Amadivaysi amabili, isitifiketi se-OpenVPN esisodwa: umjikelezo wokuxhumana kabusha

Ithuneli eliphuma bese liqala kabusha njalo ngengxenye yomzuzu ngokuvamile akusiyo inkinga ye-cipher noma ye-MTU. Ubunikazi obubodwa obusetshenziswe kabili. Iseva ibona igama elijwayelekile elaziwayo, ithatha iseshini entsha njengeyakamuva, futhi idivaysi endala ithola ukuthi ishintshiwe. Ngasohlangothini lwekhasimende lokhu kubonakala njengokuphela kwesikhathi sokungenzi lutho nokuqala kabusha, yingakho uphenyo luvame ukuqala endaweni engalungile.

Qala ngesikhathi sokuqala kabusha

Isikhathi siyikhomba ngaphambi kwanoma yini enye. Isigqi esilinganayo esihambisana newindiwe ye-ping-restart sikhomba iseshini eshintshwayo hhayi indlela ehlulekayo, ngoba ukwehluleka kwendlela akuvamisile ukuba kube okujwayelekile kangako. Bhala igebe eliqondile phakathi kokuqala kabusha kanye nomugqa wesizathu kulogi yekhasimende. Ukuphela kwesikhathi okulandelwa ukuqala kabusha kukhuluma indaba ehlukile kunokuxhawana kwezandla okuhlulekile.

Hlola ukuthi ukuqala kabusha kwaqala nini uma kuqhathaniswa nedivaysi yesibili. I-laptop entsha, ifoni noma iphrofayili ekhotshelwe emshinini wokugcina yizimbangela ezijwayelekile, futhi isikhathi sivame ukuhambisana nosuku umuntu eyisetha ngalo.

Bhala isikhathi nesizathu. Kokubili ubufakazi, futhi kokubili kuqoqwa kalula.

Funda ukuthi iseva yathini mayelana nokungena kwesibili

Kuseva oyilawulayo, ilogi isho igama elijwayelekile futhi ibonisa uxhumano lwesibili olufikayo. Ngaphandle kwe-duplicate-cn lokho kufika kuthatha indawo yeseshini ekhona yalelo gama, futhi umlayezo uvame ukusho lokho ngqo. Nge-duplicate-cn zombili izingqungquthela zihlala ndawonye futhi uphawu luyashintsha: amakhasimende ahlala exhunyiwe kodwa abelana isethi eyodwa yezilungiselelo ngekhasimende kanye nesinqumo esisodwa sokuhoxisa. Funda kokubili ngokuhlanganyela, ngoba ukushintshwa kubonakala kuphela ngokulandelana.

Kusisevisi esibungazwayo kungenzeka ungabi nalo ilogi yeseva nhlobo. Khona-ke ikhombakazi isikhathi: ithuneli eliqinile eliwayo njalo lapho kuxhuma omunye umshini, futhi kulogi yekhasimende akukho okunye ngaphandle kokuphela kwesikhathi.

Qhathanisa amabhulokhi esitifiketi nokhiye kuwo womabili amaphrofayili, hhayi igama lomsingathi okude kuphela. Amaphrofayili akhotshelwe avame ukwehluka ngegama lefayela kuphela.

Hlukanisa ubunikazi ohlangothini lweseva

Khipha isitifiketi esisodwa ngedivaysi ngayinye nge-CA esayina le seva. Nge-Easy-RSA lokho kusho igama lekhasimende elihlukile ngedivaysi ngayinye, bese iphrofayili yakhiwa kuleso sitifiketi nokhiye waso. Igama elijwayelekile liba ubunikazi bedivaysi, futhi yilokho kanye iseva eyayikushoda. Ziqambe ngokwedivaysi hhayi ngokomuntu, ukuze ukushintshwa kukhiqize igama elisha.

Ukhiye womsele wokulawula owabiwe uyinto ehlukile. tls-crypt noma tls-auth uvika umsele wokulawula kukho konke ukhasimende futhi wenzelwe ukwabiwa. Akuwona ubunikazi bekhasimende, futhi ukushintsha kwawo ngeke kulungise isitifiketi esiphindwe kabili.

Gcina isitifiketi, ukhiye nanoma iyiphi ifayela lokuhlela lekhasimende ngaphansi kwegama elifanayo elijwayelekile, ngaphandle kwalokho ukumephu kuyaphuka ekuxhunyaneni okulandelayo. Ukungafani lapho kudala ikhasimende eliqinisekisa bese lingatholi lutho.

Gcina amakheli nezilungiselelo zihambisana ngemva kokwehlukanisa

Amakheli angenakushintshwa aletha indlela yesibili yokungqubuzana. Uma iseva iwabela ngokusebenzisa ifconfig-pool-persist noma ifayela lekhasimende ngayinye, lawo marekhodi asakhomba egameni elidala. Amadivaysi amabili angagcina enekheli elifanayo lethuneli ngisho ngemva kokwehlukaniswa kwezitifiketi, futhi lokho kwehluleka kubonakala ngendlela ehlukile kumjikelezo wokuqala.

Buyekeza ukumephu ngesikhathi esifanayo nesitifiketi, bese uxhuma kabusha womabili amadivaysi futhi uqhathanise amakheli ewanikezwe wona. Ikheli eliphindwe kabili livela njengokulahlekelwa okuphazamukayo hhayi njengokuxhumana kabusha okumsulwa.

Thumela izilungiselelo okufanele zihluke ngedivaysi ngayinye ngefayela laleyo divaysi uqobo, hhayi ngethempulethi eyabiwe. Ithempulethi eyabiwe yenza futhi ukuphindwa okulandelayo kube nzima ukukubona.

Hoxisa ubunikazi obudala ngendlela efanele

Hoxisa isitifiketi lapho ihadiwe ihoxiswa noma ilahlekile, esikhundleni sokususa iphrofayili emshinini wakudala. Ukuhoxisa kukhiqiza i-CRL entsha, futhi iseva iyidinga leyo fayela lapho crl-verify ukhomba khona. Uma lowo myalelo ukhona, i-CRL engekho noma engafundeki yenza iseva yenqabe wonke ukhasimende, ngakho hlola i-akhawunti eyodwa eyaziwayo ngemva kokubuyekezwa ngakunye.

Gcina uhlu oluhlanganisa isitifiketi ngasinye nomuntu noma idivaysi, kanye nezinsuku zokukhipha nokuhoxisa. Lolo hlu luphendula ukuthi ngubani osenokufinyelela ngaphandle kokufunda amagama amafayela, futhi luvimbela iphrofayili elandelayo ekhotshelwe ukuthi iqale kabusha umjikelezo.