I-WireGuard ithi ubude bokhiye wangasese abulungile: senzeni manje?

Umlayezo uthi ukhiye wangasese unobude obungalungile, futhi lawo magama akhomba kuqala ekubhaleni kwekhodi bese edlulela ku-cryptography. Okhiye be-WireGuard babhala amabhayithi angu-32 nge-base64, okuveza izinhlamvu ezingama-44 kuhlanganisa nokugcwalisa kokugcina, ngakho inani lobunye ubukhulu akulona ukhiye noma lingabonakala lingahleliwe kangakanani. Ukugcwalisa umucu kuze kube yilapho umhlaziyi uwamukela kukhiqiza inani elakheke kahle okungekho mphathiswa oyoke alibone.

Ngemuva kwaleli phutha kukhona imisebenzi emibili ehlukene: ukulungisa umbhalo wokhiye ovumelekile, nokushintsha ubunikazi ongenabo. Imiphumela yabo ihlukile, futhi enye yazo yenza olunye uhlangothi lungasebenzi.

Yini umhlaziyi ayilindele

Ukhiye we-WireGuard ungamabhayithi angu-32 ezinto zokhiye ku-base64 anokugcwalisa okujwayelekile, okuveza umucu oqinile wezinhlamvu ezingama-44. Amathuluzi ayenqaba konke okungahlukaniswa kahle kube amabhayithi angu-32, ngoba ijika elingaphansi lithatha i-scalar yamabhayithi angu-32 futhi akukho okunye. Amanani asesidlangalaleni nawangasese asebenzisa ukubhala okufanayo, ngakho umhlaziyi awakwazi ukusho ngokwefomethi kuphela ukuthi yikuphi okunamathisele. Lokho kungacaci kahle kubangela ingxenye yokudideka mayelana naleli phutha.

wg genkey | tee private.key | wg pubkey > public.key
base64 -d private.key | wc -c
wc -c private.key
wg show wg0 public-key

Uma inani lakho lihlukaniswa laba amabhayithi angu-32, ubude bulungile futhi isikhalazo sivela kwenye indawo yefayela. Uma lihlukaniswa laba okufushane, unento enqunyiwe hhayi inkinga yefomethi.

Umonakalo wefomethi noma into engalungile?

Umonakalo wefomethi unqwabelana emaphethelweni: izimpawu zokucaphuna ezingezwe yi-shell, ilebula efana ne-private_key ekhotshelwe kanye nenani, ukugqashuka komugqa okufakwe iklayenti lengxoxo, noma isikhala sokugcina esisinde ekunamathiseleni. Ngakunye kwalokhu kushintsha umucu ngaphandle kokushintsha amabhayithi, ngakho ukukususa kubuyisela ubunikazi bokuqala. Qhathanisa ifayela nerekhodi lokunikezela ngohlamvu ngohlamvu esikhundleni sokususa izimpawu zokubhala kuze kuthule umhlaziyi.

Into engalungile iyisimo esihlukile. Iphasiwedi, ukhiye wesitifiketi noma inani lasesidlangalaleni kungabonakala kuthembekile futhi kuhlukaniswe ngosayizi ongalungile. Akukho ukuhlanza okuguqula noma yikuphi kwalokhu kube i-scalar elindelwe umphathiswa. Leso simo sidinga ubunikazi obusha hhayi ukuhlela.

Ukhiye womphakathi endaweni yangasese

Ukudideka okuvame kakhulu ukunamathisela inani lomphakathi endaweni yangasese, noma okuphambene. Kokubili yi-base64 evumelekile yamabhayithi angu-32, ngakho ukuhlolwa kobude kuyadlula futhi ukuxhawulana kwezandla kwehluleka kamuva ngaphandle komlayezo owusizo. Ukhiye wangasese yi-scalar ekhiqiza lowo womphakathi, ngakho ungakuxazulula ngokuthola inani lomphakathi bese uliqhathanisa nalokho okuvunyelwe umphathiswa. Uma inani elitholiwe lingahambisani nerekhodi, uphethe ubunikazi obungalungile hhayi iphutha lokuthayipha.

Ukushintsha ukhiye wangasese weklayenti ngaphandle kokubuyekeza ukhiye womphakathi ogunyaziwe kolunye uhlangothi kubuye kudale ukungahambisani okufanayo, kanye nokudideka okwengeziwe kokuthi ifayela leklayenti ngokwalo manje libonakala livumelana nalo. Shintsha izinhlangothi zombili emsebenzini owodwa, kungenjalo umuntu olandelayo uzolungisa ingxenye engalungile.

Lungisa iphrofayela, bese ufakazela ukuxhawulana kwezandla

Lapho ukhiye usuhlukaniswa ngosayizi olungile futhi uhambisana nombhangqwana ogunyaziwe, umsebenzi osele yiiphrofayela nomzila. Imiyalo engezansi ikhiqiza umbhangqwana omusha lapho kudingeka, iqinisekisa usayizi ohlukanisiwe wokhiye okhona futhi ifunda inani lomphakathi elisetshenziswa ngempela isixhumanisi. Ungalokothi unamathisele inani langasese kuthikithi noma kusayithi yokuhlukanisa.

wg genkey | tee new.key | wg pubkey > new.pub
base64 -d private.key | wc -c
ip route get 10.60.9.5
wg show wg0 latest-handshakes

Ukuhlolwa kosayizi kuphendula ukuthi into inesimo sokhiye yini, futhi umbuzo womzila uphendula ukuthi iphakethe lingafika yini esixhumanisini. Umugqa wokuxhawulana kwezandla ohlala ungenalutho ngemva kokuba zombili izivivinyo zidlulile uthuthukisa ukuxilongwa ukuya ekupheleni komphathiswa nasemakhelini avunyelwe. Funda ukhiye womphakathi wesixhumanisi uma uqhathanisa nerekhodi lokunikezela okokugcina, ngoba iphrofayela endala egciniwe ingabonakala ilungile kuyilapho esebenzayo yehlukile].

Bhala ukuthi yiliphi inani olishintshile nokuthi ikhophi egunyaziwe ikuphi. Olandelayo ozothinta lo mphathiswa udinga ukwazi ukuthi yiluphi uhlangothi olushintshile.