entrega
This commit is contained in:
@@ -21,10 +21,7 @@
|
||||
\@writefile{toc}{\contentsline {subsection}{\numberline {4.3}Testes}{9}{subsection.4.3}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {section}{\numberline {5}Servidor Apache e OCSP}{9}{section.5}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {subsection}{\numberline {5.1}Configuração da Máquina}{10}{subsection.5.1}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {subsection}{\numberline {5.2}Configuração do Serviço Apache}{10}{subsection.5.2}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {subsubsection}{\numberline {5.2.1}Testes}{10}{subsubsection.5.2.1}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {subsection}{\numberline {5.3}Configuração do Serviço OpenSSL}{11}{subsection.5.3}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {subsubsection}{\numberline {5.3.1}Testes}{11}{subsubsection.5.3.1}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {section}{\numberline {6}Teste Integrado}{11}{section.6}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {section}{\numberline {7}Conclusão}{11}{section.7}\protected@file@percent }
|
||||
\gdef \@abspage@last{11}
|
||||
\@writefile{toc}{\contentsline {subsubsection}{\numberline {5.1.1}Testes}{12}{subsubsection.5.1.1}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {section}{\numberline {6}Teste Integrado}{13}{section.6}\protected@file@percent }
|
||||
\@writefile{toc}{\contentsline {section}{\numberline {7}Conclusão}{13}{section.7}\protected@file@percent }
|
||||
\gdef \@abspage@last{13}
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
This is pdfTeX, Version 3.141592653-2.6-1.40.29 (TeX Live 2026/Arch Linux) (preloaded format=pdflatex 2026.4.13) 28 APR 2026 11:20
|
||||
This is pdfTeX, Version 3.141592653-2.6-1.40.29 (TeX Live 2026/Arch Linux) (preloaded format=pdflatex 2026.5.3) 3 MAY 2026 21:03
|
||||
entering extended mode
|
||||
\write18 enabled.
|
||||
restricted \write18 enabled.
|
||||
%&-line parsing enabled.
|
||||
**/home/raw/uni/fsi/trabalho/relatorio/relatorio
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.tex
|
||||
**relatorio.tex
|
||||
(./relatorio.tex
|
||||
LaTeX2e <2025-11-01>
|
||||
L3 programming layer <2026-01-19>
|
||||
(/usr/share/texmf-dist/tex/latex/base/article.cls
|
||||
@@ -100,8 +100,7 @@ Already applied: [0000-00-00] Fall back to v1 on input line 76.
|
||||
LaTeX Info: Redefining \oldstylenums on input line 163.
|
||||
LaTeX Info: Redefining \textsw on input line 173.
|
||||
)
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/style.sty
|
||||
(/usr/share/texmf-dist/tex/latex/geometry/geometry.sty
|
||||
(./style.sty (/usr/share/texmf-dist/tex/latex/geometry/geometry.sty
|
||||
Package: geometry 2020/01/02 v5.9 Page Geometry
|
||||
|
||||
(/usr/share/texmf-dist/tex/generic/iftex/ifvtex.sty
|
||||
@@ -1020,7 +1019,7 @@ LaTeX Font Info: Font shape `T1/Raleway-OsF/m/n' will be
|
||||
File: l3backend-pdftex.def 2025-10-09 L3 backend support: PDF output (pdfTeX)
|
||||
\l__color_backend_stack_int=\count371
|
||||
)
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.aux
|
||||
(./relatorio.aux
|
||||
Package babel Info: 'portuguese' activates 'portuges' shorthands.
|
||||
(babel) Reported on input line 8.
|
||||
)
|
||||
@@ -1043,8 +1042,7 @@ LaTeX Font Info: ... okay on input line 15.
|
||||
LaTeX Font Info: Checking defaults for LY1/ptm/m/n on input line 15.
|
||||
LaTeX Font Info: Trying to load font information for LY1+ptm on input line 1
|
||||
5.
|
||||
|
||||
(/usr/share/texmf-dist/tex/latex/ly1/ly1ptm.fd
|
||||
(/usr/share/texmf-dist/tex/latex/ly1/ly1ptm.fd
|
||||
File: ly1ptm.fd 2001/02/01 font definitions for LY1/ptm using Berry names.
|
||||
)
|
||||
LaTeX Font Info: ... okay on input line 15.
