Ukuhlela iwindi lokunakekela i-OpenVPN ngaphandle kokulahlekelwa i-host

Ukuqala kabusha insizakalo ye-VPN kuqeda yonke isesheni eyisebenzisayo, ngakho iwindi kufanele lakhiwe lizungeze izingxoxo hhayi lizungeze umphathi wamaphakheji. Abasebenzisi badinga isaziso esanele ukuqeda umsebenzi obucayi, futhi wena udinga indando yokubuya engancikile kumhubhe ozowumisa. Konke okunye encwadini kukhona ukuze lamavesi amabili akwazi ukuphathwa. Yeqa okukodwa kukho bese ukubuyekezwa okujwayelekile kuphenduka ukuphazamiseka okungenandlela yokuphuma.

Ukulandelana ngezansi kunenhloso: isigaba ngasinye sikhiqiza okudingwa isigaba esilandelayo, futhi noma yisiphi isigaba singaqeda ushintsho ngaphambi kokuba siqale.

Bhala insizakalo ekhona ngaphambi kokuyishintsha

Funda iyunithi efakiwe hhayi leyo ocabanga ukuthi uyibhalile: systemctl cat [email protected] iphrinta iyunithi nanoma yiziphi izinto ezingena esikhundleni, futhi systemctl show [email protected] -p ExecStart -p User -p WorkingDirectory ikhombisa okusebenzayo ngempela nokuthi ngubani. Buza ifayela le-binary elishiwo iyunithi, ngoba openvpn --version esuka ku-shell lingase likhombe kwelinye ukwakhiwa. Bhala indlela yephrofayela nayo yonke imifayela eyibhekisela kuyo.

Phawula namasokhethi alalelayo: ss -lunp | grep 1194 itshela ikheli nephrothokholi umugcini weseva anakho namuhla. Uma impendulo ingeyona leyo ephrofayela ephakamisa yona, into engena esikhundleni noma ifayela lemvelo iyayidlula, futhi ukuthuthukiswa kuzofuza leso simangaliso.

Qoqa isethi yokubuyisela umuntu ongayisebenzisa

Isethi yokubuyisela kufanele isetshenziswe uzakwethu ngehora lika-03:00 ngaphandle kokuqonda kwakho. Faka ukumiswa okusebenzayo kanye nayo yonke imifayela ekhulunyiwe, impahla yokuthembela nokuhoxiswa ngaphansi kokulawulwa umninikhaya we-PKI, izabelo namagxuma kuklayenti ngayinye, kanye nezinguqulo zamaphakheji ezifakwe namuhla. Ikhophi yegama lefayela elilodwa akuyona into yokumisa. Yigcine endaweni umsebenzi wokuhlinzeka angafinyelela kuyo ngaphandle kwe-VPN.

Izilawuli zokufinyelela zisebenza nakuleyo sethi, ngoba iqukethe okhiye abazimele noma ubufakazi bangemuva. Ungakhi kabusha i-CA noma ukhiphe kabusha ubunikazi ngenxa nje yokuthi inguqulo yephakheji ishintshile.

Zilolonge kusilaleli sokuhlola ngoklayenti langempela

Sebenzisa ukukhishwa okungumgadli kusilaleli esihlukile esinecebo lalo lamachweba namakheli, hhayi eduze kwesibonelo sokukhiqiza kusokhethi elilodwa. Xhuma ngezinjini zamaklayenti abasebenzisi bakho abazisebenzisayo ngempela, kuhlanganise neso esinzima. Hlola ukwabiwa kwamakheli, i-DNS eqhutshwayo, uhlelo lokusebenza olulodwa olubalulekile, kanye nendlela eyodwa okufanele ihlale ivaliwe. Amagxuma enziwe ngendlela kufanele asebenze esimweni sangempela samalungelo nesistimu yamafayela yensizakalo, ngoba i-shell ye-root ayifakazi lutho ngayo.

Funda amanothi okukhishwa ngoshintsho lokuziphatha, hhayi ngezici ezintsha kuphela. Okuzenzakalelayo kwe-cipher ne-TLS kuyashintsha phakathi kwezinguqulo, futhi iphrofayela esaxazululwayo isengahluleka ekuxhumaneni. Uma ukuthuthukiswa kudinga izinguquko zephrofayela noma zesitifiketi, zilungiselele njengesinyathelo saso kunokuba uzifake ekubuyekezweni kwephakheji.

Shintsha kanye, usuka endleleni engaphandle komhubhe

Qala iwindi kusikhombisi noma kunethiwekhi yokuphatha engadluli ensizakalweni. Qinisekisa ukuthi abasebenzisi batsheliwe nokuthi umsebenzi wesibili uyazi ukubuyisela. Sebenzisa ushintsho olulungisiwe ngomnini wawo, bese uqala kabusha nge-sudo systemctl restart [email protected] futhi ulandele ijenele nge-journalctl -u openvpn-server@office -b -f. Ukulayisha kabusha kwanele uma izingcazo zeyunithi kuphela ezishintshile; iphrofayela eshintshile idinga ukuthi inqubo iqale kabusha.

Linde ukuthi iklayenti ngalinye lixhumeke kabusha, futhi amasesheni amahlelo athile angeke aqhubeke. Hlela ikhefu elihlanzekile nemithwalo yomsebenzi engakwazi ukukubekezelela lokho.

Yamukela noma buyisela emuva, bese utshela abasebenzisi ukuthi kwashintshani

Ukwamukela wukungena okusha kanye nomsebenzi wangempela kanye nemikhawulo esasebenza. Iyunithi esebenzayo kanye nomugqa wesimo oluhlaza kungamavesi enqubo kuphela. Uma imibandela ihluleka ngaphakathi kwewindi, buyisela emuva ngendlela elungisiwe, hhayi ngokubuyisela ifayela elilodwa nokuthemba; i-binary noma inqubomgomo yensizakalo eshintshile iyasinda ekubuyiselweni kokumiswa. Gcina noma yikuphi ukuhoxiswa noma ushintsho lwemvume olwenziwe ngaphakathi kwewindi ukuze ukubuyisela kungabuyiseli emuva umsebenzi wokuphepha.

Bhala izinguqulo, izinguquko zephrofayela nemiphumela yokwamukela kumsebenzi olandelayo, hoxisa umsebenzi kusilaleli sokuhlola, futhi utshele abasebenzisi ukuthi yiphi iphrofayela okufanele bayisebenzise manje. Iwindi eliphela ngaphandle kwalowo mnothi liphinda lixoxwe ekubuyekezweni okulandelayo.