Systems - CACERT1-test
Basics
Purpose
Main testserver, webdb patches for Software-Assessment, Software-Testteam under new Software-Assessment project
Physical Location
VM guest on vmware-host.it-sls.de
Physical located in a severroom Frankfurt/Main, DE
Logical location
- IP Internet: 212.38.6.74, cacert1.it-sls.de
- IP Intranet: 10.38.6.74, cacert1.it-sls.de
Virtual Host
- IP Internet: 212.38.6.79, secure1.it-sls.de
- IP Intranet (eth1): 10.38.6.79, secure1.it-sls.de
Applicable Documentation
This is it 
Administration
System Admin:
- Wytze van der Raay
- Markus Warg
- Andreas Bäß
Services
Listening services
port
service
access origin
purpose
22
ssh
all
admin console access
80
http
all
application (cacert1.it-sls.de)
443
https
all
application, secure channel (secure1.it-sls.de)
3306
mysql
ca-mgr1
application management
Running services
Service
Started from
apache
autostart conf
mysql
autostart conf
postfix
autostart conf
Connected Systems
Outbound network connections
- NONE -
Security
Non-distribution packages and modifications
Risk assessments on critical packages
Tasks
Critical Configuration items
Changes
Planned
System Future
Document Stuff
Build up from scratch by Critical Sysadmins following Webdb Installation and Configuration Instructions
Running tests: Main Entry Info Page for Software Testers, Software/CurrentTest
Further documentations under: SystemAdministration/Systems/Development (new testservers), SystemAdministration/Systems/Test (old testservers)
Webdb handbook (WIP)
2011-03-30 MW
Netzwerkinterface - vmware infrastructure client starten - auf den zu ändernden GAST (cacert1.it-sls.de) gehen, GAST anhalten - getting started / edit virtual machine settings - interface hinzufügen - GAST starten - einloggen, /etc/network/interfaces anpassen, das Interface kriegt man mit ifconfig -a angezeigt - ifup eth<neu>
Root CA installieren - im chroot (cd /home/cacert/) - das neue Testsystem root.crt in die Apache config kopieren: -- cd /home/cacert/etc/ssl -- mv cacert.crt <sicherungskopiename> -- cp /home/cacert/www/www/certs/root.crt cacert.crt -- /etc/init.d/apache restart
u60: reboot test succeeded