|
||||
@@ -1112,6 +1110,8 @@ File: epstopdf-sys.cfg 2010/07/13 v1.3 Configuration of (r)epstopdf for TeX Liv
|
||||
e
|
||||
))
|
||||
Package hyperref Info: Link coloring ON on input line 15.
|
||||
|
||||
(./relatorio.out) (./relatorio.out)
|
||||
\@outlinefile=\write4
|
||||
\openout4 = `relatorio.out'.
|
||||
|
||||
@@ -1147,7 +1147,7 @@ LaTeX Font Info: Font shape `T1/Raleway-OsF/bold/n' aliased to
|
||||
(Font) `T1/Raleway-OsF/b/n' on input line 19.
|
||||
LaTeX Font Info: Font shape `T1/Raleway-OsF/b/n' will be
|
||||
(Font) scaled to size 14.4pt on input line 19.
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.toc
|
||||
(./relatorio.toc
|
||||
LaTeX Font Info: Font shape `T1/Raleway-OsF/bold/n' aliased to
|
||||
(Font) `T1/Raleway-OsF/b/n' on input line 2.
|
||||
LaTeX Font Info: Font shape `T1/Raleway-OsF/b/n' will be
|
||||
@@ -1176,61 +1176,54 @@ File: lstlang1.sty 2025/11/14 1.11b listings language file
|
||||
)
|
||||
(/usr/share/texmf-dist/tex/latex/listings/lstlang1.sty
|
||||
File: lstlang1.sty 2025/11/14 1.11b listings language file
|
||||
)
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing
|
||||
) (./relatorio.listing
|
||||
LaTeX Font Info: Font shape `T1/Raleway-OsF/m/n' will be
|
||||
(Font) scaled to size 9.0pt on input line 1.
|
||||
) [3{/usr/share/texmf-dist/fonts/enc/dvips/cm-super/cm-super-t1.enc}]
|
||||
)
|
||||
[3{/usr/share/texmf-dist/fonts/enc/dvips/cm-super/cm-super-t1.enc}]
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing)
|
||||
(./relatorio.listing)
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
(./relatorio.listing) [4]
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
(./relatorio.listing) [5]
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing) [4]
|
||||
(./relatorio.listing)
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing) [5]
|
||||
(./relatorio.listing) [6]
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing)
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing) [6]
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing)
|
||||
Overfull \hbox (30.82649pt too wide) in paragraph at lines 281--287
|
||||
(./relatorio.listing)
|
||||
Overfull \hbox (30.82649pt too wide) in paragraph at lines 282--288
|
||||
[]\T1/Raleway-OsF/m/n/10.95 Adicionalmente, de-vido às res-tri-ções de se-gu-ra
|
||||
nça do \T1/Raleway-OsF/m/it/10.95 sys-temd\T1/Raleway-OsF/m/n/10.95 , ten-ta-mo
|
||||
s de-sa-ti-var o \T1/cmtt/m/n/10.95 ProtectHome
|
||||
[]
|
||||
|
||||
<google-authenticator.jpg, id=244, 225.84375pt x 447.6725pt>
|
||||
<google-authenticator.jpg, id=293, 225.84375pt x 447.6725pt>
|
||||
File: google-authenticator.jpg Graphic file (type jpg)
|
||||
<use google-authenticator.jpg>
|
||||
Package pdftex.def Info: google-authenticator.jpg used on input line 297.
|
||||
Package pdftex.def Info: google-authenticator.jpg used on input line 298.
|
||||
(pdftex.def) Requested size: 87.59998pt x 173.64207pt.
|
||||
|
||||
LaTeX Warning: `h' float specifier changed to `ht'.
|
||||
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing)
|
||||
(./relatorio.listing)
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing) [7]
|
||||
(./relatorio.listing) [7]
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing) [8 </home/raw/uni/fsi/
|
||||
trabalho/relatorio/google-authenticator.jpg>]
|
||||
(./relatorio.listing) [8 <./google-authenticator.jpg>]
|
||||
Overfull \hbox (2.06862pt too wide) in paragraph at lines 373--377
|
||||
[]\T1/Raleway-OsF/m/n/10.95 Para ve-ri-fi-car que o OCSP fun-ci-ona cor-rec-ta-
|
||||
mente, o cli-ente co-nec-tou ao ser-vi-dor OpenVPN:
|
||||
@@ -1238,44 +1231,58 @@ mente, o cli-ente co-nec-tou ao ser-vi-dor OpenVPN:
|
||||
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing) [9] [10]
|
||||
(./relatorio.listing) [9]
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
(./relatorio.listing) [10]
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
(./relatorio.listing)
|
||||
[11]
|
||||
LaTeX Font Info: Trying to load font information for TS1+Raleway-OsF on inpu
|
||||
t line 532.
