Iphasiwedi ye-VPN elungile ayikwazi ukuthatha indawo yesitifiketi esilahlekile

Imininingwane yokungena ilungile, iphrofayela ingenwa ngokuhlanzekile, futhi uxhumano lusahluleka ngaphambi kokuqedwa kokuqinisekiswa. Ku-Windows umyalezo ungaba iphutha 798, mayelana nesitifiketi esingatholakalanga sendlela ye-EAP. Ku-OpenVPN ilogi yekhasimende ibonisa ukuxhawulana kwe-TLS okungasijabulisi iseva. Zombili zichaza into eyodwa elahlekile: isitifiketi sekhasimende obekufanele sikwethulwe yikhasimende.

Iphasiwedi ifakazela ulwazi lwemfihlo; isitifiketi sifakazela ukuba nokhiye, futhi enye ayithathi indawo yenye.

Iphasiwedi yayingeyona inkinga

Iphutha 798 ukwehluleka kokufunwa kwesitifiketi. Ikhasimende lacelwa isitifiketi esihambisana nendlela yokuqinisekisa emisiwe, lasesha isitoreji salo futhi alitholanga lutho olusebenzisekayo. Lokho kungase kusho ukuthi isitifiketi asikho, sikhona ngaphandle kokhiye waso oyimfihlo, siphelelwe yisikhathi, noma sigcinwe endaweni okungafinyeleli kuyo ukusesha. Ukuzama iphasiwedi futhi akukwazi ukushintsha noma yisiphi salezi zimo, yingakho iphutha libuya ngisho nemininingwane elungile.

Funda umyalezo ngaphambi kokuthatha isinyathelo. Ukunqatshwa kwemininingwane, ukwehluleka kokufunwa kwesitifiketi kanye nokwehluleka kokuxhawulana kwe-TLS kuyizinto ezintathu ezihlukene, futhi kube kanye kuphela okuhlobene nephasiwedi.

Okumele kube nakho esitorejini yekhasimende

Kuhilela izinto ezimbili. Isitifiketi sekhasimende kumele sifakwe kumsebenzisi osebenzisa ikhasimende le-VPN, kanye nokhiye waso oyimfihlo, futhi impande ekhiphayo kumele ithenjwe. Ifayela le-.cer liqukethe kuphela isitifiketi esisobala, ngakho alikwazi ukuqinisekisa lutho ngokwalo. Kumphathi wesitifiketi we-Windows, ubunikazi bekhasimende bungokwesitoreji somuntu siqu somsebenzisi wamanje, kanti impande ingokwesitoreji sezimpande ezethenjiwe.

Ukufaka ubunikazi esitorejini yomshini, noma esitorejini yezimpande kuphela, akukufezi ukusesha okubhekiswe esitorejini somuntu siqu somsebenzisi. Hlola isitoreji, ifulegi lokhiye oyimfihlo kanye nezinsuku zokusebenza ndawonye, bese uqala kabusha ikhasimende ukuze lifunde isitoreji futhi.

Imikhiqizo emibili, imininingwane efanayo elahlekile

Amaseva e-OpenVPN adinga isitifiketi sekhasimende ngokuzenzakalelayo. Ukwengeza auth-user-pass kukhasimende kuthumela igama lomsebenzisi nephasiwedi, futhi ukuxhawulana kwe-TLS kusafuna isitifiketi, ngakho iphasiwedi iyodwa ayikwazi ukuqedela uxhumano ngaphansi kwe-verify-client-cert require. Iseva ingasethelwa ukuthi ingadingi lutho, okwenza iphasiwedi ibe ukuphela kwemininingwane yekhasimende futhi lokho ukuncipha kwangempela kwamandla. Iskripthi se-shell esingemuva kwe-auth-user-pass-verify singaqinisekisa imininingwane, futhi sidinga ukuthi ukusetshenziswa kweskripthi kuvunyelwe, okusenza sibe umklamo oyingozi kakhulu kune-backend yokuqinisekisa efanele.

Iphrofayela ethembele kuphela kuyiphasiwedi nayo incike kuzinketho ezicindezelwayo, zona ezincike ekutheni indlela yokudonsa ivunyelwe.

Ungalungisi isitifiketi esilahlekile ngokuvala izicheke

Isilingo siwukuthukulula ukuqinisekisa ukuze umyalezo unyamalale. Lokho kususa isilawuli ebesisebenza futhi kushiya uxhumano olungasafakazeli lokho olukushoyo. Uma igethiweyi isanda kushintsha impande yayo, landa kabusha iphakethe lekhasimende esikhundleni sokuhlela iphrofayela, ngoba iphakethe elidala lingase lisaphethe impande yangaphambili. Uma inketho yokuqinisekisa ngesitifiketi ingekho kuhleli lwephrofayela, kungenzeka ukuthi inguqulo ye-Windows efakiwe ayivezi leyo ndlela; buyekeza isistimu esikhundleni sokuhlela i-XML ngesandla.

Bhala ukuthi yisiphi isitoreji ebesinesitifiketi, yimuphi umsebenzisi osebenzise ikhasimende nokuthi ukhiye oyimfihlo ubukhona yini. Lezo zintathu zichaza cishe zonke izimo zalokhu kwehluleka.

Iphasiwedi ibilungile. Imininingwane indlela eyayiyidinga ngempela yayikwenye indawo.