Luluphi uhlangothi lwe-proxy yokuhlola olwenqaba isitifiketi?

Iklayenti lithemba i-proxy yokuhlola evunyiwe. Noma kunjalo isicelo siyahluleka ngenxa yephutha lesitifiketi. Womabili amaqiniso angaba yiqiniso: ley proxy inobunye ubudlelwano be-TLS okufanele buqinisekiswe.

client -- TLS to approved intermediary -- proxy -- TLS to website -- destination

Ekusetshenzisweni kokungena phakathi, umlamuli uqeda i-TLS yeklayenti futhi wakhe olwakhe uxhumano phambili. Iklayenti lingasamukela isitifiketi esethulwa ohlangothini lwaso kuyilapho i-proxy inqaba isitifiketi esisithola kuwebhusayithi.

Funda iphutha lomqinisekisi

Thola ukuthi iyiphi inqubo ebike ngohlu noma igama lomsingathi elihlulekile. Ikhasi lephutha elenziwe yi-proxy lingafinyelela iklayenti ngempumelelo ngoxhumano oluvumelekile. Ukushintsha kabusha ifayela le-CA leklayenti akukubuyekezi ukucushwa kokuthembela okuphezulu kwe-proxy.

Isibonelo, i-Mitmproxy ibhala izinketho ezihlukene zokuthembela okuphezulu, kuhlanganise ne-ssl_verify_upstream_trusted_ca. Umphathi ofanele angakha ukuthembela okuvunyiwe kwesevisi ephezulu ngenkathi egcina ukuqinisekisa. Omunye umkhiqizo we-proxy udinga isixhumanisi sawo esifanele.

Hlola futhi igama langempela lendawo ekuyiwa kuyo kanye nohlu. Isevisi yangasese engenaso isitifiketi esiphakathi, isitifiketi esiphelelwe yisikhathi kanye nomkhiphi wangasese ongaziwa kudinga ukulungiswa okuhlukene. Ukukhishwa okuhlosiwe kwesevisi eyodwa yangasese akufanele kube ukwamukelwa komhlaba wonke kwazo zonke izitifiketi ngokuthula.

Ithubhu elijwayelekile le-CONNECT lihlukile

Ithubhu lokudlulisa elingabonakali alihlukanisi i-TLS yendawo ekuyiwa kuyo ngale ndlela. Ngokuvamile uhlelo lwalo ngokwalo luxoxa futhi luqinisekise leyo seshini ye-TLS yokuphela kuya ekupheleni. Qala ngokuthola ukuthi ukungena kuyingxenye yomzila ngempela yini, esikhundleni sokusebenzisa izilungiselelo ze-proxy yokuhlola kunoma yimuphi umlamuli.

Rekhoda imiphumela emibili yokuqinisekisa ngokwehlukana. “Isitifiketi se-proxy siyathenjwa” siphendula umbuzo ohlangothini lweklayenti; asiqinisekisi lokho i-proxy ekubonile ngesikhathi ixhumana nokuphezulu.