|
||||
(/usr/share/texmf-dist/tex/latex/raleway/TS1Raleway-OsF.fd
|
||||
File: TS1Raleway-OsF.fd 2025/04/09 (autoinst) Font definitions for TS1/Raleway-
|
||||
OsF.
|
||||
)
|
||||
LaTeX Font Info: Font shape `TS1/Raleway-OsF/m/n' will be
|
||||
(Font) scaled to size 10.95pt on input line 532.
|
||||
\openout6 = `relatorio.listing'.
|
||||
|
||||
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.listing) [11]
|
||||
(/home/raw/uni/fsi/trabalho/relatorio/relatorio.aux)
|
||||
(./relatorio.listing) [12{/usr/share/texmf-dist/fonts/enc/dvips/raleway/a_2drku
|
||||
g.enc}]
|
||||
Overfull \hbox (6.38873pt too wide) in paragraph at lines 558--559
|
||||
[]\T1/Raleway-OsF/m/n/10.95 Através do tú-nel VPN, ace-de-mos agora ao en-de-re
|
||||
ço \T1/cmtt/m/n/10.95 https://apache.coimbra \T1/Raleway-OsF/m/n/10.95 no brow-
|
||||
|
||||
[]
|
||||
|
||||
[13] (./relatorio.aux)
|
||||
***********
|
||||
LaTeX2e <2025-11-01>
|
||||
L3 programming layer <2026-01-19>
|
||||
***********
|
||||
|
||||
|
||||
Package rerunfilecheck Warning: File `relatorio.out' has changed.
|
||||
(rerunfilecheck) Rerun to get outlines right
|
||||
(rerunfilecheck) or use package `bookmark'.
|
||||
|
||||
Package rerunfilecheck Info: Checksums for `relatorio.out':
|
||||
(rerunfilecheck) Before: <no file>
|
||||
(rerunfilecheck) After: FCCD2EDF8B7B6A2528F85719166C3546;3316.
|
||||
Package rerunfilecheck Info: File `relatorio.out' has not changed.
|
||||
(rerunfilecheck) Checksum: 5D3D0DE392A0C36FE6E03155397C7718;2761.
|
||||
)
|
||||
Here is how much of TeX's memory you used:
|
||||
32120 strings out of 469495
|
||||
630845 string characters out of 5470098
|
||||
1463188 words of memory out of 5000000
|
||||
59935 multiletter control sequences out of 15000+600000
|
||||
790677 words of font info for 87 fonts, out of 8000000 for 9000
|
||||
32392 strings out of 469495
|
||||
634576 string characters out of 5470099
|
||||
1507222 words of memory out of 5000000
|
||||
60105 multiletter control sequences out of 15000+600000
|
||||
791342 words of font info for 89 fonts, out of 8000000 for 9000
|
||||
16 hyphenation exceptions out of 8191
|
||||
113i,8n,122p,500b,1792s stack positions out of 10000i,1000n,20000p,200000b,200000s
|
||||
113i,8n,122p,467b,1792s stack positions out of 10000i,1000n,20000p,200000b,200000s
|
||||
</usr/share/texmf-dist/fonts/type1/impallari/raleway/Raleway-Bold.pfb></usr/s
|
||||
hare/texmf-dist/fonts/type1/impallari/raleway/Raleway-Italic.pfb></usr/share/te
|
||||
xmf-dist/fonts/type1/impallari/raleway/Raleway-Regular.pfb></usr/share/texmf-di
|
||||
st/fonts/type1/public/cm-super/sftt0900.pfb></usr/share/texmf-dist/fonts/type1/
|
||||
public/cm-super/sftt1095.pfb>
|
||||
Output written on /home/raw/uni/fsi/trabalho/relatorio/relatorio.pdf (11 pages,
|
||||
176542 bytes).
|
||||
Output written on relatorio.pdf (13 pages, 188338 bytes).
