[B! SSL] kimihitoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kimihito id:kimihito

SSLã«é–¢ã™ã‚‹kimihitoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (8)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ä»Šæ›´èžã‘ãªã„SSL/HTTPS - Qiita
SSL/HTTPSã®ä»•çµ„ã¿ã‚’ã–ã£ãã‚Šç†è§£ã—ãªãŒã‚‰ã€ ã‚ªãƒ¬ã‚ªãƒ¬HTTPSã®ç¨¼åƒã¾ã§ã€‚ 0.ãã‚‚ãã‚‚SSLã£ã¦ä½•ï¼Ÿ æ¦‚è¦ SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã¨ã¯ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã®æ‰€æœ‰è€…ã®æƒ…å ±ã€é€ä¿¡æƒ…å ±ã®æš—å·åŒ–ã«å¿…è¦ãªéµã€ç™ºè¡Œè€…ã®ç½²åãƒ‡ãƒ¼ã‚¿ã‚’æŒã£ãŸé›»åè¨¼æ˜Žæ›¸ã§ã™ã€‚ SSLã‚µãƒ¼ãƒãƒ¼ã«ã¯ä¸»ã«äºŒã¤ã®å½¹å‰²ãŒã‚ã‚Šã¾ã™ã€‚ è¨¼æ˜Žæ›¸ã«è¡¨ç¤ºã•ã‚ŒãŸãƒ‰ãƒ¡ã‚¤ãƒ³ã®æ‰€æœ‰è€…ã§ã‚ã‚‹ã“ã¨ã®è¨¼æ˜Ž ãƒ–ãƒ©ã‚¦ã‚¶ã¨ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒãƒ¼é–“ã§ã®SSLæš—å·åŒ–é€šä¿¡ã®å®Ÿç¾ ä¸€èˆ¬çš„ã«ã¯ã€ç¬¬ä¸‰è€…ã‚µãƒ¼ãƒ“ã‚¹ãŒWHOISã¨ä¼æ¥å®Ÿåœ¨æƒ…å ±ã‚’ç…§ä¼šã—ã¦è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¾ã™ã€‚è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹äººã‚’èªè¨¼å±€ã¨ã„ã„ã¾ã™ã€‚ ã‚ˆã—ã€SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ã¤ãã‚Œã°ã„ã„ã‚“ã ãªã€‚ ã‚ªãƒ¬ã‚ªãƒ¬SSLã¨ã¯ "ä¿ºè‡ªèº«ãŒèªè¨¼å±€ã«ãªã‚‹ã“ã¨ã â€¦" ç¤¾ä¼šçš„ä¿¡ç”¨ã¯ãªã„SSLãªã®ã§é‹ç”¨ã«ã¯æ³¨æ„ã—ã¦ãã ã•ã„ã€‚ ãã®å‰ã«ã€æš—å·åŒ–ã£ã¦ãªã‚“ã§ã™ã‹ï¼Ÿ # encoding: utf-8 require 'OpenSSL' def encry
kimihito 2012/10/25
SSL
ãƒªãƒ³ã‚¯
OpenSSLã§è‡ªå·±èªè¨¼å±€ã¨è¨¼æ˜Žæ›¸ã®ä½œæˆ - bnote
ã¾ãšã€OpenSSLãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã¨ã—ã¦é€²ã‚ã¾ã™ã€‚ æœ¬æ¥ã€ä¿¡é ¼ã®ã‚ã‚‹èªè¨¼å±€ã«èªè¨¼ã—ã¦ã‚‚ã‚‰ã„ã¾ã™ãŒ ä»Šå›žã¯ã€è‡ªåˆ†ã§èªè¨¼ã™ã‚‹ãŸã‚ã®è‡ªå·±èªè¨¼å±€ã‚’ä½œæˆã—ã¾ã™ã€‚ CAã®ä½œæˆã¯ã€/usr/local/ssl/CAã«è¡Œã„ã¾ã™ã€‚ ã‚ã‚‰ã‹ã˜ã‚ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’ä½œæˆã—ã¦ãŠãã¾ã™ã€‚ OpenSSLãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚ã‚‹ miscãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«CA.shã¨ã„ã†ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒã‚ã‚Šã¾ã™ã€‚ ã“ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§èªè¨¼å±€ã‚’æ§‹ç¯‰ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ CA.shã‚’CAã®ä½œæˆå ´æ‰€ã«ã‚³ãƒ”ãƒ¼ã—ã¾ã™ã€‚ cp CA.sh /usr/local/ssl/CA æ§‹ç¯‰ã™ã‚‹å ´æ‰€ç‰ã‚’å¤‰æ›´ã™ã‚‹ãŸã‚ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’å°‘ã—ä¿®æ£ã—ã¾ã™ã€‚ openssl.cnfã®[CA_default]-dirã‚‚åŒæ§˜ã«ä¿®æ£ã—ã¾ã™ã€‚ DAYS="-day 3650" CATOP=/usr/local/ssl/CA CAKEY=./cakey.pem CACER
kimihito 2012/04/23
SSL

