[B! apache] mikage014ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

mikage014 id:mikage014

apacheã«é–¢ã™ã‚‹mikage014ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (81)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Apacheã®TLSè¨å®šã‚’2020å¹´å‘ã‘ã«æ›´æ–°ã™ã‚‹ï½œTechRacho by BPSæ ªå¼ä¼šç¤¾
BPSã®ç¦å²¡æ‹ ç‚¹ã¨ã—ã¦ä¸€ç·’ã«ãŠä»•äº‹ã‚’ã•ã›ã¦ã„ãŸã ã„ã¦ã„ã¾ã™ã€æ ªå¼ä¼šç¤¾ã‚¦ã‚¤ãƒ³ã‚°ãƒ‰ã‚¢ã®ãƒ¢ãƒªãƒ¤ãƒžã§ã™ã€‚ ä»Šå›žã®ãƒ†ãƒ¼ãƒžã¯TLSå¯¾å¿œï¼ˆè§¦ã‚Œã‚‹ã®ã¯HTTPSåŒ–ã®è¨å®šã«é–¢ã™ã‚‹ãŠè©±ï¼‰ã§ã™ï¼ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯/ã‚¤ãƒ³ãƒ•ãƒ©ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®æ–¹ã€…ã®é ˜åŸŸã«ã€ã¡ã‚‡ã£ã¨ã ã‘å¦ç¿’ã®æ‰‹ã‚’ä¼¸ã°ã—ã¦ã¿ã¾ã—ãŸã€‚ æœ¬è¨˜äº‹ã¯TLSã¸ã®ç†è§£åº¦ãŒä¸‹è¨˜ã®æ§˜ãªæ–¹ã€…ãŒå¯¾è±¡ã§ã™â—ï¸ ã¨ã‚Šã‚ãˆãšé€šä¿¡ã‚’æš—å·åŒ–ã™ã‚‹ã‚„ã¤ã£ã¦äº‹ã¯çŸ¥ã£ã¦ã‚‹ SSL/TLSå¯¾å¿œã¯è¡Œã£ãŸäº‹ã‚ã‚‹ãŒã€è©³ã—ãè€ƒãˆãŸã“ã¨ãŒãªã„ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£é–¢é€£ã«ã¡ã‚‡ã£ã¨ã§ã‚‚å¼·ããªã‚ŠãŸã„æ„å¿—ã®ã‚ã‚‹æ–¹ èƒŒæ™¯ ãšã„ã¶ã‚“å‰ã«Amazon Linux2ã§æ§‹ç¯‰ã—ãŸã‚µãƒ¼ãƒãƒ¼(è¶£å‘³é–¢é€£ãƒ–ãƒã‚°ç”¨)ãŒãµã¨æ°—ã«ãªã‚Šã€ SSL/TLSã®è¨å®šã£ã¦ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã¾ã¾ã„ã˜ã£ã¦ãªã„ãªãƒ¼ã©ã†ãªã£ã¦ã‚“ã ã‚ã†ðŸ¤” ãã—ã¦è»½ã„æ°—æŒã¡ã§Qualys SSL Labs SSL Server Test ã§è„†å¼±æ€§ã‚¹ã‚ãƒ£ãƒ³ã—ãŸã®ãŒãã£ã‹ã‘ã§ã—ãŸã€‚ çµæžœã¯ã€ŽBã€æ‰€
mikage014 2021/05/15
apache