|
||||
PDF statistics:
|
||||
465 PDF objects out of 1000 (max. 8388607)
|
||||
412 compressed objects within 5 object streams
|
||||
274 named destinations out of 1000 (max. 500000)
|
||||
162 words of extra memory for PDF output out of 10000 (max. 10000000)
|
||||
636 PDF objects out of 1000 (max. 8388607)
|
||||
579 compressed objects within 6 object streams
|
||||
363 named destinations out of 1000 (max. 500000)
|
||||
306 words of extra memory for PDF output out of 10000 (max. 10000000)
|
||||
|
||||
|
||||
18
relatorio/relatorio.out
Normal file
18
relatorio/relatorio.out
Normal file
@@ -0,0 +1,18 @@
|
||||
\BOOKMARK [1][-]{section.1}{\376\377\000I\000n\000t\000r\000o\000d\000u\000\347\000\343\000o}{}% 1
|
||||
\BOOKMARK [1][-]{section.2}{\376\377\000P\000r\000e\000p\000a\000r\000a\000\347\000\343\000o\000\040\000I\000n\000i\000c\000i\000a\000l}{}% 2
|
||||
\BOOKMARK [2][-]{subsection.2.1}{\376\377\000C\000r\000i\000a\000\347\000\343\000o\000\040\000d\000e\000\040\000C\000e\000r\000t\000i\000f\000i\000c\000a\000d\000o\000s}{section.2}% 3
|
||||
\BOOKMARK [2][-]{subsection.2.2}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000\347\000\343\000o\000\040\000g\000e\000r\000a\000l}{section.2}% 4
|
||||
\BOOKMARK [1][-]{section.3}{\376\377\000V\000P\000N\000\040\000G\000a\000t\000e\000w\000a\000y}{}% 5
|
||||
\BOOKMARK [2][-]{subsection.3.1}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000\347\000\343\000o\000\040\000d\000a\000\040\000M\000\341\000q\000u\000i\000n\000a}{section.3}% 6
|
||||
\BOOKMARK [2][-]{subsection.3.2}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000\347\000\343\000o\000\040\000d\000o\000\040\000S\000e\000r\000v\000i\000\347\000o\000\040\000O\000p\000e\000n\000V\000P\000N}{section.3}% 7
|
||||
\BOOKMARK [2][-]{subsection.3.3}{\376\377\000E\000r\000r\000o\000s}{section.3}% 8
|
||||
\BOOKMARK [2][-]{subsection.3.4}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000r\000\040\000o\000\040\000u\000t\000i\000l\000i\000z\000a\000d\000o\000r\000\040\000c\000o\000m\000\040\000T\000O\000T\000P}{section.3}% 9
|
||||
\BOOKMARK [1][-]{section.4}{\376\377\000V\000P\000N\000\040\000C\000l\000i\000e\000n\000t\000\040\000\050\000R\000o\000a\000d\000\040\000W\000a\000r\000r\000i\000o\000r\000\051}{}% 10
|
||||
\BOOKMARK [2][-]{subsection.4.1}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000\347\000\343\000o\000\040\000d\000a\000\040\000M\000\341\000q\000u\000i\000n\000a}{section.4}% 11
|
||||
\BOOKMARK [2][-]{subsection.4.2}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000\347\000\343\000o\000\040\000d\000o\000\040\000C\000l\000i\000e\000n\000t\000e\000\040\000O\000p\000e\000n\000V\000P\000N}{section.4}% 12
|
||||
\BOOKMARK [2][-]{subsection.4.3}{\376\377\000T\000e\000s\000t\000e\000s}{section.4}% 13
|
||||
\BOOKMARK [1][-]{section.5}{\376\377\000S\000e\000r\000v\000i\000d\000o\000r\000\040\000A\000p\000a\000c\000h\000e\000\040\000e\000\040\000O\000C\000S\000P}{}% 14
|
||||
\BOOKMARK [2][-]{subsection.5.1}{\376\377\000C\000o\000n\000f\000i\000g\000u\000r\000a\000\347\000\343\000o\000\040\000d\000a\000\040\000M\000\341\000q\000u\000i\000n\000a}{section.5}% 15
|
||||
\BOOKMARK [3][-]{subsubsection.5.1.1}{\376\377\000T\000e\000s\000t\000e\000s}{subsection.5.1}% 16
|
||||
\BOOKMARK [1][-]{section.6}{\376\377\000T\000e\000s\000t\000e\000\040\000I\000n\000t\000e\000g\000r\000a\000d\000o}{}% 17
|
||||
\BOOKMARK [1][-]{section.7}{\376\377\000C\000o\000n\000c\000l\000u\000s\000\343\000o}{}% 18
|
||||
Binary file not shown.
