adminlife.net

Why I love *nix

Posted on the November 10th, 2007 under allgemein by stefan

Hier ein Beispiel, warum ich unixoide Betriebssysteme liebe; es geht um das Sichern des SSL private key eines Webservers, Quelle: Thawte.

Apache-SSL / Apache ModSSL

To backup the private key on Apache, please follow the instructions below:

1. Access the directory where the private key file was stored when created.
2. Use the following command to make a copy of the private key file in case of a server crash, preferably to a removable disk:

[sourcecode language="css"]mount /mnt/floppy
cp www.mydomain.com.key /mnt/floppy/[/sourcecode]

Microsoft IIS 4.0:

To backup a private key on Microsoft IIS 4.0, follow these instructions:

1. Go into Key Manager within IIS 4.0
2. Export a copy of the private key by selecting Key > Export Key> Backup File. The default format is a .key file

3. Store the exported key in a secure location like a disk. It is important to make a copy of the private key that does not reside on the actual server to safeguard against possible loss of the key in the event that the server crashes.

Important: Make a note of the private key password as it will be needed to install the certificate when it is issued.

Microsoft IIS 5.0:

To backup a private key on Microsoft IIS 5.0 follow these instructions:

1. Open the MMC (Microsoft Management Console)
From your server, go to Start > Run and enter mmc in the text box. Click on the ‘OK’ button.

2. Add the certificate snapin
a. From your server, go to Start > Run and enter mmc in the text box. Click on the ‘OK’ button.

b. Click on the ‘Add’ button. Select ‘Certificates’ from the list of snap-ins and then click on the ‘Add’ button.

c. Select the Computer account option. Click on the ‘Next’ button.

d. Select the Local computer (the computer this console is running on) option. Click on the ‘Finish’ button.

e. Click on the ‘Close’ button on the snap-in list window. Click on the ‘OK’ button on the Add/Remove Snap-in window.

3. Backup the private key
a.Click on Certificates from the left pane.

b. Look for a folder called ‘REQUEST’ or ‘Certificate Enrollment Requests’ > Certificates

c. Select the private key that you wish to backup. Right click on the file and choose > All Tasks > Export…

d. The certificate export wizard will start, please click ‘Next’ to continue. In the next window select ‘Yes, export the private key’ and click ‘Next’.

e. Leave the default settings selected and click ‘Next’.

f. Set a password on the private key backup file and click ‘Next’.

g. Click on ‘Browse’ and select a location where you want to save the private key Backup the file to this location and then click ‘Next’ to continue. By default the file will be saved with a .pfx extension.

h. Click ‘Finish’ to complete the export process

You will get a message that the export was successful. Please copy the backup file to a floppy disk.

Hmmk?
Warum ist das beim IIS 4 so einfach und beim IIS 5 so umständlich? Von wegen, die Bedienung ist immer konsistent. Ich mag es überhaupt nicht, für solch einfache Sachen viel Klicki-Klicki machen zu müssen. Außerdem liebe ich die Möglichkeit, alles sehr einfach automatisieren zu können.

Aber nun – jeder nutzt das Betriebssystem, das er verdient!

|