Ukuthwaleka kwephrofayela ye-OpenVPN: okhiye abathwalekayo nama-ophshini eplathifomu

Ifayela elifanayo le-.ovpn livula umhubhe kwiklayenti elilodwa futhi lingaqali kwelinye, futhi isitifiketi ngokuvamile siyisoliswa sokuqala. Ngokuvamile ifayela liqukethe umyalelo owenziwa yinjini eyodwa kuphela. Iphrofayela iyisivumelwano neklayenti elithile, hhayi umbhalo othwalekayo.

Hlukanisa lokho okuhamba nobunikazi kulokho okungekweplathifomu. Khona-ke ukwehluleka ngokuvamile kuzisho ngokwako.

Ifayela elilodwa, izivumelwano ezimbili

Iphrofayela ihlanganisa izinhlobo ezintathu zokuqukethwe: izinto zobunikazi njengezitifiketi ze-CA nezeklayenti kanye nokhiye wangasese, amaqiniso okuthutha njengendawo yokugcina ekude neprotokholi, kanye nemiyalelo yokuziphatha njengokuphathwa kwe-DNS noma izinketho zedivayisi. Ezimbili zokuqala zithwaleka kabanzi phakathi kwama-injini asekela iprotokholi efanayo. Eyesithathu iyindawo lapho ukuqaliswa kwehluka khona. Ukuthatha ifayela lonke njengeyunithi eyodwa ethwalekayo yikho okudala ukwehluleka okudidayo.

Ifayela elisebenza ku-GUI kuplathifomu eyodwa alivumelekile ngokuzenzekelayo kuklayenti yomugqa womyalo kuplathifomu enye. Ngisho noma kokubili kungama-OpenVPN, abahlaziyi namasethi ezinketho bayahluka. Yingakho ukungeniswa okuphumelelayo kungesona ubufakazi bephrofayela ethwalekayo.

Izinto ezithwalekayo nama-ophshini eplathifomu

Izigaba zobunikazi nokuthutha ziyingxenye okufanele igcinwe. ca, cert, key kanye ne-remote zichaza ukuthi ubani uxhuma kuphi, futhi zisho into efanayo kuyo yonke iklayenti ehambisanayo.

Imiyalelo yokuziphatha iyingxenye okufanele iqhathaniswe. I-block-outside-dns, isibonelo, ikhona ukuze ishintshe ukuziphatha kwe-DNS ku-Windows. Iklayenti ye-Unix ingase ingayazi nhlobo.

Funda uhlu lwezinketho zeklayenti eyamukelayo, hhayi eyethumelayo. Incwadi yereferensi ye-OpenVPN 2.6 ibhala izinketho zenjini, futhi ingxoxo yokungenisa ye-GUI akuwona lolo hlu.

Funda iphutha lomhlaziyi ngaphambi kwesitifiketi

Iphutha elisho inketho engaziwa liwukwehluleka komhlaziyi, hhayi ukwehluleka kokuqinisekisa. Ukuxhumana akukaze kufinyelele ku-TLS, ngakho ukushintsha izitifiketi ngeke kusize. Funda iphutha lokuqala elivela kuklayenti langempela kanye nenguqulo, bese ususa noma ushintshe kuphela umyalelo lelo klayenti elingakwazi ukuwusebenzisa. Ukususa izigaba zesitifiketi noma zomzila ukuze ifayela lilayishe yiyo indlela iphrofayela esebenzayo eba engaphephile ngayo.

Uma iphutha likhuluma ngokuxhawana, isitifiketi noma isibhamu, iphrofayela ihlaziyiwe futhi inkinga ikwenye indawo.

Gcina ifayela lokuqala eceleni kwelilungisiwe. Uma ifayela elilungisiwe lihluleka kamuva, elokuqala liwukulawula okusho ukuthi ushintsho noma indawo yashintsha.

Amalungelo awumngcele wesibili

Amalungelo awumngcele wesibili: ukudala idivayisi yomhubhe, ukufaka imizila kanye nokufunda ukhiye wangasese konke kuncike ekugunyazisweni kwasekhaya. Ifayela likakhiye elifundwa yi-root kuphela liwukusetshenziswa okuvamile, hhayi isici sephrofayela. Ukulungiswa kungokobunikazi noma amakhono, hhayi okwefayela.

Ukuqalisa iklayenti nge-sudo kungasombulula ukwenqatshwa kwemvume yasekhaya, futhi akukwazi ukwengeza umyalelo i-binary engawusebenzisi. Kushintsha futhi ukuthi iyiphi ikhingi yokhiye yomsebenzisi, izindlela zokulungiselela kanye nomongo womphathi wenethiwekhi osebenzayo, ngakho umphumela awusona isivivinyo esifanayo.

Lungisa ngamabomu

Uma umhlinzeki eshicilela amaphrofayela ahlukene, thatha lelo elenzelwe iklayenti elamukelayo. Ukulungisa ifayela leplathifomu enye kuyindlela yokugcina. Kudinga irekhodi layo yonke inketho eshintshiwe kanye nekhophi yelifayela lokuqala.

Hlola ubunikazi, umzila kanye ne-DNS njengemiphumela emithathu ehlukene. Iphrofayela eqinisekisa futhi ihambisa umzila kodwa iphula ukuxazululwa kwamagama iyiphrofayela elungiswe ingxenye, hhayi esebenzayo.