[B! ssl] Oooã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Ooo id:Ooo

sslã«é–¢ã™ã‚‹Oooã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (34)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Webé–‹ç™ºè€…ãŒæã‚‰ãçŸ¥ã‚‰ãªã„ã€SSLã«ã¤ã„ã¦çŸ¥ã£ã¦ãŠãã¹ãã“ã¨ | POSTD
2015å¹´ã€Webé–‹ç™ºè€…ã¯ä»¥å‰ã‚ˆã‚Šã‚‚SSLã«é–¢ã™ã‚‹ç†è§£ã‚’æ·±ã‚ã¦ã„ã¾ã™ã€‚ãã†ã—ãŸWebé–‹ç™ºè€…ãŸã¡ãŒHacker Newsã‚’èªã‚€ãªã‚‰çŸ¥ã£ã¦ãŠãã¹ãã“ã¨ã‚’ä»¥ä¸‹ã«æŒ™ã’ã¦ã¿ã¾ã™ã€‚ ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ï¼ˆDVï¼‰è¨¼æ˜Žæ›¸ã¯ Letâ€™s Encrypt ã‹ã‚‰ç„¡æ–™ã§å–å¾—ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ æ‹¡å¼µèªè¨¼ï¼ˆEVï¼‰è¨¼æ˜Žæ›¸ ã¯ CertSimple ã‹ã„ãã¤ã‹ã®ãƒã‚§ãƒƒã‚¯ã®ã®ã¡ã®æ”¯æ‰•ã„ã§å–å¾—ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ã“ã‚ŒãŒæˆ‘ã€…ã®ã‚„ã‚Šæ–¹ã€‚ Mozilla SSL Config Generator ã‚’ä½¿ç”¨ã™ã‚Œã°ã€ã‚µãƒãƒ¼ãƒˆã—ãŸã„ãƒ–ãƒ©ã‚¦ã‚¶ã«å¯¾ã—ã¦ã€ã‚µãƒ¼ãƒã‚’å¯èƒ½ãªé™ã‚Šå®‰å…¨ã«è¨å®šã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ å®Œäº†å¾Œã« SSL Labs ã‚’ä½¿ã£ã¦å…¨ã¦ã‚’ãƒã‚§ãƒƒã‚¯ã—ã€Aè©•ä¾¡ç²å¾—ã‚’ç¢ºèªã—ã¾ã—ã‚‡ã†ã€‚ãã†ã§ãªã‘ã‚Œã°äººã«å°è¨€ã‚’è¨€ã‚ã‚Œã¾ã™ã€‚ ãã®ä»–ã¯ã©ã†ã§ã—ã‚‡ã†ã‹ã€‚æˆ‘ã€…ã®é¡§å®¢ã‹ã‚‰å¯„ã›ã‚‰ã‚Œã‚‹æœ€ã‚‚å¤šã„è³ªå•ã«ã¤ã„ã¦ã€å›žç”ã‚’ç´¹ä»‹ã—ã¦ã„ãã¾ã—ã‚‡ã†ã€‚ 1. Chromeã§â€å¤ã„æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆâ€ã‚’
Ooo 2016/01/22
SSL

config

security
ãƒªãƒ³ã‚¯
ã¾ã•ã‹ã®AWSã§SSLè¨¼æ˜Žæ›¸ãŒç„¡æ–™ã€ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã‚‚ä½¿ãˆã‚‹ã—è‡ªå‹•ã§æ›´æ–° | ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
ã‚·ãƒ³ã‚¸ã§ã™ã€‚AWSã«æ–°æ©Ÿèƒ½ã€ŒAWS Certificate Managerã€ãŒè¿½åŠ ã•ã‚Œã¾ã—ãŸã€‚SSLè¨¼æ˜Žæ›¸ãŒã¾ã•ã‹ã®ç„¡æ–™ç™ºè¡Œï¼ãŸã ã—AWSã®ELBã¨Cloudfrontã«é™ã‚‹åˆ¶é™ä»˜ãã ã‘ã©ï¼ãªã®ã§ã€EC2ã ã‘ã€œã¨ã‹ã§ã¯ä½¿ãˆã¾ã›ã‚“ã®ã§ã”æ³¨æ„ã‚’ã€‚ã¨ã¯ã„ãˆELBã‚’æŒŸã‚€ã®ã‚‚Cloudfrontä½¿ã†ã®ã‚‚ã‚ã‚ŠãŒã¡ãªæ§‹æˆãªã®ã§ã€ã•ãã£ã¨SSLæš—å·åŒ–é€šä¿¡ã—ãŸã„ã¨ãã¯ç„¡æ–™ã ã—ä¾¿åˆ©ã§ã™ã‚ˆãã€‚ç„¡æ–™ã§ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ä½¿ãˆã‚‹ã®ã¯ã‹ãªã‚Šä¾¿åˆ©ã€‚ ã‚½ãƒ¼ã‚¹ã¯ã“ã¡ã‚‰ New â€“ AWS Certificate Manager â€“ Deploy SSL/TLS-Based Apps on AWS | AWS Official Blog https://aws.amazon.com/jp/blogs/aws/new-aws-certificate-manager-deploy-ssltls-based-apps-on-aws/ ã‚„
Ooo 2016/01/22
aws

