[B! OpenSSL] cat-o-ninetailã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

cat-o-ninetail id:cat-o-ninetail

OpenSSLã«é–¢ã™ã‚‹cat-o-ninetailã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OpenSSLè¨¼æ˜Žæ›¸æ“ä½œ/VeriSign - # cat /var/log/stereocat | tail -n3
æ˜¨æ—¥ã¯ä½•ã§ã¾ãŸçµ‚é›»å¸°ã‚Šã‹ã¨ã„ã†ã¨ã€‚æŸãƒ‡ãƒ¼ã‚¿ã‚»ãƒ³ã‚¿ã«è¡Œã£ã¦ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã®è¨å®šã‚’é ¼ã¾ã‚ŒãŸã®ã§ã‚„ã£ã¦ã„ãŸã®ã ãŒ(åˆ¥ä»¶ã§è¡Œã£ã¦ã„ãŸã®ã ã‘ã©ã€è‡¨æ™‚ã§å½“æ—¥ä»•äº‹ã‚’æŒ¯ã‚‰ã‚ŒãŸ)ã€‚ ã§ã€è¨¼æ˜Žæ›¸æ¸¡ã•ã‚Œã¦ã€LBã«ã‚¤ãƒ³ãƒãƒ¼ãƒˆã—ã¦è¨å®šã—ã¨ã‘ã¨ã€‚æ¸¡ã•ã‚ŒãŸè¨¼æ˜Žæ›¸ã¯ VeriSign ã§ç½²åã—ã¦ã‚‚ã‚‰ã£ãŸç‰©ã§ã€ãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒ†ã‚ã‚¹ãƒˆã ã‘ã½ã‚ã£ã¨æ¸¡ã•ã‚ŒãŸã®ãã€‚ã¦ã£ãã‚Š PEM å½¢å¼ã®è¨¼æ˜Žæ›¸ã ã¨æ€ã£ãŸã®ã ã‘ã©ã€ã‚¤ãƒ³ãƒãƒ¼ãƒˆã—ã¦ã¿ãŸã‚‰ã€LBã§è¨¼æ˜Žæ›¸ãŒèªã‚ãªã„(è¨¼æ˜Žæ›¸ã ã¨èªè˜ã•ã‚Œãªã„)ã§ã‚„ã‚“ã®ã€‚ãªã‚“ã ã“ã‚Œã¯ã€ã¨ã„ã†ã“ã¨ã§ã”ã«ã‚‡ã”ã«ã‚‡ã‚„ã£ã¦ã€å•é¡ŒãŒã‚ã‹ã‚‹ã¾ã§ã«æ™‚é–“ã‚’ã¤ã¶ã—ã¦ã—ã¾ã£ãŸã€‚ å•é¡Œã¯ä½•ã ã£ãŸã®ã‹? è¨¼æ˜Žæ›¸ã®ãƒ•ã‚¡ã‚¤ãƒ«å½¢å¼ã«ã¤ã„ã¦ ã«åŸºã¥ã„ã¦è¨¼æ˜Žæ›¸(hoge.txt)ã‚’è¡¨ç¤ºã—ã¦ã¿ã‚ˆã†ã¨ã—ãŸã€‚ $ openssl x509 -in hoge.txt -text unable to load certificate 5504:error:
cat-o-ninetail 2010/08/16
IISç”¨ã®è¨¼æ˜Žæ›¸ã¯ x509 ã˜ã‚ƒãªãã¦ pkcs7 ã§å†…å®¹ãŒç¢ºèªã§ãã‚‹ã€ã¨ã€‚

