Ukulandelela ukwehluleka kweproxy ezihlolweni zezitifiketi ze-CRL ne-OCSP

Isicelo sewebhusayithi singafinyelela iproxy yaso futhi sehluleke ngoba ukuqinisekiswa kwesitifiketi kudinga esinye isicelo senethiwekhi. Ukutholwa kwe-CRL noma i-OCSP kungase kwenziwe yingxenye yephulatifomu ene-akhawunti nomgomo weproxy ohlukile kuneklayenti le-HTTP lohlelo.

Qala ngephutha eliqondile lomucu. Revoked kusho okunye ngaphandle kokuthi akukwazeki ukuthola ulwazi lwamanje lokuhoxiswa. Ukuphelelwa yisikhathi nomkhiphi ongathembekile kuyizinye izinkinga futhi. Ukwehluleka kokutholwa kuphela okudinga ukulandelela umzila ongekho oya ku-URL yesimo.

Ngalokho kwehluleka, khomba izinto ezintathu kanyekanye: i-URL etholwayo, ingxenye eyenza ukutholwa kanye nobunikazi benqubo yayo. Ukuthi isiphequluli sivula i-URL ngempumelelo ngaphansi kwe-akhawunti yakho yokusebenzisana akufakazi ukuthi isevisi ingaziphawula kuproxy efanayo.

Uma ingxenye ekhonjiwe isebenzisa i-WinHTTP, hlola umgomo osebenza kuyo. Ukulungiselelwa kweproxy okungaguquki nokuhlolwa kweproxy okuzenzakalelayo nge-URL ngayinye kuyizindlela ezihlukene. Sebenzisa ukulungiselelwa okusekelwayo kwe-akhawunti ehlosiwe; ukukopisha izilungiselelo zesiphequluli noma ukushintsha indawo yokusebenza engahlobene kungase kushiye ukutholwa kwangempela kungathintwanga.

Ku-.NET, i-UrlRetrievalTimeout kumgomo womucu ilawula ukulinda ukuqinisekiswa ku-inthanethi noma ukutholwa kwe-CRL. Ukwengeza isikhathi sokuphendula se-HTTP esijwayelekile akukwandisi leso sikhathi esifanayo, futhi ukwengeza isikhathi sokutholwa akunikezi ubufakazi beproxy noma umzila.

Iproxy ye-HTTPS ingenza lokhu kuncika kubonakale ngisho ngaphambi kwe-TLS yendawo ekuyiwa kuyo: ukuthembela kuxhumano lweproxy kungase kudinga ukutholwa kokuhoxiswa. Buyisela ukufinyelela okusekelwayo kokutholwa kanye nokuhleleka kokuthembela kuleso sigaba. Ukukhubeza ukuhlolwa kokuhoxiswa kushintsha umgomo wesitifiketi; akubuyiseli ukutholwa okwehlulekile.