SSL
ãƒªãƒ³ã‚¯
ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ä¸ç”»é¢ã‚’å‡ºã™æ£ã—ã„ä½œæ³•ã¨.htaccessã®æ›¸ãæ–¹ | Webæ‹…å½“è€…Forum
ä»Šå›žã¯ã€Webã‚µã‚¤ãƒˆã‚„ã‚µãƒ¼ãƒ“ã‚¹ã‚’ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ä¸ã«ã™ã‚‹å ´åˆã«ã€ã©ã®URLã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã‚‚ã€Œãƒ¡ã‚¤ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ä¸ã§ã™ã€ã®ç”»é¢ã‚’å‡ºã™æ£ã—ã„ã‚„ã‚Šæ–¹ã‚’ã€äººé–“ã«ã‚‚æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³ã«ã‚‚é©åˆ‡ã«ã™ã‚‹ä½œæ³•ã‚’ä¸»çœ¼ã«è§£èª¬ã—ã¾ã™ã€‚ ã“ã®é€±æœ«ã®åœŸæ›œæ·±å¤œï½žæ—¥æ›œæ—©æœã«ã‹ã‘ã¦ã€ãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ãƒ¼ã®è¨å‚™ãƒ¡ã‚¤ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã®ãŸã‚ã€Webæ‹…ã‚’å«ã‚€ã‚¤ãƒ³ãƒ—ãƒ¬ã‚¹ã‚°ãƒ«ãƒ¼ãƒ—ã®ã»ã¨ã‚“ã©ã®Webã‚µã‚¤ãƒˆãŒã€ã©ã®URLã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã‚‚ã€Œãƒ¡ãƒ³ãƒ†ä¸ã§ã™ã€ã¨ã„ã†è¡¨ç¤ºã«ãªã£ã¦ã„ã¾ã—ãŸã€‚ ãªã®ã§ã™ãŒã€ãã®å®Ÿè£…ãŒã¡ã‚‡ã£ã¨æ°—ã«ãªã£ãŸã®ã§ã€ã€Œæ£ã—ã„ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ç”»é¢ã®å‡ºã—æ–¹ã€ã‚’èª¬æ˜Žã—ã¦ã¿ã¾ã™ã€‚ â€»2010-01-16ã€€Retry-Afterã‚’æŒ‡å®šã™ã‚‹Headerã®æŒ‡å®šã‚’ä¿®æ£ã—ã¾ã—ãŸï¼ˆã‚³ãƒ¡ãƒ³ãƒˆå‚ç…§ï¼‰ â€»2009-06-17ã€€RewriteCondã‹ã‚‰ [NC] æ¡ä»¶ã‚’å‰Šé™¤ã—ã¾ã—ãŸï¼ˆã‚³ãƒ¡ãƒ³ãƒˆå‚ç…§ï¼‰ â€»2009-06-16ã€€Retry-Afterã®è¨˜è¿°ã‚’GMTã«å¤‰æ›´ã—ã¾ã—ãŸï¼ˆã‚³ãƒ¡ãƒ³ãƒˆå‚
mikage014 2019/08/03
apache
ãƒªãƒ³ã‚¯
Apache Passengerã®è¨å®šé …ç›®ã«ã¤ã„ã¦èª¿ã¹ãŸ - HK's Weblog
Passengerã¯Railsã‚’å‹•ã‹ã™äº‹ãŒã§ãã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒã§ã‚ã‚‹ã€‚ Apacheç‰ˆã®è¨å®šé …ç›®ã«ã¤ã„ã¦èª¿ã¹ãŸã®ã§è‡ªåˆ†ç”¨ã®å‚™å¿˜éŒ²ã¨ã—ã¦æ®‹ã—ã¦ãŠãã€‚ ãƒãƒ¼ã‚¸ãƒ§ãƒ³ Passenger-4.0.37 http://www.modrails.com/documentation/Users%20guide%20Apache.html Configuring Phusion Passenger PassengerRoot http://www.modrails.com/documentation/Users%20guide%20Apache.html#_passengerroot_lt_directory_gt apacheã®passengerãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã®ç½®ã„ã¦ã‚ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’æŒ‡å®šã™ã‚‹ã€‚ æ™®é€šã¯ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ©ã‚’å®Ÿè¡Œã—ãŸæ™‚ã«è¡¨ç¤ºã•ã‚Œã‚‹ã®ã§ãã‚Œã‚’ä½¿ãˆã°ã‚ˆã„ã€‚rubyã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«å ´æ‰€ã‚’ã‹ãˆãŸå ´åˆãª
mikage014 2019/07/03
apache

