Iphothi 443 iyaphendula, i-SSTP isehluleka: yisiphi isigaba esaphuka?

Ukuqedela ukuxhawulana kwe-TCP kuphothi 443 kuyilapho umhubhe ungakhiwe nakancane kufakazela into eyodwa, futhi iyinto encane. Kukhona okulalelayo futhi okulungele ukwamukela ukuxhumana kulelo kheli. Akukhombo insizakalo, isitifiketi esizokwethulwa, noma okwenzeka ngemva kwamabhayithi okuqala.

Kunezigaba ezine phakathi kwalokho kuxhawulana nomhubhe osebenzayo, futhi isigaba ngasinye sikhiqiza iphutha elihlukile.

Iphothi evuliwe ichaza isendlalelo esisodwa kuphela

Ukwamukela ukuxhumana kwe-TCP kusho ukuthi inqubo ithola isokhethi futhi indlela ivumela ukuxhawulana. Akusho lutho mayelana nokuthi leyo nqubo inguseva ye-SSTP yini, noma inesitifiketi esivumelekile egameni elikwiphrofayili yakho, noma izogunyaza i-akhawunti yakho. Iseva yewebhu ekhelini elifanayo iphendula ukuxhawulana ngokuphelele bese iphendula isicelo sakho se-SSTP ngephutha le-HTTP. Konke okungaphezulu kwalokho kuxhawulana kuhlala kungahloliwe.

Thatha ukuhlolwa kwephothi njengesihlungi esishibhe kakhulu, hhayi njengesinqumo. Inani laso ukuthi lisusa isigaba esiphelele sokwehluleka, hhayi ukuthi liqinisekisa konke okungaphezulu kwaso.

Ukuhlanganisa kokubili yikho okwenza abantu bafake kabusha amaklayenti ngemva kokuhlolwa okungakaze kuhlole inkinga yangempela yeklayenti.

Hlukanisa izigaba ezine ngobufakazi

Izigaba wukufinyeleleka kokuthutha, ukuqinisekiswa kwe-TLS, ukushintshana kwe-SSTP phezu kwe-HTTPS, nokuqinisekiswa kwe-PPP ngaphakathi komhubhe. Indlela edlula esokuqala bese yehluleka kwesine idinga ukulungiswa kwemibhalo yokungena; eyehluleka kwesibili idinga ukulungiswa kwesitifiketi noma kwegama. Lokhu kulungisa akuhlanganyeli lutho, futhi ukukhetha okungalungile kuchitha isikhathi sokuphazamiseka.

nc -vz vpn.example.net 443
openssl s_client -connect vpn.example.net:443 -servername vpn.example.net -brief
curl -sS -o /dev/null -w '%{http_code}\n' https://vpn.example.net/

Umyalo wesithathu kufanele ufundwe ngokucophelela. I-200 evela ekhasini lewebhu elijwayelekile ikutshela ukuthi kunensizakalo yewebhu; ayikutsheli ukuthi isicelo se-SSTP sizoqondwa. I-404 evela ekhelini elifanayo ayinakwazi ukukhombisa lutho nge-VPN. Ilogu yeklayenti kuphela ekutshela ukuthi yisiphi sezigaba ezine esifinyelelwe.

Qaphela ukuthi umyalo ngamunye usebenzise eliphi igama. Isitifiketi sikhethwa ngegama olithumelayo, ngakho ukungafani phakathi kwephrofayili nokuhlolwa wukungafani okulethe wena ngokwakho. Ukubhala lelo gama eceleni komphumela kuvimbela ukudideka kamuva.

Funda impumelelo yengxenye endleleni efanele

Umsizi angavumela ukuphequluka okuvamile bese enqaba ukushintshana kwamuva, yingakho iphroksi esebenza kumawebhusayithi isengahluleka kumhubhe. Iphethini efanayo ivela lapho isitifiketi sivumelekile egameni lesiphequluli kodwa hhayi egameni elilungiselelwe kuphrofayili: isiphequluli senelisekile futhi iklayenti alenelisekile, futhi kokubili kuqinisile ngalokho abakuhlolile.

Gcina ukuqinisekiswa kweseva kuvuliwe ngesikhathi uxilonga lokhu. Ukukucisha kuguqula ukungafani kwesitifiketi kube ukuxhawulana okuyimpumelelo futhi kufihla ubufakazi obukuphela obekungachaza ukwehluleka.

Uma iphrofayili efanayo isebenza kusuka kunethiwekhi enye, umehluko uncike endleleni. Lokhu kunciphisa usesho kumaxhumanisi ngaphandle kokusho ukuthi yimuphi, futhi kuseyisinyathelo esiwusizo. Bhala phansi inethiwekhi oyisebenzisile, ngoba ukuqhathanisa akunanzuzo ngaphandle kwayo.

Bese uhlola uhlelo lokusebenza, hhayi isikhathi sokuxhumana kuphela

Uma sesikhona isikhathi sokuxhumana, qinisekisa umzila obekiwe, ukuxazululwa kwamagama nemvume yensizakalo kusuka kuklayenti elikudingayo. Umhubhe oxhunyiwe usengase ube nokudluliswa okungekho ohlangothini olude noma indlela yokubuya eyayingakaze ibekhona, futhi lokho kwehluleka kubonakala njengenkinga yohlelo lokusebenza kumuntu olindile.

Gcina isiphetho ngasinye sixhumene nesigaba esisikhiqizile. Ukubiza iphothi evuliwe nge-VPN esebenzayo yindlela okuguqulwa ngayo ukuhlolwa kwesitifiketi semizuzu emihlanu kube usuku lokufaka kabusha isofthiwe.