Kungani i-cryptoapicert yehluleka ku-OpenVPN 3 ne-Connect ku-Windows

Ukopisha iphrofayili ye-OpenVPN 2 esebenzayo kuklayenti elisha le-Windows, futhi isitifiketi iklayenti elidala elalizitholela sona asisanikezwa. Umugqa owenza lokho kwenzeke isikhethi esikhethekile se-Windows esingeseklayenti le-Community 2, futhi uhlelo olusha wuhlelo olunye olunomzila ohlukile wemibhalo yobufakazi. Iphrofayili ayikashintshi ngaphandle kwalowo mugqa owodwa, futhi yikho kanye okwenza umehluko ube nzima ukuwubona.

Izingqimba ezintathu zixutshwa kuleyo mbiko: iklayenti le-Community, i-labhorethi eyinhloko kanye ne-frontend efakwe othile. Kukodwa kuphela kuzo okwake kwaqonda lo myalelo.

Into eshiwo yilokhu kukhetha lapho ikhona

Kuklayenti le-Community OpenVPN 2 ku-Windows, i-cryptoapicert isho isitifiketi iklayenti okufanele sisithole esitolo sezitifiketi se-Windows hhayi efayeleni. Lokhu kuwukukhululeka okukhethekile kwe-Windows, futhi kuyasebenza ngoba lelo klayenti liyazi ukubala isitolo futhi linikeze ukhiye ovelayo ku-TLS stack yalo. Ngakho umyalelo uyingxenye yolimi lokuhlela lwalelo klayenti, hhayi isici sephrothokholi ye-OpenVPN. Akukho lutho efomini lokudlulisa oluyithwalayo.

Kopisha umugqa ofanayo kolunye uhlelo futhi usukopishe igama uhlelo olusha olungase lulihlaziye, lulishaye indiva noma lulwale. Umyalelo awusona isici sephrothokholi, futhi lo awusona ngisho isici sakho konke iklayenti elikhuluma OpenVPN.

Yini i-labhorethi eyinhloko enikeza yona esikhundleni

I-OpenVPN 3 Core iyilabhorethi ezinye izinhlelo ezifaka ngaphakathi, futhi isebenza ngemibhalo yobufakazi yangaphandle nge-API hhayi ngokusesha esitolo. Uhlelo olufakayo lunikeza uchungechunge lwezitifiketi bese lucela ilabhorethi ukuba isayine ngokhiye wangaphandle, futhi ilabhorethi ibiza uhlelo emuva ukuze yenze lokho. Lokhu kuwumklamo ojwayelekile kakhulu, futhi kusho ukuthi i-frontend inquma ukuthi yibaphi abahlinzeki abakhona. Ekucubunguleni kwayo imikhombandlela yelabhorethi, i-cryptoapicert ivela phakathi kwemiyalelo engakasetshenziswa, okuhambisana naleyo mgawanyo womthwalo wemfanelo.

Ukuba khona kwalezo zingcingo zokubuyela emuva akusho ukuthi uhlelo oluthile olupakishiwe lubala isitolo somuntu siqu somsebenzisi wamanje, lusekela umhlinzeki othile wokhiye noma lungaqedela isicelo sekhadi elihlakaniphile. Lezo ziyizici ze-frontend, futhi ngayinye kufanele ibhalwe yi-frontend.

Yini i-frontend ye-Windows eyenza yona esikhundleni

I-OpenVPN Connect ithatha enye indlela: umsebenzisi ungenisa ifayela le-PKCS#12 elinesitifiketi nokhiye walo oyimfihlo ku-OpenVPN Certificate Store eyakhelwe leyo njongo, bese enikeza isitifiketi sangaphandle iphrofayili. Leli yisinyathelo sokungenisa esenziwe ngamabomu, hhayi ukutholwa okuzenzakalelayo kwalokho okwenzeka kube sekusitolo somuntu siqu. Umehluko ubalulekile lapho othile ecabanga ukuthi isitifiketi esifakelwe enye injongo sizovele sibonakale ohlwini lweklayenti.

Ukungenisa kunomphumela futhi kunqubomgomo yokhiye, ngoba ukuthumela ukhiye efayeleni le-P12 yikho kanye ukhiye ongathunyelwa okuhloswe ukukuvimbela. Lona umbuzo wenqubomgomo hhayi wokuhlela, futhi ufanele impendulo ngaphambi kokuba othile azame ukungenisa.

Khetha indlela ehambisana nenqubomgomo yokhiye

Uma imibhalo yobufakazi ithunyelwa kalula futhi inqubomgomo ivumela ukungenisa okubhaliwe, sebenzisa inqubo yokubhalisa evikelwe yenhlangano futhi ugcine i-P12 yesikhashana nemfihlo yayo kude namarekhodi nezicripti. Uma ukhiye kungafanele ukuphuma ekhadini elihlakaniphile noma kumhlinzeki ovikelwe, khetha inhlanganisela yeklayenti nomhlinzeki esekela ngokucacile leso sidingo, noma thola isiqinisekiso kumthengisi ngenguqulo oyifakile. Azikho izigaba zombili ezikhona njengendlela yokugwema enye.

Ukufaka umyalelo futhi kuphrofayili akunikezi ukuxhumana uhlelo olungenakho. Nenguqulo entsha yeklayenti ayikwengezi ngempela, ngoba ikhono lingelomklamo we-frontend uqobo.

Ngemva kokuba ukhiye wasekhaya usebenza, iseva isahlola ubunikazi besitifiketi, uchungechunge kanye nemvume. Ukhiye wasekhaya osebenzisekayo kanye nobunikazi be-VPN obamukelekile kuyimiphumela ehlukene, futhi ukuzigcina zihlukene yikho okuvimbela umkhawulo we-frontend ukuba ube inqubomgomo yezitifiketi ebuthakathaka.