Binary file not shown.
@@ -534,7 +534,8 @@ DocumentRoot "/var/www/html"
|
||||
\item \textbf{Autenticação com o Certificado:} O acesso foi negado ao apresentar certificados inválidos ou ausentes no browser, devolvendo um erro com sobre não conseguir establecer connexão porque falta de certificado.
|
||||
\end{itemize}
|
||||
|
||||
Para Testar o OCSP, fizemos os seguintes paços:
|
||||
Para testar o OCSP, fizemos os seguintes paços:
|
||||
|
||||
\begin{enumerate}
|
||||
\item Estabelecer a ligação VPN e verificar a conectividade à rede interna.
|
||||
\item No diretório da autoridade de certificação (máquina \textit{host}), revogar o certificado do utilizador:
|
||||
@@ -550,11 +551,13 @@ openssl ca -revoke user.crt -config cheese.cfg -keyfile ca.key -cert ca.crt
|
||||
|
||||
Para validar, efetuámos um teste integrado englobando todos os requisitos:
|
||||
\begin{enumerate}
|
||||
\item Na máquina \textit{Road Warrior}, iniciámos a ligação OpenVPN fornecendo o certificado de cliente e, como password, a concatenação da password do utilizador com o código TOTP gerado pelo \textit{Google Authenticator}.
|
||||
\item O \textit{Gateway} OpenVPN verificou o certificado cliente contra o servidor OCSP e validou o TOTP, permitindo o estabelecimento do túnel.
|
||||
\item Através do túnel VPN, acedemos ao endereço \texttt{https://10.60.0.1} no browser.
|
||||
\item Começamos por iniciar todas as máquinas com os devidos \textit{scripts}.
|
||||
\item Na máquina \textit{Road Warrior}, iniciámos a ligação OpenVPN com o utilizador, a sua password e o \textit{token} TOTP.
|
||||
\item O \textit{Gateway} OpenVPN verifica as credenciais e verifica o certificado cliente contra o servidor OCSP.
|
||||
\item Antes de acedermos ao firefox, temos que verificar que já adicionámos a nossa a nossa CA e o certificado \texttt{p12}.
|
||||
\item Através do túnel VPN, acedemos agora ao endereço \texttt{https://apache.coimbra} no browser.
|
||||
\item O servidor Apache solicitou o certificado X.509 do utilizador e validou a sua autenticidade e estado de revogação no OCSP.
|
||||
\item Finalmente, o Apache apresentou a página de login para o segundo fator, onde inserimos as credenciais e o código TOTP, concedendo acesso à página interna protegida.
|
||||
\item Finalmente, o Apache apresentou a página de login, onde inserimos as credenciais e o código TOTP.
|
||||
\end{enumerate}
|
||||
|
||||
|
||||
|
||||
@@ -14,9 +14,6 @@
|
||||
\contentsline {subsection}{\numberline {4.3}Testes}{9}{subsection.4.3}%
|
||||
\contentsline {section}{\numberline {5}Servidor Apache e OCSP}{9}{section.5}%
|
||||
\contentsline {subsection}{\numberline {5.1}Configuração da Máquina}{10}{subsection.5.1}%
|
||||
\contentsline {subsection}{\numberline {5.2}Configuração do Serviço Apache}{10}{subsection.5.2}%
|
||||
\contentsline {subsubsection}{\numberline {5.2.1}Testes}{10}{subsubsection.5.2.1}%
|
||||
\contentsline {subsection}{\numberline {5.3}Configuração do Serviço OpenSSL}{11}{subsection.5.3}%
|
||||
\contentsline {subsubsection}{\numberline {5.3.1}Testes}{11}{subsubsection.5.3.1}%
|
||||
\contentsline {section}{\numberline {6}Teste Integrado}{11}{section.6}%
|
||||
\contentsline {section}{\numberline {7}Conclusão}{11}{section.7}%
|
||||
\contentsline {subsubsection}{\numberline {5.1.1}Testes}{12}{subsubsection.5.1.1}%
|
||||
\contentsline {section}{\numberline {6}Teste Integrado}{13}{section.6}%
|
||||
\contentsline {section}{\numberline {7}Conclusão}{13}{section.7}%
|
||||
|
||||
Reference in New Issue
Block a user