SSL

OpenSSL
ãƒªãƒ³ã‚¯
è¨¼æ˜Žæ›¸ã¨éµã®ãƒšã‚¢ã‚’ã‚³ãƒžãƒ³ãƒ‰ã§ç¢ºèªã™ã‚‹ - inuzã®ãƒ–ãƒã‚°
ã•ã¦Verisignã‹ã‚‰å±Šã„ãŸã‚ˆã€ã£ã¦æ™‚ã«5æžšé ¼ã‚“ã ã¯è‰¯ã„ã‘ã‚Œã©ã€éµãƒ•ã‚¡ã‚¤ãƒ«ã‚’key1.txtã¿ãŸã„ãªåå‰ã—ã¡ã‚ƒã£ãŸã‹ã‚‰ã©ã‚ŒãŒã©ã‚Œã ã‹ã‚ã‹ã‚‰ãªã„ã‚ˆãƒžãƒžã€œã€œï¼ï¼ ãã‚“ãªé¦¬é¹¿ãªå¾¡ä»ã®ãŸã‚ã®ç¢ºèªæ–¹æ³•ã¯ä»¥ä¸‹ã€‚modulusã¨ã„ã†å¥´ã‚’ç¢ºèªã™ã‚Œã°ã‚ˆã‚ã—ã„ã€‚(æ—¥æœ¬èªžã§ãªã‚“ã¦è¨€ã†ã®ï¼ŸçŸ¥ã‚‰ãªã„) $ openssl x509 -in è¨¼æ˜Žæ›¸ãƒ•ã‚¡ã‚¤ãƒ« -modulus -noout $ openssl rsa -in éµãƒ•ã‚¡ã‚¤ãƒ« -modulus -nooutè¨¼æ˜Žæ›¸ã¨éµã¨ã§ã€modulusã‚’æ¯”ã¹ã¦åŒã˜ãªã‚‰ã°ã€æ£ã—ã„ãƒšã‚¢ã ã€‚ã‚‚ã£ã¨ç°¡å˜ã«èª¿ã¹ã‚‹æ–¹æ³•ãŒã‚ã£ãŸã‚‰æ•™ãˆã¦ãƒ—ãƒªãƒ¼ã‚ºã€‚ è¨¼æ˜Žæ›¸ã®å†…å®¹ã‚’é–²è¦§ã™ã‚‹ã«ã¯ $ openssl x509 -in è¨¼æ˜Žæ›¸ãƒ•ã‚¡ã‚¤ãƒ« -textâ†‘ã§ã‚‚å‡ºã¦ãã‚‹ãŒã€ã±ã£ã¨ã‚ã‹ã‚‹å½¢ã§æœ‰åŠ¹æœŸé™ã‚’ç¢ºèªã™ã‚‹ã«ã¯ $ openssl x509 -in è¨¼æ˜Žæ›¸ãƒ•ã‚¡ã‚¤ãƒ« -noout -datesã¨ã‚„ã‚Œã°ã‚ˆã‚
cat-o-ninetail 2010/07/15
SSL

OpenSSL
ãƒªãƒ³ã‚¯
Apache + OpenSSL | Sun Limited Mt.
Apache + OpenSSL ã®è¨å®šã‚’ã—ãŸã¨ãã®ãƒ¡ãƒ¢ã§ã™ã€‚ä»¥ä¸‹ã®ã‚µã‚¤ãƒˆã‚’å‚è€ƒã«ã—ã¾ã—ãŸã€‚ Apache(2.0)æ—¥æœ¬èªžãƒžãƒ‹ãƒ¥ã‚¢ãƒ« â€“ The Japanese manual of Apache HTTP Server 2.0 ç§˜å¯†éµã€CSR ä½œæˆ ç§˜å¯†éµï¼ˆãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆã‚ãƒ¼ï¼‰ã‚’ä½œæˆã—ã¾ã™ã€‚ ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã®ã‚ã‚‹ç§˜å¯†éµã‚’ä½œæˆã™ã‚‹ã€‚ $ openssl genrsa -des3 -out server.key 1024 ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã®ãªã„ç§˜å¯†éµã‚’ä½œæˆã™ã‚‹ã€‚ $ openssl genrsa -out server.key 1024 ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã‚’ä»˜ã‘ãŸå ´åˆã¯çµ¶å¯¾ã«ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã‚’å¿˜ã‚Œãªã„ã“ã¨ã€‚Apache ã‚’èµ·å‹•ã™ã‚‹éš›ã«ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã‚’èžã‹ã‚Œã¾ã™ã€‚ CSR ã‚’ä½œæˆã™ã‚‹ã€‚ $ openssl req -new -key server.key -out server.csr ä½œæˆã—ãŸ CSR ã¯ä¸‹è¨˜ã‚³
cat-o-ninetail 2010/02/19
ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã®å¤‰æ›´ã¨ã‹

OpenSSL
ãƒªãƒ³ã‚¯
Debian, Ubuntuç‰ã«é™å®šã—ãŸOpenSSLã®è„†å¼±æ€§ - æ—¥æœ¬Linuxå”ä¼šblog
Debian Projectã«ã‚‚å‚åŠ ã—ã¦ã„ã‚‹é‡Žé¦–ã§ã™ã€‚å…ˆæ—¥ã€Debian Projectã‚’éœ‡æ’¼ã•ã›ã‚‹å‡ºæ¥äº‹ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚ ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã€ã‚ã‚‹ã„ã¯ä¸€éƒ¨ã®å•†ç”¨ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã‚‚åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ã€OpenSSLã¨ã„ã†æš—å·åŒ–ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«ã€Debiané–‹ç™ºè€…ã®å½“ã¦ãŸãƒ‘ãƒƒãƒãŒåŽŸå› ã§äºˆæ¸¬å¯èƒ½ãªä¹±æ•°ã‚’ç”Ÿæˆã—ã¦ã—ã¾ã†è„†å¼±æ€§ãŒå…¥ã‚Šè¾¼ã‚“ã§ã—ã¾ã„ã¾ã—ãŸã€‚ æš—å·ã«ã¨ã£ã¦ä¹±æ•°ã¯éžå¸¸ã«é‡è¦ã§ã™ã€‚äºˆæ¸¬å¯èƒ½ãªä¹±æ•°ã‚’ä½¿ã£ã¦ã—ã¾ã†ã¨ã€ãã‚ŒãŒæš—å·ã‚’ç ´ã‚‹æ‰‹ãŒã‹ã‚Šã¨ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚ ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®è„†å¼±æ€§ãªã®ã§å½±éŸ¿ç¯„å›²ã‚‚å¤§ããã€OpenSSH, OpenVPN, DNSSECã®éµã‚„X.509è¨¼æ˜Žæ›¸ãªã©ãŒå½±éŸ¿ã‚’å—ã‘ã¾ã™ã€‚ç‰¹ã«OpenSSHã¯éžå¸¸ã«å¤§ããªå•é¡Œã§ã™ã€‚ ã‚ªãƒªã‚¸ãƒŠãƒ«ã®OpenSSLã«ã¯ã“ã®ã‚ˆã†ãªå•é¡Œã¯ãªã„ã®ã§ã€ä»Šã®ã¨ã“ã‚Debianã¨UbuntuãŒã“ã®è„†å¼±æ€§ã«ã¤ã„ã¦ã®ãƒªãƒªãƒ¼ã‚¹ã‚’å‡ºã—ã¦ã„ã¾ã™ã€‚ [SECURITY] [
cat-o-ninetail 2008/05/21
security

