Isixhumi esibonakalayo se-VPN, injini ye-GPL kanye nesifaki: yini esatshwayo?

Umbuzo ufika njengodaba lwelayisense, kodwa impendulo iqala nguhlu. Isixhumi se-VPN, injini ye-OpenVPN esiyiqhubayo, umtapo wezincwadi we-TLS kanye nesifaki kungaba namasethi amane ahlukene emibandela, futhi ukubukeka komkhiqizo akukutsheli lutho mayelana nokuthi iyiphi ifayela eyeka liphi isethi. Dlula kuma-artifact ngokulandelana okusatshwa ngakho, futhi umbuzo wezomthetho uba mncane kakhulu lapho usuwunika kumuntu ofanelekile ukuwuphendula. Isinyathelo ngasinye siwunciphisa ngakumbi: yini esatshwayo, yini eshintshiwe kanye nokuthi izingxenye zixhumana kanjani.

Qala ngalokho okubekwa isifaki kudiski

Thatha isifaki noma ipakethe esikhishiwe, hhayi ikhophi yokuthuthukisa, futhi ubale yonke ifayela eliyibeka emshinini ohlanzekile. Qopha izinguqulo zesixhumi, injini kanye nomtapo wezincwadi we-TLS, futhi uphawule ukuthi injini iyifayela elisebenzayo elihlukile noma umtapo wezincwadi olayishwa kuyo inqubo efanayo.

Leli qiniso lokugcina lakha konke okulandelayo. Ifayela elisebenzayo elihlukile eliqalwa ngesokhethi iletha iqoqo elihlukile lemibuzo kunekhodi ehlanganiswe kubhinari eyodwa, futhi isifaki esibeka nje kokubili eceleni akasincomi udaba kunoma yiluphi uhlangothi. Ukuhlanganisa kuyisinqumo sokupakisha, kuyilapho ubudlelwano phakathi kwezinhlelo bungobokwakheka.

Bhala uhlu kanye nezinguqulo, ngoba imibandela iyahluka phakathi kokukhishwa okuyisisekelo.

dpkg -L openvpn | head -n 40
openssl version -a

Ihlukanise isixhumi nenjini

Ifayela lamakhophi le-OpenVPN likhombisa i-GPL inguqulo 2 futhi liqopha ukungafakwa kokuxhuma kwe-OpenSSL, okuyimvume eqondile enomkhawulo ochaziwe, hhayi ilayisense ejwayelekile yokuxuba imibandela.

Thwebula umbhalo welayisense osatshwa kanye nokwakha kwakho, hhayi lowo osesizindeni sewebhu somsebenzi namuhla. Ukukhishwa okwagxilisa igatsha elidala kuthwala incwadi yalelo gatsha. Izithombe zesikrini zekhasi lesitoreji azithathi indawo, ngoba ifayela olidingayo yilelo elingaphakathi kwe-artifact. Ligcine eceleni kwesifaki ukuze ipakethe liphelele.

Bese kuthi ngemuva kwalokho chaza ukuhlanganiswa ngokuthembeka: ingabe isixhumi siqala injini njengenqubo yengane futhi sikhuluma iphrothokholi yombhalo, noma sixhumanisa umtapo wezincwadi futhi sashintshana izakhiwo zangaphakathi? Ukuhlelwa kwesibili kuseduze ngendlela okungesiyo eyokuqala, futhi lowo mehluko yiwona umhloli azobuza kuwo kuqala.

Phawula ukuthi yimaphi amafayela owashintshayo

Ikhodi yomthombo eshintshiwe ishintsha ukuhlaziya ngaphezu kwanoma yimiphi imininingwane yokupakisha. Uma ufake isichibi enjinini, isichibi ngokwaso siwumsebenzi osuselwe kwenye, futhi isibopho sisesandleni salowo osabalalisa umphumela.

Qopha isichibi ngasinye, inhloso yaso kanye nokuthi sathunyelwa yini phezulu, ngoba isichibi esingakaze siphume esitorejini sakho sisengxenye yalokho okusabalalisa uma usabalalisa ibhinari.

Amafayela wokuhlela, amatimu kanye nezinguqulo ngokuvamile ahlala nesixhumi, kodwa inguqulo efaka izintambo zekhodi yomthombo yenjini iyisikhumbuzi esincane sokuthi umngcele ungokwefayela hhayi ngokweshidi. Gcina umehluko phakathi kokukhishwa okuphezulu nokwakha kwakho ukuze impendulo itholakale lapho iceliwe esikhundleni sokuphinda yakhiwe kamuva. Lowo mehluko futhi uyisakhiwo esiwusizo kakhulu lapho umhloli ebuza ukuthi yini eshintshile.

Hlola inguqulo ye-OpenSSL ngokwayo

I-OpenSSL 3.0 nangemuva kwayo isatshwa ngaphansi kwe-Apache License 2.0, kuyilapho ukukhishwa okudala kuthwala imibandela ye-OpenSSL/SSLeay. Lena imibhalo ehlukene enezibopho ezihlukene, futhi injini ehlanganisiwe ingaxhumanisa noma iyiphi yazo etholwe uhlelo lwakho lokwakha.

Qinisekisa inguqulo esatshwa ngempela hhayi leyo eshiwo kusikripthi sokwakha.

Ukuncika ku-OpenVPN akuguquli zonke izinguquko ze-OpenSSL zibe ikhodi ye-GPL, futhi ukungafakwa kokuxhuma akususi ezinye izibopho eziza nokusatshalaliswa kabusha komtapo wezincwadi. Thatha ukungafakwa njengesigaba esisodwa ekuhlaziyeni okubanzi, futhi uqophe izaziso zomtapo wezincwadi we-TLS uqobo kanye nakho konke okunye.

Hlanganisa ipakethe lobufakazi

Ipakethe linezingxenye ezine: uhlu lwamafayela nezinguqulo, incazelo yokuhlanganiswa, uhlu lwezinguquko kanye nomehluko kanye nemibhalo yelayisense njengoba isatshwa. Engeza ifayela lesaziso olisabalalisayo kanye nendawo okunikezwa kuyo ikhodi yomthombo, uma izibopho zakho zidinga ukunikezwa.

Gcina ipakethe ngaphansi komnikazi oyedwa ukuze kungabi bikho ukukhishwa okungaphuma ngaphandle kwalo.

Akukho kulokhu okunquma udaba lwezomthetho, futhi yilokho okubalulekile: kunikeza umhloli ofanelekile amaqiniso esikhundleni sesifinyezo esakhiwe othile ngokukhumbula. Incazelo yokumaketha yomthengisi ayibona ubufakazi ngokwakheka kwayo, futhi ukuqagela kwakho ngakho nakho akubona ubufakazi.