certificate

SSL
ãƒªãƒ³ã‚¯
DMM inside
ãªã›ã‚™DMMã‹ã‚™web3ã«å‚å…¥ã—ãŸã®ã‹ã€‚Seamoon Protocolã‹ã‚™ç›®æŒ‡ã™æ–°ãŸãªã‚¨ãƒ³ã‚¿ãƒ¡ä½“é¨“ã®æœªæ¥ã¨ã¯
Ooo 2015/07/24
https

SSL

security
ãƒªãƒ³ã‚¯
SSLv3è„†å¼±æ€§ã€ŒPOODLEã€ã€TLSã«ã‚‚å½±éŸ¿--ã‚°ãƒ¼ã‚°ãƒ«ã®å°‚é–€å®¶ãŒæŒ‡æ‘˜
Googleã«æ‰€å±žã™ã‚‹SSLå°‚é–€å®¶ã®Adam Langleyæ°ã¯ç±³å›½æ™‚é–“12æœˆ8æ—¥ã€è‡ªèº«ã®ãƒ–ãƒã‚°ã§å¤šãã®TLSå®Ÿè£…ã«å¯¾ã—ã¦è¦å‘Šã‚’å‡ºã—ãŸã€‚ä»¥å‰æ˜Žã‚‰ã‹ã«ãªã£ãŸã€SSLãƒãƒ¼ã‚¸ãƒ§ãƒ³3ï¼ˆSSLv3ï¼‰ã«å½±éŸ¿ã™ã‚‹ã€ŒPOODLEï¼ˆPadding Oracle On Downgraded Legacy Encryptionï¼‰ã€æ”»æ’ƒã¨åŒã˜ã‚ˆã†ãªæ”»æ’ƒã«ã¤ãªãŒã‚‹è„†å¼±æ€§ã‚’å«ã‚“ã§ã„ã‚‹ã¨ã„ã†ã€‚ SSLv3ã¯ã€CBCãƒ¢ãƒ¼ãƒ‰ã®æš—å·ã§ãƒ‡ãƒ¼ã‚¿ã®ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã‚’åŠ¹æžœçš„ã«ç‰¹å®šã—ãªã„ã€‚ãã®ãŸã‚ã€ãƒ–ãƒãƒƒã‚¯æš—å·ã®æ•´åˆæ€§ã‚’ãã¡ã‚“ã¨ç¢ºèªã§ããšã€ã€Œãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã‚ªãƒ©ã‚¯ãƒ«æ”»æ’ƒã€ã‚’å¯èƒ½ã«ã—ã¦ã—ã¾ã†ã€‚SSLv3ã®å¾Œã€ä»•æ§˜ã¯TLSã¨æ”¹åã•ã‚Œã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³1ã«ãªã£ãŸã€‚TLSv1ã®å¤‰æ›´ç‚¹ã®1ã¤ã¨ã—ã¦ã€ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã‚ªãƒ©ã‚¯ãƒ«æ”»æ’ƒã‚’é˜²ããŸã‚ã®ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°å‡¦ç†ã‚’æ”¹å–„ã—ãŸã€‚ ã ãŒã€TLSå®Ÿè£…ã§ã‚‚ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ãƒã‚¤ãƒˆã®ãƒã‚§ãƒƒã‚¯ã¯å®Œå…¨ã§ã¯ãªã„ã¨ã„ã†ã€‚å¤šãã®TLSå®Ÿè£…ãŒSSLv3ã‚½ãƒ•ãƒˆã‚¦
Ooo 2014/12/10
SSL

