Yintoni FTPS: siseko ukusebenza kwaye umahluko ukusuka FTP yesiqhelo

I-Internet mihla isethi iikhompyutha aqhagamshelwe omnye komnye ngu iprotocol zonxibelelwano okhethekileyo. Ukubonisa amanxuwa usebenzisa iprotocol HTTP, HTTP, nangenxa lokutshintshiselana iifayile ezinkulu sebenzisa FTP, SFTP kunye FTPS. Makhe sihlolisise oko FTPS-Server. Kwakhona sifunda ukuba ukuyisebenzisa ngayo.

Yintoni FTPS

Igama protocol yahlulwe kabini: FTP + SSL okanye FTP + TLS (SSL version advanced). Inxalenye yokuqala esisiseko kwaye amafutshane iProtokholi yokuGqithisela iFayile - ifayili protocol. Le ndlela standard exchange kwedata ifihliwe, ngoko kulula iifayili ithunyelwe nge FTP, ukuvimbela ukuzivula. Ezi mpawu ngaphambili ezisetyenziswa imigewu ukweba amaxwebhu ezibalulekileyo zenkampani.

Ukuze kulungiswe ukungabikho nokukhuselwa kweenkcukacha, liqulunqe FTPS protocol. Kuyo zonke iifayili kwiCEMIS okokuqala kwenziwa SSL okanye TLS (lofihlo lwe protocol), ngoko ke iqela kunye neebhegi ngexesha move zokurekhoda uhlobo lobuqhophololo, umzekelo, endaweni «Hello» kuza «GTYSL». Kumncedisi, njengoko yonke ikhowudi aguqulwa umva ukuya seBhulin.

Sinako inokushwankathelwa yi umbuzo wokuba ingaba, FTPS - yintoni na le nto yaye ziziphi imisebenzi yayo. Le FTP protocol ekhuselekileyo. Ngoku, ukuba ukudluliselwa kolwazi, unokuqiniseka ukuba iifayili uzawuhlala kwaziwa kuphela kubasebenzisi anegunya. Musa ukubhidanisa FTPS kunye SFTP, ezi iiprotokoli ezahlukeneyo kwaye zisebenza ngemigaqo ezahlukeneyo.

Indlela ukudlulisela FTPS server

Abanye Andazi ukuba yintoni na FTPS-Server. Le khompyutha eligcina iifayile, kusebenza efanayo njengoko FTP-server (iifayile transfers ngokwesicelo lesigulane eso). Ngaphandle ngenxa yokuba yonke ingcaciso ibhalwe ngokufihlisa phambi iifayile transfer.

Ukukhusela iseva ifayile ukusuka abazali engafunwayo, kufuneka tyikitye esi siqinisekiso lwedijithali. Ukuba usebenzisa Umncedisi Filezilla, ngoko ngenxa yoku, yiya kwi Izicwangciso SSL / TLS. Kuza kufuneka ukwenza isiqinisekiso entsha, nto leyo eya kubandakanya ulwazi ikhowudi yelizwe, igama lombutho, njl

Esi satifikethi zifumaneka ngaphandle kwentlawulo nge Filezilla okanye nge ezinye iinkonzo. Kuba ukufikelela lendawo isiqinisekiso ozityikitye-ngokwakho ngokwaneleyo, kodwa umsebenzi uluntu kula manyathelo aya kuba ngokwaneleyo, kwaye isiqinisekiso ithengwe igunya lokukhutshwa kwezatifiketi.

connection FTPS

Ukuze ngcono ukuqonda oko FTPS, cinga protocol of indlela. Ngokungafaniyo FTP, xa umthengi ingacela uqhagamshelo olukhuselekileyo, umz, izibuko hlukanisa encryption. Cinga iinkcukacha lesicelo sesiqinisekiso algorithm:

1. Umxhamli eceliweyo ufihlo data (ithumela isicelo CSR-ikhowudi).
2. Umncedisi thethana algorithm encryption ithumela umxhasi SSL-isiqinisekiso lweqhosha lwasesidlangalaleni RSA-encryption.
3. Umntu ufunda ulwazi ukusuka isiqinisekiso yaye libhekisela liziko sekukhutshwe isatifikethi. Ukuba iziko isatifikethi kunye bomncedisi twatse-nye, uvavanyo lidlule kunye uxhulumaniso kuyaqhubeka. Kungenjalo, uqhagamshelwano lomncedis kwaye server uthumela i ikhowudi yemposiso.
4. Ukuba uvavanyo sibe yimpumelelo, umxhasi kudala neqhosha intlanganiso kwi khowudi (ifayile encryption), kwaye ke uthunyelwa kumncedisi. It usebenzisa amanani random kunye RSA-ufihlo izitshixo karhulumente kunye nawabucala.
5. Umncedisi ifumana isitshixo kwaye decrypts kuyo. Kwixesha elizayo, eli qhosha izakusebenziswa ukufihla zonke iifayile wathumela ezifunyenweyo.

Emva kokufumana iqhosha iseshoni mfihlakalo iqala zodluliselo lwedata. Undoqo ikhangelwe isicelo esitsha ngasinye, zonke iinkcukacha phakathi protocol FTPS-ezi khowudi ngokukhuselekileyo.

ukuhlobana

Ngenxa TSL / SSL-iziqinisekiso balahle yobuqhetseba. Ububhali ivumela isikhangeli bazi ukuba yintoni data yakhe ethunyelwe ngendlela ebhalwe ngokufihlakeleyo neziyakufumaneka ngqo kumncedisi elikhankanyiweyo, akwaba computer engalunganga. Kubaluleke ngokukodwa ukuba usebenzise ufihlo xa ufaka inkcazelo yobuqu, amanani ikhadi ebhankini, njalo-njalo. N.

Ukuze uqinisekise ukuba ufuna ukusetyenziswa isiqinisekiso digital hayi kuphela kumncedisi, kodwa kwi client. izinyathelo ezinjalo zibalulekile ukuyisebenzisa kwiibhanki, umzekelo, ukudluliselwa ulwazi olubalulekileyo malunga isiseko sabathengi.

Nokuba umhlaseli uya kuba nako ukufumana iifayili ukusuka FTP protocol, ukuba bonke ifihliwe, ufunde zesiqulatho akunakwenzeka ngaphandle imfihlelo iqhosha RSA.