[B! security][Apache] wushiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

wushi id:wushi

securityã¨Apacheã«é–¢ã™ã‚‹wushiã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Apache HTTP Serverã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’å½“ã¦ã‚‹æ–¹æ³• | æŠ€è¡“è€…ãƒ–ãƒã‚° | ä¸‰äº•ç‰©ç”£ã‚»ã‚ãƒ¥ã‚¢ãƒ‡ã‚£ãƒ¬ã‚¯ã‚·ãƒ§ãƒ³æ ªå¼ä¼šç¤¾
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¨ºæ–(Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è¨ºæ–ã‚„ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯è¨ºæ–)ã®çµæžœã€ãƒãƒŠãƒ¼ã«è¡¨ç¤ºã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’éš ã—ã¾ã—ã‚‡ã†ã€TRACEãƒ¡ã‚½ãƒƒãƒ‰ã‚’ç„¡åŠ¹ã«ã—ã¾ã—ã‚‡ã†ãªã©ã®å ±å‘Šã‚’ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ã“ã‚Œã‚‰ã®è¨å®šã¯ã€ã‚µãƒ¼ãƒã‚’æ§‹ç¯‰ã™ã‚‹ä¸Šã§ã®â€ãŠä½œæ³•â€ã§ã¯ã‚ã‚‹ã¨è€ƒãˆã¦ã„ã¾ã™ãŒã€ã“ã®â€ãŠä½œæ³•â€ã‚’è¡Œã£ãŸã‹ã‚‰å¤§ä¸ˆå¤«ã¨ã„ã†ã‚ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ä»Šå›žã¯ã“ã®ã‚ˆã†ãªè¨å®šã‚’è¡Œã£ã¦ã‚‚ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯ç‰¹å®šã§ãã‚‹ã‚‚ã®ãªã®ã§ã€ã‚„ã¯ã‚Šã€ãƒ‘ãƒƒãƒã¯ã—ã£ã‹ã‚Šã¨å½“ã¦ã¾ã—ã‚‡ã†ã¨ã„ã†ãŠè©±ã«ãªã‚Šã¾ã™ã€‚ ã•ã¦ã€Apache httpd 2.2.Xã¯EOLãŒ2017å¹´12æœˆã¨ç™ºè¡¨ã•ã‚Œã¦ãŠã‚Šã€2.2.34ãŒæœ€çµ‚ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ãªã‚‹å¯èƒ½æ€§ãŒé«˜ãã€ã“ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ã€ãƒªãƒ—ãƒ¬ãƒ¼ã‚¹ã‚„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã‚’è€ƒãˆã¦ã„ã‚‹æ–¹ã‚‚ã„ã‚‰ã£ã—ã‚ƒã‚‹ã¨æ€ã„ã¾ã™ã€‚æ—¢ã«é‹ç”¨ä¸ã®ã‚·ã‚¹ãƒ†ãƒ ã§ä½•ã‹å¤‰ãˆã‚‹ã“ã¨ã¯è‰²ã€…ã¨é›£ã—ã„ã¨æ€ã„ã¾ã™ãŒã€ãƒªãƒ—ãƒ¬ãƒ¼ã‚¹ã®ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ã¯ã€ãƒ‘ãƒƒãƒé‹ç”¨ã«é–¢ã™ã‚‹è¨è¨ˆã‚’å†è€ƒã—ã‚„ã™ããªã‚‹ã¨
wushi 2017/09/05
Security

