Isifaki sephothali ye-VPN: iphakethe, iphrofayela noma ukwakhiwa kabusha?

Inkinobho yokulanda yephothali ye-VPN ibuyisela ifayela elilodwa ncamashi, futhi lelo fayela lingaba izinto ezimbili ezihluke kakhulu: isifaki esilungile somthengisi esinephrofayela yokuhlela ehamba nalo, noma ukwakhiwa okwenziwe yinhlangano ngokwayo. Ikhasi libukeka lifana kuzo zombili izimo, ngakho inkinobho ayikwazi ukukutshela ukuthi unakho okukuphi. Ngemuva kwayo kunezinto ezintathu ezibuzwayo — ubani oshicilele ifayela elisebenzayo, yikuphi ukuhlela okubhalwa ukufakwa, futhi ubani oyilungisayo lapho kufika ukukhishwa okulandelayo kweklayenti. Uphendula okokuqala ngemethadatha yento, okwesibili ngokuqukethwe kwephakethe, futhi okwesithathu kuphela ngeqembu eliphethe ukuthunyelwa.

Ingidi yesiphequluli imboza ukudluliswa, hhayi into ngokwayo.

Yini indawo yokulanda eyibuyisela ngempela

Iningi lamaphothali linikeza isicelo sokulanda kusiphetheli esincane esisakaza ifayela eligciniwe noma esihlanganisa ifayela ngokushesha, bese sibeka igama lefayela nohlobo lokuqukethwe ngaphambi kokuba impendulo iphume. Okufikayo isiqukathi: i-MSI, i-PKG, i-DEB noma i-RPM, noma isembozo esizikhululayo esizungeze esisodwa sazo. Ngaphakathi kunebhinari yeklayenti, futhi akukho lutho egameni lefayela elisho ngokuthembekile ukuthi leyo bhinari ivela kumthengisi noma emgqeni wangaphakathi wokwakha. Ifayela elibizwa nge-client-setup.exe libhala isinqumo sokuqamba amagama, hhayi iqiniso lomdabu.

Qhathanisa amabhayithi alandiwe nesibalo sokuqinisekisa esishicilelwe umthengisi. Ukungafani akufakazeli ububi; kufakazela ukuthi ifayela akulona ukwakhiwa komthengisi, futhi lowo wo umahluko ofanele ukuthathwa kwesinyathelo.

Iphrofayela ingena kuphi eklayentini

Izilungiselelo ezigcwalisiwe ngaphambili ngokuvamile zihamba njengefayela elihlukile elikopishwa yisifaki endleleni yomsebenzisi ngamunye noma yomshini ngamunye: iphrofayela ye-JSON noma ye-XML ku-Windows, iphrofayela yokuhlela ku-macOS, ingxenye engaphansi kwe /etc ku-Linux. Amanani akulelo fayela — amagama abasingathi besango, ama-ankile okuthemba, ngezinye izikhathi izinto zokubhalisa — aba yizinto ezizenzakalelayo zeklayenti ekuqalisweni kokuqala. Yingakho ukulanda okukodwa kungathwala izimfihlo kanye nekhodi.

Buza ukuthi indlela yokuthuthukisa yenza ini ngephrofayela. Kuye ngokupakishwa, ingase iphile ekubuyekezweni kweklayenti, isuswe yikho, noma ihluleke ekuqinisekiseni isikimu kunguqulo entsha.

Yini uhlu lwesiginesha olungakufakazeli

Ukusayina kwekhodi kubopha ubunikazi bomshicileli ku-hash yefayela, futhi ku-Windows isigxivizo sesikhathi se-Authenticode sivumela isiginesha ukuba siphile isikhathi eside kunesitifiketi esisidalile. Umphumela ovumelekile uphendula imibuzo emibili: yimuphi umshicileli osayine lawa mabhayithi, nokuthi ashintshile yini ngemuva kwalokho. Awubali izinsiza zesifaki, imibhalo yerejista noma izishayeli ezifakiwe, futhi awunqumi ukuthi lowo mshicileli kufanele ethenjwe lapha yini. Idokhumenti ye- Authenticode yakwa-Microsoft ichaza indlela futhi icacile ngalo mbubane omncane.

Ukuqinisekiswa kwephothali kuphendula umbuzo wesithathu: ukuthi isikhathi sokuxhumana safinyelela iseva ebesihloselwe. Izivivinyo ezintathu ezihlukile, izindlela ezintathu zokwehluleka ezihlukile.

Qinisekisa into ngaphambi kokuba noma ubani ayisebenzise

Beka ifayela emshinini ohlukanisiwe futhi ufunde imethadatha yalo ngaphambi kokwenza noma yini. Lezi ziyalo ziphendula umbuzo womshicileli ezinkundleni ezintathu eziyinhloko.

# Windows PowerShell
Get-AuthenticodeSignature .\client-setup.exe | Format-List Status, SignerCertificate, TimeStamperCertificate

# macOS
pkgutil --check-signature ./Client.pkg
codesign -dv --verbose=4 /Applications/Client.app

# Debian/Ubuntu
dpkg-deb -I ./client_amd64.deb
sha256sum ./client_amd64.deb

Funda isihloko somsayini hhayi igama lesimo kuphela. Ukuthi isiphathimandla sesitifiketi sangaphakathi sisayine ukwakhiwa kwangaphakathi kulindelekile; isitifiketi esifanayo kwiphakethe elithi ukukhishwa komthengisi akulindelekile.

Kumaphakethe anephrofayela kuphela, vula ingobo yomlando futhi ubheke wonke igama lomsingathi nekhiwe elifakiwe njengedatha okufanele kubalwe. Uma iphrofayela iqukethe into engasetshenziswa futhi, ukusatshalaliswa ngephothali kuyenza ibe yimfihlo eyabiwe enohlelo lokuthunyelwa.

Ukunquma ubunikazi ngaphambi kokuthunyelwa

Ngemuva kombuzo wokugcina akukho ziyalo. Thola ukuthi ubani obuyekeza into lapho umthengisi ethumela iklayenti elisha, ubani ophethe ukhiye wokusayina wokwakhiwa kwangaphakathi, nokuthi iphrofayela ishintshwa kanjani lapho indawo yokugcina ihamba. Bhala lawo magama eduze kwesixhumanisi sokulanda.

Uma kungekho muntu ophethe leyo mpendulo, ukulanda kuyisiteshi sokusabalalisa esingenayo inkontileka yokunakekela, futhi lokho yikutholakele okufanele kubikwe.