{"id":1923,"date":"2022-08-21T19:41:10","date_gmt":"2022-08-21T22:41:10","guid":{"rendered":"https:\/\/bfnetworks.com.br\/?page_id=1923"},"modified":"2023-01-15T19:19:39","modified_gmt":"2023-01-15T22:19:39","slug":"lpic-3-exam-303-security","status":"publish","type":"page","link":"https:\/\/bfnetworks.com.br\/lpic-3-exam-303-security\/","title":{"rendered":"LPIC-3 Exam 303: Security"},"content":{"rendered":"\n<h2><em>Topic 331: Cryptography<\/em><\/h2>\n\n\n\n<h4>331.1 X.509 Certificates and Public Key Infrastructures (weight: 5)<\/h4>\n\n\n\n<p>Key Knowledge Areas:<\/p>\n\n\n\n<ul>\n<li>Understand X.509 certificates, X.509 certificate lifecycle, X.509 certificate fields and X.509v3 certificate extensions<\/li>\n\n\n\n<li>Understand trust chains and public key infrastructures, including certificate transparency<\/li>\n\n\n\n<li>Generate and manage public and private keys<\/li>\n\n\n\n<li>Create, operate and secure a certification authority<\/li>\n\n\n\n<li>Request, sign and manage server and client certificates<\/li>\n\n\n\n<li>Revoke certificates and certification authorities<\/li>\n\n\n\n<li>Basic feature knowledge of Let&#8217;s Encrypt, ACME and certbot<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/cloudflare\/cfssl\" target=\"_blank\" rel=\"noreferrer noopener\">Basic feature knowledge of CFSSL<\/a><\/li>\n<\/ul>\n\n\n\n<p>Partial list of the used files, terms and utilities:<\/p>\n\n\n\n<ul>\n<li>openssl (including relevant subcommands)<\/li>\n\n\n\n<li>OpenSSL configuration<\/li>\n\n\n\n<li>PEM, DER, PKCS<\/li>\n\n\n\n<li>CSR<\/li>\n\n\n\n<li>CRL<\/li>\n\n\n\n<li><a href=\"https:\/\/cwiki.apache.org\/confluence\/display\/httpd\/OCSPStapling\" target=\"_blank\" rel=\"noreferrer noopener\">OCSP<\/a><\/li>\n<\/ul>\n\n\n\n<h4>331.2 X.509 Certificates for Encryption, Signing and Authentication (weight: 4)<\/h4>\n\n\n\n<p>Key Knowledge Areas:<\/p>\n\n\n\n<ul>\n<li>Understand SSL, TLS, including protocol versions and ciphers<\/li>\n\n\n\n<li>Configure Apache HTTPD with mod_ssl to provide HTTPS service, including SNI and HSTS<\/li>\n\n\n\n<li>Configure Apache HTTPD with mod_ssl to serve certificate chains and adjust the cipher configuration (no cipher-specific knowledge)<\/li>\n\n\n\n<li>Configure Apache HTTPD with mod_ssl to authenticate users using certificates<\/li>\n\n\n\n<li>Configure Apache HTTPD with mod_ssl to provide OCSP stapling<\/li>\n\n\n\n<li>Use OpenSSL for SSL\/TLS client and server tests<\/li>\n<\/ul>\n\n\n\n<p>Links sobre os assuntos:<\/p>\n\n\n\n<ul>\n<li>HSTS\n<ul>\n<li><a href=\"https:\/\/blog.saninternet.com\/hsts\">Conceito<\/a><\/li>\n\n\n\n<li><a rel=\"noreferrer noopener\" href=\"https:\/\/bfnetworks.com.br\/configurando-hstp\/\" target=\"_blank\">Configura\u00e7\u00e3o HSTS<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>SNI\n<ul>\n<li><a href=\"https:\/\/www.globalsign.com\/pt-br\/blog\/what-is-server-name-indication\">Conceito<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h4>331.3 Encrypted File Systems (weight: 3)<\/h4>\n\n\n\n<p><strong>Key Knowledge Areas:<\/strong><\/p>\n\n\n\n<ul>\n<li>Understand block device and file system encryption<\/li>\n\n\n\n<li>Use dm-crypt with LUKS1 to encrypt block devices<\/li>\n\n\n\n<li>Use eCryptfs to encrypt file systems, including home directories and PAM integration<\/li>\n\n\n\n<li>Awareness of plain dm-crypt<\/li>\n\n\n\n<li>Awareness of LUKS2 features<\/li>\n\n\n\n<li>Conceptual understanding of Clevis for LUKS devices and Clevis PINs for TMP2 and Network Bound Disk Encryption (NBDE)\/Tang<\/li>\n<\/ul>\n\n\n\n<p><strong>The following is a partial list of the used files, terms and utilities:<\/strong><\/p>\n\n\n\n<ul>\n<li>cryptsetup (including relevant subcommands)<\/li>\n\n\n\n<li>cryptmount<\/li>\n\n\n\n<li>\/etc\/crypttab<\/li>\n\n\n\n<li>ecryptfsd<\/li>\n\n\n\n<li>ecryptfs-* commands<\/li>\n\n\n\n<li>mount.ecryptfs, umount.ecryptfs<\/li>\n\n\n\n<li>pam_ecryptfs<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Topic 331: Cryptography 331.1 X.509 Certificates and Public Key Infrastructures (weight: 5) Key Knowledge Areas: Partial list of the used files, terms and utilities: 331.2 X.509 Certificates for Encryption, Signing and Authentication (weight: 4) Key Knowledge Areas: Links sobre os assuntos: 331.3 Encrypted File Systems (weight: 3) Key Knowledge Areas: The following is a partial [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":[],"_links":{"self":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/pages\/1923"}],"collection":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/comments?post=1923"}],"version-history":[{"count":9,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/pages\/1923\/revisions"}],"predecessor-version":[{"id":1971,"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/pages\/1923\/revisions\/1971"}],"wp:attachment":[{"href":"https:\/\/bfnetworks.com.br\/wp-json\/wp\/v2\/media?parent=1923"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}