POODLE

TLS

security

encryption
ãƒªãƒ³ã‚¯
è¤‡æ•°ã®Webã‚µãƒ¼ãƒã§SSLã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’å…±æœ‰ã—ã¦SSLå‡¦ç†ã‚’é«˜é€ŸåŒ–(Apache + mod_ssl + mod_socache_memcache) - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
HTTPS(SSLåˆ©ç”¨)ã‚µã‚¤ãƒˆãŒSEOçš„ã«å„ªé‡ã•ã‚Œã‚‹ãƒˆãƒ¬ãƒ³ãƒ‰ã§ã€ä¸–é–“çš„ã«ã‚‚HTTPSæŽ¥ç¶šã§ã‚µã‚¤ãƒˆé‹ç”¨ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãŒå¢—ãˆã¦ãã¦ã„ã¾ã™ã€‚ ã“ã‚ŒãŒã€ãƒã‚¤ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚µã‚¤ãƒˆã«ãªã£ã¦ãã‚‹ã¨ã€ã“ã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã§SSLå‡¦ç†ã•ã›ã‚‹ã“ã¨ãŒè² è·çš„ã«ã‚‚ãªã‹ãªã‹è¾›ã„ã®ã§ã™ã€‚ ã§ã€Apache 2.3ä»¥é™ã§ã¯ã€Shared Object Cache Providerã¨ã—ã¦ã€memcachedãŒé¸æŠžã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã®ä»•çµ„ã¿ã‚’åˆ©ç”¨ã—ã¦ã€Apacheã¨memcachedã‚’ä¸¦ã¹ã‚‹ã“ã¨ã§ã€å„ã‚µãƒ¼ãƒã§ãƒ¦ãƒ¼ã‚¶ã®SSL Session Cacheã‚’å…±æœ‰ã—ãªãŒã‚‰HTTPSãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’è² è·åˆ†æ•£ã§ãã‚‹æ§‹æˆã‚’ä½œã£ã¦ã¿ã¾ã—ãŸã€‚ Webã‚µãƒ¼ãƒã§SSLã‚ªãƒ•ãƒãƒ¼ãƒ‰ å¸¸æ™‚SSLã‚’åˆ©ç”¨ã—ãŸWebã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ãŸã‚ã«ã€SSLã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ã¨ã„ã£ãŸã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹è£½å“ã ã¨ã‹ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã ã¨Apacheã‚„Nginxã®SSLãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ã†
Ooo 2014/12/05
https

apache

ssl

memcached
ãƒªãƒ³ã‚¯
Let's Encrypt
A nonprofit Certificate Authority providing TLS certificates to 450 million websites. Read all about our nonprofit work this year in our 2023 Annual Report. From our blog Jul 23, 2024 Intent to End OCSP Service Moving to a more privacy-respecting and efficient method of checking certificate revocation. Read more Jun 24, 2024 More Memory Safety for Letâ€™s Encrypt: Deploying ntpd-rs NTP is critical t
Ooo 2014/11/19
security

certificate

SSL
ãƒªãƒ³ã‚¯
This POODLE bites: exploiting the SSL 3.0 fallback
The latest news and insights from Google on security and safety on the Internet Anonymous said... Does this apply to SSLv2 as well? October 14, 2014 at 7:39â€¯PM Scott Ruebush said... I can't wait to see POODLE take over the internet! Thank goodness we have heroes to save us from the evils of SSL 3.0 and such and such, etc. October 14, 2014 at 8:52â€¯PM Paul said... Not sure how to enable TLS_FALLBACK
Ooo 2014/10/15
security

ssl
ãƒªãƒ³ã‚¯
r/crypto - OpenSSL bug allows RSA 1024 key factorization in 20 minutes
Thankfully it's very easy to tell whether it's real. If anyone can publish the two, non-trivial factors of this number (where neither is 1!) then they'll have my attention: 0xe5c30e1286c41c7137dc06194199dde641120de591c1b7392de35ef6a961d6d29faa3bcdb7603d42768a90322197a7a46fa2cf23f6f10de5554db6e7322ba35e858f576f840347c795c8782c3f4ef9f530d2fd1f6b5c275ce49404958f0decddd0b53386d12c745891d5eeca1f265bdf8
Ooo 2014/10/06
security

