https://www.wvds.it/wiki/ 2026-05-22T17:22:51+00:00 https://www.wvds.it/wiki/ https://www.wvds.it/wiki/lib/exe/fetch.php?media=wiki:dokuwiki.svg text/html 2026-01-30T06:34:12+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=hr:int:pqcrypt:szenarien:operator:tagesgeschaeft:health-check&rev=1769754852&do=diff Runbook: Health Check Trajanje: ~5 minuta Uloga: PKI operator Učestalost: Dnevno (preporučeno: ujutro) ---------- Workflow ---------- Brza provjera (1 naredba) #!/bin/bash # pki-health-check.sh - Dnevna PKI provjera echo "=== PKI Health Check $(date -Iseconds) ===" # 1. Provjera CA certifikata echo -e "\n[1] CA certifikati:" for ca in /etc/pki/CA/ca-*.pem; do days=$(( ($(openssl x509 -enddate -noout -in "$ca" | cut -d= -f2 | date -f - +%s) - $(date +%s)) / 86400 )) status=… text/html 2026-01-30T06:33:28+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=hr:int:pqcrypt:szenarien:operator:tagesgeschaeft:start&rev=1769754808&do=diff Dnevne operacije Ciljna skupina: PKI operateri, Helpdesk Trajanje: 5-15 min po zadatku Runbookovi za dnevne operativne PKI zadatke s Post-Quantum kriptografijom. ---------- Pregled ---------- Runbookovi # Runbook Opis Trajanje Učestalost text/html 2026-01-30T06:34:52+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=hr:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-ausstellen&rev=1769754892&do=diff Runbook: Izdavanje certifikata Trajanje: ~10 minuta Uloga: PKI operator Preduvjet: Odobreni CSR ---------- Workflow ---------- Korak 1: Primanje i validacija CSR-a Kontrolna lista prije potpisivanja: # Točka provjere Naredba Očekivano text/html 2026-01-30T06:35:08+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=hr:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-erneuern&rev=1769754908&do=diff Runbook: Obnova certifikata Trajanje: ~15 minuta Uloga: PKI operator Okidač: Upozorenje o isteku (30/14/7 dana) ---------- Workflow ---------- Korak 1: Identifikacija certifikata koji ističu # Svi certifikati s istekom < 30 dana find /etc/ssl/certs -name "*.pem" -exec sh -c ' enddate=$(openssl x509 -enddate -noout -in "$1" 2>/dev/null | cut -d= -f2) if [ -n "$enddate" ]; then expiry=$(date -d "$enddate" +%s 2>/dev/null) now=$(date +%s) days=$(( (expir… text/html 2026-01-30T06:35:46+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=hr:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-widerrufen&rev=1769754946&do=diff Runbook: Opoziv certifikata Trajanje: ~5 minuta Uloga: PKI operator / Security Prioritet: VISOK kod kompromitacije ---------- Workflow ---------- Razlozi opoziva (RFC 5280) Kod Razlog Kada koristiti ----------------------------- 0 unspecified