Wanne Docker CA store ne gazawar proxy ke nuni zuwa gare shi?
Raba jawo hotuna, saukewar lokacin gini da buƙatun aikace-aikacen kwantena yayin amincewa da CA na bincike da aka ba da izini.
Ƙara CA na kamfani a cikin kwantena ba zai iya gyara gazawar jawo hoton wani abokin aiki ba. Jawo mai nasara kuma ba ya tabbatar da cewa aikace-aikacen da ke cikin hoton ya amince da sabis ɗin HTTPS da aka bincika.
| Aiki | Amincewar da za a bincika |
|---|---|
| Jawo hoto ta hanyar proxy na bincike na ƙungiyar | Mai masaukin ko yanayin Docker da ke yin jawan |
| Sauke lokacin ginin hoto | Yanayin gini da mai saukewarsa |
| Kira sabis ɗin HTTPS daga aikace-aikacen da ke gudana | Wurin ajiya na OS na hoton ko tsarin amincewar aikace-aikacen da kansa |
Bi kuskuren har zuwa tsarin da ke tabbatar da takwaransa, sannan tabbatar da mai bayarwa, sunan masauki da matakin musafaha. Sabis ɗin bincike da aka ba da izini na iya sanya hannu kan takardar shaidar manufa da CA na ƙungiyar. Gazawar TLS a mai sauraron proxy na HTTPS ba lallai ba ne gazawar takardar shaidar manufar da aka isa ta hanyar sa. Shigar da IP na proxy ba ya samar da kayan amincewa.
Shigar da takardar shaidar mai bayarwa ta jama'a da aka amince ta hanyar hanyar da aka tallafa ta mai masauki, rarraba hoto ko aikace-aikacen da ya dace. Jagorar CA na Docker ta shafi wuraren ajiya na mai masauki da kwantena, amma hanyar CentOS ba umarni ba ce mai ɗaukuwa ga Debian ko Windows. Ƙara zuwa ga haɗaɗɗiyar da aka ƙirƙira na iya sokewa ta hanyar sabuntawa; aikace-aikacen Java ko wani abokin ciniki da ke da nasa tsarin CA na iya yin watsi da haɗaɗɗiyar OS gaba ɗaya.
Don dorewar amincewar aikace-aikace, sanya canjin a cikin hanyar da aka amince ta hoto ko tsarin aikace-aikacen. Gyaran mu'amala a kwantena ɗaya da ke gudana ba zai kasance a cikin kwantena na gaba da aka ƙirƙira daga hoton ba.
Rarraba kawai takardar shaidar amincewar jama'a da ake buƙata ta hanyar da aka ba da izini. Kada ka taɓa sanya maɓallin sirri na CA a cikin hoto kuma kada ka ɗauki buƙatar shigar da tushe daga wani proxy na jama'a da ba a sani ba a matsayin saitin yau da kullum. Ci gaba da kunna tabbatar da sunan masauki da sarkar bayan an daidaita wurin ajiyar da aka yi niyya.