apache
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒãƒ¼ã®SSL/TLSè¨å®šã®ãƒ„ãƒœ - Internet Week 2014 ã‚»ãƒƒã‚·ãƒ§ãƒ³S14
Internet Week 2014 ã‚»ãƒƒã‚·ãƒ§ãƒ³S14 ã‚µãƒ¼ãƒãƒ¼ã®SSL/TLSè¨å®šã®ãƒ„ãƒœ (é…å¸ƒè³‡æ–™) 2014å¹´11æœˆ20æ—¥(æœ¨) 13:45-14:15 æ–¼ï¼šå¯Œå£«ã‚½ãƒ•ãƒˆã‚¢ã‚ãƒãƒ—ãƒ©ã‚¶ æ¼†å¶Œ è³¢äºŒ æœ¬æ–‡ä¸ã®ç™»éŒ²å•†æ¨™ãŠã‚ˆã³å•†æ¨™ã¯ãã‚Œãžã‚Œã®æ‰€æœ‰è€…ã«å¸°å±žã—ã¾ã™ã€‚ å¯Œå£«ã‚¼ãƒãƒƒã‚¯ã‚¹æ ªå¼ä¼šç¤¾ SkyDeskã‚µãƒ¼ãƒ“ã‚¹ã‚»ãƒ³ã‚¿ãƒ¼ æ¼†å¶Œè³¢äºŒ Â© 2014 Fuji Xerox Co., Ltd. All rights reserved. Â© 2014 Fuji Xerox Co., Ltd. All rights reserved. 1 æ™‚æœŸ å•é¡Œãƒ»äº‹ä»¶ å¯¾ç– 2005.11 OpenSSL SSLv2ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãƒãƒ¼ãƒ«ãƒãƒƒã‚¯ ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆ 2009.01 RapidSSL MD5è¡çªå½é€ ä¸é–“CA ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚„Pinning 2009.07 NULLçµ‚ç«¯ã«ã‚ˆã‚‹è¨¼æ˜Žæ›¸ãƒ›ã‚¹ãƒˆåä¸€è‡´ä¸å‚™ ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã‚„Pinni
wushi 2017/06/23
ã€Žã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰é€ã‚‹æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆä¸€è¦§ã®é †åºã‚’å„ªå…ˆã—ã¦æŽ¥ç¶šã™ã‚‹ã¨å¼±ã„æš—å·ãŒä½¿ã‚ã‚Œã‚‹ã“ã¨ãŒã‚ã‚‹...SSLHonorCipherOrder Onç‰è¨å®šã—ã¦ã‚µãƒ¼ãƒãƒ¼å´ã‚’å„ªå…ˆã™ã‚‹è¨å®šã‚’ã€ã‹ã‚‰é€šå¸¸ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ä¸€è¦§ã‚’ä¸Šã‹ã‚‰è©¦ã™ã¨æ€ã‚ã‚Œã‚‹

ssl

tls

security

apache
ãƒªãƒ³ã‚¯
WordPressã®ä¾µå…¥å¯¾ç–ã¯è„†å¼±æ€§ç®¡ç†ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç®¡ç†ã‚’ä¸å¿ƒã«è€ƒãˆã‚ˆã†
ã“ã®è¨˜äº‹ã¯WordPress Advent Calendar 2015ã®7æ—¥ç›®ã®è¨˜äº‹ã§ã™ã€‚ ä»Šå¹´åˆã‚ã¦WordCamp Tokyoã«ã¦è¬›æ¼”ã®æ©Ÿä¼šã‚’ã„ãŸã ãã€WordPressã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã¤ã„ã¦è©±ã—ã¾ã—ãŸï¼ˆã‚¹ãƒ©ã‚¤ãƒ‰ï¼‰ã€‚ãã“ã§ã‚‚ãŠè©±ã—ã—ã¾ã—ãŸãŒã€WordPressã«é™ã‚‰ãšã€Webã‚µã‚¤ãƒˆã¸ã®ä¾µå…¥çµŒè·¯ã¯2ç¨®é¡žã—ã‹ã‚ã‚Šã¾ã›ã‚“ã€‚ãã‚Œã¯ä»¥ä¸‹ã®2ã¤ã§ã™ã€‚ ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚Œã‚‹ èªè¨¼ã‚’çªç ´ã•ã‚Œã‚‹ ã—ãŸãŒã£ã¦ã€ä¾µå…¥å¯¾ç–ã¨ã—ã¦ã¯ä»¥ä¸‹ãŒé‡è¦ã«ãªã‚Šã¾ã™ã€‚ å…¨ã¦ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼ˆOSã€Apacheç‰ã€PHPã€WordPress æœ¬ä½“ã€ãƒ—ãƒ©ã‚°ã‚¤ãƒ³ã€ãƒ†ãƒ¼ãƒžç‰ï¼‰ã‚’æœ€æ–°ã®çŠ¶æ…‹ã«ä¿ã¤ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å¼·å›ºãªã‚‚ã®ã«ã™ã‚‹ ä»¥ä¸Š! ã¨å«ã³ãŸã„æ°—åˆ†ã§ã™ãŒã€ãã‚Œã§ã¯ã‚·ãƒ³ãƒ—ãƒ«éŽãŽã‚‹ã¨æ€ã„ã¾ã™ã®ã§ã€ä»¥ä¸‹ã€WordCampã§ãŠè©±ã—ãŸå†…å®¹ã¨ãƒªãƒ³ã‚¯ã—ãªãŒã‚‰ã€ã‚‚ã†å°‘ã—ç´°ãèª¬æ˜Žã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ å…¨ã¦ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã‚’æœ€æ–°ã®çŠ¶æ…‹ã«ä¿ã¤ Word
wushi 2015/12/08
security

