Iphutha lokubethela okubuthakathaka kwe-vpnc: inqubomgomo yesango noma ukulungiswa kwedesktop?

Izilungiso ezimbili zibonakala zishesha ngokulinganayo lapho uxhumano lwe-vpnc oludala lwenqaba ukuphakama: ukudlulisa ifulegi lokubethela okubuthakathaka elidala, noma ukufaka umbhalo wokugoqa ozokwengeza okwakho. Azilingani, ngoba elinye lishintsha inqubomgomo yephrofayili eyodwa kanti elinye lishintsha ukuziphatha kwazo zonke izinhlelo ezishaya leyo ndlela. Umbuzo wokuqala ukuthi ingabe isango lisahlinzeka ngesiphakamiso esibuthakathaka, kanti owesibili ukuthi ubani ogunyaziwe ukusamukela. Konke okunye kulandela kulezi zimpendulo ezimbili.

Izilungiso ezimbili ezinomthelela ohluke kakhulu

Ushintsho lwezinga lephrofayili luthinta uxhumano olulodwa, umnikazi oyedwa nosuku lokuphelelwa yisikhathi olulodwa. Ukushintsha ifayela le-binary elifakiwe kuthinta yonke i-frontend emshinini, kuhlanganise ne-applet yedesktop esetshenziswa uzakwethu kwiphrofayili yesango ehluke ngokuphelele. Isigoqo futhi sifihla ushintsho kunoma ubani ozokhipha amaphutha kusibungu ngemuva kwezinyanga eziyisithupha.

Ukuqinisekiswa kwephakheji yisisulu sokuqala: ifayela eliku-/usr/sbin/vpnc elingasahambisani nephakheji yalo liguqula isibuyekezo sokuphepha esijwayelekile sibe uphenyo. Khona-ke izibuyekezo zizobhala phezu kwesigoqo buthule noma zenqabe ukusetshenziswa, kuye ngokuthi umphathi wephakheji ubaphatha kanjani amafayela ashintshiwe. Akukho mphumela uvela kulogi yoxhumano, yingakho indlela yesigoqo ihlala ikhanga kuze kube yisigameko sokuqala. Umugqa owodwa kuphrofayili utholakala futhi ususwe kalula kakhulu kunefayela le-binary okungekho muntu okhumbulayo ukuthi walishintsha.

Ushintsho oluphelelwe yisikhathi lwenzani ngempela

Incwadi ye-vpnc imaka inketho ye-DES eyodwa njengephelelwe yisikhathi ivuna isilungiselelo sokubethela okubuthakathaka, futhi ibhala inketho ehlukile evumela ukungabikho nhlobo kokubethela kwedatha yokuhamba. Lezi ziyizivumelwano ezihlukile ezinemiphumela ehlukile. Akukho kuzo okwenza isango lesimanjemanje lixoxisane ngokuthile elingasakuhlinzeki.

Funda isigaba sokwehluleka ngaphambi kokukhetha ukulungiswa. Isiphakamiso esenqatshiwe nephasiwedi enqatshiwe kukhiqiza imilayezo ye-frontend efanayo kodwa ubufakazi obuhluke ngokuphelele.

Ukuhlukile okulinganiselwe kufanele kube kuphi

Uma inhlangano yamukela ngamabomu uzakwethu omdala isikhathi esilinganiselwe, ukuhlukile kufanele kube kuphrofayili yalowo zakwethu, kunomnikazi, usuku lokubuyekeza nendlela yokufuduka eya kuphrothokholi esekelwayo. Ukukugcina ngaphandle kwendlela yomhlaba wonke yiyo yonke incazelo yokukubiza ngokuthi kulinganiselwe.

Cela umnikazi wesango aqinisekise ukuthi yimaphi ama-algorithm uzakwethu asawanikezayo nokuthi yini eyithathayo indawo. Ifulegi leklayenti alikwazi ukulungisa isiphakamiso iseva engasasithumeli, futhi ukufuduka kweseva okungekho muntu okuhlelele kuzophila isikhathi eside kunesixazululo sesikhashana. Faka usuku lokubuyekeza kuthikithi elifanayo nokuhlukile, ukuze ukuvumelana kuphele esikhundleni sokuba njalo.

Hlola izingxoxo, hhayi isithonjana esiluhlaza kuphela

Qoqa ubufakazi obukhombisa isigaba hhayi umoya wengxoxo. Imiyalo engezansi yeyokufunda kuphela, futhi emibili yokuqala ikhombisa ukuthi yikuphi ukucushwa nenguqulo okusebenzayo ngempela.

vpnc --version
vpnc --print-config /etc/vpnc/legacy.conf
dpkg -V vpnc
grep -n -E 'weak|1des|no-encryption' /etc/vpnc/legacy.conf

Umyalo wesithathu ubika amafayela angeñasahambisani nephakheji, futhi yileyo ndlela isigoqo esikhohliwe esizazisa ngayo. Owesine ukhombisa izivumelwano eziphathwe yiphrofayili, ukuze ukuhlukile kungasakazeki buthule kuphrofayili yesibili ngokusebenzisa ifayela elikopishiwe. Sebenzisa kokubili ngaphambi nangemuva koshintsho, futhi gcina okukhiphiwe kanye nephrofayili yoxhumano hhayi efasiteleni lengxoxo.

Gcina okukhiphiwe kokukhipha amaphutha ngaphandle kwamathikithi kuze kube umuntu uyikufundile, ngoba incwadi ixwayisa ukuthi izinga eliphezulu lokukhipha amaphutha liphonsa idatha yokuqinisekisa kuhlanganise namaphasiwedi. Umbandela wokwamukela uyisivumelwano esigunyaziwe nesisekelwayo phakathi kweklayenti nesango, hhayi into yemenyu egcina iba luhlaza. Uma uzakwethu enikeza kuphela i-algorithm eyephukile, umphumela othembekile ukuhlukile okunosuku lokuphela noma iphrothokholi esikhundleni, futhi leso sinqumo singesomnikazi wesango. Ukurekhoda isinqumo umehluko phakathi kokuhlukile okulawulwayo nokushintshwa kwenqubomgomo okungazelelwe.