OpenSSL

SSL
ãƒªãƒ³ã‚¯
Fix for an Expired Intermediate SSL Certificate Chain
June 2020 Update: With a large number of sites affected by the recent expiring of a root certificate, we thought it would be valuable to again share this guide on intermediate TLS/SSL certificates in the certificate chain. Note that intermediate certificates rely on root certificates. For more information on root certificates, read The Impacts of Root Certificate Expiration. Orignal 2014 Content O
Ooo 2014/07/31
certificate

ssl
ãƒªãƒ³ã‚¯
è‡ªç¤¾ã‚µãƒ¼ãƒã¨äº¤ä¿¡ã™ã‚‹ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ‰‹æ³•ã«ã¤ã„ã¦ï¼ˆSSL Pinningã¨ç‹¬è‡ªCAå†è€ƒï¼‰
â– èƒŒæ™¯ è‡ªç¤¾ã®ã‚µãƒ¼ãƒã¨é€šä¿¡ã™ã‚‹è‡ªç¤¾ã‚¢ãƒ—ãƒªã«ã¤ã„ã¦ã€æœ¬æ¥ä¸è¦ã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšä»–ç¤¾ã§ã‚ã‚‹CAã«èªè¨¼æƒ…å ±ã®ç®¡ç†ã‚’å§”è¨—ã™ã‚‹ã“ã¨ãŒå¤šã„ã‚ã‘ã§ã™ãŒã€CAãŒè¨¼æ˜Žæ›¸ã‚’èª¤ç™ºè¡Œã—ãŸçµæžœæƒ…å ±æ¼æ´©ãŒç™ºç”Ÿã—ãŸã¨ã—ã¦ã€ãã®è²¬ä»»ã¯è‡ªç¤¾ã«ã¯ãªã„ã¨ä¸»å¼µã§ãã‚‹ã®ã‹ã€ã‚‚ã†ä¸€åº¦è€ƒãˆãªãŠã—ãŸã»ã†ãŒã„ã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨æ€ã†ã‚“ã§ã™ â€” Kazuho Oku (@kazuho) July 15, 2014 .@ockeghem @smbd @ando_Tw ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã®æä¾›ã«ãŠã„ã¦ã¯ã‚³ãƒ¼ãƒ‰ã®ç½²åéµã‚’å®‰å…¨ã«ç®¡ç†ã™ã‚‹ã“ã¨ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ãŒã€ãã®å‰æã«ãŠã„ã¦é€šä¿¡ç›¸æ‰‹ã®èªè¨¼ç®¡ç†ã‚’CAã«å§”è¨—ã™ã‚‹ã“ã¨ã«ã©ã‚Œã»ã©ã®æ„å‘³ãŒã‚ã‚‹ã‚“ã§ã—ã‚‡ã† â€” Kazuho Oku (@kazuho) July 14, 2014 â– ä»–ç¤¾CAã¯ä¿¡é ¼ã§ãã‚‹ã®ã‹ ç‰¹å®šã®CAã«pinningã™ã‚‹ã®ã¯ã—ãªã„ã‚ˆã‚Šå®‰å…¨ã ã‘ã©ã€ãã‚‚ãã‚‚èª¤ç™ºè¡Œã—ãªã„CAãªã‚“ã¦ã‚ã‚‹ã®ã‹ã¨ã„ã†è°è«–ã¯é‡è¦ã€‚è¦‹çŸ¥
Ooo 2014/07/15
security

SSL
ãƒªãƒ³ã‚¯
GoogleãŒOpenSSLã‚’ãƒ•ã‚©ãƒ¼ã‚¯ã—ãŸã€ŒBoringSSLã€ã‚’å…¬é–‹ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
GoogleãŒOpenSSLã‚’ãƒ•ã‚©ãƒ¼ã‚¯ã—ã€ã€ŒBoringSSLã€ã¨ã—ã¦å…¬é–‹ã—ãŸ(ImperialVioletãƒ–ãƒã‚°ã®è¨˜äº‹ã€ Ars Technicaã®è¨˜äº‹ã€ æœ¬å®¶/.)ã€‚ Googleã¯ä½•å¹´ã‚‚ã®é–“ã€OpenSSLã«æ•°å¤šãã®ãƒ‘ãƒƒãƒã‚’å½“ã¦ã¦ä½¿ç”¨ã—ã¦ã„ãŸã¨ã„ã†ã€‚ä¸€éƒ¨ã®ãƒ‘ãƒƒãƒã¯OpenSSLã®ãƒ¡ã‚¤ãƒ³ãƒªãƒã‚¸ãƒˆãƒªã«å–ã‚Šè¾¼ã¾ã‚ŒãŸãŒã€å¤§åŠã¯APIã‚„ABIã®å®‰å®šæ€§ã®å•é¡ŒãŒã‚ã‚‹ãªã©ã®ç†ç”±ã§å–ã‚Šè¾¼ã¾ã‚Œã¦ã„ãªã‹ã£ãŸã€‚Androidã‚„Chromeãªã©ã®è£½å“ã¯ãƒ‘ãƒƒãƒã®ä¸€éƒ¨ã‚’å¿…è¦ã¨ã™ã‚‹ãŒã€ãƒ‘ãƒƒãƒã¯70ä»¥ä¸Šã‚‚ã‚ã‚‹ãŸã‚ã«ä½œæ¥ãŒè¤‡é›‘ã«ãªã£ã¦ã„ãŸãã†ã ã€‚ãã®ãŸã‚ã€OpenSSLã‚’ãƒ•ã‚©ãƒ¼ã‚¯ã—ã¦ã€OpenSSLå´ã®å¤‰æ›´ã‚’ã‚¤ãƒ³ãƒãƒ¼ãƒˆã™ã‚‹æ–¹å¼ã«å¤‰æ›´ã—ãŸã¨ã—ã¦ã„ã‚‹ã€‚BoringSSLã¯è¿‘ã„ã†ã¡ã«Chromiumã®ãƒªãƒã‚¸ãƒˆãƒªã«è¿½åŠ ã•ã‚Œã‚‹äºˆå®šã§ã€ã„ãšã‚ŒAndroidã‚„å†…éƒ¨çš„ã«ã‚‚ä½¿ã‚ã‚Œã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚ãŸã ã—ã€BoringSSLã§ã¯APIã‚„ABI
Ooo 2014/06/22
google

