Yiluphi uhlelo lwephakheji ye-Easy-RSA olwasetshenziswa yileso sifundo?

Isifundo sithi uhlele i-vars kusikhombisi se-Easy-RSA, futhi isikhombisi kumshini wakho asinayo imibhalo enjalo. Ngokuvamile lokhu kungukungezwani kwesizukulwane, hhayi iphakheji ephukile. I-Easy-RSA 2 yayigcina ifayela le-vars eceleni kwabasizi be-shell njenge-build-key; i-Easy-RSA 3 inikeza umyalo owodwa we-easyrsa futhi ifunda ukuhlelwa kusuka kuthempulethi kanye nezinketho zomugqa womyalo. Thola ukuthi iyiphi onayo ngaphambi kokukopisha noma yini kusuka kumhlahlandlela.

Yenza lezi zivivinyo ngokulandelana, ngoba ngayinye inciphisa elandelayo.

1. Bhala uhlu lwalokho okufakiwe

Kusistimu yomndeni wakwa-Debian, buza umphathi wamaphakheji ukuthi yimaphi amafayela awabhalisile ngempela:

dpkg-query -L easy-rsa

Uhlu lwephakheji ye-Debian yamanje lufaka i-make-cadir, uhlelo lwe-easyrsa, ithempulethi yokuhlelwa kwe-OpenSSL kanye ne-vars.example. Lokho kukutshela ukuthi lokhu kusatshalaliswa kwathumela ini. Akukutsheli ukuthi okunye ukusatshalaliswa noma ingobo yomsuka ye-tar yahlela kanjani isizukulwane esifanayo, ngakho funda inguqulo ngaphambi kokuhumusha izindlela. Uma okukhiphayo kungabonisi neze i-make-cadir, mhlawumbe ubheka esinye isizukulwane sokupakisha hhayi ukufakwa okuphukile.

I-easyrsa --version iyindlela emfushane yokwazi ukuthi ufunda ngasiphi isizukulwane, futhi kufanelekile ukuyisebenzisa ngaphambi kwanoma yimuphi omunye umyalo kumhlahlandlela.

2. Hlukanisa isizukulwane 2 kusizukulwane 3

Isizukulwane 2 sathumela abasizi be-shell kanye nefayela le-vars obekufanele ulihlele. Isizukulwane 3 sithumela umyalo owodwa we-easyrsa onemiyalo engaphansi, futhi ifunda ukuhlelwa kusuka kuthempulethi kanye nezinketho ezicacile.

Lowo mehluko uchaza iningi lemibiko yefayela elingatholakalanga ngalesi sihloko. Umhlahlandlela obhalelwe u-2 uthi wenze i-source vars bese usebenzisa i-build-key, kanti ukufakwa kwe-3 akukho kokubili. Ukujaha ifayela elahlekile kusuka kukhophi yomunye umshini yikho okwenza abantu bagcine besebenzisa izizukulwane ezimbili kusikhombisi esisodwa se-PKI.

3. Hlukanisa isikhombisi sohlelo endaweni yokusebenza ye-PKI

Isikhombisi sohlelo esifakiwe sifundwa kuphela ngokwakhiwa. I-PKI yakho iyisikhombisi esihlukile esigcina i-CA, izitifiketi ezikhishiwe kanye nokhiye abayimfihlo, futhi yiso esiphethe izimvume okufanele uzilungise kahle.

Uma isiphathimandla sivele sikhona, thola isitifiketi saso esisesidlangalaleni bese uqinisekisa isimo saso ngaphambi kokuthinta noma yini. Ungaqali okubuyisela esikhundleni, futhi ungabhaleli phezu kwenkomba ngenxa yokuthi isifundo sisebenzisa enye indlela. Ukukopisha amathempulethi asesidlangalaleni akunangozi, kodwa ukukopisha ukhiye oyimfihlo womkhishi akunjalo, futhi ku-shell lezi zenzo ezimbili zibukeka zicishe zifane.

4. Hlola izingcaphuno ngaphambi kokujaha indlela

Umbhalo okopishwe ekhasini elihleliwe uvamise ukuza nezimpawu zokucaphuna zokubhala. I-Bash ithatha kuphela izihlukanisi zayo ze-ASCII ezibhaliwe njengezingcaphuno, ngakho indlela esongwe ngezingcaphuno ezigobile iyaphenduka ibe igama lefayela elingekho.

printf '%s\n' "$EASY_RSA"

Lokhu kuphrinta inani lokuhluka okukodwa esikhundleni sendawo yonke, okuyikho okufunayo lapho umbuzo uwukuthi inani liqukethe izinhlamvu ezingavamile noma izikhala. Ungacabangi ukuthi i-EASY_RSA isakhetha ukuhlelwa kusizukulwane 3; esikhundleni salokho sebenzisa inketho yesikhombisi se-PKI ebhaliwe yenguqulo yakho.

5. Misa ngaphambi kokuqala kabusha noma yini

Uma isizukulwane sohlelo, izindlela ezifakiwe kanye nendima yendawo yokusebenza zivumelana, iphutha elisele cishe liyinkinga yezimvume noma yesimo esingekho, futhi lifanele ukuxilongwa kwalo uqobo esikhundleni somunye umzila wokugwema.

Ukufaka iphakheji egciniwe kusuka kwenye inguqulo, ukukopisha izikhombisi ngokuphindaphindiwe noma ukwakha amarekhodi omkhishi angenalutho kufihla ukungezwani kwasekuqaleni futhi kunezela okwesibili. Bhala phansi inguqulo, indlela kanye nephutha eliqondile ngaphambi kokushintsha noma yini. Lezi zintathu zenza isinyathelo esilandelayo sibe yisinqumo esikhundleni somunye umcabango, futhi zivimbela umuntu olandelayo ekuphindeni ukusesha.