Rails
ãƒªãƒ³ã‚¯
Apache ã§ã® TLS1.0 ã¨ TLS1.1 ã®ç„¡åŠ¹åŒ–ã¨ç¢ºèªæ–¹æ³•ãƒ¡ãƒ¢
Yahoo! Japan ãŒã€2018å¹´6æœˆ1æ—¥ã‹ã‚‰ TLS1.0 ã¨ TLS1.1 ã®ã‚µãƒãƒ¼ãƒˆã‚’é †æ¬¡çµ‚äº†ã—ã¦ TLS1.2 ã®ã¿ã®ã‚µãƒãƒ¼ãƒˆã«åˆ‡ã‚Šæ›¿ãˆã¦ã„ã¾ã™ã€‚ã“ã“æ•°å¹´ã€å„ç¤¾ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒ“ã‚¹ã§ã‚‚ TLS1.0 ã¨ TLS1.1 ã‚’ç„¡åŠ¹åŒ–ã™ã‚‹å‹•ãã‚‚ã‚ã‚Šã€ä»Šå¾Œ SSL/TLS ã®ãƒ—ãƒãƒˆã‚³ãƒ«ã¯ TLS1.2 ä»¥ä¸Šã«è¨å®šã™ã‚‹ã“ã¨ãŒæ¨™æº–ã«ãªã‚‹ã§ã—ã‚‡ã†ã€‚ãã“ã§ä»Šå›žã¯ã€Apache httpd ã‚µãƒ¼ãƒãƒ¼ã§ TLS1.0 ã¨ TLS1.1 ã‚’ç„¡åŠ¹ã«ã—ã€è¨å®šã‚’ç¢ºèªã™ã‚‹æ–¹æ³•ã‚’ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã—ãŸã€‚ å‚è€ƒè³‡æ–™ï¼šYahoo!ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚»ãƒ³ã‚¿ãƒ¼ TLS1.0 ã¨ TLS1.1 ã‚’ç„¡åŠ¹åŒ–ã™ã‚‹ç†ç”± ç„¡åŠ¹åŒ–ã™ã‚‹ç†ç”±ã¯ã€TLS1.0 ã¨ TLS1.1(å®Ÿè£…ã«ã‚‚ã‚ˆã‚‹)ã« POODLEï¼ˆãƒ—ãƒ¼ãƒ‰ãƒ«ï¼‰ã¨ã„ã†æš—å·åŒ–é€šä¿¡ã‚’è§£èªã•ã‚Œã¦ã—ã¾ã†è„†å¼±æ€§ãŒã‚ã‚‹ãŸã‚ã§ã™ã€‚ POODLE ãŒç™ºè¦‹ã•ã‚ŒãŸå½“åˆã¯ã€SSL3.0 ã®ã¿ãŒã“ã®è„†å¼±æ€§ã®å¯¾è±¡ã¨æ€ã‚
mikage014 2019/01/10
apache

SSL
ãƒªãƒ³ã‚¯
Apacheã¨Nginxã®æ€§èƒ½æ¯”è¼ƒã§event_mpmã®æœ¬æ°—ã‚’è¦‹ãŸ
ã¯ã„ã€ã“ã‚Œã¯åƒ•ãŒã„ã¤ã‚‚è‰¯ãè¦‹ã‚‹Apacheã¨Nginxã®æ€§èƒ½å·®ã«è¦‹ãˆã¾ã™ã€‚å¤§ä½“ã€Apacheã¯Nginxã®75%ç¨‹åº¦ã®æ€§èƒ½ã«è½ã¡ç€ãã¾ã™ã€‚æ•°åãƒã‚¤ãƒˆã®é™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«å¯¾ã™ã‚‹ãƒªã‚¯ã‚¨ã‚¹ãƒˆå‡¦ç†ã¯Nginxã®å¾—æ„åˆ†é‡Žã ã¨æ€ã£ã¦ã„ãŸã®ã§ã€å¤§ä½“ã“ã‚“ãªã‚‚ã®ã§ã™ã€‚ ãã“ã§ã€çœŸé¢ç›®ã«event_mpmã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã‚’è¡Œã£ã¦ã¿ã¾ã—ãŸã€‚ã§ã€å¹¾åº¦ã¨ãªããƒ™ãƒ³ãƒã‚’è©¦ã—ãŸçµæžœå°Žãå‡ºã—ãŸã€é™çš„ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«å¯¾ã™ã‚‹åŒæ™‚æŽ¥ç¶šæ•°100ç¨‹åº¦ã«å¯¾ã—ã¦æœ€é«˜ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã‚’ç¤ºã™event_mpmã®è¨å®šã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ [program lang=â€™apacheâ€™ escaped=â€™trueâ€™] StartServers 4 MinSpareThreads 4 MaxSpareThreads 4 ThreadsPerChild 2 MaxRequestWorkers 2 MaxConnectionsPerChild 0 [/p
mikage014 2018/10/03
apache