OpenSSL
ãƒªãƒ³ã‚¯
Linux(CentOS)ã®ç‹¬è‡ªCAå±€ã§ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãƒ»ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ : è‰é£Ÿç³»ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒ–ãƒã‚°ã€€ã€œè‡ªå·±æŠ•è³‡ã®ãŸã‚ã®èªæ›¸ã€œ
ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚’è‡ªç§°ã—ã¦ã„ãªãŒã‚‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã‚‰ã—ã„ã“ã¨ã¯ã»ã¨ã‚“ã©æ›¸ã„ã¦ã„ãªã‹ã£ãŸã®ã§ã™ãŒä»Šæ—¥ã¯æŠ€è¡“ãƒã‚¿ã§ã™ã€‚ Linuxã§ç‹¬è‡ªCAå±€ã‚’ç«‹ã¦ã€ã„ã‚ã‚†ã‚‹ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã£ã¦ã¿ãŸã®ã§æ‰‹é †åŒ–ã—ã¾ã—ãŸã€‚ ã€ä½œã£ãŸã‚‚ã®ã€‘ ãƒ»èªè¨¼å±€ï¼ˆCAç§˜å¯†éµã€ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ï¼‰ ãƒ»ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ ãƒ»ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ æ‰‹é †æ›¸ãƒ¬ãƒ™ãƒ«ãªã®ã§åˆã‚ã¦ã®äººã§ã‚‚ã“ã®é€šã‚Šã‚„ã‚Œã°ã§ãã‚‹ã¨æ€ã„ã¾ã™ã€‚ â– ä½œæ¥ç’°å¢ƒ CentOS6.0 â– opensslã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« opensslã¯ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹å‰æã§æ‰‹é †çœç•¥ â– æ‹¡å¼µåã®ãƒãƒ¼ãƒŸãƒ³ã‚°ãƒ«ãƒ¼ãƒ« ã‚°ã‚°ã‚‹ã¨.pemã€.crtã€.keyãªã©ã„ã‚ã‚“ãªæ‹¡å¼µåãŒå‡ºã¦ãã‚‹ãŒåŸºæœ¬çš„ã«ä½•ã§ã‚‚ã‚ˆã„ã€‚ ã“ã®æ‰‹é †ã§ã¯ä»¥ä¸‹ã®ãƒ«ãƒ¼ãƒ«ã§ä½œæˆã™ã‚‹ã€‚ ãƒ»CAç§˜å¯†éµ cakey.pem ãƒ»ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ cacert.pem ãƒ»ç§˜å¯†éµ xxx.key ãƒ»å„ç¨®è¨¼æ˜Žæ›¸ã€€ xxx.cerã€€â†’ã€€.cerã¨ã™ã‚‹ã¨ã¯Windowsä¸Š
kimihito 2012/04/20
SSL
ãƒªãƒ³ã‚¯
ç‹¬è‡ªCAï¼ˆèªè¨¼æ©Ÿé–¢ï¼‰ã‚’ç«‹ã¡ä¸Šã’ã‚‹
# cd /var/ssl/CA # openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 7000 Using configuration from /etc/ssl/openssl.cnf Generating a 1024 bit RSA private key ............................++++++ .....++++++ writing new private key to 'private/cakey.pem' Enter PEM pass phrase:******** Verifying password - Enter PEM pass phrase:******** ----- You are about to be asked to enter inf
kimihito 2012/04/20
SSL
ãƒªãƒ³ã‚¯
SSLå…¥é–€
2005/10/02æ›´æ–° é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ã‚’æ‹è¦‹ã™ã‚‹ã«ã¤ã‘ã€PKI ã¨ã—ã¦ã® SSL ãŒ ä¸é€”åŠç«¯ãªç†è§£ã«ã‚ˆã‚Šå°ç„¡ã—ã«ã•ã‚Œã¦ã„ã‚‹å ´é¢ãŒå¤šã„ã‚ˆã†ã«æ€ãˆã¾ã™ã€‚ãã“ã§ï¼ˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å°‚é–€å®¶ã§ã¯ãªã„ã‚‚ã®ã®ï¼‰ç§ãŒç†è§£ã—ã¦ã„ã‚‹ç¯„å›²ã§è‡ªåˆ†ãªã‚Šã«å…¥é–€è§£èª¬ã‚’æ›¸ã„ã¦ã¿ã¾ã—ãŸã€‚ ã¡ãªã¿ã«ã€SSL v3 ã«å°‘ã—ã®æ”¹è‰¯ã‚’åŠ ãˆãŸã‚‚ã®ãŒ TLS v1.0 ã§ã™ãŒã€æŠ€è¡“çš„ãªç´°ã‹ã„ç‚¹ã‚’æ°—ã«ã—ãªã„ å ´åˆã¯ã€SSLã¨ç·ç§°ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã“ã§ã‚‚ã€ãã‚“ãªç´°ã‹ã„ã“ã¨ã¯æ°—ã«ã—ã¦ã„ãªã„ã®ã§ SSL ã¨ç·ç§°ã—ã¦ã„ã¾ã™ã€‚ SSLã—ãã¿è§£èª¬ ã¾ãšã€SSLã‚’ç†è§£ã™ã‚‹ãŸã‚ã«å¿…è¦ãªç”¨èªžã‚’è§£èª¬ã—ã€æ¬¡ã« SSLãŒ PKI ã¨ã—ã¦ã©ã®ã‚ˆã†ãªæ§‹æˆè¦ç´ ã§å®‰å…¨ãªé€šä¿¡è·¯ã‚’å½¢æˆã—ã¦ã„ã‚‹ã‹è§£èª¬ã—ã¾ã™ã€‚ æš—å·åŒ–ã¨å¾©å·åŒ– ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã§æš—å·åŒ–ã¨ã„ã†ã¨ã€æš—å·åŒ–ã™ã‚‹å‰ã®ãƒ‡ãƒ¼ã‚¿ ï¼ˆä»¥ä¸‹ã€ã€Œå¹³æ–‡ï¼ˆã²ã‚‰ã¶ã‚“ï¼‰ã€ã¨å‘¼ã³ã¾ã™ï¼‰ã¨éµã¨ãªã‚‹ãƒ‡ãƒ¼ã‚¿ï¼ˆä»¥ä¸‹ã€Œéµã€ã¨å‘¼ã³ã¾ã™ï¼‰ ã‚’ä½¿ã£ã¦
kimihito 2012/04/19
SSL
ãƒªãƒ³ã‚¯
IBM Developer
IBM Developer is your one-stop location for getting hands-on training and learning in-demand skills on relevant techno logies such as generative AI, data science, AI, and open source.
kimihito 2012/04/17
SSL

