[B! ssl] sotarokã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

sotarok id:sotarok

sslã«é–¢ã™ã‚‹sotarokã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SHA-2ã®SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¸ã®ç§»è¡Œã«ã¤ã„ã¦
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã“ã‚“ã«ã¡ã¯ã€ã‚·ã‚¹ãƒ†ãƒ çµ±æ‹¬æœ¬éƒ¨ ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ é–‹ç™ºæœ¬éƒ¨ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ†ã‚¯ãƒŽãƒã‚¸ãƒ¼éƒ¨ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¹ãƒšã‚·ãƒ£ãƒªã‚¹ãƒˆã®æˆ¸ç”°ã€€è–«ã§ã™ã€‚ ä»Šå›žã¯ã€SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã«é–¢ã—ã¦ãŠä¼ãˆã—ã¾ã™ã€‚ SHA-1ã‹ã‚‰SHA-2ã¸ ã€ŒSHA-1ã€ã®å±æ®†åŒ–ã‚’èƒŒæ™¯ã«SHA-1è¨¼æ˜Žæ›¸ã®åˆ©ç”¨ç¦æ¢ã«é–¢ã™ã‚‹å·¥ç¨‹è¡¨ãŒæ¥ç•Œå›£ä½“ã‚„ä¼æ¥ã‹ã‚‰å‘ŠçŸ¥ã•ã‚Œã¦ã„ã¾ã™ã€‚ CAãƒ–ãƒ©ã‚¦ã‚¶ãƒ•ã‚©ãƒ¼ãƒ©ãƒ ï¼ˆãƒ–ãƒ©ã‚¦ã‚¶ãƒ™ãƒ³ãƒ€ãƒ¼ã®æ¥ç•Œå›£ä½“ï¼‰ 2017/01/01ä»¥é™ã€SHA-1è¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ãŸSSLã‚µã‚¤ãƒˆã¨ã®SSLé€šä¿¡ã¨ç¦æ¢ã™ã‚‹ã€‚ Google Chrome 2015å¹´ä¸Šæ—¬ï¼ˆè©³ç´°æ™‚æœŸæœªå®šï¼‰ä»¥é™ã€ã€Œæœ‰åŠ¹æœŸé™ãŒ2016/01/01ä»¥é™ã€ã®SHA-1è¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ãŸSSLã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸå ´åˆã€è¦å‘Šãƒ¡ãƒƒã‚»ãƒ¼ã‚¸
sotarok 2015/03/11
APIä½¿ã£ã¦ã‚‹äººå‘ã‘

ssl
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : æ§˜ã€…ãªã‚µãƒ¼ãƒãƒ¼ã®POODLE SSLv3è„†å¼±æ€§(CVE-2014-3566)å¯¾ç–ã®ã¾ã¨ã‚(æ›´æ–°3) - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
åŸºæœ¬ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆãè¶£å‘³ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKIãƒ»ç½²åãƒ»èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚æ—…å¥½ãã€‚ãƒ†ãƒ¬ãƒ“å¥½ãã§èŠ¸èƒ½é€š ã‚‚ãã˜ 1. ã¯ã˜ã‚ã« 2. SSLv3ã‚’ç„¡åŠ¹åŒ–ã§ãã‚‹å ´åˆã®ã‚µãƒ¼ãƒãƒ¼å¯¾ç– 2.1. Apache HTTPD Server + mod_ssl 2.2. Apache HTTPD Server + mod_nss 2.3. nginx 2.4. lighttpd 2.5. Microsoft IIS 2.6. (è¨‚æ£)Apache Tomcat (Java JSSE) 2.7. Node.js 2.8. IBM HTTP Server 2.9. Amazon Web Services 2.10. ãã®ä»–ã®ã‚µãƒ¼ãƒãƒ¼ 2.11. SSLv3 ã‚’ç„¡åŠ¹åŒ–ã™ã‚‹ãƒªã‚¹ã‚¯ 2.12. OpenLDAP 3. è«¸èˆ¬ã®äº‹æƒ…ã§ SSLv3 ã‚’æœ‰åŠ¹ã«ã›ã–ã‚‹ã‚’å¾—ãªã„å ´
sotarok 2014/10/20
security

