
LINUX/WWW - add local SSL cert (trusted) / lecture notes 2019/01
(local) SSL-ZERTIFIKAT/ ubuntu / mkcert
local dev server
a2enmod ssl
a2ensite default-ssl
systemctl reload apache2
Um die "Vetrauen Sie Seite..." für lokale Entwicklungsumgebungen zu umgehen ...
apt install libnss3-tools
apt install linuxbrew-wrapper
brew install mkcert
/home/linuxbrew/.linuxbrew/bin/mkcert -install
certs für "locals"
/home/linuxbrew/.linuxbrew/bin/mkcert wp01-localhost.com "*.wp01-localhost.com" 192.168.8.109 localhost 127.0.0.1 ::1
cp /root/wp01-localhost.com+5-key.pem /etc/ssl/private/
cp /root/wp01-localhost.com+5.pem /etc/ssl/certs/
vi /etc/apache2/sites-available/default-ssl.conf
SSLCertificateFile
/etc/ssl/certs/wp01-localhost.com+5.pem
SSLCertificateKeyFile
/etc/ssl/private/wp01-localhost.com+5-key.pem
systemctl restart apache2
Cert-Abfrage via openssl s_client -showcerts -connect localhost:443 -servername 127.0.0.1
Cert-Anfrage per Java
apt install openjdk-11-jre-headless
keytool -printcert -sslserver 192.168.8.109:443
S. 2019/1
wget https://packages.microsoft.com/config/ubuntu/18.04/packages-microsoft-prod.deb
dpkg -i packages-microsoft-prod.deb
apt update
apt install powershell
Beispiel: Linux
Run
Debug/Trace
Debug/Step
Set-PSDebug -Trace 2;
Set-PSDebug -Trace 0;
Set-PSDebug -Step;
Set-PSDebug -Off;
S. 2019/01
PWSH/Windows 1903 - Optional Features | Status
Printing-PrintToPDFServices-Features Enabled
Windows-Defender-Default-Definitions Enabled
Printing-XPSServices-Features Enabled
SearchEngine-Client-Package Enabled
MSRDC-Infrastructure Enabled
TelnetClient Enabled
TFTP Disabled
TIFFIFilter Disabled
WorkFolders-Client Enabled
LegacyComponents Disabled
DirectPlay Disabled
Printing-Foundation-Features Enabled
FaxServicesClientPackage Enabled
Printing-Foundation-InternetPrinting-Client Enabled
Printing-Foundation-LPDPrintService Disabled
Printing-Foundation-LPRPortMonitor Disabled
SimpleTCP Disabled
MicrosoftWindowsPowerShellV2Root Enabled
MicrosoftWindowsPowerShellV2 Enabled
Windows-Identity-Foundation Disabled
Client-ProjFS Disabled
NetFx4-AdvSrvs Enabled
NetFx4Extended-ASPNET45 Disabled
IIS-WebServerRole Disabled
IIS-WebServer Disabled
IIS-CommonHttpFeatures Disabled
IIS-HttpErrors Disabled
IIS-HttpRedirect Disabled
IIS-ApplicationDevelopment Disabled
IIS-NetFxExtensibility Disabled
IIS-NetFxExtensibility45 Disabled
IIS-HealthAndDiagnostics Disabled
IIS-HttpLogging Disabled
IIS-LoggingLibraries Disabled
IIS-RequestMonitor Disabled
IIS-HttpTracing Disabled
IIS-Security Disabled
IIS-URLAuthorization Disabled
IIS-RequestFiltering Disabled
IIS-IPSecurity Disabled
IIS-Performance Disabled
IIS-HttpCompressionDynamic Disabled
IIS-WebServerManagementTools Disabled
IIS-ManagementScriptingTools Disabled
IIS-IIS6ManagementCompatibility Disabled
IIS-Metabase Disabled
WAS-WindowsActivationService Disabled
WAS-ProcessModel Disabled
WAS-NetFxEnvironment Disabled
