Ubumfihlo be-OCSP: umphenduli ubona isitifiketi, hhayi i-URL yakho
Isicelo se-OCSP sikhomba isitifiketi nesikhathi esithile, hhayi indlela yekhasi. Ukunamathisela, ukugcina kusheke kanye nenqubomgomo yeklayenti kunquma ukuthi ubani obona ukuhlolwa.
Ukuhlola isimo kubuza umbuzo owodwa mayelana nesitifiketi esisodwa, futhi impendulo ihamba ngoxhumano lwayo. Akukho kuyo indlela yekhasi eyaholela ekuhlolweni. Izingxoxo zobumfihlo zivame ukuthatha lokhu kushintshana njengomfudlana womlando wokuphequlula, okwandisa lokho isicelo esikuthwelayo futhi kwehlise lokho umphenduli angakubona. Funda isicelo ngaphambi kokunquma ukuthi sembula ini.
Isicelo sikhomba isitifiketi esisodwa
Isikhombi sesitifiketi se-OCSP sakhiwe ngomsebenzi we-hash, ama-hash amabili omshicileli kanye nenombolo yokulandelana yesitifiketi esihlosiwe, njengoba kucacisiwe ku-RFC 6960. Inkambu ngayinye ikhomba isitifiketi esisodwa, hhayi i-URL noma isicelo se-HTTP.
Indlela yekhasi, uchungechunge lwemibuzo kanye nanoma ikuphi okuqukethwe kwefomu akukho kusikhombi esijwayelekile. Isimangalo sokuthi umphenduli uthola i-URL eqondile sidinga ubufakazi obuvela kwenye indawo hhayi ekuhlolweni kwesitifiketi. Isicelo sisabiza isitifiketi nesikhathi, futhi umphenduli angase azi ukuthi yiluphi usizo olusethulayo.
Okungekho ikhasi, hhayi umongo wonke. Ukuhlolwa kwesitifiketi kanye nosizo olwaziwayo kanye nomthombo ophindayo kungase kunikeze ulwazi olungaphezulu kunanoma yikuphi kwalokho kukodwa.
Lokho umphenduli angakubona ngempela
Umphenduli ubona uxhumano olufinyelela kuye: ikheli lomthombo, isikhathi kanye nanoma iyiphi imethadatha yokuthutha eluqoshayo ukusetshenziswa kwayo. Uma isicelo sesimo silandela i-VPN, lowo mthombo kungase kube ukuphuma kwe-VPN hhayi inethiwekhi yokufinyelela yomsebenzisi. Ungacabangi ukuthi isicelo sesimo sithatha indlela efanayo nesicelo sekhasi ngoba kuphela zombili zingeseshini yebhrawuza eyodwa.
Hlola umzila kanye nokuziphatha kokuqinisekisa okusekelwa yiklayenti esikhundleni sokukucabangela kusuka kumkhondo owodwa. Ithuneli ehlukanisiwe ingase ithumele izicelo zombili ezinhlangothini ezihlukene.
Impendulo enamathisiwe iyiphethini enye ejwayelekile. Isandiso se-TLS status_request esivela ku-RFC 6066 sivumela iseva ukuthi inamathisele impendulo ye-OCSP ekuxhawuliseni kwayo, ngakho iklayenti liqinisekisa lokho elikunikeziwe esikhundleni sokuzitholela isimo salolo xhumano. Lokho kushintsha kushintsha umbonisi. Uhlangothi lweseva lwenza ukuthola, futhi ikheli leklayenti ngokwalo alikaze lifinyelele kumphenduli salolo xhumano.
Isimo singafika sinamathisiwe ekuxhawuliseni
Akukho kulokhu okuqinisekisa ukuthi iklayenti ngeke lenze esinye isicelo sokuqinisekisa. Ukwakhiwa kochungechunge, inqubomgomo yesimo kanye nezindlela ezisekelwe ziyahluka ngokokusetshenziswa.
Isibonisi sesitifiketi kubhrawuza eyodwa asiyona incazelo yayo yonke isistimu yokusebenza kanye neklayenti ye-VPN. Ukubanjwa kwenethiwekhi okufanayo kungase kusho izinto ezihlukene ngaphansi kwezilungiselelo zokuqinisekisa ezihlukene.
Ukugcina kusheke kwephula umcabango wekhasi elilodwa ukusesha okukodwa
Ukugcina kusheke kuhlukanisa ukulayisha kwamakhasi nokusesha. Ibhrawuza ingase iphinde isebenzise impendulo isikhathi esithile, ngakho ukubuka ikhasi elilodwa akusho isicelo senethiwekhi esisodwa.
Iphutha eliphambene lilula ngokufanayo. Impendulo egciniwe ayisho lutho mayelana nokuthi ukuvuselelwa okulandelayo kuzokwenzeka nini, futhi uhlelo lokuvuselela lungase lungahlobene nekhasi elivulwayo. Sebenzisa imibhalo yamanje yeklayenti kanye nenqubomgomo yokuqinisekisa esebenzayo ngaphambi kokuthi uhlobanise ukubanjwa ne-OCSP.
Impendulo yesimo evumelekile kufanele ihlangabezane nemithetho yobuqiniso nokusha yomqinisekisi, futhi i-HTTP 200 ayifani nesimo esihle. Ukuphela kwesikhathi akukona ukuhoxiswa. Le miphumela iholela ekuziphatheni kweklayenti okuhlukene futhi akufanele kuhlanganiswe kube iphutha elilodwa.
Izinketho zobumfihlo ezigcina ukuqinisekisa kuphelele
Lapho ukusesha ngokwako kuzwela khona, xoxa ngomnikazi wesistimu ngezinketho zokulethwa nokugcinwa kusheke ezisekelwe. Ungakuxazululi ngokuvala ukuhlolwa kokuhoxiswa noma ukuqinisekiswa kochungechunge.
Umkhondo othulile awuwona uxhumano oluphephile. Gcina ubunikazi bozakwethu, ukuqinisekiswa kochungechunge kanye nenqubomgomo yokuhoxiswa ehlosiwe kuphelele, futhi shintsha indlela yokulethwa kuphela ngokukhetha okusekelwa ukusetshenziswa. Qopha ukuthi yikuphi ukukhetha okukhethiwe nokuthi ungumnikazi wakho.
Lapho ukusesha kuvela kungahlosiwe, shono umamukeli, umzila kanye nomsebenzi wesitifiketi ngokwahlukana. Ukulayisha okuvela kumshicileli, umbuzo wesimo kanye nesicelo sekhasi kuyizigameko ezintathu. Ukukuthatha njengokukodwa kwenza ukubuyekezwa kobumfihlo kungaqondile futhi kufihle ukuthi yiluphi uhlangothi olufunde okuthile ngempela. Qala emikhakheni yeprothokholi bese uphumela ngaphandle endleleni yenethiwekhi.