Initial commit - 611 cybersecurity skills across all subdomains

2026-08-05 02:10:18 +03:00 · 2026-02-25 10:47:44 +01:00
commit 22a7ab1462
1765 changed files with 280648 additions and 0 deletions
@@ -0,0 +1,42 @@
+# Standards and References - SSL Certificate Lifecycle Management
+
+## Primary Standards
+
+### RFC 5280 - Internet X.509 PKI Certificate and CRL Profile
+- **URL**: https://www.rfc-editor.org/rfc/rfc5280
+- **Description**: Core X.509 certificate format and Certificate Revocation List (CRL)
+
+### RFC 6960 - X.509 Online Certificate Status Protocol (OCSP)
+- **URL**: https://www.rfc-editor.org/rfc/rfc6960
+- **Description**: Real-time certificate revocation checking
+
+### RFC 8555 - Automatic Certificate Management Environment (ACME)
+- **URL**: https://www.rfc-editor.org/rfc/rfc8555
+- **Description**: Protocol for automating certificate issuance (Let's Encrypt)
+
+### RFC 6962 - Certificate Transparency
+- **URL**: https://www.rfc-editor.org/rfc/rfc6962
+- **Description**: Public logging framework for TLS certificates
+
+### RFC 2986 - PKCS #10: Certification Request Syntax
+- **URL**: https://www.rfc-editor.org/rfc/rfc2986
+- **Description**: CSR format specification
+
+### NIST SP 800-57 Part 3 - Application-Specific Key Management
+- **URL**: https://csrc.nist.gov/publications/detail/sp/800-57-part-3/rev-1/final
+- **Description**: Key management guidance for TLS certificates
+
+## Tools
+
+### Let's Encrypt / Certbot
+- **URL**: https://letsencrypt.org/
+- **Certbot**: https://certbot.eff.org/
+- **Rate limits**: 50 certificates per domain per week
+
+### Certificate Transparency Logs
+- **Google**: https://ct.googleapis.com/logs
+- **crt.sh**: https://crt.sh/ (certificate search)
+
+### Mozilla Observatory
+- **URL**: https://observatory.mozilla.org/
+- **Description**: Web security scanning including TLS configuration
@@ -0,0 +1,81 @@
+# Workflows - SSL Certificate Lifecycle Management
+
+## Workflow 1: Certificate Request and Issuance
+
+```
+[Generate Private Key] (ECDSA P-256 or RSA 4096)
+      |
+[Create CSR] (PKCS#10)
+(CN, SAN, Organization, etc.)
+      |
+[Submit CSR to CA]
+      |
+[CA Validates Domain/Org]
+(DNS, HTTP, or Email challenge)
+      |
+[CA Issues Certificate]
+      |
+[Download Certificate + Chain]
+      |
+[Verify Certificate Chain]
+      |
+[Deploy to Server]
+```
+
+## Workflow 2: Expiration Monitoring
+
+```
+[Certificate Inventory] (list of all domains/endpoints)
+      |
+[For Each Endpoint]:
+  [Connect and retrieve certificate]
+  [Parse notAfter field]
+  [Calculate days remaining]
+      |
+[Apply Threshold Rules]:
+  > 30 days: OK
+  15-30 days: WARNING
+  < 15 days: CRITICAL
+  Expired: ALERT
+      |
+[Generate Report / Send Alerts]
+```
+
+## Workflow 3: Automated Renewal (ACME)
+
+```
+[Cron Job / Scheduler]
+      |
+[Check Certificate Expiry]
+      |
+[< 30 days remaining?]
+  NO  --> Sleep
+  YES --> [Initiate ACME Renewal]
+              |
+          [Complete Challenge]
+          (HTTP-01, DNS-01, TLS-ALPN-01)
+              |
+          [Receive New Certificate]
+              |
+          [Deploy and Reload Server]
+              |
+          [Verify New Certificate Works]
+```
+
+## Workflow 4: Certificate Revocation
+
+```
+[Security Incident Detected]
+(key compromise, CA breach, etc.)
+      |
+[Revoke Certificate with CA]
+(provide reason code)
+      |
+[Verify in CRL / OCSP]
+      |
+[Issue Replacement Certificate]
+      |
+[Deploy Replacement]
+      |
+[Update Certificate Inventory]
+```