I-OpenVPN ithi i-ncp-disable ayaziwa: yini eyathatha indawo yayo?

Iklayenti liyala ukuqala ngephutha lezinketho elibiza ncp-disable, nakuba iphrofayili yayisebenza kumshini wangaphambili. Lowo mlayezo awusho ukuthi inketho ibhalwe ngokungalungile noma ukubethela kuphukile. Kusho ukuthi ibhinari ephambi kwakho ayiyazi nhlobo lo myalelo, futhi kunezizathu ezimbili ezihluke kakhulu zalokho. Okusebenzayo kuzonquma ukuthi uhlela iphrofayili noma ushintsha iklayenti.

Iphutha lingavela kubhinari entsha

Iphutha lenketho engaziwa liphathelene nomhlaziyi, hhayi umhubhe. OpenVPN 2.4 yengeze amapharamitha okubethela okungaxoxwa ngawo, u-2.5 wamemezela ukuthi iswitshi eyayiwacisha isiphelelwe yisikhathi, futhi u-2.6 wayisusa ngokuphelele. Ngakho-ke iphrofayili ebhalelwe u-2.3 noma u-2.4 iyahluleka kuklayenti lamanje ngisho noma kungukho okushintshile efayeleni. Ingxenye ekhalayo intsha, hhayi endala.

Thola ukuthi iyiphi ifayela elisebenzayo elikhiqize umlayezo ngaphambi kokuhlela noma yini. Iklayenti ledeskithophu liletha injini yalo, kuyilapho ibhinari yomugqa womyalo efakwe ngokwehlukile inenguqulo yayo. Kokubili kungase kungavumelani kumshini oyedwa.

openvpn --version ixazulula lokho kubhinari oyihlolayo. Iklayenti le-GUI kungenzeka lingawukhombisi lowo myalo; uma kunjalo funda isikrini salo mayelana noma inguqulo yelabhulali efakiwe.

Okwakulawulwa ngempela yile nketho

Lo myalelo wawucisha ukuxoxisana ngamapharamitha okubethela, ngakho izinhlangothi zombili zabuyela ekuziphatheni kwangaphambili kokukhetha okwakuqondiswa isilungiselelo cipher. Awukaze ucime ukubethela futhi awukaze uguqule umhubhe ube umbhalo ocacile. Ukukufunda njengeswitshi yokuphepha kuyiphutha lokuqala, futhi kuholela ekushintsheni okwenza ukuxhumana kube kubi kakhulu esikhundleni kokuba kuhle.

Uma ukuxoxisana sekukhona, umbuzo olinganayo ukuthi yiziphi izinhlamvu zokubethela ithela elilodwa elizimisele ukuzisebenzisa. Lowo umbuzo wenqubomgomo, futhi inqubomgomo ihlala ku-data-ciphers kusukela ku-2.5.

Igama elidala ncp-ciphers ingele-2.4. Ukuhlanganisa amagama amabili phakathi kwezinhlangothi kuwumthombo ojwayelekile wokwehluleka kokuxoxisana ohlangothini olulodwa. Iphrofayili ephethe womabili iyiphrofayili ehlelwe abantu ababili ngezikhathi ezihlukene.

Shintsha inqubomgomo, hhayi isipelingi

Setha data-ciphers ezinhlangothini zombili ngokukhetha okuhlanganyelwe okuhloselwe, futhi gcina uhlu lufushane ngokwanele ukuthi umhloli angacabanga ngalo. Ukushintsha umugqa owodwa ongenasizathu akufakazi lutho; umphumela uncike ekuhlanganyeleni kohlu olubili nasekutheni i-TLS stack isekela. Qinisekisa ukuthi izinhlangothi ziyavumelana ngokufunda umphumela okuxoxisanwe ngawo hhayi ukulungiselelwa. Bese ubhala uhlu olubili kurekhodi lokusatshalaliswa ukuze ushintsho olulandelayo luqale esimweni esaziwayo.

Buyekeza iphrofayili ngomnikazi wayo. Ukwengeza inketho yokushaya indiva ukuze kufihlwe umyalelo osuphelelwe yisikhathi kushiya umbuzo wenqubomgomo uphendulwanga.

Uma uhlangothi oludala ludinga ngempela ukuphathwa kokuhambisana, kubeke kuphela kulokho kusatshalaliswa. Ukubuyisela ukuziphatha okuphelelwe yisikhathi emhlabeni wonke akusona isimo esidingekayo ukuze kuxhunywe izinhlangothi zesimanje. Okuhlukile kufanele kusho uhlangothi okukhona ngenxa yalo.

Imigqa emibili ebukeka njengohlu lwezinhlamvu zokubethela kodwa akuwona

Ukugqa imigqa emibili yokubethela akubuyiseli ukuxoxisana, futhi umphumela uyiphrofayili ebukeka njengohlu kodwa eziphatha njengenani elilodwa. Umugqa othi AES-256-CBC nomugqa olandelayo othi CBC kuwumzamo ojwayelekile. I-CBC iyodwa isho imodi hhayi i-algorithm, ngakho umhlaziyi angayamukela endaweni eyodwa futhi ayenqabe kwelandelayo. Imiyalelo ye-cipher ephindaphindiwe isetha inketho efanayo kabili esikhundleni sokuqoqa abazongenela ukhetho.

Hlola amagama amukelwayo nge-openvpn --show-ciphers kubhinari oqondiwe esikhundleni sokukopisha uhlu emhlolweni obhalelwe elinye igatsha. Uhlu lushintsha phakathi kokukhishwa. Igama elivumelekile egatsheni elilodwa akudingeki livumeleke kwelinye.

Uma inhloso kwakuwukuqhathanisa ukusebenza, rekhoda ama-algorithm nomthwalo womsebenzi. Ukushintshela ku-CBC akusona isilinganiso sokuthi ukubethela akukho.

Hlola ukuthi ukuxhumana kwaxoxisana ngempela ngani

Sungula ukuxhumana okusha futhi ufunde umugqa wesiteshi sedatha kurekhodi, okusho ukubethela okusetshenziswayo. Isethi yesiteshi sokulawula inqunywa ngokwehlukile, ngakho uhlu oluvunyelwe efayeleni lubonisa kuphela lokho okwanikezwa. Uma izinhlangothi zombili zikhethe into obungayilindele, uhlu yilapho okufanele ubheke khona hhayi isixhumi somhubhe. Qinisekisa umphumela kukuxhumana kwesibili ngemuva kwanoma yiluphi ushintsho, ngoba ukuqalisa kabusha kanye kungase kusebenzise isikhathi esigciniwe.

Gcina umphumela okuxoxisanwe ngawo kurekhodi lokusatshalaliswa eduze kwenguqulo yephrofayili. Lelo yiqiniso eliphendula umbuzo olandelayo wokuthi yikuphi ukubethela okuvikela ngempela ithrafikhi.