https://www.wvds.it/wiki/ 2026-05-22T17:17:16+00:00 https://www.wvds.it/wiki/ https://www.wvds.it/wiki/lib/exe/fetch.php?media=wiki:dokuwiki.svg text/html 2026-01-30T06:30:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=it:int:pqcrypt:szenarien:operator:tagesgeschaeft:health-check&rev=1769754620&do=diff Runbook: Health Check Durata: ~5 minuti Ruolo: Operatore PKI Frequenza: Giornaliera (consigliato: mattina) ---------- Workflow ---------- Verifica rapida (1 comando) #!/bin/bash # pki-health-check.sh - Verifica PKI giornaliera echo "=== PKI Health Check $(date -Iseconds) ===" # 1. Verifica certificati CA echo -e "\n[1] Certificati CA:" for ca in /etc/pki/CA/ca-*.pem; do days=$(( ($(openssl x509 -enddate -noout -in "$ca" | cut -d= -f2 | date -f - +%s) - $(date +%s)) / 86400 )) … text/html 2026-01-30T06:29:26+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=it:int:pqcrypt:szenarien:operator:tagesgeschaeft:start&rev=1769754566&do=diff Operatività quotidiana Destinatari: Operatori PKI, Helpdesk Durata: 5-15 min per attività Runbook per le attività operative PKI quotidiane con crittografia Post-Quantum. ---------- Panoramica ---------- Runbook # Runbook Descrizione text/html 2026-01-30T06:30:44+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=it:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-ausstellen&rev=1769754644&do=diff Runbook: Emissione certificato Durata: ~10 minuti Ruolo: Operatore PKI Prerequisito: CSR approvato ---------- Workflow ---------- Passo 1: Ricevere e validare CSR Checklist prima della firma: # Punto di verifica Comando Atteso --------- text/html 2026-01-30T06:31:22+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=it:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-erneuern&rev=1769754682&do=diff Runbook: Rinnovo certificato Durata: ~15 minuti Ruolo: Operatore PKI Trigger: Avviso scadenza (30/14/7 giorni) ---------- Workflow ---------- Passo 1: Identificare certificati in scadenza # Tutti i certificati con scadenza < 30 giorni find /etc/ssl/certs -name "*.pem" -exec sh -c ' enddate=$(openssl x509 -enddate -noout -in "$1" 2>/dev/null | cut -d= -f2) if [ -n "$enddate" ]; then expiry=$(date -d "$enddate" +%s 2>/dev/null) now=$(date +%s) days=$(( … text/html 2026-01-30T06:32:04+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=it:int:pqcrypt:szenarien:operator:tagesgeschaeft:zertifikat-widerrufen&rev=1769754724&do=diff Runbook: Revoca certificato Durata: ~5 minuti Ruolo: Operatore PKI / Security Priorità: ALTA in caso di compromissione ---------- Workflow ---------- Motivi di revoca (RFC 5280) Codice Motivo Quando usare ----------------------------- 0