I-OpenVPN ayikho kumenyu ye-VPN ye-Ubuntu 18.04: yini okufanele uyifake

Uhlu lwe-VPN lwe-GNOME lungase lungabi nanto ehambisana nephrofayela oyinikiwe, futhi isiphetho esivamile ukuthi le desikithophu ayikwazi i-OpenVPN. Kodwa iyakwazi. Okushodayo iphakethe lwensebenzo yokungeza, futhi iklayenti lomugqa womyalo kulelo khompiyutha alihlobene nalutho nomethuli. Leyi inganekwane okufanele ibulawe kuqala, ngoba ithumela abantu ukufaka kabusha into engalungile.

Umethuli ubalisa izengezo, hhayi amaphrothokholi

I-GNOME idweba izinhlobo zoxhumano ezibikwa umphathi wenethiwekhi, futhi umphathi ubika izengezo ezifakiwe. Ngakho-ke uhlu olungenalutho luchaza isethi yezengezo ezifakiwe, hhayi amandla ephrothokholi. Yingakho i-binary openvpn esebenzayo ingashintshi lutho kuphaneli.

Lo mehluko ubalulekile ngoba kuphaneli zombili izinkinga zibonakala zifana. Isengezo esingekho nesengezo esiphukile kokubili kuveza ibhokisi lengxoxo elingakwazi ukusiza, futhi esokuqala kuphela esilungiswa ngokufaka okuthile. Ukubuza umphathi ukuthi yini akwaziyo kuhlukanisa kokubili ngaphambi kokuthi ufake noma yini. Lowo mbuzo ubiza umyalo owodwa futhi uthatha indawo yehora lokucabanga.

Yiphi iphakethe eliphethe ibhokisi lengxoxo

Ku-Ubuntu 18.04 amaphakethe anemigqa eqondile, futhi izinguqulo ezintsha zagcina ukwehlukanisa okufanayo. Wafunde njengezindima hhayi njengezinye izindlela, ngoba ukufaka okukodwa akuvamisile ukuxazulula inkinga kukodwa. Iphakethe elilodwa liqukethe i-daemon neklayenti lomugqa womyalo, futhi akukho nokukodwa kwazo elaziyo ibhokisi lezilungiselelo.

Iphakethe lwensebenzo yokungeza yilo elivumela umphathi wenethiwekhi ukuthi akhe, agcine futhi aqalise uxhumano lwe-OpenVPN. Iphakethe lomhleli linikeza ifomu, izinkambu zalo kanye nendlela yokugcina ebizwa iphaneli. Ikhompiyutha enesengezo kodwa engenamhleli ikhombisa uhlobo engakwazi ukululungiselela, kuyilapho ikhompiyutha enomhleli kodwa engenasengezo ingakhombisi lutho. Faka isethi ndawonye futhi ukungacaci kuyanyamalala.

sudo apt install openvpn network-manager-openvpn network-manager-openvpn-gnome
nmcli --version

Ku-18.04 leyo yimigqa yangempela yamafayela wokugcina hhayi izinto zokushintsha. I-desikithophu ye-KDE idinga iphakethe layo lomhleli futhi isadinga isengezo, futhi leyo yingxenye umhlahlandlela we-GNOME kuphela oyishiyayo.

Ukuqalisa kabusha kuyingxenye yokufaka

Iphaneli ibuza umphathi izinhlobo ezisekelwayo lapho isevisi iqala, futhi uhlu oludwetshwe kakade aluhlaziywa ukufaka. Ngakho-ke ukufaka ngenkathi isevisi isebenza kuveza inhlanganisela ekhathazayo yokufaka okuphumelelayo kanye nebhokisi lengxoxo elingashintshile. Ukuqalisa kabusha akukona ukunakekela okuzithandela; yisinyathelo esenza ukufaka kubonakale.

