[B! ssl] BigFatCatã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

BigFatCat id:BigFatCat

sslã«é–¢ã™ã‚‹BigFatCatã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSLè¨¼æ˜Žæ›¸ã®é€šä¿¡ã®ä»•çµ„ã¿ãƒ»ç™ºè¡Œã¾ã§ã®æµã‚Œãªã©ã®ã¾ã¨ã‚ - conf t
SSLè¨¼æ˜Žæ›¸ã®é€šä¿¡ã®ä»•çµ„ã¿ã‚„ç™ºè¡Œã¾ã§ã®æµã‚Œã«ã¤ã„ã¦ã€ ã‚ã‹ã£ã¦ã„ãŸã‚ˆã†ã§ã‚ã‹ã£ã¦ã„ãªã‹ã£ãŸã®ã§ã€ã¾ã¨ã‚ã¾ã—ãŸã€‚ SSLè¨¼æ˜Žæ›¸ã«ã¤ã„ã¦ã€å¤šå°‘ã‚ã‹ã‚‹äººã‚’æƒ³å®šã—ã¦æ›¸ãã¾ã™ã€‚ ç›®æ¬¡ ç›®æ¬¡ SSLè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ã¦è¡Œã‚ã‚Œã‚‹SSLé€šä¿¡ã®ä»•çµ„ã¿ SSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã¾ã§ã®æµã‚Œ è¨¼æ˜Žæ›¸ã®ä¿¡é ¼æ€§ã‚’æ¤œè¨¼ã™ã‚‹æ–¹æ³• ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ ä¸é–“è¨¼æ˜Žæ›¸ ã‚¯ãƒã‚¹ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ SSLè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ã¦è¡Œã‚ã‚Œã‚‹SSLé€šä¿¡ã®ä»•çµ„ã¿ ã¾ãšã¯SSLè¨¼æ˜Žæ›¸ã§ã©ã®ã‚ˆã†ã«SSLé€šä¿¡ãŒå®Ÿæ–½ã•ã‚Œã‚‹ã‹è¦‹ã¦ã„ãã¾ã—ã‚‡ã†ã€‚ ãã®ä¸ã§å‡ºã¦ãã‚‹å…±é€šéµèªè¨¼ã¯åŒã˜éµã˜ã‚ƒãªã„ã¨ã‚ã‹ãªã„ã‚ˆãã£ã¦ã®ã§ã‚¤ãƒ¡ãƒ¼ã‚¸ã—ã‚„ã™ã„ã®ã ãŒã€ å…¬é–‹éµèªè¨¼ã¯ã„ã¤ã‚‚æµã‚Œãƒ»ã‚¤ãƒ¡ãƒ¼ã‚¸ã‚’å¿˜ã‚Œã¦ã—ã¾ã†ã€‚ å…¬é–‹éµèªè¨¼ã¯ã€Œä¸€æ–¹é€šè¡Œã€ã ã¨è¦šãˆã¦ã„ã‚‹ã€‚ é€ä¿¡å…ˆã®å…¬é–‹éµã§æš—å·åŒ–ã—ã€å¾©å·ã§ãã‚‹ã®ã¯ç§˜å¯†éµã‚’æŒã£ã¦ã„ã‚‹é€ä¿¡å…ˆã®ç›¸æ‰‹ã®ã¿ã ã‹ã‚‰ã€‚ itpro.nikkeibp.co.jp viral-co
BigFatCat 2017/02/14
ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸

ssl
ãƒªãƒ³ã‚¯
What is a Pem file and how does it differ from other OpenSSL Generated Key File Formats?
I am responsible for maintaining two Debian servers. Every time I have to do anything with security certificates, I Google for tutorials and beat away until it finally works. However, in my searches I often come across different file formats (.key, .csr, .pem) but I've never been able to find a good explanation of what each file format's purpose is. I was wondering if the good folks here at Server
BigFatCat 2017/01/16
pem file

