I-SSTP iqinisekisa iseva kuqala bese kuba umsebenzisi

Iklayenti le-SSTP lingaqeda i-TLS bese lisala umsebenzisi ngemva kwesekhondi. Lokho kulandelana akulona iphutha, iwukuhlangana kwezinga lephrothokholi: ukuphepha kokuthutha kuqala, ukuqinisekiswa komsebenzisi ngemva. Njengoba izigaba ezimbili zihluleka ngemiyalezo ehlukene, zidinga nezilungiso ezihlukene. Ukufunda ukuthi yisiphi isigaba esidale iphutha ingxenye enkulu yokuxilonga.

Isitifiketi esithembekile siqinisekisa iphoyinti lokugcina; asisho lutho mayelana ne-akhawunti.

Yini i-TLS handshake eyiqinisekisayo

Iklayenti liqinisekisa isitifiketi esethulwa iseva uma siqhathaniswa nesitoreji sayo sokuthemba, igama lomsingathi eliceliwe, isikhathi sokusebenza kanye nanoma iyiphi inqubomgomo eyengeziwe esetshenziswa yipulatifomu. Lokho kuvikela ukuxhumana nephoyinti lokugcina elihlosiwe. Kodwa akufakazeli ukuthi i-akhawunti ethile inikwe amandla, ayiphelelwanga yisikhathi noma igunyaziwe ukufinyelela kude. Leyo imibuzo ehlukene ebuzwa kamuva enye ingxenye.

Yingakho ukususa ukuhlolwa kwesitifiketi ukuze ufinyelele isicelo sokungena kuwukulungiswa okungalungile. Uthola isicelo sokungena kuxhumano ongakwazi ukuluqinisekisa. Iphutha lesitifiketi lihlobene negama lomsingathi, iwashi, uchungechunge noma ukucushwa kokuthemba.

Yini i-SSTP ne-PPP ezikwengezayo phezulu

I-SSTP isebenza phezu kwe-HTTPS futhi ithwala i-PPP ngaphakathi kwayo, nokushintshana kwayo kokulawula okuzungeza ukuxhumana. Bese i-PPP yenza izigaba zayo zokuxhumana nokuqinisekisa, futhi indlela yokuqinisekisa incike kwinqubomgomo yeseva namandla eklayenti. I-PAP, i-CHAP, i-MS-CHAPv2 ne-EAP zonke ziyizinketho zokuqinisekisa ze-PPP ezinezici ezihluke kakhulu. Ukuhlolwa komsebenzisi kwe-VPN yileso sigaba se-PPP, hhayi ungqimba lwe-TLS ngaphansi kwaso.

Ngakho ukwenqatshwa komsebenzisi kungasho imininingwane yokungena, umkhawulo we-akhawunti noma ukungafani kwendlela.

Isizathu ohlangothini lweseva siwusizo kakhulu kunokusetha kabusha yonke imfihlo kuphrofayela. Umcimbi we-akhawunti ekhutshaziwe nokuhluleka kwengxoxo yendlela kubonakala kufana eklayentini futhi akukho okufanayo esevani.

Hlanganisa iphutha nesigaba

Hlola ukuthi ukuxhumana kufinyelela ku-TLS yini, bese kuba ukushintshana kwe-HTTP ye-SSTP, bese kuba isigaba se-PPP. Gcina izitembu zesikhathi zamalogi ziqondile phakathi kwemizamo ukuze ukwehluleka kwangaphambili kungadideki nempumelelo yakamuva. Iklayenti elirekhoda imizamo emibili kuwindi elilodwa lizobonakala lihlulekile esigabeni sokugcina elisifinyelele. Funda iphutha lokuqala elihlobene, hhayi umugqa wokugcina.

Ukuhambisana okufanayo kubalulekile ohlangothini lweseva, lapho irekhodi lokuqinisekisa nelogi yokuthutha zivame ukuba amafayela ahlukene anamawashi ahlukene. Imizuzu emibili yokwehluka yanele ukwenza isizathu esicacile sibonakale singenakwenzeka.

Ngemva kokungena, ukugunyazwa kusahlukile

Ukungena okuphumelelayo akunikezi zonke izinsiza zangasese. Imizila inquma ukuthi yini efinyelelekayo, i-DNS inquma ukuthi yini ixazululwayo, futhi isevisi ngayinye isasebenzisa izimvume zayo. Iseshini ekhonjiswa njengexhunyiwe isitatimende mayelana nomhubhe, hhayi mayelana nokwabiwa kwamafayela. Uma umsebenzisi ekwazi ukuxhuma kodwa engakwazi ukufinyelela kumsingathi oyedwa, isigaba somhubhe sesivele siphelile.

Lokho kuwukuhlanganiswa okufanayo okwaboniswa i-handshake, izinga elilodwa phezulu.

Gcina ukubuyiselwa kwe-akhawunti ngaphakathi kwenqubo esekelwa umqhubi esikhundleni sokushintsha izilungiselelo zokuthutha ukuphendula ukwenqatshwa komsebenzisi okucacile. Ukushintsha ukuthutha ukuze kulungiswe i-akhawunti ekhutshaziwe wuhlobo lokulungisa olubonakala lusebenza uma i-akhawunti inikwa amandla kabusha ngesizathu esingahlobene.