Susa umusho wokhiye noma uwugcine? Ikhophi oyidalayo
Ifayela lokhiye elingashifriwe ligcina imfihlo efanayo ngaphansi kokuvikelwa okubuthaka. Qhathanisa ingozi yaphakade ngaphambi kokuguqula, futhi wazi ukuthi akukubuyiseli ini.
Ukhiye wangasese oshifriwe kanye nongashifriwe bagcina into efanayo yokhiye. Ukuguqula akudali ubunikazi obusha, akusethi kabusha i-akhawunti ye-VPN futhi akwenzi ifayela elidala lingasebenzi. Kubhala ikhophi yesibili, futhi leyo khophi ithwala enye ingozi yaphakade.
Ukuthi ukushintshana kufanele yini kuncike ekutheni ifayela lizohlala kuphi nokuthi ubani angalifunda.
Ukuguqula kushintsha ini ngempela
Ngaphambi kokuguqula, ukhiye uvikelwa umusho wokhiye onikezwa umsebenzisi. Ngemva kokuguqula, uvikelwa izimvume zesistimu yefayela kanye nanoma yikuphi ukulawulwa kokufinyelela okuzungeze ifayela. I-cryptography ayishintshanga; inani lezinto phakathi komhlaseli nokhiye lishintshile. Yikho konke ukuqhathanisa.
Ithebula lenza umehluko ube sobala.
| Form | What protects it | How it fails |
|---|---|---|
| Encrypted key | A passphrase plus file access | Weak passphrase, or an offline attack on the file |
| Unencrypted key | File permissions and host security only | Any reader copies it silently |
Asikho isimo esiphephile ngokuzenzakalela. Zihluleka ngezindlela ezihlukene, futhi kunye kuphela kulezo zindlela okushiya umbhalo kwi-log.
Kungcono nini ukugcina umusho wokhiye
Uma iklayenti elisekelwayo lingacela umusho wokhiye noma liwuthole esitolo semfihlo esigunyaziwe, ukuguqula akuthengi lutho. Ugcina ikhophi eyodwa, umngcele wokuvikelwa owodwa kanye nefayela elilodwa elincane okufanele ulilandelele. Iningi lamaklayenti e-VPN amukela okhiye be-PEM angakwenza lokhu.
Ukuguqula futhi kuyisinyathelo esingalungile uma ithimba laba nokhiye. Ifayela elingashifriwe kusihambisi esabiwe liba umazisi ongakopishwa yinoma ubani onokufinyelela kwe-shell.
Ingabe ikhophi engashifriwe ivumelekile nini
Amanye amasevisi awakwazi ukucela, amanye amakhontheyna afaka imfihlo ngokufunda kuphela, futhi amanye amadivayisi afunda ifayela lokhiye ngesikhathi sokuqalisa ngaphandle kwendlela yokuxhumana. Ezimweni ezinjalo, ukhiye ongashifriwe ngaphakathi kwedathini evinjelwe kahle ungaba ukwakheka okusekelwayo. Isizathu imvelo, hhayi ukuvumelana.
Uma ungakwazi ukusho ukuthi ubani angalifunda ifayela nokuthi kungani, impendulo ingu-cha.
Umyalo kanye nemiphetho yawo ebukhali
Nokhiye osuselwe efayeleni osekelwa i-OpenSSL 3.5, isithenjwa se-pkey sibhala ukususwa komusho wokhiye kanye nesicelo sokuxhumana lapho okokufaka kushifriwe futhi kungekho mthombo wephasiwedi onikeziwe. Isimo esincane sifushane, futhi kulula ukusisebenzisa ngokunganaki.
umask 077
openssl pkey -in protected-key.pem -out new-private-key.pemImiphetho emithathu ebukhali. I-I/O yefayela lokuphuma ayiyona i-atomic, ngakho indlela yokuphuma ekhona inganqunywa phakathi kokubhala. Ungasebenzisi indlela yokufaka njengokuphuma, futhi ungahloli ekhopi eyodwa evikelwe. Faka umusho wokhiye esicelweni hhayi emugqeni womyalo, lapho ufika khona emlandweni we-shell.
Hlola umphumela ngaphambi kokushintsha noma yikuphi ukulungiswa kwe-VPN: openssl pkey -in new-private-key.pem -pubout kufanele kuprinta ukhiye womphakathi ofanayo owawunawo ngaphambili.
Ukuguqula akukwenzi ini
Akususi ikhophi eshifriwe, esekhona noma kuphi lapho uyishiye khona. Akushintshi iphasiwedi ye-akhawunti ye-VPN noma isitifiketi. Futhi akulungisi ukuvezwa osekwenzekile. Uma ukhiye uphumile, isisombululo ukushintshwa nokuhoxiswa ohlangothini lweseva, hhayi ukushintshwa kwefomethi yendawo.
Susa ifayela eliphakathi nendawo ngamabomu, futhi qinisekisa ukuthi indlela oyisusayo iyona oyidalile.