Misa iklayenti elilodwa le-OpenVPN ngaphandle kokuhoxisa isitifiketi saso

Lapho ikhompyutha ephathwayo iya etafuleni lokulungisa isonto lonke, umkhuba ojwayelekile ukususa isitifiketi sayo ku-CA. Lelo rekhodi iyincwadi yomkhiphi, hhayi iswishi yokufinyelela yesikhashana. OpenVPN isivele inendlela yeklayenti ngayinye yokwenqaba ukuxhumana, futhi ukuyisebenzisa kugcina umlando we-CA ungonakalisiwe. Lezi zilawuli ezimbili ziphendula imibuzo ehlukene, futhi ukuzihlanganisa kudala umsebenzi lapho idivayisi ibuya.

Amarekhodi amabili, imisebenzi emibili ehlukene

Isizindalwazi se-CA siqopha ukuthi umkhiphi usayine ini futhi wahoxisa ini kamuva. Siyabuzwa yizinqubo zokuhoxisa nakho konke okufunda i-CRL noma ikhophi yaso yerejista. Umthetho wokufinyelela uhlala kuseva futhi usebenza ekuxhumaneni okwamukelwa yileyo seva.

Ukususa irekhodi lokukhishwa akuhoxisi isitifiketi ngendlela ethembekile, futhi kulimaza umlando okuncike kuwo ukuhoxiswa noma ukucwaningwa kwakamuva. Ukulawula ohlangothini lweseva kuncane futhi kuyahlehliswa. Bhala umehluko kunothi loshintsho ukuze umuntu olandelayo angafuni ukuhoxiswa okungazange kwenzeke.

Beka umyalo wokukhubaza efayeleni elifanele

Kuseva yomphakathi esebenzisa ukulungiselelwa okuqondene neklayenti, umyalo obhaliwe disable wenqaba iklayenti elilodwa elikhethiwe. Ukwikhaya lelo klayenti ngaphansi kwe-client-config-dir esebenzayo, hhayi ekulungiselelweni okuyisisekelo kweseva. Qinisekisa uhla lwemibhalo olusetshenziswa ngempela idemoni esebenzayo, bese uqinisekisa ubunikazi obukhetha ifayela. Ifayela eliqanjwe ngegama elijwayelekile elingalungile libukeka lilungile futhi alifundwa neze.

disable

Izinketho zokuhlela zibalulekile lapha. Izinketho ezinjenge-username-as-common-name zishintsha ukuthi ukusesha kusebenzisa buphi ubunikazi, ngakho ifayela eliqanjwe ngesihloko sesitifiketi kungenzeka lingabi yilo elisetshenziswayo. Funda incwadi yokubhekisa ye-OpenVPN yenguqulo efakiwe esikhundleni sokucabanga ukuthi umyalo uvumelekile kuzo zonke izimo.

Yehlukanisa ukwamukelwa okusha namaseshini asebenzayo

Ukwengaba ukuxhawulana kwesandla okulandelayo akukuqedi ukuhamba komhubhe osekuvele kukhona. Uma idivayisi kufanele inqanyulwe manje, sebenzisa futhi indlela egunyaziwe yokuphatha amaseshini yeseva yaleyo seshini ethile. Uma kungenjalo iklayenti lingaqhubeka lisebenza lize lixhumane kabusha ngokwalo, futhi ukuvala isembozo sekhompyutha ephathwayo noma ukuphuma eklayentini kuyisenzo sohlangothi lweklayenti esingasho lutho ngeseva.

Qinisekisa imiphumela yomibili: iseshini esebenzayo iyama lapho ufuna, futhi ukuxhawulana kwesandla okusha kuyenqatshwa. Iwindi leklayenti elivaliwe alifakazi lutho ngomgomo weseva.

Uma ukusetshenziswa kungenayo indlela esekelwayo yokuqeda iseshini esebenzayo, qopha leso sikhala esikhundleni sokwakha esinye. Iphothi evinjelwe eklayentini ayifani nomgomo ohlangothini lweseva.

Ukumisa kanye nokwephulwa kuyizigameko ezihlukene

Ukhiye olahlekile noma owebiwe kuyisigameko sokuhoxiswa, futhi ukumisa kokufinyelela kwendawo akukuthathi isikhundla salo. Ezinye iziseva ezithemba i-CA efanayo ngeke zabelane lo mthetho oqondene neklayenti lale seva. Landela inqubo yokuhoxisa nokushintsha yomkhiphi futhi gcina isizindalwazi se-CA njengerekhodi elinegunya. Ukumisa kwesikhashana, ngakolunye uhlangothi, kudinga isizathu esibhaliwe nesinyathelo sokubuyisela.

Lapho ukufinyelela kubuyiselwa, susa umkhawulo ngengxenye ewunikezayo bese uqinisekisa ukuthi ukuxhumana okusha kuyaphumelela. Qopha futhi indlela yomugqa we-disable, ngoba ukuvumelanisa kokulungiselelwa kwakamuva kungayibuyisela buthule. Gcina ukumisa, umnikazi waso kanye nosuku emanothini okusetshenziswa, ukuze umphathi olandelayo angatholi umugqa we-disable ongachazwanga ezinyangeni ezizayo.