Apache

wordpress
ãƒªãƒ³ã‚¯
ç´°ã‹ã™ãŽã¦ä¼ã‚ã‚‰ãªã„SSL/TLS
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã€Œç´°ã‹ã„ã¨è¨€ã†ã‚ˆã‚Šé•·ã„ã‚ˆãã€ ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€‚ATS ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸå°æŸ´ã•ã‚“ã‚„ ATS ã« HTTP/2 ã®å®Ÿè£…ã‚’è¡Œã£ã¦ã„ã‚‹å¤§ä¹…ä¿ã•ã‚“ã¨åŒã˜ãƒãƒ¼ãƒ ã®ä¸€å¹´ç›®ã€åŒ¿åç¤¾å“¡M ã•ã‚“ã‹ã‚‰ã„ã˜ã‚‰ã‚Œã¦ã„ã‚‹æ–°äººã§ã™ã€‚ä»Šå›žã‚ã‚ŠãŒãŸã„äº‹ã«ã€ã“ã†ã„ã£ãŸã™ã”ã„æ–¹ã€…ã‚’å«ã‚ãƒ¢ãƒ’ã‚«ãƒ³è«¸å…ˆè¼©æ–¹ã‚ˆã‚Šã€Œä½•ã‹æ›¸ã‹ãªã„ã®ï¼Ÿã€ã€Œã„ã¤æ›¸ãã®ï¼Ÿã€ã¨ã„ã†æ•°ã€…ã®ãƒ—ãƒ¬ãƒƒã‚·ãƒ£ãƒ¼ãŠè¨€è‘‰ã‚’ã„ãŸã ãã¾ã—ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ã€SSL/TLS ã® Session å†é–‹æ©Ÿèƒ½ã«é–¢ã—ã¦æ›¸ã„ã¦ã„ã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ SSL/TLS ã¯æ©Ÿå¯†æ€§ã€å®Œå…¨æ€§ãã—ã¦çœŸæ£æ€§ã«å¯¾ã—ã¦å®‰å…¨ãªé€šä¿¡ã‚’è¡Œã†ãŸã‚ã®ä»•çµ„ã¿ã§ã™ã€‚ã—ã‹ã—ã€ã“ã®ä»•çµ„ã¿ã¯æš—å·æŠ€è¡“ã‚’å¤šç”¨ã—ç‰¹ã«æŽ¥ç¶šã«ãŠã„ã¦è¤‡é›‘ãªãƒ—ãƒãƒˆã‚³ãƒ«ã‚’ç”¨ã„ã€Client, Se
wushi 2015/01/21
SSL

tls

network

security

HTTP

Apache
ãƒªãƒ³ã‚¯
https://ssl-tools.verisign.com/
wushi 2012/09/26
security

ssl

apache
ãƒªãƒ³ã‚¯
Apache HTTP Serverã®è„†å¼±æ€§ã‚’çªãã€ŒApache Killerã€â€•â€•ãƒ‘ãƒƒãƒã¯48æ™‚é–“ä»¥å†…ã«ãƒªãƒªãƒ¼ã‚¹äºˆå®š(SourceForge.JP) - ã‚ã‚Œé¯–æ—¥è¨˜
æ˜¨æ—¥ã‹ã‚‰çŒ›å¨ã‚’ãµã‚‹ã£ã¦ã„ã‚‹ Apache DDoSæ”»æ’ƒ ã€ŒApache Killerã€ å•é¡Œã¨ãªã£ã¦ã„ã‚‹ã®ã¯ã€ŒRange header DoSã€ã¨å‘¼ã°ã‚Œã‚‹è„†å¼±æ€§ã§ã€ãƒªãƒ¢ãƒ¼ãƒˆã‹ã‚‰å¤šæ•°ã®RangeæŒ‡å®šã‚’ å«ã‚€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚‹ã“ã¨ã§ã€ã‚¿ãƒ¼ã‚²ãƒƒãƒˆã‚·ã‚¹ãƒ†ãƒ ã®ãƒ¡ãƒ¢ãƒªã¨CPUã‚’æ¶ˆè²»ã•ã›ã‚‹ã¨ã„ã†ã‚‚ã®ã€‚ ã“ã®æ”»æ’ƒã§ã€WebãŒæ›¸ãæ›ãˆã‚‰ã‚Œã‚‹ã¨ã„ã£ãŸã“ã¨ã¯èµ·ã“ã‚‰ãªã„ã€‚ã‚µãƒ¼ãƒãŒå¼·åˆ¶çš„ã«è½ã¡ã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ å¤§é‡ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ä¿¡ã™ã‚‹å¿…è¦ã‚‚ãªãã€ç°¡å˜ãªã‚¹ã‚¯ãƒªãƒ—ãƒˆã§ã‚µãƒ¼ãƒã‚’ãƒ€ã‚¦ãƒ³ã•ã›ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ Exploitã‚³ãƒ¼ãƒ‰ã‚‚å…¬é–‹ã•ã‚Œã¦ãŠã‚Šã€è‡ªåˆ†ã®ã‚µã‚¤ãƒˆãŒå¯¾ç–å‡ºæ¥ã¦ã„ã‚‹ã‹ã©ã†ã‹ã‚‚ã‚ã‹ã‚Šã¾ã™ã€‚ Bug 51714 - Byte Range Filter might consume huge amounts of memory combined with compressed streams https://issues
wushi 2011/08/26
security