admin

tls

ssl
ãƒªãƒ³ã‚¯
SSL ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã§ãŠå˜†ãã®è²´å…„ã« - What Iâ€™ve found has never been enough@Hatena
SSL ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ã®ä¾¡æ ¼ã«èƒƒã‚’ç—›ã‚ã¦ã„ã‚‹è²´å…„ã€ãã‚ŒãŒè²·ãˆãš SSL ã®ãŸã‚ã ã‘ã«ã‚µãƒ¼ãƒã®å°æ•°ã‚’ãƒ‹ãƒ§ã‚ãƒ‹ãƒ§ã‚å¢—ã‚„ã—ã¦ã„ã‚‹è²´å…„ã€ãã†ã§ãªãã¨ã‚‚ SSL ã®ãƒ‘ãƒ•ã‚©ãƒ¼ãƒžãƒ³ã‚¹ã§ãŠå˜†ãã®è²´å…„ã®ãŸã‚ã«ã€ã„ã‚ã„ã‚ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã‚ˆã€‚ SSLã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ã®ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆè¨å®šã‚’é•·ãã—ã‚ˆã† SSL ã®è² è·ã®ã»ã¨ã‚“ã©ã¯ã‚»ãƒƒã‚·ãƒ§ãƒ³ã®ç”Ÿæˆã«ã‚ˆã‚‹ã‚‚ã®ãªã®ã§ã€å½“ç„¶ã®ã‚ˆã†ã«ã‚µãƒ¼ãƒå´ã® SSL ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’æœ‰åŠ¹ã«ã—ã¦ãŠã‚‰ã‚Œã‚‹ã¨æ€ã„ã¾ã™ãŒã€ãã®ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã®è¨å®šãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ã¾ã¾ã¨ã„ã†æ–¹ãŒå¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ ãŸã¨ãˆã°Apacheã§ã—ãŸã‚‰ã€è¨å®šã‚µãƒ³ãƒ—ãƒ«ã®ã¾ã¾ SSLSessionCache shm:/usr/local/apache/logs/ssl_gcache_data(512000) SSLSessionCacheTimeout 300 ã¨ã—ã¦ã„ã‚‹æ–¹ãŒå¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚ å„ã‚µãƒ¼ãƒã®ãƒ‡ãƒ•ã‚©
BigFatCat 2016/08/10
ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µä»‹ã™ã¨ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ãŒæ¯Žå›žå¤‰ã‚ã‚‹

tls

ssl
ãƒªãƒ³ã‚¯
Is TLS Fast Yet?
TLS has exactly one performance probl em: it is not used widely enough. Everything else can be optimized. Data delivered over an unencrypted channel is insecure, untrustworthy, and trivially intercepted. We owe it to our users to protect the security, privacy, and integrity of their data â€” all data must be encrypted while in flight and at rest. Historically, concerns over performance have been the
BigFatCat 2016/08/05
performance

https

tls

ssl
ãƒªãƒ³ã‚¯
ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãªã‚‰çŸ¥ã£ã¦ãŠããŸã„ã€çµµã§è¦‹ã¦ã‚ã‹ã‚‹ã‚»ã‚ãƒ¥ã‚¢é€šä¿¡ã®åŸºæœ¬ - Qiita
TLS 1.3ã¯ç¾åœ¨ç–å®šä¸ã§ã™ãŒã€ å‰æ–¹ç§˜åŒ¿æ€§ ã®å•é¡Œã‹ã‚‰ RSAã®ã¿ ã‚’ç”¨ã„ãŸéµå§”å…±æœ‰ãŒç¦æ¢ã«ãªã‚‹è¦‹è¾¼ã¿ã§ã™ã€‚(è©³ç´°ã¯å¾Œè¿°ã—ã¾ã™) HTTPSã¨ã¯ æ¬¡ã«ã€HTTPSã§ã™ã€‚ HTTPS - Wikipedia HTTPSï¼ˆHypertext Transfer Protocol Secureï¼‰ã¯ã€HTTPã«ã‚ˆã‚‹é€šä¿¡ã‚’å®‰å…¨ã«ï¼ˆã‚»ã‚ãƒ¥ã‚¢ã«ï¼‰è¡Œã†ãŸã‚ã®ãƒ—ãƒãƒˆã‚³ãƒ«ãŠã‚ˆã³URIã‚¹ã‚ãƒ¼ãƒ ã§ã‚ã‚‹ã€‚ åŽ³å¯†ã«è¨€ãˆã°ã€HTTPSè‡ªä½“ã¯ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã¯ãªãã€SSL/TLSãƒ—ãƒãƒˆã‚³ãƒ«ã«ã‚ˆã£ã¦æä¾›ã•ã‚Œã‚‹ ã‚»ã‚ãƒ¥ã‚¢ãªæŽ¥ç¶šã®ä¸Šã§HTTPé€šä¿¡ã‚’è¡Œã†ã“ã¨ ã‚’HTTPSã¨å‘¼ã‚“ã§ã„ã‚‹ã€‚ ã¨ã®ã“ã¨ã§ã™ã€‚ HTTPã®èª¬æ˜Žã‚’å‰²æ„›ã™ã‚‹ã¨ã™ã‚Œã°ã€ã€ŒSSL/TLSã§ã‚»ã‚ãƒ¥ã‚¢ã«HTTPã‚’ã‚„ã‚‹ã€ã¨ã„ã†ã ã‘ã®èª¬æ˜Žã§æ¸ˆã‚“ã§ã—ã¾ã„ã¾ã™ã€‚ æœ€è¿‘ã§ã¯å€‹äººæƒ…å ±ç‰ã®è¦³ç‚¹ã‹ã‚‰å…¨ã¦ã®ã‚µã‚¤ãƒˆã‚’HTTPSã«ã™ã‚‹ã‚ˆã†ãªå‹•ããŒè¦‹ã‚‰ã‚Œã¾ã™ãŒã€å…ƒã€…HTTPSãŒä½¿ã‚ã‚Œã‚„ã™ã‹ã£ãŸ
BigFatCat 2016/08/03
https

security

ssl
ãƒªãƒ³ã‚¯
1