nginx
ãƒªãƒ³ã‚¯
mod_headers - Apache HTTP ã‚µãƒ¼ãƒ
Please note This document refers to the 2.2 version of Apache httpd, which is no longer maintained. The active release is documented here. If you have not already upgraded, please follow this link for more information. You may follow this link to go to the current version of this document.
mikage014 2018/09/01
â€œ%{FOOBAR}s mod_ssl ãŒæœ‰åŠ¹ãªå ´åˆã€ SSL ç’°å¢ƒå¤‰æ•° FOOBAR ã®å†…å®¹â€

apache

SSL
ãƒªãƒ³ã‚¯
ã‚ªãƒ¬ã‚ªãƒ¬ (ã‚µãƒ¼ãƒ/ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ) è¨¼æ˜Žæ›¸ã®ç™ºè¡Œ | å·¥ä½œHardwareHub
è¨¼æ˜Žæ›¸ã¯èªè¨¼å±€ (CA) ãŒå…¬é–‹éµ (ã‚’ã‚‚ã¨ã«æƒ…å ±ã‚’ä»˜åŠ ã—ãŸè¨¼æ˜Žæ›¸ç½²åè¦æ±‚ (CSR; certificate signing request)) ã«ç½²åã‚’ã—ãŸã‚‚ã®ã§ã™ã€‚ä¸€èˆ¬çš„ã«è¨¼æ˜Žæ›¸ã¯å…¬é–‹éµã‚’å†…åŒ…ã—ã¦ã„ã¾ã™ã€‚ ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŠã‚ˆã³ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’å®Ÿéš›ã«ã‚³ãƒžãƒ³ãƒ‰ä¾‹ã‚’ç¤ºã—ã¤ã¤ç™ºè¡Œã—ã¾ã™ã€‚ èªè¨¼å±€ (CA) ã‚’æ§‹ç¯‰ è¨¼æ˜Žæ›¸ã¯èªè¨¼å±€ (CA) ãŒ è¨¼æ˜Žæ›¸ç½²åè¦æ±‚ (CSR; certificate signing request) ã«ç½²åã‚’ã—ãŸã‚‚ã®ã§ã™ã€‚èªè¨¼å±€ (CA) ã¯ç§˜å¯†éµã‚’æŒã£ã¦ã„ã¾ã™ã€‚ç½²åã«ã¯ãã®ç§˜å¯†éµã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ã¤ã¾ã‚Šã€ç½²åã«å¿…è¦ãªã‚‚ã®ã¯ç§˜å¯†éµã ã‘ã§ã™ã€‚èªè¨¼å±€ã®ç§˜å¯†éµä»¥å¤–ã®é©å½“ãªç§˜å¯†éµã§ç½²åã™ã‚‹ã¨å½¢å¼çš„ã«ã¯è¨¼æ˜Žæ›¸ãŒå®Œæˆã—ã¾ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ãã®é©å½“ãªç§˜å¯†éµã®ä¿æŒè€…ã¯è¨¼æ˜Žæ›¸ã®ä¿¡é ¼æ€§ã‚’ç¬¬ä¸‰è€…ã«ä¸€èˆ¬ã«ä¿è¨¼ã™ã‚‹ã“ã¨ãŒã§ããªã„ãŸã‚ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ãªã©ã¨ç§°ã•ã‚Œã¾ã™ã€‚ èªè¨¼å±€ã®ç§˜å¯†éµã‚’ä½¿ç”¨ã™ã‚‹å ´åˆ
mikage014 2018/07/25
apache