openssl

BoringSSL

ssl
ãƒªãƒ³ã‚¯
CVE-2014-0160 OpenSSL Heartbleed è„†å¼±æ€§ã¾ã¨ã‚ - ã‚ã‚‚ãŠãã°
å¿…è¦ãªæƒ…å ±ã¯ http://heartbleed.com/ ã«ã¾ã¨ã¾ã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€è‹±èªžã ã—é•·ã„ã—ã£ã¦äººã®ãŸã‚ã«æ‰‹çŸã«ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ ã©ã†ã™ã‚Œã°ã„ã„ã®ã‹ OpenSSL 1.0.1ã€œ1.0.1fã‚’ä½¿ã£ã¦ã„ãªã‘ã‚Œã°ã‚»ãƒ¼ãƒ• ã‚ã¦ã¯ã¾ã‚‹å ´åˆã«ã¯ã€ä¸€åˆ»ã‚‚æ—©ããƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã—ã¦ã€ã‚µãƒ¼ãƒã”ã¨å†èµ·å‹•(ã‚ã‹ã‚‹ã²ã¨ã¯ã‚µãƒ¼ãƒ“ã‚¹å˜ä½ã§ã‚‚OKã€ãŸã ã—reloadã§ã¯ã ã‚ãªã“ã¨ã‚‚) SSLè¨¼æ˜Žæ›¸ã§ã‚µãƒ¼ãƒã‚’å…¬é–‹ã—ã¦ã„ã‚‹ãªã‚‰ã€ç§˜å¯†éµã‹ã‚‰ä½œã‚Šç›´ã—ã¦è¨¼æ˜Žæ›¸ã‚’å†ç™ºè¡Œã—ã€éŽåŽ»ã®è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã•ã›ã‚‹(æœ«å°¾ã«é–¢é€£ãƒªãƒ³ã‚¯ã‚ã‚Š)ã€‚ ã‚µãƒ¼ãƒã‚’å…¬é–‹ã—ã¦ã„ãªã„å ´åˆã‚‚ã€å¤–éƒ¨ã¸ã®SSLé€šä¿¡ãŒã‚ã‚Œã°å½±éŸ¿ã‚’å—ã‘ã‚‹ã®ã§ã€è©³ã—ãç²¾æŸ»ã™ã‚‹ã€‚ PFS(perfect forward secrecy)ã‚’åˆ©ç”¨ã—ã¦ã„ãªã„å ´åˆã€éŽåŽ»ã®é€šä¿¡å†…å®¹ã‚‚å¾©å·ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ãŸã‚ã€è©³ã—ãç²¾æŸ»ã™ã‚‹ã€‚ æ¼æ´©ã™ã‚‹æƒ…å ±ã®å…·ä½“ä¾‹ã¯ã€OpenSSLã®è„†å¼±æ€§ã§æƒ³å®šã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ã¨ã—ã¦
Ooo 2014/04/08
linux

