Ukuhlinzeka iklayenti le-OpenVPN ngezigaba ezimayo lapho kwenzeka iphutha
Izigaba ezinhlanu zivimbela umbhalo wokuhlinzeka ukuthi ushiye ukufakwa okungaphelele: hlola okokufaka, lungiselela isethi, shintsha ngendlela ye-athomu, vula umnikazi oyedwa, hlela ukuhoxa.
Imibhalo yokuhlinzeka ebika iphutha bese iqhubeka imbi kakhulu kunemibhalo engasoze yasebenza. Ukusethwa kweklayenti kuthinta okhiye abavikelwe, ubunikazi obuseduze nesango kanye nensizakalo okungenzeka isivele ihambisa ithrafikhi. Ngakunye kwalokhu kudinga isimo sokuma, futhi umbhalo kufanele wazi ukuthi ufike esigabeni sini lapho uma.
Thatha konke njengokwenziwa okukodwa okunamaphuzu okuhlola amahlanu, futhi wenze iphuzu ngalinye lokuhlola lenqabe ukudlulela phambili ngokwalo.
Lungisa okokufaka ngaphambi kokuthinta uhlelo lwamafayela
Qala ngesivumelwano esicacile: ubunikazi obukodwa, umthombo wokuqala wephrofayela, umnikazi wensizakalo oyedwa ohlosiwe. Hlola ukuthi iphrofayela ikhona, ukuthi isitifiketi nokhiye okubhekisela kukho kuyafundeka, nokuthi indawo okuyiwa kuyo ingeyephakethe elilindelekile. Indlela exazululwayo ayibona ubufakazi bokuthi impahla engemuva kwayo iphelele.
Nqaba izinguquko ezingenalutho kusenesikhathi. I-$DEVICE engakasetshwa esakazeka ingabi lutho iguqula i-install -m 400 $KEY /etc/openvpn/client/ ibe ikhophi eqonde endaweni, futhi ukwehluleka kufika kamuva njengensizakalo engakwazi ukufunda ukhiye wayo.
Hlanganisa isethi yephrofayela endaweni yokulungiselela
Qala ngokwakha isethi ephelele endaweni eyimfihlo: iphrofayela, i-CA, isitifiketi seklayenti, ukhiye nanoma isiphi isisizi esibizwa iphrofayela. Kopisha nge-install -m 400 -o root -g root ukuze izimvume zibekwe ngesikhathi sokudala hhayi kamuva. Bese uhlola izikhombo ngaphakathi kwephrofayela, ngoba umugqa we-ca noma we-key ohlobene uxazululwa ngokuya endaweni yokusebenza yeyunithi ngokushesha lapho insizakalo iqala. Akukho okufanele kubhalwe endaweni esebenzayo kuze kuqinisekiswe yonke isethi.
Rekhoda uphawu lweminwe olungelona imfihlo lwalokho okukhiqizwe yilokhu kusebenza, isibonelo i-sha256sum office.conf egcinwe eceleni kophawu lwenguqulo. Yilolo hlu elilodwa elivumela ukusebenza kabusha ukuhlukanisa isibuyekezo nokungenzi lutho.
Shintsha ngendlela ye-athomu futhi ugcine isethi yangaphambilini
Hambisa isethi elungisiwe endaweni yayo ngokusebenza okukodwa lapho uhlelo lwamafayela luvuma khona, futhi ugcine isethi yangaphambilini ebuyekezwe ngaphansi kwegama elinophawu lwesikhathi. Ikhophi engaphelele eshiya iphrofayela entsha eceleni kokhiye wakudala ikhiqiza insizakalo eziqinisekisa ngobunikazi obungalungile futhi engabhali lutho olusizo mayelana nesizathu. Uma ushintsho lungeke lube nge-athomu, hlela ukuhambisa ukuze iphrofayela ifike ekugcineni.
Lapho okuyiwa kukho sekukhona, thatha isinqumo esicacile ukuthi lokhu kusebenza kuyisibuyekezo, ukusebenza okufanayo kabusha, noma ukungqubuzana nephrofayela yedivayisi enye. Ukubhala ngokuthula iphrofayela engokobunye ubunikazi yiyona ndlela abantu ababili abagcina ngayo babelana ngesitifiketi esisodwa. Esikhundleni salokho, nqaba ukusebenza futhi usho umnikazi ongqubuzanayo.
Vula umnikazi oyedwa futhi ukufakazele
Khetha indlela eyodwa yokuvula, noma isibonelo se-systemd noma i-NetworkManager, futhi uyisebenzise ngendlela engaguquki. Ukuqalisa inqubo ye-openvpn engalawulwa eceleni kweyunithi evuliwe kunikeza imigudu emibili, izibuyekezo ze-DNS ezincintisanayo futhi akukho mpendulo ecacile yokuthi umyalo wokuma uqonde kuwuphi. Ngemva kokuvula, hlola i-systemctl is-active openvpn-client@office, bese kuba umzila oya esiqalweni esikude, bese kuba i-resolvectl status yesixazululi esifakwe umgudu. Qedela ngokufinyelela isisetshenziswa esisodwa umgudu okhona ngaso.
Inqubo esebenzayo nesithonjana se-tray esiluhlaza kungamabhuku enqubo, hhayi ubufakazi bokuthi ubunikazi nenqubomgomo yethrafikhi basinda ekudlulisweni.
Ukusebenza kabusha nokuhoxa kuyizinhlelo zokusebenza ezihlukene
Ukusebenza kwesibili kufanele kuhlangane emafayeleni abuyekezwe kanye nakumnikazi ofanayo, hhayi ukudala i-akhawunti yesibili noma i-daemon yesibili. Ukuhoxa kuyinqubo yako: misa umnikazi oqondile, gcina noma susa iphrofayela yasendaweni ngokuya ngenqubomgomo, futhi uhoxise ubunikazi esangweni. Ukususa ifayela lokhiye lasendaweni akuhoxisi ikhophi esivele ishiye umshini.
Gcina indlela yokubuyisela engathembele kumgudu, njengokufinyelela kukhonkolo noma omunye umzila wokuphatha. Ushintsho lokuhlinzeka olukuvalela ngaphandle komshini ushintsho olwehlulekile ngisho lapho isigaba ngasinye sibike impumelelo.
Umbhalo ofanele ugcinwe ukuphathwa komnikazi nobufakazi. Uhlu olufushane lwemiyalo yekhophi enelungelo elikhethekile akulona into efanayo.