SSL
ãƒªãƒ³ã‚¯
CodeNote | Technology & Engineering Website
A multilingual website about techno logy, management, and work style for engineers. ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãŸã‚ã®æŠ€è¡“ãƒ»ãƒžãƒã‚¸ãƒ¡ãƒ³ãƒˆãƒ»åƒãæ–¹ã«é–¢ã™ã‚‹ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã€‚
mikage014 2018/01/28
Apache

Rails
ãƒªãƒ³ã‚¯
è‡ªå·±è¨¼æ˜Žæ›¸ã®httpsã‚µã‚¤ãƒˆã§è¨¼æ˜Žæ›¸ã‚¨ãƒ©ãƒ¼ã‚’éžè¡¨ç¤ºã«ã™ã‚‹æ‰‹é † - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
mikage014 2017/05/11
apache

SSL
ãƒªãƒ³ã‚¯
ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’è¦æ±‚ã™ã‚‹ã‚µã‚¤ãƒˆã®æ§‹ç¯‰ï¼ˆApache+OpenSSLï¼‰ãã®1 - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
mikage014 2017/04/29
apache

ssl
ãƒªãƒ³ã‚¯
301ã§ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã‹ã‘ã‚‹ã¨ãƒ–ãƒ©ã‚¦ã‚¶ãŒã‚ãƒ£ãƒƒã‚·ãƒ¥ã™ã‚‹ã®ã§æ€–ã„ | infra.xyz
ã“ã‚Œã§campaign.example.comã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€example.comã¸ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã‚‹ã‚ˆã†ã«ãªã£ãŸã€‚ campaign.example.comã‚’ãƒ–ãƒ©ã‚¦ã‚¶ï¼ˆChromeï¼‰ã§é–‹ã„ã¦ç¢ºèªã€ã„ã‚„ãƒ¼ã€ã‚ˆã‹ã£ãŸã‚ˆã‹ã£ãŸã€‚ ãã—ã¦ã•ã‚‰ã«å¾Œæ—¥ã€ã¾ãŸã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ã‚„ã‚‹ã“ã¨ã«ãªã£ãŸã€ã¨ã™ã‚‹ã€‚ æŠ˜è§’ã ã—ã€ã¾ãŸcampaign.example.comã§ã‚„ã‚Œã°ã„ã„ã‚ˆããƒ¼ã€ã¨Redirectãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã®è¨å®šã‚’æ¶ˆã™ã€‚ index.htmlã‚’ã‚¢ãƒƒãƒ—ã—ã¦ã€ãƒ–ãƒ©ã‚¦ã‚¶ï¼ˆChromeï¼‰ã§campaign.example.comã‚’é–‹ãã¨ãƒ»ãƒ»ãƒ»ãƒ»ãªãœã‹example.comã¸é£›ã°ã•ã‚Œã‚‹ï¼ ãˆã€ãªã‚“ã§ã€ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã®è¨å®šæ¶ˆã—ã¦configtestã—ã¦Apacheå†èµ·å‹•ã—ãŸã—ã€ãªã‚“ãªã‚‰ctrl+F5ã—ã¡ã‚ƒã†ã‚ˆï¼Ÿ ã§ã‚‚ä½•å›žF5å©ã„ã¦campaign.example.comã‚’é–‹ã„ã¦ã‚‚ã€example.comã¸é£›ã°
mikage014 2017/03/03
apache
ãƒªãƒ³ã‚¯
ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚·ã‚ä¸Šã§ã®basicèªè¨¼ã«ãƒãƒžã£ãŸã“ã¨ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
mikage014 2017/02/27
apache
ãƒªãƒ³ã‚¯
Letâ€™s Encryptã«ã‚ˆã‚‹SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®è‡ªå‹•æ›´æ–°è¨å®š
ã¯ã˜ã‚ã« Letâ€™s Encryptã¯ã€ç„¡æ–™ã®SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ç™ºè¡Œãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã§ã™ã€‚ ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã§è¨¼æ˜Žæ›¸ã‚’è‡ªå‹•ç™ºè¡Œã€æ›´æ–°ã§ãã‚‹ã®ã€ã¨ã¦ã‚‚ä¾¿åˆ©ãªã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã—ã¦ã„ã¾ã™ã€‚ ãƒ»Letsâ€™ Encrypt (Official) https://letsencrypt.org/ ãƒ»Letâ€™s Encrypt ç·åˆãƒãƒ¼ã‚¿ãƒ«ï¼ˆæ—¥æœ¬èªžã®èª¬æ˜ŽãŒè©³ã—ã„éžå…¬å¼ã®è§£èª¬ã‚µã‚¤ãƒˆï¼‰ https://letsencrypt.jp/ ä»¥å‰ã€å…¬é–‹ãƒ™ãƒ¼ã‚¿ãƒ—ãƒã‚°ãƒ©ãƒ ã ã£ãŸã¨ãã«è¨˜äº‹ã‚’æ›¸ã„ãŸã®ã§ã™ãŒã€ãã®å¾Œã€2016å¹´4æœˆ12æ—¥ã«æ£å¼ã‚µãƒ¼ãƒ“ã‚¹ã¨ãªã‚Šã¾ã—ãŸã€‚ ãƒ»Letâ€™s Encryptã§SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’å–å¾—ã—ã¦ã¿ãŸ https://inaba-serverdesign.jp/blog/20151217/lets-encrypt.html è©³ã—ã„ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«æ‰‹é †ã¯ã€ŒLetâ€™s Encrypt ç·åˆãƒãƒ¼ã‚¿ãƒ«ã€ã®Letâ€™
mikage014 2016/12/26
apache

