INSTALLATION OF BLOGGING PLATFORM

Transcription

1 INSTALLATION OF BLOGGING PLATFORM & Configuration of DNSSEC Enabled Name Server Katja Andreeva, Marco Johns

2 SERVER (KAMMIO.KUTOMO.NET)

3 SERVER (KAMMIO.KUTOMO.NET) Virtual Private Server (VPS) from Linode.com Ubuntu LTS (Long Time Support) 512 MB RAM, 16 GB HDD

4 REQUIREMENTS

5 REQUIREMENTS Linux based software

6 REQUIREMENTS Linux based software Multiple users

7 REQUIREMENTS Linux based software Multiple users Multiple weblogs

8 REQUIREMENTS Linux based software Multiple users Multiple weblogs Extendability (plug-ins)

9 MOVABLE TYPE

10 MOVABLE TYPE movabletype.org

11 MOVABLE TYPE movabletype.org Open-source weblog publishing system (GNU)

12 MOVABLE TYPE movabletype.org Open-source weblog publishing system (GNU) Perl + Apache + MySQL (PostgreSQL, SQLite via plug-ins)

13 MOVABLE TYPE movabletype.org Open-source weblog publishing system (GNU) Perl + Apache + MySQL (PostgreSQL, SQLite via plug-ins) Multiple weblogs

14 MOVABLE TYPE movabletype.org Open-source weblog publishing system (GNU) Perl + Apache + MySQL (PostgreSQL, SQLite via plug-ins) Multiple weblogs Standalone content pages

15 MOVABLE TYPE movabletype.org Open-source weblog publishing system (GNU) Perl + Apache + MySQL (PostgreSQL, SQLite via plug-ins) Multiple weblogs Standalone content pages User roles

16 PRE-REQUIREMENTS

17 PRE-REQUIREMENTS Installation of required services Apache Web Server Perl MySQL

18 PRE-REQUIREMENTS Installation of required services Apache Web Server Perl MySQL

19 INSTALLING MOVABLE TYPE Followed Detailed Step-by-Step Installation Guide at movabletype.org

20 DEMO

21 DNSSEC ENABLED NAME SERVER

22 DNSSEC ENABLED NAME SERVER BIND (Ubuntu)

23 DNSSEC ENABLED NAME SERVER BIND (Ubuntu) Recursive DNS (caching)

24 DNSSEC ENABLED NAME SERVER BIND (Ubuntu) Recursive DNS (caching) DNSSEC validation

25 WHAT S DNSSEC?

26 WHAT S DNSSEC? Adds security to internet name resolving

27 WHAT S DNSSEC? Adds security to internet name resolving Origin authentication

28 WHAT S DNSSEC? Adds security to internet name resolving Origin authentication Data integrity

29 WHAT S DNSSEC? Adds security to internet name resolving Origin authentication Data integrity Authenticated denial of existence

30 WHAT S DNSSEC?

31 WHAT S DNSSEC? Every DNS query is signed

32 WHAT S DNSSEC? Every DNS query is signed If signature is valid, response is from trusted name server

33 WHAT S DNSSEC? Every DNS query is signed If signature is valid, response is from trusted name server Prevents DNS spoofing / hijacking

34 WHAT S DNSSEC? Every DNS query is signed If signature is valid, response is from trusted name server Prevents DNS spoofing / hijacking Signatures can be validated from the DNS root servers.

35 WHAT S DNSSEC? Every DNS query is signed If signature is valid, response is from trusted name server Prevents DNS spoofing / hijacking Signatures can be validated from the DNS root servers. Resolvers are configured with a root trust anchor key

36 OBTAINING ROOT TRUST ANCHOR By asking from root using dig

37 OBTAINING ROOT TRUST ANCHOR By asking from root using dig

38 VERIFYING ROOT TRUST ANCHOR

39 VERIFYING ROOT TRUST ANCHOR Verify key using dsfromkey

40 VERIFYING ROOT TRUST ANCHOR Verify key using dsfromkey

41 VERIFYING ROOT TRUST ANCHOR Verify key using dsfromkey Compare signatures (

42 VERIFYING ROOT TRUST ANCHOR Verify key using dsfromkey Compare signatures (

43 BIND CONFIGURATION named.conf:

44 BIND CONFIGURATION named.conf:

45 BIND CONFIGURATION named.conf.options:

46 BIND CONFIGURATION named.conf.options:

47 BIND CONFIGURATION named.conf.options:

48 DEMO

49 THANK YOU