POODLE

ssl
ãƒªãƒ³ã‚¯
openssl ã‚³ãƒžãƒ³ãƒ‰
opensslã‚³ãƒžãƒ³ãƒ‰ [ã‚µãƒ¼ãƒã®å®Ÿé¨“å®¤ Slackware] ä½œæˆ : 2003/02/16 ä¿®æ£ : 2003/10/13 ä¿®æ£ : 2011/05/22 "ã‚µãƒ¼ãƒã®å®Ÿé¨“å®¤"ã®æ¤œç´¢ ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ä½¿ç”¨ã•ã‚Œã‚‹ãƒ©ãƒ³ãƒ€ãƒ æƒ…å ±ãƒ•ã‚¡ã‚¤ãƒ«ã‚„ãƒãƒªã‚·ãƒ¼ã€CA ã®ç§˜å¯†éµãƒ•ã‚¡ã‚¤ãƒ«ã‚„è¨¼æ˜Žæ›¸ãƒ•ã‚¡ã‚¤ãƒ«ã¯ã€openssl.cnf ã§å®šç¾©ã•ã‚Œã‚‹ã€‚ openssl.cnf ã¯ã€/usr/local/ssl ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªï¼ˆãƒ‡ãƒ•ã‚©ãƒ«ãƒˆï¼‰ã«ç½®ã‹ã‚Œã‚‹ã€‚ CA ã®é–‹è¨ CA ã‚’é–‹è¨ã™ã‚‹ã«ã¯ã€/usr/local/ssl/misc/CA.sh ã‚’ä½¿ç”¨ã™ã‚‹ã€‚ ./demoCA ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã€cacert.pemï¼ˆCA è¨¼æ˜Žæ›¸ï¼‰ã‚„ private/cakey.pemï¼ˆCA ç§˜å¯†éµï¼‰ãŒä½œæˆã•ã‚Œã‚‹ã€‚ CA.sh ã‹ã‚‰ /usr/local/ssl/bin/openssl ã‚’å®Ÿè¡Œã—ã¦ã„ã‚‹ã®ã§ã€ãƒ‘ã‚¹ã‚’é€šã—ã¦ãŠãã“ã¨ã€‚ # misc/CA.s
sotarok 2011/07/15
ssl
ãƒªãƒ³ã‚¯
gitã‚„curlã‚„wgetã§GitHubã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨certification errorã«ãªã‚‹åŽŸå› ã‚’èª¿ã¹ã¦ã¿ãŸ - ã“ã®ãƒ–ãƒã‚°ã¯URLãŒå¤‰æ›´ã«ãªã‚Šã¾ã—ãŸ
ä¸ã®äººã«è£ã‚’å–ã£ãŸã‚ã‘ã§ã¯ãªãç§ã®æŽ¨æ¸¬ã§ã™ã€‚é–“é•ã£ã¦ã„ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ 2010å¹´11æœˆã‹ã‚‰2011å¹´5æœˆæœ«ã¾ã§ã®çŠ¶æ³(gitã‚„wgetã§certification error) 2010å¹´11æœˆé ƒã€GitHubã§ã¯ã™ã¹ã¦ã®ã‚¢ã‚¯ã‚»ã‚¹ã«SSLã‚’ä½¿ã†ã‚ˆã†ä»•æ§˜ãŒå¤‰ã‚ã£ãŸã€‚ ã“ã®æ™‚ã€SSLè¨¼æ˜Žæ›¸ã«ã¯ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸(*.github.com)ãŒä½¿ã‚ã‚Œã¦ã„ãŸã€‚ *.github.comã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã«github.comã¯å«ã¾ã‚Œãªã„ã®ã ãŒã€SSLè¨¼æ˜Žæ›¸ã«ã¯X509v3 Subject Alternative Name(subjectAltName)ãŒè¨å®šã•ã‚Œã¦ã„ã‚‹*1ãŸã‚ã€subjectAltNameã«å¯¾å¿œã—ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ã‚ã‚Œã°å•é¡Œãªã„ã€‚ ã—ã‹ã—ã€wgetã®æœ€æ–°ç‰ˆ1.12ã¯subjectAltNameã«æœªå¯¾å¿œ*2ã€‚wgetã§ã¯certification errorãŒå‡ºã¦ã„ãŸã€‚ å‚è€ƒ
sotarok 2011/06/16
ssl
ãƒªãƒ³ã‚¯
1

