急ã«å¤–部APIã¨ã®é€šä¿¡ãŒ "dh key too small" ã§å¤±æ•—ã™ã‚‹ã‚ˆã†ã«ãªã£ãŸã®ã¯ãªãœï¼Ÿ - BANK tech blogã“ã‚“ã«ã¡ã¯ã€‚最近TRAVEL Nowã®é–‹ç™ºã«ã‚‚顔を出ã™ã‚ˆã†ã«ãªã£ãŸã†ãªã™ã‘ã§ã™ã€‚今回ã¯TRAVEL Nowã®é–‹ç™ºã«ãŠã„ã¦ç™ºç”Ÿã—ãŸå•é¡Œã«ã¤ã„ã¦æ›¸ã“ã†ã¨æ€ã„ã¾ã™ã€‚ 外部API連æºéƒ¨åˆ†ã§çªç„¶ã®ã‚¨ãƒ©ãƒ¼ TRAVEL Nowã§ã¯ã€å¤–部ã®OTAã¨é€£æºã—ã€æ—…行商å“を皆ã•ã‚“ã«æä¾›ã—ã¦ã„ã¾ã™ã€‚ ãã‚“ãªæ•°å¤šãã®APIã®ã†ã¡ã€ã‚る特定ã®APIã§æ¬¡ã®ã‚ˆã†ãªä¾‹å¤–ãŒç™ºç”Ÿã—ã¦é€šä¿¡ãŒã§ããªããªã£ã¦ã—ã¾ã„ã¾ã—ãŸã€‚ OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=error: dh key too small) ãれもã€æœ¬ç•ªç’°å¢ƒã§ã®ã¿ç™ºç”Ÿã—ã¾ã™ã€‚ 始ã‚ã¯ã“ã®ã‚¨ãƒ©ãƒ¼ã«ã¤ã„ã¦ã‚ˆãç†è§£ã—ã¦ãŠã‚‰ãšã€ http.verify_mode = OpenSSL::SSL::VERIFY_NONE を指定ã—ã¦ã¿ãŸã‚Šã€ apt install ca-certificate
OpenSSLã«ä»£ã‚ã‚‹LibreSSL, 最åˆã®30日間
OpenSSLã«ã¯ã“ã‚“ãªã«å•é¡ŒãŒ! LibreSSL開発者ãŒç™ºè¡¨ - BSDCan2014
RSA公開éµã‹ã‚‰ç´ æ•°ã®ç©ã‚’å–り出ã™æ–¹æ³• - hnwã®æ—¥è¨˜
Heartbleedç¦ã®OpenSSLã¯ï½¢ã‚‚ã¯ã‚„修復ä¸èƒ½ï½£ã€‚OpenBSDãŒãƒ•ã‚©ãƒ¼ã‚¯ç‰ˆé–‹ç™ºã¸
Appleã®ãƒ‡ãƒã‚¤ã‚¹ã¯ãªãœHeartbleedã®è¢«å®³ã‚’å…ã‚ŒãŸã®ã‹ï¼Ÿ | å°é¾èŒ¶é¤¨
Heartbleedã¨ãã‚Œã«é–¢ã™ã‚‹ç”¨èªžã®èª¬æ˜Ž - Qiita
DeNA Engineering - DeNAエンジニアã®ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆ
Wiresharkã§SSL通信ã®ä¸èº«ã‚’覗ã„ã¦ã¿ã‚‹ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
æš—å·åŒ–ã‚½ãƒ•ãƒˆæ¬ é™¥ã€ï¼®ï¼³ï¼¡ã¯ï¼’å¹´å‰ã‹ã‚‰èªè˜ï¼æƒ…å ±åŽé›†ã«åˆ©ç”¨ - Bloomberg
OpenSSLã®è„†å¼±æ€§ã§æƒ³å®šã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ - ã‚ã‚‚ãŠãã°
OpenSSL ã®è„†å¼±æ€§ã«é–¢ã™ã‚‹æ³¨æ„å–šèµ·
https://jp.techcrunch.com/2014/04/08/20140407massive-security-bug-in-openssl-could-effect-a-huge-chunk-of-the-internet/
OpenSSL ã§ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’手ã£å–ã‚Šæ—©ã作æˆã™ã‚‹æ–¹æ³• - WebOS Goodies
Mac Pro(Late 2013)ã‚’ç«é‰¢ã«è¦‹ç«‹ã¦ã¦æš–ã‚’å–る方法 - ã“ã®ãƒ–ãƒã‚°ã¯URLãŒå¤‰æ›´ã«ãªã‚Šã¾ã—ãŸ
{{#tags}}- {{label}}
{{/tags}}