WvdS Doku - en:int:dbgway:administrator:sicherheit
https://www.wvds.it/wiki/
2026-05-22T19:44:18+00:00
WvdS Doku
https://www.wvds.it/wiki/
https://www.wvds.it/wiki/lib/exe/fetch.php?media=wiki:dokuwiki.svg
-
text/html
2026-01-29T23:21:30+00:00
Anonymous (anonymous@undisclosed.example.com)
4.1 Security Architecture
https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:administrator:sicherheit:architektur&rev=1769728890&do=diff
4.1 Security Architecture
Overview of PQ security components.
System Overview
Internet / Intranet
|
[Firewall :443]
|
+--------------------------------------------------+
| PROXY (:443) |
| - TLS 1.3 Termination |
| - Client Certificate Verification |
| - Routing Decision |
+------------------…
-
text/html
2026-01-29T23:21:46+00:00
Anonymous (anonymous@undisclosed.example.com)
4.4 IIS Redirection
https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:administrator:sicherheit:iis-umleitung&rev=1769728906&do=diff
4.4 IIS Redirection
Configuration for non-Gateway traffic.
IIS Binding
IIS listens on port 8443 (internal, not public):
# Change IIS Site Binding
Import-Module WebAdministration
Set-WebBinding -Name "Default Web Site" -BindingInformation "*:8443:" -PropertyName Port -Value 8443
-
text/html
2026-01-29T23:21:34+00:00
Anonymous (anonymous@undisclosed.example.com)
4.3 Named Pipes Configuration
https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:administrator:sicherheit:named-pipes&rev=1769728894&do=diff
4.3 Named Pipes Configuration
Secure local communication between proxy and gateway.
Why Named Pipes?
* No network overhead
* No additional ports
* Windows security integrated
* ACL-based access control
Gateway Configuration
In appsettings.json
-
text/html
2026-01-30T00:11:26+00:00
Anonymous (anonymous@undisclosed.example.com)
4.2 Proxy Configuration
https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:administrator:sicherheit:proxy-konfiguration&rev=1769731886&do=diff
4.2 Proxy Configuration
Setting up the TLS proxy with PQ support.
Configuration File
Location: %SERVICES_ROOT%\Proxy\config.json
{
"Proxy": {
"ListenPort": 443,
"TLS": {
"Enabled": true,
"Protocol": "TLS1.3",
"Certificate": "%CERTS_PATH%\\server.pfx",
"CertificatePassword": "...",
"ClientCertificateRequired": true,
"ClientCertificateValidation": "ChainTrust"
},
"PQCrypto": {
"KeyExchange": "ML-KEM-768",
"Signature": "ML-DSA-6…
-
text/html
2026-01-29T23:21:26+00:00
Anonymous (anonymous@undisclosed.example.com)
4. PQ Security
https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:administrator:sicherheit:start&rev=1769728886&do=diff
4. PQ Security
-
text/html
2026-01-29T23:21:54+00:00
Anonymous (anonymous@undisclosed.example.com)
4.5 Trust Server
https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:administrator:sicherheit:trust-server&rev=1769728914&do=diff
4.5 Trust Server
Central trust server for certificate validation.
Concept: Single Point of Trust
* All clients query the Trust Server
* Trust Server decides on trustworthiness
* Central control over certificate status
* Real-time revocation possible
-
text/html
2026-01-30T08:47:14+00:00
Anonymous (anonymous@undisclosed.example.com)
4.6 Certificate Management
https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:administrator:sicherheit:zertifikat-verwaltung&rev=1769762834&do=diff
4.6 Certificate Management
Management of PQ certificates.
Certificate Types
Type Location Rotation Server Certificate %CERTS_PATH%\server.pfx Annually Root CA %CERTS_PATH%\CA\root-ca.crt 10+ Years Client Certificates Issued via CA Annually