ãŠçŸ¥ã‚‰ã›

ã‚‚ã£ã¨èªã‚€

å…¬å¼Twitter

@hatebu
æœ€æ–°ã®äººæ°—ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã®é…ä¿¡

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

jæ¬¡ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kå‰ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lã‚ã¨ã§èªã‚€

eã‚³ãƒ¡ãƒ³ãƒˆä¸€è¦§ã‚’é–‹ã

oãƒšãƒ¼ã‚¸ã‚’é–‹ã

è¨å®šã‚’å¤‰æ›´ã—ã¾ã—ãŸx

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (2)

sslã«é–¢ã™ã‚‹sotarokã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬4é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬3é€±ï¼‰

ã€å®Œäº†ã€‘ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®è¨ˆç”»ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã®ãŠçŸ¥ã‚‰ã›ï¼ˆ2026å¹´1æœˆ23æ—¥(é‡‘) æ·±å¤œ1:30ã€œ3:00ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (2)

sslã«é–¢ã™ã‚‹sotarokã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

SHA-2ã®SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¸ã®ç§»è¡Œã«ã¤ã„ã¦

è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : æ§˜ã€…ãªã‚µãƒ¼ãƒãƒ¼ã®POODLE SSLv3è„†å¼±æ€§(CVE-2014-3566)å¯¾ç­–ã®ã¾ã¨ã‚(æ›´æ–°3) - livedoor Blogï¼ˆãƒ–ãƒ­ã‚°ï¼‰

openssl ã‚³ãƒžãƒ³ãƒ‰

gitã‚„curlã‚„wgetã§GitHubã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨certification errorã«ãªã‚‹åŽŸå› ã‚’èª¿ã¹ã¦ã¿ãŸ - ã“ã®ãƒ–ãƒ­ã‚°ã¯URLãŒå¤‰æ›´ã«ãªã‚Šã¾ã—ãŸ

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬4é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬3é€±ï¼‰

ã€å®Œäº†ã€‘ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®è¨ˆç”»ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã®ãŠçŸ¥ã‚‰ã›ï¼ˆ2026å¹´1æœˆ23æ—¥(é‡‘) æ·±å¤œ1:30ã€œ3:00ï¼‰

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

é–¢é€£ã‚¿ã‚°ã§çµžã‚Šè¾¼ã‚€ (2)

sslã«é–¢ã™ã‚‹sotarokã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4)

SHA-2ã®SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¸ã®ç§»è¡Œã«ã¤ã„ã¦

è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : æ§˜ã€…ãªã‚µãƒ¼ãƒãƒ¼ã®POODLE SSLv3è„†å¼±æ€§(CVE-2014-3566)å¯¾ç–ã®ã¾ã¨ã‚(æ›´æ–°3) - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰

gitã‚„curlã‚„wgetã§GitHubã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨certification errorã«ãªã‚‹åŽŸå› ã‚’èª¿ã¹ã¦ã¿ãŸ - ã“ã®ãƒ–ãƒã‚°ã¯URLãŒå¤‰æ›´ã«ãªã‚Šã¾ã—ãŸ

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬4é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2026å¹´1æœˆç¬¬3é€±ï¼‰

ã€å®Œäº†ã€‘ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã®è¨ˆç”»ãƒ¡ãƒ³ãƒ†ãƒŠãƒ³ã‚¹ã®ãŠçŸ¥ã‚‰ã›ï¼ˆ2026å¹´1æœˆ23æ—¥(é‡‘) æ·±å¤œ1:30ã€œ3:00ï¼‰

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