OpenSSL
ãƒªãƒ³ã‚¯
kmutoâ€™s blog
ã“ã®æŠ•ç¨¿ã‚’Instagramã§è¦‹ã‚‹ ã“ã®æŠ•ç¨¿ã‚’Instagramã§è¦‹ã‚‹ ã“ã®æŠ•ç¨¿ã‚’Instagramã§è¦‹ã‚‹ ã“ã®æŠ•ç¨¿ã‚’Instagramã§è¦‹ã‚‹ ã“ã®æŠ•ç¨¿ã‚’Instagramã§è¦‹ã‚‹ ã“ã®æŠ•ç¨¿ã‚’Instagramã§è¦‹ã‚‹ ã“ã®æŠ•ç¨¿ã‚’Instagramã§è¦‹ã‚‹
cat-o-ninetail 2008/05/21
security

OpenSSL
ãƒªãƒ³ã‚¯
Debian JP Project - æœ€è¿‘ã®è©±é¡Œ - OpenSSL ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®è„†å¼±æ€§ã¨ãã®å½±éŸ¿ã«ã¤ã„ã¦ (SSHéµã€SSLè¨¼æ˜Žæ›¸ç‰ï¼‰
OpenSSL ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®è„†å¼±æ€§ã¨ãã®å½±éŸ¿ã«ã¤ã„ã¦ (SSHéµã€SSLè¨¼æ˜Žæ›¸ç‰ï¼‰ æ®‹å¿µãªäº‹ã« Debian ã® OpenSSL ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«è„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚Šã¾ã—ãŸã€‚è¦‹ã¤ã‹ã£ãŸå•é¡Œã¯æ—¢ã«ä¿®æ£ã•ã‚Œã¦ã„ã¾ã™ãŒã€ ä»Šå›žã®å•é¡Œã¯ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®æ›´æ–°ã ã‘ã§æ¸ˆã¾ã›ã‚‰ã‚Œãªã„ã‚‚ã®ã¨ãªã£ã¦ã„ã¾ã™ã€‚ ä»Šå›žã®å•é¡Œã¯ã€OpenSSL ã®ä¹±æ•°ç”Ÿæˆéƒ¨åˆ†ã«ã¤ã„ã¦ã€Debian ã® OpenSSL ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã®ãƒ¡ãƒ³ãƒ†ãƒŠãŒ Valgrind (C/C++ ãƒ—ãƒã‚°ãƒ©ãƒ ã§ã®ãƒ¡ãƒ¢ãƒªãƒªãƒ¼ã‚¯ãªã©ã®å•é¡Œã‚’è¦‹ã¤ã‘ã‚‹ãƒ‡ãƒãƒƒã‚°ãƒ„ãƒ¼ãƒ«) ã‚’ä½¿ã£ã¦ã„ã¦è¦‹ã¤ã‘ãŸå•é¡Œã‚’ä¿®æ£ã—ã‚ˆã†ã¨ã—ã¦èª¤ã£ãŸãƒ‘ãƒƒãƒã‚’å½“ã¦ã¦ã—ã¾ã£ãŸäº‹ãŒåŽŸå› ã§ã™ã€‚ ã“ã‚Œã«ã‚ˆã£ã¦ã€ä¹±æ•°ãŒä½¿ã‚ã‚Œãšã«æš—å·ãŒéžå¸¸ã«å¼±ã„ã‚‚ã®ã¨ãªã£ã¦ã—ã¾ã†å•é¡ŒãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚ ãªãŠã€ã“ã®å•é¡Œã¯ Debian ã ã‘ã«æ¢ã¾ã‚‰ãš Debian ã‚’ãƒ™ãƒ¼ã‚¹ã¨ã—ã¦ã„ã‚‹ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ (Ubuntu ãªã©ï¼‰ã‚„ã‚·ã‚¹ãƒ†ãƒ ã«ã‚‚å½±
cat-o-ninetail 2008/05/19
security

OpenSSL
ãƒªãƒ³ã‚¯
1