password

-
对称加密：一组密钥；加密解密速度快；不适用互联网环境；维护成本高

非对称加密： 一对密钥（公钥私钥）；加密解密速度慢；

互联网使用：对称加密文件，非对称加密对称密钥

数字签名：私钥签名，公钥确认；
发送方使用函数针对文件产生摘要，私钥对文件摘要进行加密，然后发送文件，文件摘要，公钥；
接收方使用公钥解密文件摘要，然后使用函数产生摘要，如果相同，说明没有被篡改。

Windows Server 2008 安装独立CA(根)
1. 打开服务器管理器
2. 添加“Active Directory证书服务”角色
3. 选择前三项
4. 选择根CA
5. 默认直到最后
6. 完成后会有网页服务http://<IP Address >/certsrv

安装后主机名无法更改

Windows Server2008 安装企业CA(子) 需要是域服务器
1. 打开服务器管理器
2. 添加“Active Directory证书服务”角色
3. 选择前三项
4. 选择根CA
5. 默认直到最后
6. 生成的证书,通过父CA的链接发送给父CA
7. 父CA收到申请，使用CA管理器进行颁发
8. 子CA通过连接下载父CA颁发的证书
9. 子CA通过管理器安装下载的证书，然后启动证书服务

域客户机与根CA建立信任
1. 通过连接，下载根CA证书
2. 进入组策略管理
3. 修改默认域策略
4. 进入计算机配置 / 策略 / Windwos 设置 /  

Comments

Post a Comment

Popular posts from this blog

Nginx Proxy & Load Balance & LNMP

-
Nginx Proxy Service E-commerce website Server 1: provide image request response (  apache / nginx ) Server 2: provide dynamic request response ( php-fpm / apache-php ) Server 3: provide static request response ( apache / nginx ) Server 4: provide data request response ( mysql ) It need one additional nginx server 1. Install nginx 2. proxy to specific server Example location / {      proxy_pass http://192.168.199.187:80/; } location /bbs/ {      proxy_pass http://192.168.199.187:80/bbs/; } location ~* \.(jpg|png|gif)$  {      proxy_pass http://172.16.100.7; } Enhance the log information and specific the hostname location / {      proxy_pass  http://192.168.199.187:80/;      proxy_set_header <parameter name>  $host;  (client requst the hostname )      proxy_set_header <parameter name> $remote_addr; ...
Read more

Snort+barnyard2+Snorby CentOS 6.5_64 Installation

-
#download packages: daq-2.0.2.tar.gz ImageMagicK-6.8.9-8.tar.gz oinkmaster-2.0.tar.gz ruby-1.9.3-p547.tar.gz snort-2.9.6.2.tar.gz snortrules-snapshot-2962.tar.gz MySQL-server-5.5.40-1.rhel5.x86_64.rpm MySQL-client-5.6.21-1.rhel5.x86_64.rpm MySQL-devel-5.6.21-1.rhel5.x86_64.rpm MySQL-shared-5.6.21-1.rhel5.x86_64.rpm epel-release-6-8.noarch.rpm barnyard2-2.1.13.tar.gz #install yum package rpm -ivh epel-release-6-8.noarch.rpm yum install gcc-c++ patch readline readline-devel zlib zlib-devel flex git yum install libyaml-devel libffi-devel openssl-devel make  yum install bzip2 autoconf automake libtool bison iconv-devel libxml2-devel libxslt  yum install gcc g++ build-essential libssl-devel libreadline5-devel zlib1g-devel linux-headers-generic libsqlite3-devel libxslt-devel curl-devel sqlite-devel yum --enablerepo=epel install jasper jasper-libs jasper-devel #Mysql install yum remove mysql mysql-libs rpm -ivh MySQL-server-5.5.40-1.rh...
Read more

ORACLE Error

-
Image
oracle official error explanation  http://docs.oracle.com/cd/E11882_01/server.112/e17766/toc.htm 从服务器下载ALERT日志文件，传输方式需要选择"ASCII" ORA-01078: failure in processing system parameters 发生场景：新建数据库第一次启动时 SQL> startup ORA-01078: failure in processing system parameters LRM-00109: could not open parameter file ‘/home/oracle/oracle/product/10.2.0/db_1/dbs/initorcl.ora’ 原因：oracle_sid没有配置正确 解决方案： 1. 修改oracle用户.bash_profile文件中ORACLE_SID后的内容； 2. 重新已oracle用户登录； ORA-01157: cannot identify/lock data file string - see DBWR trace file  Cause: The background process was either unable to find one of the data files or failed to lock it because the file was already in use. The database will prohibit access to this file but other files will be unaffected. However the first instance to open the database will need to access all online data files. Accompanying error from the operating system describes why the file could not be identified. Action: Have operating system make file ...
Read more