Ukuqalisa kabusha kunqamula ukuxhumana imizuzwana embalwa, futhi noma iyiphi iseshini ye-SSH edlula kulo interface iyohamba nayo, ngakho hlela lokho uma ikhompiyutha ikude. Bese uvula iphaneli futhi ubuze umphathi ngqo ukuthi yini ayisekelayo. Umbuzo oqondile uwubufakazi obungcono kunomethuli ongase ube kusilondolozi.

sudo systemctl restart NetworkManager
nmcli -f NAME,TYPE connection show
nmcli connection add type vpn

Umyalo wokugcina uyisivivinyo esihlukanisayo. Ngesengezo uyehluleka ngenxa yezimpikiswano ezingekho; ngaphandle kwaso ubika uhlobo lwe-VPN olungaziwa. Omunye umphumela yifomu elilindele ukugcwaliswa, kanti omunye useyinkinga yokupakisha. Yisebenzise ngaphambi nangemva kokufaka uma ufuna umehluko ubonakale.

Vumela i-nmcli ifunde i-.ovpn

Akukho okukuphoqa ukuthi wakhe kabusha iphrofayela oyinikiwe isilawuli ngasinye. Umpathi ufunda amafayela e-.ovpn ngqo futhi aguqule imiyalelo yawo ibe uxhumano olugciniwe, kuhlanganise nezitifiketi ezingaphakathi. Ukungenisa kweqa ukukopisha ngokunemba, ngoba i-cipher ebhalwe kabi noma ukhiye onqanyuliwe kuveza ukwehluleka okubonakala njengenkinga yeseva.

Shiya iphrofayela eceleni kwanoma yimuphi ukhiye noma isitifiketi esikukhombisa kuze kuqede ukugcina, ngoba uxhumano olugcina izindlela zamafayela kuphela luyaphuka lapho lawo mafayela eshukunyiswa. Bese uhlola uxhumano ngegama, futhi uphendule noma yisiphi isicelo semininingwane yokungena ngaphambili ukuze ubone okufunayo. Uxhumano olugciniwe olungakaze lusebenze akusibufakazi balutho.

nmcli connection import type openvpn file ~/Downloads/office.ovpn
nmcli --ask connection up office
nmcli -f NAME,TYPE,STATE connection show --active

Lowo myalo wesithathu uqinisekisa ukuthi ithuneli iphezulu ngaphansi kwegama olilindele. Ihlukanisa futhi uxhumano oluhlulekile kulolo olungakaze lusebenze.

Okungeke ukutshele umethuli

Uhlobo olungekho akusho lutho ngegedi, futhi akusho ukuthi iseva iyala i-OpenVPN. Akusona isizathu sokufaka isengezo sephrothokholi engahlobene ukuze kuvele into kumethuli. Lelo phutha lesibili linagama emkhubeni: abantu bagcina bebhekisa iphrofayela ye-PPTP noma ye-AnyConnect kwisevisi ye-OpenVPN ngoba leyo kwakuyizinto ezinikeziwe.

Lungisa ukupakisha kuqala; umbuzo ngeseva uza ngemuva. Iphrofayela engeniswa ngokuhlanzekile futhi engakaze iqinisekise ihluleka embuzweni wesitifiketi, i-TLS noma imininingwane yokungena, hhayi kumbuzo womhleli. Ngakunye kwakho kushiya ubufakazi obuhlukile, futhi akukho okubonakala ebhokisini lengxoxo. Funda ilogi yeklayenti ngaphambi kokuvula kabusha iphaneli yezilungiselelo.

Kufakazele ngensiza oyisebenzisayo ngempela

Lapho uhlobo lukhona futhi uxhumano lugciniwe, xhuma bese uvula insiza oyisebenzisayo ngempela. Ukusebenza kuphela kufakazela kuphela ukuthi iziphetho ezimbili zavumelana ngethuneli. Ithuneli eliphuma lingathwali lutho yindlela elandelayo yokwehluleka, futhi iphaneli ayikwazi ukuyibona.

Bhala ukuthi yiphi insiza oyihlolile, ukuze umuntu olandelayo aphindele leyo hlolo esikhundleni sokuqala phansi. Lapho ithuneli liphezulu kodwa insiza isehluleka, uphenyo ludlulela emizileni naku-DNS hhayi emuva ebhokisini lengxoxo. Loyo mbhalo yiwo umehluko phakathi kokulungisa nendaba.