I-OpenVPN iyayenqaba umugqa wokuqala? Ifayela cishe i-UTF-16

Iphutha likhomba umugqa wokuqala wefayela le-.ovpn futhi licaphuna into ebukeka njengezinhlamvu ezixubile lapho bekufanele kube khona i-client. Ifayela livuleka kahle kuhleli-mbhalo wakho, umugqa wokuqala ufunda i-client, futhi umyalo ujwayelekile ngokuphelele. Kokubili ukubona kuyiqiniso, ngoba uhleli-mbhalo udikoda amabhayithi kanti iklayenti alwenzi lokho. Lokho okubonayo cishe ngaso sonke isikhathi inkinga yokubhalwa kwekhodi, hhayi inkinga yohlelo lolimi.

Inganekwane: uhleli-mbhalo ukubonisa ifayela

Uhleli-mbhalo wombhalo udikoda amabhayithi abe yizinhlamvu ngokubhalwa kwekhodi akutholayo noma akucabangayo. Uma ecabanga i-UTF-16, ifayela libukeka liphelele esibukweni kuyilapho amabhayithi angaphansi engamapheya, kukhona ibhayithi enguziro ngemuva konhlamvu ngalunye lwesiLatini. OpenVPN ifunda lawo mabhayithi njengezinhlamvu, futhi ukungafani kuvela kumyalo wokuqala ewuzama ukuwuhlaziya.

Ngakho-ke umugqa obonakalayo nomugqa olethiwe kuyizinto ezimbili ezihlukene. Ukususa izinhlamvu ezingajwayelekile ozibonayo kuwushintsho embukisweni, hhayi ekubhalweni kwekhodi, futhi ukuhlaziya okulandelayo kuyahluleka ngesizathu esifanayo ngomlayezo ohluke kancane. Yingakho ukujaha uphawu olusephutheni kungahlali kufinyelela ndawo. Amabhayithi anephutha emthonjeni, futhi wonke umfundi olandelayo uqagela ukulandelana okufanayo okuphukile.

Isimo esithile sokuhluleka kufanele saziwe, ngoba siwukuxilonga ngendlela ethile. Uphawu olusekuqaleni kakhulu kwefayela, kuphrofayela eye yasebenza kwezinye izinsimbi, kuwumbuzo wokulandelana kwamabhayithi hhayi umbuzo wamagama.

Amabhayithi okuqala asho ukuthini ngempela

Funda amabhayithi hhayi izinhlamvu. Imiyalo emibili emincane iwaxazulula ngemizuzwana, futhi akukho kuyo edinga ukuvula ifayela kuhlelo olungase liyishintshe:

file client.ovpn
head -c 24 client.ovpn | od -An -tx1

Iphethini oyifunayo iwukulandelana kwamabhayithi okuqala okubili okulandelwa umbhalo lapho ibhayithi lesibili ngalinye linguqiro. I-FF FE ikhombisa i-UTF-16 little-endian, i-FE FF ikhombisa i-big-endian, futhi i-EF BB BF ikhombisa i-UTF-8 enophawu lokulandelana kwamabhayithi. Ifayela elijwayelekile le-UTF-8 elingenalo uphawu liqala ngqo ngebhayithi yonhlamvu lokuqala.

Amabhayithi anguziro phakathi kwezinhlamvu awuphawu oluyisihluthulelo. Ku-UTF-16 little-endian igama elithi client lithatha amabhayithi ayishumi nambili esikhundleni ayisithupha, ngoba uhlamvu ngalunye lwe-ASCII lulandelwa uziro. Leso sakhiwo umbukiso wohleli-mbhalo awukwazi ukukubonisa, futhi ukususwa kwamabhayithi amabili akukwazi ukukususa.

Lapha kunokucwebeza okubalulekile: umfundi wokuhlelwa kwe-OpenVPN uyaluqa uphawu lokulandelana kwamabhayithi lwe-UTF-8 ekuqaleni kwefayela, njengoba umfundi wokuhlelwa 2.6 ekhombisa. Lokho kubekezelela kukhomba lowo phawu kuphela, futhi akwenzi lutho efayeleni le-UTF-16 elinezinhlamvu ezigcwele uziro. Ukuthatha lawo maphawu amabili njengenkinga eyodwa ingxenye yesibili yenganekwane.

Ukuguqula ukugcina njengokuthi, hhayi ukususa

Gcina ikhophi engathintekile yomqulu wokuqala womsebenzisi ngaphambi kokwenza noma yini, futhi usebenze kufayela elihlukile. Iphrofayela ingaqukatha ukhiye oyimfihlo noma impahla ye-akhawunti, ngakho-ke ikhophi iyindlela yakho yokuhlehla kanye nesithenjwa sakho.

Bese wenza ukuguqulwa kokubhalwa kwekhodi kwangempela, kungaba ngemenyu ecacile yokubhalwa kwekhodi yohleli-mbhalo noma ngesiguquli esichaza ukubhalwa kwekhodi kokufakwayo nokukhishwayo:

iconv -f UTF-16 -t UTF-8 client.ovpn > client-utf8.ovpn
file client-utf8.ovpn

Qinisekisa umphumela esikhundleni sokwethemba isimo sokuphuma somyalo. Ukuguqulwa kufanele kugcine umyalo ngamunye, futhi kufanele kugcine noma iyiphi ibhlokhi yesitifiketi noma ukhiye ofakwe ngaphakathi ibhayithi ngebhayithi ngaphakathi kwezimpawu zayo. Ukuphinda ugoqe idatha ye-PEM, ukushintsha iziphetho zemigqa ngaphakathi kwebhlokhi noma ukuhlela kabusha iphrofayela ngesikhathi sokuguqulwa kwakha inkinga entsha ngenkathi kulungiswa endala.

Khomba iklayenti noma insizakalo efayeleni eliguquliwe bese ubheka iphutha lokuqala elilithulayo. Uma uphawu oluxubile lungasekho, umsebenzi wokubhalwa kwekhodi usuphothuliwe, futhi noma yini ehlulekayo ngemuva kwalokho kuwumbuzo ohlukile.

Lokho ukubhalwa kwekhodi okulungisiwe okungalungisi

Ukubhalwa kwekhodi kunquma indlela umbhalo ofundwa ngayo; akusho lutho ngokuthi izinketho zivumelekile yini kuklayenti eliphambi kwakho. Iphrofayela eshushumbiselwe enye implimentheshini ingahlaziywa ngokuhlanzekile futhi nokho yenqatshwe ngenxa yenketho engasekelwe ukwakhiwa okusebenzayo, noma ngenxa yomyalo onengxabano esho okunye kulelo klayenti.

Lawo maphutha akamuva afanelwe uphenyo lwawo: isipelingi esiqondile, uhlelo lolimi lwengxabano kanye nenguqulo eyamukelayo. Ungakuthathi ukuhlaziya okuphumelelayo njengephrofayela ephumelelayo.

Gcina uphenyo lusendaweni ngesikhathi usenza lokhu. Iziguquli zomphakathi eziku-inthanethi kanye namadampu e-hex anamathiselwe ayindawo embi yefayela elingaqukatha ukhiye oyimfihlo, ngoba inkinga yokubhalwa kwekhodi ilula ukulungisa, ukhiye ophukile awulula.