OpenSSL

ssl

security
ãƒªãƒ³ã‚¯
Heartbleed Bug
The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, em ail, instant messaging (IM) and some virtual private network
Ooo 2014/04/08
security

ssl

openssl
ãƒªãƒ³ã‚¯
[45æ—¥é–“ç„¡æ–™]ãƒ†ã‚¹ãƒˆç”¨SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ï½œGMOã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³ã€å…¬å¼ã€‘
ãŠç”³ã—è¾¼ã¿å‰ã®ç¢ºèªäº‹é … ãŠç”³ã—è¾¼ã¿å‰ã«ã€Œãƒªãƒã‚¸ãƒˆãƒªã€ãƒšãƒ¼ã‚¸ã«ã¦ã€Žã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³é›»åè¨¼æ˜Žæ›¸ã‚µãƒ¼ãƒ“ã‚¹åˆ©ç”¨ç´„æ¬¾ã€ã‚’ã”ç¢ºèªãã ã•ã„ã€‚ ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã¨ã¯ ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã¯ã€åŒã˜ãƒ‰ãƒ¡ã‚¤ãƒ³å†…ã§ã‚ã‚Œã°è¤‡æ•°ã®ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚µã‚¤ãƒˆã‚’1æžšã®è¨¼æ˜Žæ›¸ã§SSLæš—å·åŒ–é€šä¿¡ã‚’å®Ÿç¾ã„ãŸã—ã¾ã™ã€‚ ãŠå•ã„åˆã‚ã›ã‚„è³‡æ–™è«‹æ±‚ãªã©ã®ãƒ•ã‚©ãƒ¼ãƒ ã‚’ã€ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’åˆ†ã‘ã¦é‹å–¶ã—ã¦ã„ã‚‹ å•†å“è©³ç´°ãƒšãƒ¼ã‚¸ã¨æ±ºæ¸ˆç”»é¢ã¨ã‚’ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³åˆ¥ã«åˆ†ã‘ã¦é‹å–¶ã—ã¦ã„ã‚‹ æä¾›ã‚µãƒ¼ãƒ“ã‚¹åˆ¥ã«ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’åˆ†ã‘ã¦é‹å–¶ã—ã¦ã„ã‚‹ â€»IIS5.0ã§ã¯è¨¼æ˜Žæ›¸ã”åˆ©ç”¨ã«ã‚ãŸã‚Šã€ã‚µã‚¤ãƒˆã”ã¨ã«ç•°ãªã‚‹ã‚°ãƒãƒ¼ãƒãƒ«IPã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’è¨å®šã™ã‚‹å¿…è¦ãŒã”ã–ã„ã¾ã™ã€‚ãƒãƒ¼ãƒˆã‚’å¤‰æ›´ã™ã‚‹ã“ã¨ã§ã‚‚å¯¾å¿œã§ãã¾ã™ãŒã€ç’°å¢ƒã«ã‚ˆã£ã¦ã¯ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã‚‹ã“ã¨ã‚‚ã”ã–ã„ã¾ã™ã®ã§ã”æ³¨æ„ãã ã•ã„ã€‚ â€»æºå¸¯é›»è©±ã«ã¯å¯¾å¿œã—ã¦ã„ã¾ã›ã‚“ã€‚ â€»è¨¼æ˜Žæ›¸ãŒã€Œ*.example.comã€ã«ç™ºè¡Œã•ã‚Œã¦ã„ã‚‹å ´åˆã€ã€Œhttps://example
Ooo 2014/03/17
iOS

iphone

ssl

ios7

adhoc
ãƒªãƒ³ã‚¯
httpsã ã‹ã‚‰ã¨ã„ã†ã ã‘ã§å®‰å…¨ï¼Ÿèª¿ã¹ãŸã‚‰æ€–ããªã£ã¦ããŸSSLã®è©±!ï¼Ÿ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
Ooo 2014/03/15
https

