OpenVPN client-config-dir: igama lefayela ne-CN yesitifiketi
Igama lefayela le-CCD livela egameni elivamile lesitifiketi, noma egameni lomsebenzisi lapho leyo mephu ivuliwe. Qhathanisa yomibili imithetho ngaphambi kokuqamba kabusha ifayela.
Amagama amabili asebenza ngaphambi kokuba iklayenti ixhumanise: igama lefayela kukhompyutha ephathwayo (nuc.ovpn) kanye nobuwena otholakala yiseva kusukela kusitifiketi. Ukusesha kwe-client-config-dir kusebenzisa elesibili. Ukuqamba kabusha iphrofayela kuklayenti, noma ukwengeza .conf efayeleni leseva, akushintshi lutho mayelana nokuthi iyiphi ifayela evulwa yiseva.
Ukuqhathanisa okusizayo akusiko «ngalisebenzisa liphi igama» kodwa «iyiphi imithetho esetshenziswa yiseva», ngoba ukuqinisekisa ngesitifiketi nokuqinisekisa ngegama lomsebenzisi nephasiwedi kungakhiqiza amagama asebenzayo ahlukene ekungeneni okukodwa.
Igama lephrofayela neqama elivamile lesitifiketi
Ekuhlelweni okuzenzakalelayo okusekelwe kusitifiketi, iseva ithatha igama elivamile le-X.509 bese ifuna ifayela elinalelo gama ngqo ngaphakathi kwe-client-config-dir. Iphrofayela elibizwa nge-nuc.ovpn okuthi isitifiketi sayo sithi tester ixazululwa ibe yi-/etc/openvpn/server/ccd/tester. Igama lefayela leklayenti alilokothi lingene ekubalweni. Yilapho ukungafani kucasha khona okokuqala.
Ngakho-ke umbhala ogcwele amaphrofayela aqanjwe ngokucophelela angaphuthelwa njalo. Ifayela alifaniswa ngesihloko, ngekheli le-imeyili noma ngegama eliboniswa ku-GUI; lifaniswa ngechungechunge legama elivamile.
Kusistimu yefayela ehlukanisa izinhlamvu ezinkulu nezincane, i-Tester ne-tester amafayela amabili ahlukene, futhi lilodwa elivulwayo. Hlola igama elivamile esitifiketini esethulwa ngempela yiklayenti, hhayi ekopishini esemabaleni akho.
i-username-as-common-name ihlanekezela umthetho
Lapho iseva isebenzisa ukuqinisekisa ngegama lomsebenzisi nephasiwedi ne-username-as-common-name, igama lomsebenzisi eliqinisekisiwe lithatha indawo yegama elivamile lesitifiketi kulokhu kusesha.
Qhathanisa lezi zimo ezimbili ngqo: ngobuwena besitifiketi ifayela lilandela isitifiketi futhi ukushintsha iphasiwedi akuhambisani; ngobuwena begama lomsebenzisi ifayela lilandela igama lokungena futhi ukukhishwa kabusha kwesitifiketi akuhambisani. Inkambu eshintshwa yiseva yiyo okumele kuqanjwe kabusha ngokwayo. Isitifiketi esikhishwe kabusha nge-CN entsha sishintsha ngokuthule ingqikithi yokusesha, futhi ifayela le-CCD elidala lihlala kudiski libonakala lilungile.
Kukhona izakhiwo ezihlanganisiwe, futhi ukudideka okuningi kuqala lapho. Uma ibhlokhi yesevisi eyodwa ivula ukushintsha kanti enye ingavuli, igama elisebenzayo lincike ekutheni iyiphi insiza ephethe ukuxhumana. Qinisekisa ukuhlela okusebenzayo esikhundleni sokucabanga ukuthi ifayela lomhlaba wonke liyasebenza. Incwadi yezinketho zeseva yasekuqaleni ichaza ukusesha kwefayela elinegama kanye nokubuyela emuva okuzikhethelayo.
Lokho iseva ekufundayo, nalokho ekweqayo ngokuthule
Umehluko omncane emibili unquma ukuthi ifayela lizokhethwa yini. Owokuqala isandiso esengeziwe. Owesibili uhlamvu oludukele egameni.
OpenVPN ayengezi .conf egameni elilifunayo, ngakho-ke i-tester.conf ayihambisani ne-tester. Umhleli ocasha izandiso angashiya ifayela elibonakala lilungile ohlwini futhi lingalokothi lihambisane.
Lapho kungekho ifayela elihambisanayo, iseva ingabuyela efayeleni elibizwa nge-DEFAULT. Ngakho-ke ukufika kwezinye izilungiselelo akusona ubufakazi bokuthi kusetshenziswe ifayela leklayenti ngalinye. Qhathanisa ikheli elinikeziwe noma imizila ephushiwe nalokho okwakuzokhiqizwa yifayela leklayenti ngalinye. Izimvume ziyisihlungi sesithathu, ngoba iseva ivula ifayela ngemva kokuyeka amalungelo; igobolondo le-root elikwaziyo ukulifunda alifakazi lutho.
Igama lefayela elifanele aliqinisekisi okuqukethwe
Ukukhetha nokuqukethwe kuwukwehluleka okuhlukene. Ngemva kokuvulwa kwefayela elifanele, imiyalelo yalo kumele isahlala isemthethweni kulelo klayenti.
ifconfig-push kumele linikeze ikheli uhlelo lokuxhumana olungakwazi ukulisebenzisa ngempela, futhi iroute kunengqondo kuphela kunethiwekhi engaphansi elandelisiwe ngemuva kwalelo klayenti.
Ubuwena obubodwa, amadivayisi amaningi
Amakhompyutha aphathwayo amabili ethula igama elivamile elifanayo akhetha ifayela elifanayo futhi athola izilungiselelo ezifanayo eziqondene neklayenti. Uma udinga amakheli ahlukene noma ukuhoxiswa okuhlukene, udinga ubuwena obuhlukene, hhayi amakhophi amabili efayela elilodwa.
Ukuqhathanisa kuphakathi kokwabelana ngobuwena nokukhipha isitifiketi esisodwa ngedivayisi ngayinye. Ukwabelana kulula ukuphatha futhi kugqamile ukuhoxisa, kuyilapho izitifiketi zedivayisi ngayinye zidinga ukuhlelwa okwengeziwe futhi zikunikeza iyunithi ehlanzekile ongayikhubaza.