security
ãƒªãƒ³ã‚¯
Coming Soon
We're under construction. Please check back for an update soon.
kimihito 2012/04/17
SSL

ã‚µãƒ¼ãƒ
ãƒªãƒ³ã‚¯
åŸºç¤ŽçŸ¥è˜ã€€SSLã®ä»•çµ„ã¿
SSLï¼ˆSecure Socket Layerï¼‰ã¨ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã§ãƒ‡ãƒ¼ã‚¿ã‚’æš—å·åŒ–ã—ã¦é€å—ä¿¡ã™ã‚‹æ–¹æ³•ã®ã²ã¨ã¤ã§ã™ã€‚ é€šå¸¸ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§ã¯ã€æš—å·åŒ–ã•ã‚Œãšã«ãƒ‡ãƒ¼ã‚¿ãŒé€ä¿¡ã•ã‚Œã¦ã„ã¾ã™ã€‚ãã®ãŸã‚ã€é€šä¿¡é€”ä¸ã§ãƒ‡ãƒ¼ã‚¿ã‚’å‚å—ã•ã‚Œã‚‹ã¨ã€æƒ…å ±ãŒç¬¬ä¸‰è€…ã«æ¼ã‚Œã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ã¾ãŸã€ç›¸æ‰‹ã®ãªã‚Šã™ã¾ã—ã«æ°—ä»˜ã‹ãšã«é€šä¿¡ã™ã‚‹ã¨ã€ãƒ‡ãƒ¼ã‚¿ãŒãªã‚Šã™ã¾ã—ã®ç›¸æ‰‹ã«å–å¾—ã•ã‚Œã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ç¾åœ¨ã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰ç•ªå·ã‚„å€‹äººæƒ…å ±ã‚’æ‰±ã†å¤šãã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã§ã¯ã€é€šä¿¡é€”ä¸ã§ã®å‚å—ã‚„ãªã‚Šã™ã¾ã—ã«ã‚ˆã‚‹æƒ…å ±æ¼æ´©ã‚’é˜²ãç›®çš„ã§ã€SSLã‚’åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚ åˆ©ç”¨è€…ãŒSSLã‚’åˆ©ç”¨ã§ãã‚‹ã‚µãƒ¼ãƒãƒ¼ã¨ãƒ‡ãƒ¼ã‚¿ã‚’ã‚„ã‚Šå–ã‚Šã™ã‚‹å ´åˆã«ã¯ã€Webã‚µãƒ¼ãƒãƒ¼ã¨åˆ©ç”¨è€…ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãŒç›¸äº’ã«ç¢ºèªã‚’è¡Œã„ãªãŒã‚‰ãƒ‡ãƒ¼ã‚¿ã‚’é€å—ä¿¡ã™ã‚‹ã‚ˆã†ã«ãªã‚‹ãŸã‚ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«ãŠã‘ã‚‹é€šä¿¡å†…å®¹ã®æš—å·åŒ–åŠã³ãªã‚Šã™ã¾ã—ã®é˜²æ¢ãŒå®Ÿç¾ã•ã‚Œã¾ã™ã€‚ IEï¼ˆInternet Ex
kimihito 2012/04/17
SSL

ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ
ãƒªãƒ³ã‚¯
1