Technical infrastructure checklist - Revision history

Vagrant: /* Software and Systems */ updated expiration date.

2013-10-24T19:27:51Z

Software and Systems: updated expiration date.

2013-10-03T18:00:26Z

Software and Systems: updated ssl cert info

2013-07-11T20:25:45Z

Software and Systems: updated apt signing key

2013-05-09T18:48:09Z

Software and Systems: update ssl cert expiry

2013-02-21T20:01:49Z

Servers & Security: document frequency of cc network check.

2013-02-21T19:14:16Z

Software and Systems: clarify what should be done with apt signing key

2012-10-25T23:52:58Z

Servers & Security: mention new log for checking for wireless

2012-10-18T20:28:30Z

Servers & Security: traced cables.

2012-09-27T18:40:56Z

Servers & Security: rouge wireless checked today

2012-09-20T19:34:11Z

Servers & Security: updated check for wireless

@@ Line 12: / Line 12: @@
 ** HINT: Search for open RT tickets created by ass-security@our_domain. If you like the command line, then you can use this (mainly self explanatory, just run it) script: ./ass/scripts/security/show_security
 * certificate and gpg key expiration dates
-** check the https (Sep 1st, 2016) and imaps/smtps (Dec 28th, 2013) ssl certs
+** check the https (Sep 1st, 2016) and imaps/smtps (Sep 23rd, 2016) ssl certs
 *** openssl x509 -noout -text -in /path/to/FOO.crt
 ** check apt signing key (expires February 1st, 2015; Update 6 months before expiration)

@@ Line 12: / Line 12: @@
 ** HINT: Search for open RT tickets created by ass-security@our_domain. If you like the command line, then you can use this (mainly self explanatory, just run it) script: ./ass/scripts/security/show_security
 * certificate and gpg key expiration dates
-** check the https (Feb 2nd, 2014) and imaps/smtps (Dec 28th, 2013) ssl certs
+** check the https (Sep 1st, 2016) and imaps/smtps (Dec 28th, 2013) ssl certs
-*** openssl x509 -in /path/to/certificate -noout -text
+*** openssl x509 -noout -text -in /path/to/FOO.crt
 ** check apt signing key (expires February 1st, 2015; Update 6 months before expiration)
 * check to see if our mail server(s) have been blacklisted:

@@ Line 14: / Line 14: @@
 ** check the https (Feb 2nd, 2014) and imaps/smtps (Dec 28th, 2013) ssl certs
 *** openssl x509 -in /path/to/certificate -noout -text
-** check apt signing key (expires January, 2014; Update 6 months before expiration)
+** check apt signing key (expires February 1st, 2015; Update 6 months before expiration)
 * check to see if our mail server(s) have been blacklisted:
 ** http://www.dnsbl.info/dnsbl-database-check.php

@@ Line 12: / Line 12: @@
 ** HINT: Search for open RT tickets created by ass-security@our_domain. If you like the command line, then you can use this (mainly self explanatory, just run it) script: ./ass/scripts/security/show_security
 * certificate and gpg key expiration dates
-** check the https and imaps ssl certs (renewed February 2012, expires February 2014)
+** check the https (Feb 2nd, 2014) and imaps/smtps (Dec 28th, 2013) ssl certs
 *** openssl x509 -in /path/to/certificate -noout -text
 ** check apt signing key (expires January, 2014; Update 6 months before expiration)

@@ Line 40: / Line 40: @@
 *  Look for rogue wireless access points
 ** trace all cables connected to:
-*** credit card machine network (log in asssvm/docs/logs/credit-card-network)
+*** credit card machine network (at least monthly, log in asssvm/docs/logs/credit-card-network)
 *** wireless network (is this needed? more we're looking for wireless where it shouldn't be)
 ** [http://todo.freegeek.org/Ticket/Display.html?id=20057#txn-254415 policy and procedure discussion]

@@ Line 38: / Line 38: @@
 ** log the current server's kilowatt's for the past cycle
 ** move kill-a-watt to new server
-*  Look for rogue wireless access points (at least quarterly: last done September 27th, 2012)
+*  Look for rogue wireless access points (at least quarterly: last done October 18th, 2012)
 ** trace all cables connected to:
 *** credit card machine network