SSL
ãƒªãƒ³ã‚¯
Apacheã§ç°¡å˜ã«ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·æ§‹ç¯‰ï¼ˆSSLé€šä¿¡è»¢é€ä»˜ãï¼‰
ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã‚µãƒ¼ãƒãƒ¼ã®ç’°å¢ƒ Apache 2.2.3 + mod_proxyã‚’ä½¿ã£ã¦ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã‚’æ§‹ç¯‰ã—ã¦ã„ã¾ã™ã€‚OSã¯ã€ŒCentOS5.6ã€ã€‚ httpd.confã®ç·¨é›† # vi /etc/httpd/conf/httpd.conf <IfModule mod_proxy.c>Â â†ã‚³ãƒ¡ãƒ³ãƒˆã‚¢ã‚¦ãƒˆã•ã‚Œã¦ã„ã‚‹ã®ã§ã€ã‚³ãƒ¡ãƒ³ãƒˆã‚¤ãƒ³ã™ã‚‹ ProxyRequests Off â†ãƒ•ã‚©ãƒ¯ãƒ¼ãƒ‰ãƒ—ãƒã‚ã‚·æ©Ÿèƒ½ã®ç„¡åŠ¹åŒ– <Proxy *> â†ãƒ—ãƒã‚ã‚·åˆ©ç”¨è€…ã®ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã¯ã“ã“ã§è¨å®š Order deny,allow Allow from All â†ã¨ã‚Šã‚ãˆãšå…¨è¨±å¯ </Proxy> <VirtualHost *:80> â† VirtualHostã§80ãƒãƒ¼ãƒˆã‚’æŒ‡å®šã—ãªã„ã¨ã€HTTPS(443)ã‚‚ã“ã“ã§å‡¦ç†ã•ã‚Œã¦ã—ã¾ã† ServerName ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã®IPã¾ãŸã¯FQDN:80 â†ãªãã¦ã‚‚å‹•ãï¼Ÿ
mikage014 2016/12/26
apache