security

SSL

nginx

network
ãƒªãƒ³ã‚¯
HTTPSã‚’ä½¿ã£ã¦ã‚‚Cookieã®æ”¹å¤‰ã¯é˜²ã’ãªã„ã“ã¨ã‚’å®Ÿé¨“ã§è©¦ã—ã¦ã¿ãŸ
å¯ºç”°ã•ã‚“ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€Œä»–äººã®Cookieã‚’æ“ä½œã™ã‚‹ã€ã«ã¯ã€é€šä¿¡è·¯ä¸Šã®æ”»æ’ƒè€…ãŒã„ã‚‹å ´åˆã¯ã€SSLã‚’ä½¿ã£ã¦ã‚‚ã€Cookieã®ç›—è´ã‚’é˜²ãã“ã¨ã¯ã§ãã‚‹ãŒã€Cookieã®æ”¹å¤‰ã‚’é˜²ãã“ã¨ã¯ã§ããªã„ã¨æŒ‡æ‘˜ã•ã‚Œã¦ã„ã¾ã™ã€‚ã„ã‹ã«ã‚‚å¯ºç”°ã•ã‚“ã‚‰ã—ã„ç°¡ã«ã—ã¦è¦ã‚’å¾—ãŸã‚¨ãƒ³ãƒˆãƒªã§ã€ã“ã‚Œã«ä»˜ã‘åŠ ãˆã‚‹ã“ã¨ã¯ã‚ã¾ã‚Šãªã„ã®ã§ã™ãŒã€æ®‹å¿µãªãŒã‚‰ã¾ã èªã‚“ã§ã„ãªã„äººãŒå¤šãã†ã ã¨è¨€ã†ã“ã¨ã¨ã€ã‚ˆã‚Šåºƒã„èªè€…ã«å‘ã‘ã¦å…·ä½“çš„ã«èª¬æ˜Žã—ãŸæ–¹ãŒã‚ˆã„ã ã‚ã†ã¨è€ƒãˆã¾ã—ãŸã€‚ ãã“ã§ã€é€šä¿¡è·¯ä¸Šã«æ”»æ’ƒè€…ãŒã„ã‚‹å…¸åž‹ä¾‹ã¨ã—ã¦ã€å…¬è¡†ç„¡ç·šLANã®å½APï¼ˆã‚¢ã‚¯ã‚»ã‚¹ãƒã‚¤ãƒ³ãƒˆï¼‰ãŒã‚ã‚‹ã‚±ãƒ¼ã‚¹ã‚’é¡Œæã¨ã—ã¦ã€ã€ŒHTTPSã‚’ä½¿ã£ã¦ã‚‚Cookieã®æ”¹å¤‰ã¯é˜²ã’ãªã„ã€ã“ã¨ã‚’èª¬æ˜Žã—ã¾ã™ï¼ˆSecureå±žæ€§ä½¿ã†ã¨ç›—è´ã¯é˜²ã’ã¾ã™ãŒã€æ”¹å¤‰ã¯é˜²ã’ã¾ã›ã‚“ï¼‰ã€‚é•·ã„ã‚¨ãƒ³ãƒˆãƒªãªã®ã§çµè«–ã‚’å…ˆã«æ›¸ã„ã¦ãŠãã¾ã™ã€‚ Secureå±žæ€§ãŒãªã„Cookieã¯HTTPSã§ã‚‚ç›—è´ã§ãã‚‹ Cookieã®æ”¹å¤‰ã«ã¤ã„ã¦ã¯Se
Ooo 2013/09/30
cookie

dhcp

https

security

http

ssl
ãƒªãƒ³ã‚¯
Managing SSL & TLS Certificates | GlobalSign
Management and Automation Drive efficiency and reduce cost using automated certificate management and signing workflows.
Ooo 2013/06/27
ssl

oss

certificate
ãƒªãƒ³ã‚¯
AWS News Blog
Amazon SageMaker Geospatial Capabilities Now Generally Available with Security Updates and More Use Case Samples At AWS re:Invent 2022, we previewed Amazon SageMaker geospatial capabilities, allowing data scientists and machine learning (ML) engineers to build, train, and deploy ML models using geospatial data. Geospatial ML with Amazon SageMaker supports access to readily available geospatial dat
Ooo 2013/06/13
https

