci, buza umnikazi weseva esikhundleni sokuqagela kusuka emugqeni wokuqala wefayela.

Gcina indlela yokubuyisela uma umhubhe uthwala iseshini yakho yokuphatha. Ushintsho olugciniwe alusona ngempela ushintsho olusetshenzisiwe, futhi ukungenisa okuphumelelayo akubona ubufakazi bokuthi zonke izinketho zomthombo zasekelwa. Kokubili lezi zikhala kufanelekile ukuzazi ngaphambi kokuxhuma kabusha isixhumanisi osebenza ngaso.