Add README file
This commit is contained in:
parent
c1e98d86af
commit
7e4711ba5c
61
README.md
Normal file
61
README.md
Normal file
@ -0,0 +1,61 @@
|
||||
# FIC forensic challenge validation server
|
||||
|
||||
This is a CTF server for distributing and validating exercices. It is design to
|
||||
be robust, so it uses some uncommon technologies like client certificate for
|
||||
authentication, cryptographic functions and DMZ network architecture.
|
||||
|
||||
## Development and testing
|
||||
|
||||
The easiest way to have a working server is to build a Docker container.
|
||||
|
||||
### Docker
|
||||
|
||||
First, build the container with the following command:
|
||||
```
|
||||
docker build -t fic2014 .
|
||||
```
|
||||
|
||||
Then, run it with:
|
||||
```
|
||||
docker run -t -i -P fic2014
|
||||
```
|
||||
It will ask you for a passphrase, you must provide one with at least 4
|
||||
characters. This key is used to generate the server certificate.
|
||||
|
||||
When you see:
|
||||
```
|
||||
root@xxxxxxxxxxxx:/var/www/fic2014-server/misc#
|
||||
```
|
||||
congratulations, the container is running!
|
||||
|
||||
Use `docker ps` to view to which local ports was assigned the contained
|
||||
webserver.
|
||||
|
||||
|
||||
## Production environnement
|
||||
|
||||
### Setup
|
||||
|
||||
#### Frontend
|
||||
|
||||
FIXME
|
||||
|
||||
#### Backend
|
||||
|
||||
FIXME
|
||||
|
||||
|
||||
### History
|
||||
|
||||
#### FIC2014
|
||||
|
||||
Two machines were used : one for backend (Phobos) and one for frontend
|
||||
(Deimos). They ran a GNU/Linux Gentoo Hardened with custom 3.2 kernel without
|
||||
module loading, unused and unecessary components and with all GrSecurity
|
||||
features activated.
|
||||
|
||||
Each machine was two network interfaces: one was used to permit to the backend
|
||||
machine to connect to the frontend (over IPv6). The second interface on the
|
||||
backend was used for administration purpose (with a laptop not connected to
|
||||
Internet). The second interface on the frontend was used to provide network
|
||||
connectivity to participants.
|
Loading…
Reference in New Issue
Block a user