WAS-ConfigurationAPI Disabled
IIS-HostableWebCore Disabled
IIS-StaticContent Disabled
IIS-DefaultDocument Disabled
IIS-DirectoryBrowsing Disabled
IIS-WebDAV Disabled
IIS-WebSockets Disabled
IIS-ApplicationInit Disabled
IIS-ASPNET Disabled
IIS-ASPNET45 Disabled
IIS-ASP Disabled
IIS-CGI Disabled
IIS-ISAPIExtensions Disabled
IIS-ISAPIFilter Disabled
IIS-ServerSideIncludes Disabled
IIS-CustomLogging Disabled
IIS-BasicAuthentication Disabled
IIS-HttpCompressionStatic Disabled
IIS-ManagementConsole Disabled
IIS-ManagementService Disabled
IIS-WMICompatibility Disabled
IIS-LegacyScripts Disabled
IIS-LegacySnapIn Disabled
IIS-FTPServer Disabled
IIS-FTPSvc Disabled
IIS-FTPExtensibility Disabled
WCF-Services45 Enabled
WCF-HTTP-Activation45 Disabled
WCF-TCP-Activation45 Disabled
WCF-Pipe-Activation45 Disabled
WCF-MSMQ-Activation45 Disabled
WCF-TCP-PortSharing45 Enabled
MSMQ-Container Disabled
MSMQ-DCOMProxy Disabled
MSMQ-Server Disabled
MSMQ-ADIntegration Disabled
MSMQ-HTTP Disabled
MSMQ-Multicast Disabled
MSMQ-Triggers Disabled
WCF-HTTP-Activation Disabled
WCF-NonHTTP-Activation Disabled
IIS-CertProvider Disabled
IIS-WindowsAuthentication Disabled
IIS-DigestAuthentication Disabled
IIS-ClientCertificateMappingAuthentication Disabled
IIS-IISCertificateMappingAuthentication Disabled
IIS-ODBCLogging Disabled
NetFx3 DisabledWithPayloadRemoved
SMB1Protocol Disabled
SMB1Protocol-Client Disabled
SMB1Protocol-Server Disabled
SMB1Protocol-Deprecation Disabled
MediaPlayback Enabled
WindowsMediaPlayer Enabled
Client-DeviceLockdown Disabled
Client-EmbeddedShellLauncher Disabled
Client-EmbeddedBootExp Disabled
Client-EmbeddedLogon Disabled
Client-KeyboardFilter Disabled
Client-UnifiedWriteFilter Disabled
DataCenterBridging Disabled
DirectoryServices-ADAM-Client Disabled
ServicesForNFS-ClientOnly Disabled
ClientForNFS-Infrastructure Disabled
NFS-Administration Disabled
Containers Disabled
HostGuardian Disabled
SmbDirect Enabled
MultiPoint-Connector Disabled
MultiPoint-Connector-Services Disabled
MultiPoint-Tools Disabled
AppServerClient Disabled
Internet-Explorer-Optional-amd64 Enabled
Microsoft-Windows-Subsystem-Linux Disabled
HypervisorPlatform Disabled
VirtualMachinePlatform Disabled
Microsoft-Windows-NetFx3-OC-Package Enabled
Microsoft-Windows-NetFx4-US-OC-Package Enabled
Microsoft-Windows-Client-EmbeddedExp-Package Enabled
Microsoft-Windows-NetFx3-WCF-OC-Package Enabled
Microsoft-Windows-NetFx4-WCF-US-OC-Package Enabled
Containers-DisposableClientVM Enabled
Microsoft-Hyper-V-All Disabled
Microsoft-Hyper-V Disabled
Microsoft-Hyper-V-Tools-All Disabled
Microsoft-Hyper-V-Management-PowerShell Disabled
Microsoft-Hyper-V-Hypervisor Disabled
Microsoft-Hyper-V-Services Disabled
Microsoft-Hyper-V-Management-Clients Disabled
Windows-Defender-ApplicationGuard Disabled
$Feature = "Containers-DisposableClientVM"
Enable-WindowsOptionalFeature -FeatureName $Feature -Online -NoRestart
S.