SSL
ãƒªãƒ³ã‚¯
ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ä½¿ç”¨æ™‚ã«Apacheã®ãƒã‚°ã«å®ŸIPãŒå‡ºåŠ›ã•ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹ [ä¿ºã®å‚™å¿˜éŒ²]
Google+ãƒœã‚¿ãƒ³ ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ãƒœã‚¿ãƒ³ æ›´æ–°æ—¥æ™‚: 2012å¹´11æœˆ24æ—¥ï¼ˆåœŸï¼‰ ä½œæˆæ—¥æ™‚: 2012å¹´11æœˆ24æ—¥ï¼ˆåœŸï¼‰ å‰ã®è¨˜äº‹ / æ¬¡ã®è¨˜äº‹ ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã‚’ç«‹ã¦ãŸã‚‰ Apacheã®ãƒã‚°ã§IPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒå…¨éƒ¨"127.0.0.1"ã«ãªã£ã¦ã—ã¾ã£ãŸã®ã§ä¿®æ£ã€‚ ã€å‚è€ƒãƒšãƒ¼ã‚¸ã€‘ ãƒ»Apache ã§ãƒ—ãƒã‚ã‚·çµŒç”±ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‹ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã® IP ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å–å¾—ã™ã‚‹ http://www.geocities.jp/gronlijus/skill/apache/apache-custom-log1.html ã‚„ã‚‹ã“ã¨ Apacheã®ãƒã‚°ã®å‡ºåŠ›ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã« "X-Forwarded-For" ã‚’è¿½åŠ ã™ã‚‹ã€‚ ãã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆãŒå‡ºåŠ›ã•ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹ã€‚ ã¾ãšApacheã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’ç·¨é›†ã€‚ vim /etc/httpd/conf/httpd.conf LogFormat "%h %l %u
mikage014 2016/12/26
apache
ãƒªãƒ³ã‚¯
websec-room.comÂ -Â websec room ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±
This webpage was generated by the domain owner using Sedo Domain Parking. Disclaimer: Sedo maintains no relationship with third party advertisers. Reference to any specific service or trade mark is not controlled by Sedo nor does it constitute or imply its association, endorsement or recommendation.
mikage014 2016/08/26
apache

SSL
ãƒªãƒ³ã‚¯
HTTP/2ã¨TLSã®é–“ã§apacheãŒãƒãƒžã£ãŸè„†å¼±æ€§(CVE-2016-4979) - ã¼ã¡ã¼ã¡æ—¥è¨˜
0. çŸã„ã¾ã¨ã‚ æ˜¨æ™©apache2.4ã§HTTP/2åˆ©ç”¨æ™‚ã«TLSã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ã‚’ãƒã‚¤ãƒ‘ã‚¹ã™ã‚‹è„†å¼±æ€§(CVE-2016-4979)ãŒå…¬è¡¨ã•ã‚Œã€å¯¾ç–ç‰ˆãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ å®Ÿéš›ã«è©¦ã™ã¨ Firefoxã§èªè¨¼ãƒã‚¤ãƒ‘ã‚¹ãŒã§ãã‚‹ã“ã¨ãŒç¢ºèªã§ãã¾ã—ãŸã€‚ HTTP/2ã§TLSã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ã‚’åˆ©ç”¨ã™ã‚‹ã«ã¯ä»•æ§˜ä¸Šå¤§ããªåˆ¶é™ãŒã‚ã‚Šã€SPDYæ™‚ä»£ã‹ã‚‰é•·å¹´ã®èª²é¡Œã¨ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã®èª²é¡Œã‚’è§£æ±ºã™ã‚‹ãŸã‚ã€Secondary Certificate Authentication in HTTP/2ã¨ã„ã†æ‹¡å¼µä»•æ§˜ãŒç¾åœ¨IETFã§è°è«–ä¸ã§ã™ã€‚ 1. ã¯ã˜ã‚ã« ã¡ã‚‡ã†ã©æ˜¨æ™©ã€apache2.4ã®httpdã‚µãƒ¼ãƒã®è„†å¼±æ€§(CVE-2016-4979)ãŒå…¬é–‹ã•ã‚Œã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒªãƒªãƒ¼ã‚¹ãŒè¡Œã‚ã‚Œã¾ã—ãŸã€‚ CVE-2016-4979: X509 Client certificate based authenticatio
mikage014 2016/07/10
apache

