[B! https][apache] manabouã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

manabou id:manabou

httpsã¨apacheã«é–¢ã™ã‚‹manabouã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

mod_jk ãª apache ã«ã€ã€Œè‡ªåˆ†ã¯ HTTPS ã‚’æ‰±ã£ã¦ã„ã‚‹ã€ã¨æ€ã„è¾¼ã¾ã›ã‚‹ - tokuhirom's blog
mod_jk ãª apache ã«ã€ã€Œè‡ªåˆ†ã¯ HTTPS ã‚’æ‰±ã£ã¦ã„ã‚‹ã€ã¨æ€ã„è¾¼ã¾ã›ã‚‹ SetEnv HTTPS on ã§ OK ã§ã™ã€‚ HTTPS ã¨ã„ã†åå‰ã‚’é¿ã‘ãŸã„å ´åˆã¯ JkHTTPSIndicator HOGE ãªã©ã¨è¨å®šã™ã‚Œã°ã‚ˆã„ã€‚ Published: 2015-05-07(Thu) 23:24
manabou 2015/02/03
apache

https

mod_jk
ãƒªãƒ³ã‚¯
How to Disable Weak Ciphers and SSL 2.0 and SSL 3.0 in Apache
How to Disable Weak Ciphers and SSL 2.0 and SSL 3.0 in Apache In order for merchants to handle credit cards, the Payment Card Industry Data Security Standard (PCI-DSS) requires web sites to "use strong cryptography and security protocols such as SSL/TLS or IPSEC to safeguard sensitive cardholder data during transmission over open, public networks." Thatâ€™s a pretty vague definition, but what is rea
manabou 2014/02/12
https

ssl

cipher

apache

http
ãƒªãƒ³ã‚¯
How do I disable MEDIUM and WEAK/LOW strength ciphers in Apache + mod_ssl?
manabou 2014/02/12
https

ssl

cipher

apache

http
ãƒªãƒ³ã‚¯
SSL Labs - Projects / Public SSL Server Database - SSL Server Test
This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet. Please note that the information you submit here is used only to provide you the service. We don't use the domain names or the test results, and we never will.
manabou 2014/02/12
https

ssl

cipher

apache

http

test

security
ãƒªãƒ³ã‚¯
How do I enable perfect forward secrecy by default on Apache?
Warning: please only use the recommendations for Apache configuration from the answers below. For which cipher(s) to use - security norms change over time and some of the security advice below is already out of date. In the wake of recent events, I have been reconsidering my Apache setup. Currently, my apache site config looks something like this: <IfModule mod_ssl.c> <VirtualHost *:80> ServerName
manabou 2014/02/12
https

ssl

cipher

apache

http
ãƒªãƒ³ã‚¯
VMWareä¸Šã®Linuxã§ï¼ŒApacheã«è‡ªå·±ç½²åã®SSLé€šä¿¡ã‚’ã•ã›ã‚‹ãŸã‚ã®æ‰‹é †ã€€ï¼ˆã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã§ï¼Œä»®æƒ³ãƒžã‚·ãƒ³ä¸Šã®Webã‚µãƒ¼ãƒã«HTTPSæŽ¥ç¶šï¼‰ - ä¸»ã«è¨€èªžã¨ã‚·ã‚¹ãƒ†ãƒ é–‹ç™ºã«é–¢ã—ã¦
Apache Webã‚µãƒ¼ãƒã¨ã®é–“ã§ï¼ŒSSLã«ã‚ˆã‚‹ã€Œæš—å·åŒ–ã•ã‚ŒãŸé€šä¿¡ã€ã‚’è¡Œãªã†ã€‚ ã‚µãƒ¼ãƒã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹éš›ã®URLã¯ï¼Œhttps://ã€œã€œã€€ã«ãªã‚‹ã€‚ ãã®ãŸã‚ã®ç’°å¢ƒæ§‹ç¯‰ã®æ–¹æ³•ã‚’ãƒ¡ãƒ¢ã—ãŸæ‰‹é †æ›¸ã€‚ æš—å·åŒ–ã®ãŸã‚ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯ï¼Œè‡ªå‰ã§ç”Ÿæˆã™ã‚‹ã€‚ï¼ˆï¼ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ï¼‰ ã¾ãŸï¼Œé€šä¿¡ã®å†…å®¹ãŒæš—å·åŒ–ã•ã‚Œã¦ã„ã‚‹æ§˜åã‚’ï¼Œãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ã«ã‚ˆã£ã¦ç›´ã«ç›®ã§è¦‹ã¦ï¼Œå®‰å…¨æ€§ã‚’ç¢ºèªã™ã‚‹ã€‚ ï¼ˆï¼‘ï¼‰ä»®æƒ³ãƒžã‚·ãƒ³ã®Linuxä¸Šã«Apacheã‚’å°Žå…¥ ï¼ˆï¼’ï¼‰æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„HTTPé€šä¿¡ã‚’ã€Œç›—è´ã€å¯èƒ½ã§ã‚ã‚‹ã“ã¨ã®ç¢ºèª ï¼ˆï¼“ï¼‰SSLãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®æº–å‚™ ï¼ˆï¼”ï¼‰ç§˜å¯†éµã‚’ç”Ÿæˆ ï¼ˆï¼•ï¼‰è‡ªå·±ç½²åã«ã‚ˆã‚‹ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ä½œæˆ ï¼ˆï¼–ï¼‰Apacheã«HTTPSé€šä¿¡ã®è¨å®šã‚’å®Ÿæ–½ ï¼ˆï¼—ï¼‰æš—å·åŒ–ã•ã‚Œã¦ã„ã‚‹HTTPSé€šä¿¡ã‚’ã€Œç›—è´ã€ä¸å¯èƒ½ã§ã‚ã‚‹ã“ã¨ã®ç¢ºèª ã“ã“ã§ï¼ŒApacheã¯Linuxï¼ˆCentOSï¼‰ä¸Šã§å‹•ä½œã—ã¦ãŠã‚Šï¼ŒLinuxã¯VMWare Serverä¸Šã®ä»®æƒ³
manabou 2012/06/29
apache

linux

ssl

https

vmware
ãƒªãƒ³ã‚¯
1