Iwashi ledivayisi elingalungile lingamisa i-VPN: hlola isikhathi kuqala

I-VPN iyeka ukuxhuma, ilogi ikhuluma ngesitifiketi, futhi umcabango wokuqala ukushintsha iphrofayela. Iwashi ledivayisi elingalungile ngamaminithi noma ngamahora likhiqiza kanye lelo phutha, ngoba ukusebenza kwesitifiketi kuhlolwa ngokumelene nesikhathi sendawo. Ilebulu yesigaba sesikhathi esikrinini akuyona inkinga; isikhathi esingaphansi siyona inkinga. Hlola iwashi ngaphambi kokuthinta noma yini yesitifiketi.

Iphutha libukeka njengenkinga yesitifiketi, hhayi inkinga yewashi

Ukwaxoxa kwe-TLS kwehluleka lapho isitifiketi sohlangothi olunye sihamba ngaphandle kwewindi lokusebenza kwaso ngokumelene newashi lomhloli. Lokho kuhlola kwenzeka kuklayenti, ngakho iwashi leklayenti elingalungile lenqaba isitifiketi esihle ngokuphelele. Umbhalo wephutha ubiza isitifiketi, yingakho abantu besishintsha bese bephinda babone ukwehluleka okufanayo. Iwashi iwukucabanga okushibhile futhi kufanele kuhlolwe kuqala.

Iwashi elihamba phambi kwesikhathi sangempela lenqaba isitifiketi samanje njengesiphelelwe yisikhathi; iwashi elisemuva lenqaba elisha njengelingakasebenzi. Yomibila imiyalezo ikhomba izinsuku, futhi yomibila ikhiqizwa ngaphandle kokuxhumana neziphathimandla zesitifiketi. Yilokho uphawu: ukuphela kwangempela kuthinta wonke amaklayenti, kuyilapho inkinga yewashi ithinta kuphela lowo mshini owodwa onesikhathi esingalungile.

Funda isikhathi, bese ufunda isitifiketi

Phrinta iwashi nge-UTC kanye nezinsuku zesitifiketi uqobo ngaphambi kokushintsha noma yini. Ukuqhathanisa izikhathi ezimbili eziphelele kususa umbuzo wesigaba sesikhathi kuphelele kuphenyelo. Uma iwindi lesitifiketi liqukethe isikhathi samanje, isitifiketi akusona ukwehluleka kwakho.

date -u
timedatectl
openssl s_client -connect vpn.example.com:443 -servername vpn.example.com </dev/null 2>/dev/null | openssl x509 -noout -dates

Uma iwashi lendawo lingalungile, hlola ukuthi livumelanisiwe yini nokuthi navini. Umshini ovale ukuvumelanisa, noma onesizinda sesikhathi angakwazi ukusifinyelela, uyaduka kuze kube khona okwehlulekayo. Umphumela wesimo ubiza umthombo kanye nokulungiswa kokugcina okuphumelele, okuwusizo ukudlula ukwehluka kwamanje kuphela. Ukwehluka okukhulu ngaphandle komthombo ohleliwe kuyinkinga ehlukile kunokwehluka okuncane ngokumelene nomthombo osebenzayo.

timedatectl timesync-status
chronyc tracking

Yima uma isitifiketi siphelelwe yisikhathi ngempela kuwo wonke amaklayenti. Khona-ke iwashi lilungile futhi isitifiketi sidinga ukuvuselelwa, hhayi ukulungiswa.

Amakhodi okungena ehluleka ngesizathu esixhunyiwe kodwa esihlukile

Amaphasiwedi okusetshenziswa kanye asuselwa esikhathini athola inani lawo esitebhisini sesikhathi samanje, ngokuvamile imizuzwana engamashumi amathathu. Idivayisi enewashi eliduke ngaphezu kwesitebhisi esisodwa noma ezimbili ikhiqiza amakhodi angewona azokwamukelwa iseva, ngisho nomsebenzisi ebhale izinombolo ezifanele. Iphutha libukeka njengephasiwedi engalungile, okuholela abantu emjikelezweni wokusetha kabusha ongenakho ukulungisa iwashi.

Thola ukuthi iyiphi ingxenye enqabe umzamo, ngoba iklayenti le-VPN, isango kanye nomhlinzeki wobunikazi babika izigaba ezahlukene. Uma ikhodi yenqatshwa kodwa iphasiwedi yamukelwa, i-akhawunti cishe ilungile futhi iwashi liyisola. Uma kokubili kunqatshwa, i-akhawunti ingase iboshiwe futhi iwashi liwumkhondo ongamanga. Landela isiqondiso somhlinzeki sokubuyisela esikhundleni sokugunyaza izicelo ongazange uzisungule.

Ungabuyiseli iwashi emuva ukuze ikhodi isebenze. Lokho kufihla imbangela futhi kuphula ukuhlola okulandelayo okususelwa esikhathini.

Lungisa umthombo, hhayi ihora elibonisiwe

Ukuvumelanisa kuyisevisi yenethiwekhi, futhi umhubhe ungashintsha ukuthi umthombo wesikhathi uyafinyeleleka yini. Umthombo wenkampani ungadinga umhubhe, kuyilapho umthombo womphakathi ungavinjwa inqubomgomo. Ukuphequlula kungasebenza kuyilapho umzila wesevisi yesikhathi uqobo uhluleka, yingakho lokhu kuncika kulula ukukushiya. NTP iwumthetho oyisisekelo osemva kokulungiswa, futhi udinga umzila wawo njenganoma iyiphi enye isevisi.

sudo systemctl status systemd-timesyncd
sudo chronyc sources -v
ping -c1 203.0.113.20

Kuninkinga futhi yokulandelana kokuqalisa: iwashi elingalungile kakhulu lingavimbela umhubhe oqinisekisiwe, futhi umthombo wesikhathi osebenza wodwa ungaba ngemva kwalowo mhubhe. Iqembu eliphethwe lidinga inqubo ebhaliwe yaleso simo, futhi ukweqa ukuqinisekiswa kwesitifiketi akusona inqubo enjalo. Kudivayisi lomuntu siqu, sebenzisa izilawuli zesikhathi zesistimu yokusebenza futhi uthole ukuthi kungani iwashi lilahleka ngemva kokucisha noma kokubuyisela. Umshini odlulayo ekulweni ngakunye kokuqalisa unenkinga yehadiwe noma yokuhlelwa, hhayi inkinga ye-VPN.

Ngemva kokulungisa, phinda uzame ukuxhumana kwasekuqaleni futhi ufunde iphutha elisha ngokwehlukile. Ubunikazi besiphakamiso obubi, isitifiketi esiphelelwe yisikhathi ngempela kanye ne-akhawunti enqatshiwe kungukwehluleka okuthathu okuhlukene, futhi ukukuhlanganisa yikho okwenza ukulungiswa kwewashi okulula kube yisonto lokushintsha amaphrofayela.