aws

Amazon

development

management

Amazon CloudFront

cdn

ssl
ãƒªãƒ³ã‚¯
SSL/TLSã‚’ã‚‚ã¡ã„ã¦ã„ã‚ˆã†ã¨ã‚‚sendmailã‚’ä½¿ç”¨ã—ã¦å¤–éƒ¨ã¸ã¨é›»åãƒ¡ãƒ¼ãƒ«ã®é€ä¿¡ã‚’ãŠã“ãªã†ã®ã§ã‚ã‚Œã°æ„å‘³ãŒãªã„ - äººç”ŸãŒäºŒåº¦ã‚ã‚Œã°
ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ å±±å²¸å’Œåˆ©ã«ã‚ˆã‚‹ç§çš„ãªãƒ¡ãƒ¢å¸–ã§ã™ã€‚JavaScriptã‚’ä¸»ã¨ã—ã¦ã€ã‚¦ã‚§ãƒ–å‘¨è¾ºæŠ€è¡“å…¨èˆ¬ã®è¨˜äº‹ã‚’æ›¸ã„ã¦ã„ã¾ã™ã€‚ æˆ¦å§«çµ¶å”±ã‚·ãƒ³ãƒ•ã‚©ã‚®ã‚¢ã®ç¬¬äºŒæœŸã§ã‚ã‚‹æˆ¦å§«çµ¶å”±ã‚·ãƒ³ãƒ•ã‚©ã‚®ã‚¢GãŒæ”¾é€ã•ã‚Œã‚‹ã¾ã§ã®æ—¥ãŒåˆ»ä¸€åˆ»ã¨ã¡ã‹ã¥ã„ã¦ã„ã¾ã™ã€‚ãã—ã¦ãã‚Œã«ã¨ã‚‚ãªã„æˆ¦å§«çµ¶å”±ã‚·ãƒ³ãƒ•ã‚©ã‚®ã‚¢G ç¬¬ä¸€è©±ã®å…ˆè¡Œä¸Šæ˜ ä¼šãŒã¡ã‹ãé–‹å‚¬ã•ã‚Œã‚‹ã“ã¨ã¨ãªã‚Šã¾ã—ãŸã€‚ä¸€ç®‡æœˆä»¥ä¸Šã‚‚å…ˆè¡Œã—ã¦è¦–è´ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã¨ã„ã†ã“ã¨ã¨ãªã‚Šã¾ã™ã€‚ã“ã‚Œã¯å®Ÿã«ã‚ˆã‚ã“ã°ã—ã„ã“ã¨ã§ã™ã€‚ã—ã‹ã—ãªãŒã‚‰ä¾›ã•ã‚Œã¦ã„ã‚‹å¿œå‹Ÿãƒ•ã‚©ãƒ¼ãƒ ã¯ã„ã•ã•ã‹ä»¥ä¸Šã«ã‚ã‚„ã¾ã‚ŠãŒè¤‡æ•°ãµãã¾ã‚Œã¦ã—ã¾ã£ã¦ãŠã‚Šã€ã©ã†ã«ã‚‚å›°æƒ‘ã›ã–ã‚‹ã‚’ãˆã¾ã›ã‚“ã€‚ å…ˆã«ã—ã‚ã—ãŸå¿œå‹Ÿãƒ•ã‚©ãƒ¼ãƒ ã¯KENT WEBã«ã¦é…å¸ƒã•ã‚Œã¦ã„ã‚‹CGIã‚¹ã‚¯ãƒªãƒ—ãƒˆã§ã‚ã‚‹POST-MAILãŒä½¿ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã‚Œã¯å¿œå‹Ÿãƒ•ã‚©ãƒ¼ãƒ ã®HTMLæ–‡æ›¸ä¸ã«å«ã¾ã‚Œã‚‹formè¦ç´ ã®ä¸èº«ã‚’ã¿ã‚Œã°ã¤ã‚ˆã„ãã›ãŒã§ã¦ã—ã¾ã£ã¦ã„ã‚‹ã®ã§ä¸€ç›®çžç„¶ã§ã™ã€‚ã¾ãŸå¿œå‹Ÿå®Œäº†æ™‚
Ooo 2013/05/28
smtp

ssl

tls

mail

sendmail

security
ãƒªãƒ³ã‚¯
GPUã‚’ç”¨ã„ãŸSSLãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã®å®Ÿè£…ã«ã¤ã„ã¦ - ã‚†ã†ã†ããƒ–ãƒã‚°
è¿‘å¹´ï¼Œæ±Žç”¨è¨ˆç®—ã®é«˜é€ŸåŒ–ã®ãŸã‚ã®ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ã¨ã—ã¦æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹GPUã‚’ï¼Œãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å‡¦ç†ã«é©ç”¨ã™ã‚‹ä¸€ç’°ã¨ã—ã¦ï¼Œã‚µãƒ¼ãƒã‚µã‚¤ãƒ‰ã®SSLå‡¦ç†ã«æ³¨ç›®ã—ãŸè«–æ–‡ã‚’èªã‚“ã ã®ã§ï¼Œå†…å®¹ã‚’è»½ãç´¹ä»‹ã—ã¾ã™ï¼Ž SSLShader - GPU-accelerated SSL Proxy SSLShader SSLShader: Cheap SSL acceleration with commodity processors Proceedings of the 8th USENIX conference on Networked systems design and implementation 2011 ãªãŠï¼Œè©•ä¾¡ã«ä½¿ã‚ã‚ŒãŸå®Ÿè£…ã®ä¸€éƒ¨ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ï¼Ž http://shader.kaist.edu/sslshader/libgpu crypto/ ç´¹ä»‹ èƒŒæ™¯ SSL(Secure Socket
Ooo 2013/04/17
GPU

ssl
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