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Windows7ã‹ã‚‰Apacheã®WebDAVã‚’å‚ç…§ã™ã‚‹ - developers note
mikage014 2016/07/05
apache
ãƒªãƒ³ã‚¯
Apacheã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ã‚’ã—ã¦ã¿ãŸã€‚ | é»’ã¶ã¡ãƒ¡ã‚¬ãƒã®blog
Apacheã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼è¨å®šã‚’ã—ãŸæ™‚ã®å‚™å¿˜éŒ²ã§ã™ã€‚ â– æµã‚Œ ã€Œwww.example.comã€ã«httpsã‚¢ã‚¯ã‚»ã‚¹ã—ãŸå ´åˆã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒè¨¼æ˜Žæ›¸ã‚’æŒã£ã¦ã„ãªã„ã¨æŽ¥ç¶šã§ããªã„ã‚ˆã†ã«ã—ã¾ã™ã€‚ â– ã‚µãƒ¼ãƒä½¿ç”¨OS CentOS 5.5 64bit â– ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆä½¿ç”¨OS Windows 7 64bit â– ä½¿ç”¨ã‚½ãƒ•ãƒˆ httpd.x86_64 0:2.2.3-43.el5.centos.3 mod_ssl.x86_64 1:2.2.3-43.el5.centos.3 â– ä½œæˆã™ã‚‹ã‚‚ã® è‡ªå·±CAè¨¼æ˜Žæ›¸ è‡ªå·±ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ SSLã§ä½¿ç”¨ã™ã‚‹ã‚µãƒ¼ãƒã®ç§˜å¯†éµ ç½²åè¦æ±‚ãƒ•ã‚¡ã‚¤ãƒ«(CSR) CAã‹ã‚‰ç½²åã•ã‚ŒãŸãƒ•ã‚¡ã‚¤ãƒ«(CRT) ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ â– ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ã®ä»•çµ„ã¿ http://alk.dip.jp/apache2-default/sv290.html â– ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«ã¤ã„ã¦ æ‰‹é †ãŒé•·ã£ãŸã‚‰ã—ã„ã®ã§ã€
mikage014 2016/07/05
apache
ãƒªãƒ³ã‚¯
Comodoã®SSLè¨¼æ˜Žæ›¸ã‚’Apache+mod_sslã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« - Qiita
Nginxç‰ˆã¯ã€ŒComodoã®SSLè¨¼æ˜Žæ›¸ã‚’Nginxã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€ã‚’å‚ç…§ã€‚ è¨¼æ˜Žæ›¸ã®è³¼å…¥ *.domain.com ã¨ dmn.com ã®äºŒç¨®é¡žå¿…è¦ã ã£ãŸã®ã§ã€Comodo EssentialSSL Wildcard ã¨ Comodo PositiveSSL ã‚’è³¼å…¥ã€‚ è²©å£²ä»£ç†åº—ç§ã¯å½“åˆ SSLs ã§ç”³ã—è¾¼ã‚“ã ã‚‚ã®ã®ã€å¾Œã«ãªã£ã¦ GoGetSSL ã®æ–¹ãŒå®‰ã„ä¸Šã«ç®¡ç†ç”»é¢ãŒå……å®Ÿã—ã¦ã„ã‚‹äº‹ãŒåˆ¤æ˜Žã—ãŸãŸã‚ã€ SSLs ã¯ã‚ãƒ£ãƒ³ã‚»ãƒ«ã€‚SSLs ã¯ãƒãƒ£ãƒƒãƒˆã€ãƒ¡ãƒ¼ãƒ«ã‚µãƒãƒ¼ãƒˆå…±ã«å¯¾å¿œã¯æ—©ã„ã€‚ è²©å£²ä»£ç†åº—ã¯ã„ãã¤ã‹æ¤œè¨Žã—ã¾ã—ãŸãŒã€ä½Žä¾¡æ ¼ãªãŒã‚‰ã‚‚ã‚µã‚¤ãƒˆã®ä½œã‚ŠãŒã—ã£ã‹ã‚Šã—ã¦ã„ã‚‹è²©å£²ä»£ç†åº—ã¯ä»¥ä¸‹ã®é€šã‚Šã€‚ GoGetSSL CheapSSLSecurity NameCheap SSLs Comodo EssentialSSL Wildcardç”¨ã®è¨¼æ˜Žæ›¸ã®ä½œæˆ ç§˜å¯†éµã®ä½œæˆ $ cd /etc/pki/tls/
mikage014 2015/12/31
apache

SSL
ãƒªãƒ³ã‚¯
1 2 3 4 5 æ¬¡ã®ãƒšãƒ¼ã‚¸