apache
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒã«DoSè€æ€§ã‚’ä»˜ã‘ã‚‹ - stanaka's blog
ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ã€ã‚¢ã‚¯ã‚»ã‚¹ãŒé›†ä¸ã—ã¦ã€ã‚µã‚¤ãƒˆãŒè½ã¡ã‚‹ã€ã¨ã„ã†ã®ã¯ã€ã‚ˆãã‚ã‚‹è©±ã§ã™ã€‚ç´”ç²‹ã«äººæ°—ãŒå‡ºã¦ã‚¢ã‚¯ã‚»ã‚¹é›†ä¸ã™ã‚‹ãªã‚‰ã€ã‚µãƒ¼ãƒç®¡ç†å´ã®è²¬ä»»ã¨è¨€ã‚ã‚Œã¦ã‚‚ã€ã—ã‹ãŸãªã„ã¨æ€ã„ã¾ã™ã€‚ã—ã‹ã—ã€botã‚„F5ã‚¢ã‚¿ãƒƒã‚¯ã«ã‚ˆã‚‹çªç™ºçš„ãªé›†ä¸ã‚¢ã‚¯ã‚»ã‚¹ã§ã€è½ã¡ã¦ã—ã¾ã†ã€ã¨ã„ã†ã®ã¯ã€é‹å–¶å´ã¨ã—ã¦ã‚‚ã€ã‚ã¾ã‚Šç´å¾—ãŒã„ãã‚‚ã®ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ãã®ã‚ˆã†ãªçªç™ºçš„ãªã‚¢ã‚¯ã‚»ã‚¹ã«å¯¾å¿œã™ã‚‹ãŸã‚ã«ã€å¤§é‡ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’ã—ã¦ãã‚‹ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’æ¤œå‡ºã—ã€å„ªå…ˆåº¦ã‚’è½ã™ã‹ã€ã‚¢ã‚¯ã‚»ã‚¹ç¦æ¢ã«ã™ã‚‹æ–¹æ³•ãªã©ãŒã‚ã‚Šã¾ã™ã€‚ ã¨ã„ã†ã‚ã‘ã§ã€Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã§ãã‚Œã‚’æ¤œå‡ºã™ã‚‹ãŸã‚ã®mod_dosdetectorã‚’é–‹ç™ºã—ã¾ã—ãŸã€‚(ã¡ãªã¿ã«ã‚³ã‚¢éƒ¨åˆ†ã®é–‹ç™ºæœŸé–“ã¯ã€Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã£ã¦ã€ã©ã†æ›¸ãã‚“ã ã£ã‘ã€ã¨ã„ã†çŠ¶æ…‹ã‹ã‚‰ã€3æ—¥ã§ã—ãŸã€‚) mod_dosdetectorã¯ã€Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¨ã—ã¦å‹•ä½œã—ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã”ã¨ã«ã‚¢ã‚¯ã‚»ã‚¹é »åº¦ã‚’æ¸¬å®šã—ã€è¨
wushi 2007/02/06
è‡ªä½œã®DoSæ¤œçŸ¥ç”¨Apacheãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«

SE

é‹ç”¨

security

Apache
ãƒªãƒ³ã‚¯
1