https://www.wvds.it/wiki/ 2026-05-22T17:22:46+00:00 https://www.wvds.it/wiki/ https://www.wvds.it/wiki/lib/exe/fetch.php?media=wiki:dokuwiki.svg text/html 2026-01-30T01:42:16+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:tagesgeschaeft:health-check&rev=1769737336&do=diff Runbook: Health Check Duration: ~5 minutes Role: PKI Operator Frequency: Daily (recommended: morning) ---------- Workflow ---------- Quick Check (1 Command) #!/bin/bash # pki-health-check.sh - Daily PKI check echo "=== PKI Health Check $(date -Iseconds) ===" # 1. Check CA certificates echo -e "\n[1] CA Certificates:" for ca in /etc/pki/CA/ca-*.pem; do days=$(( ($(openssl x509 -enddate -noout -in "$ca" | cut -d= -f2 | date -f - +%s) - $(date +%s)) / 86400 )) status="OK" … text/html 2026-01-30T01:41:42+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:tagesgeschaeft:start&rev=1769737302&do=diff Daily Operations Target audience: PKI Operators, Helpdesk Duration: 5-15 min per task Runbooks for daily operative PKI tasks with Post-Quantum Cryptography. ---------- Overview ---------- Runbooks # Runbook Description Duration text/html 2026-01-30T01:42:38+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-ausstellen&rev=1769737358&do=diff Runbook: Issue Certificate Duration: ~10 minutes Role: PKI Operator Prerequisite: Approved CSR ---------- Workflow ---------- Step 1: Receive and Validate CSR Checklist before signing: # Checkpoint Command Expected --------------------- text/html 2026-01-30T01:43:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-erneuern&rev=1769737384&do=diff Runbook: Renew Certificate Duration: ~15 minutes Role: PKI Operator Trigger: Expiry warning (30/14/7 days) ---------- Workflow ---------- Step 1: Identify Expiring Certificates # All certificates expiring in < 30 days find /etc/ssl/certs -name "*.pem" -exec sh -c ' enddate=$(openssl x509 -enddate -noout -in "$1" 2>/dev/null | cut -d= -f2) if [ -n "$enddate" ]; then expiry=$(date -d "$enddate" +%s 2>/dev/null) now=$(date +%s) days=$(( (expiry - now) / … text/html 2026-01-30T01:43:36+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-widerrufen&rev=1769737416&do=diff Runbook: Revoke Certificate Duration: ~5 minutes Role: PKI Operator / Security Priority: HIGH on compromise ---------- Workflow ---------- Revocation Reasons (RFC 5280) Code Reason When to use --------------------------- 0 unspecified