[B! ssl] decoy2004ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

decoy2004 id:decoy2004

sslã«é–¢ã™ã‚‹decoy2004ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSLã¯ç„¡æ–™ã¨æœ‰æ–™ã§ä½•ãŒé•ã†ã®ï¼ï¼Ÿä»Šã•ã‚‰èžã‘ãªã„SSLã®ä»•çµ„ã¿ã¨å°Žå…¥ã®ãƒ¡ãƒªãƒƒãƒˆ
ï¼ˆã“ã®è¨˜äº‹ã¯2022å¹´9æœˆ29æ—¥ã«æ›´æ–°ã•ã‚Œã¾ã—ãŸï¼‰ ã€ŒSSLã£ã¦ã„ã†è¨€è‘‰ã€ã‚ˆãèžãã‘ã©ã€ã©ã‚“ãªæ„å‘³ãªã‚“ã ã‚ã†ï¼Ÿã€ ã€Œè‡ªåˆ†ã®Webã‚µã‚¤ãƒˆã‚’SSLåŒ–ã™ã‚‹å¿…è¦ã£ã¦ã‚ã‚‹ã®ï¼Ÿã€ ã€Œç„¡æ–™ã®SSLã¨æœ‰æ–™ã®SSLã£ã¦ã€ä½•ãŒé•ã†ã®ï¼Ÿã€ ã“ã‚“ã«ã¡ã¯ã€‚ äº¬éƒ½ã®Webãƒ—ãƒ©ãƒ³ãƒ‹ãƒ³ã‚°ä¼šç¤¾ã€Œã‚¦ã‚§ãƒ–ãƒ©ã‚¤ãƒ€ãƒ¼ã€ã®æ¾å°¾ã§ã™ã€‚ æŸç¤¾ã®ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ã‹ã‚‰CPIã®ã‚µãƒ¼ãƒãƒ¼ã«ä¹—ã‚Šæ›ãˆãŸã“ã¨ãŒãã£ã‹ã‘ã§ã€ã“ã®ã‚³ãƒ©ãƒ ã‚’æ›¸ã‹ã›ã¦ã„ãŸã ãæ©Ÿä¼šã‚’å¾—ã¾ã—ãŸã€‚ ç¾åœ¨ã€ã‚¦ã‚§ãƒ–ãƒ©ã‚¤ãƒ€ãƒ¼ã§ã¯ã€CPIã®å°‚ç”¨ã‚µãƒ¼ãƒãƒ¼ã¨å…±ç”¨ã‚µãƒ¼ãƒãƒ¼ã®ãµãŸã¤ã‚’å€Ÿã‚Šã€ã•ã¾ã–ã¾ãªWebã‚µã‚¤ãƒˆã‚’é‹å–¶ã—ã¦ã„ã¾ã™ã€‚ ã•ã¦å‰å›žã€Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹è¨˜äº‹ã‚’æ›¸ãã¾ã—ãŸã€‚ Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’èªžã‚‹ä¸Šã§ã¯ã€ã€ŒSSLï¼ˆSecure Sockets Layerï¼‰ã€ã«ã¤ã„ã¦ã®è©±ã¯å¤–ã›ã¾ã›ã‚“ã€‚ SSLã¨ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã®é€šä¿¡ã‚’æš—å·åŒ–ã™ã‚‹æŠ€è¡“ã®ã“ã¨ã€‚ ã“ã®æŠ€è¡“ã¯ãƒãƒƒãƒˆä¸Šã®ã•ã¾ã–ã¾ãªå ´é¢ã§ä½¿ã‚ã‚Œ
decoy2004 2016/04/06
SSL

security
ãƒªãƒ³ã‚¯
ã¾ã•ã‹ã®AWSã§SSLè¨¼æ˜Žæ›¸ãŒç„¡æ–™ã€ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã‚‚ä½¿ãˆã‚‹ã—è‡ªå‹•ã§æ›´æ–° | ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚¹ã™ã ã¡ãã‚“
ã‚·ãƒ³ã‚¸ã§ã™ã€‚AWSã«æ–°æ©Ÿèƒ½ã€ŒAWS Certificate Managerã€ãŒè¿½åŠ ã•ã‚Œã¾ã—ãŸã€‚SSLè¨¼æ˜Žæ›¸ãŒã¾ã•ã‹ã®ç„¡æ–™ç™ºè¡Œï¼ãŸã ã—AWSã®ELBã¨Cloudfrontã«é™ã‚‹åˆ¶é™ä»˜ãã ã‘ã©ï¼ãªã®ã§ã€EC2ã ã‘ã€œã¨ã‹ã§ã¯ä½¿ãˆã¾ã›ã‚“ã®ã§ã”æ³¨æ„ã‚’ã€‚ã¨ã¯ã„ãˆELBã‚’æŒŸã‚€ã®ã‚‚Cloudfrontä½¿ã†ã®ã‚‚ã‚ã‚ŠãŒã¡ãªæ§‹æˆãªã®ã§ã€ã•ãã£ã¨SSLæš—å·åŒ–é€šä¿¡ã—ãŸã„ã¨ãã¯ç„¡æ–™ã ã—ä¾¿åˆ©ã§ã™ã‚ˆãã€‚ç„¡æ–™ã§ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ä½¿ãˆã‚‹ã®ã¯ã‹ãªã‚Šä¾¿åˆ©ã€‚ ã‚½ãƒ¼ã‚¹ã¯ã“ã¡ã‚‰ New â€“ AWS Certificate Manager â€“ Deploy SSL/TLS-Based Apps on AWS | AWS Official Blog https://aws.amazon.com/jp/blogs/aws/new-aws-certificate-manager-deploy-ssltls-based-apps-on-aws/ ã‚„
decoy2004 2016/01/22
AWS

SSL
ãƒªãƒ³ã‚¯
ç„¡æ–™ã§ä½¿ãˆã‚‹SSLï¼ä¼šç¤¾ã§ã‚‚è‡ªå®…ã§ã‚‚ã¿ã‚“ãªã§ let's encryptï¼ - Qiita
ã¯ã˜ã‚ã« ç¤¾å†…ã‚„è‡ªå®…ã§HTTPSå¯¾å¿œã‚’ã—ã‚ˆã†ã¨æ€ã†ã¨ã€ãŠé‡‘ã‚’æ‰•ã£ã¦ã€é¢å€’ãªæ‰‹ç¶šãã‚’ã‚„ã£ã¦ã€ãªãŠã‹ã¤ä½•å¹´ã‹ã«ä¸€å›žæ›´æ–°ã‚‚ã—ãªãã¦ã¯ã„ã‘ãªãã¦ã€ãã‚ŒãŒé¢å€’æ¥µã¾ã‚Šãªã„ã€‚ ã‚‚ã¡ã‚ã‚“ãŠé‡‘ã‚’æ‰•ã£ã¦ã„ã‚‹ã‹ã‚‰ã€è‡ªç”±ã«HTTPSåŒ–ãªã‚“ã¦ã§ããªã„ã—ã€çµå±€ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã«è½ã¡ç€ãã‚“ã ã‘ã©ã€ãã‚Œã¯ãã‚Œã§URLã«ã€ŒÃ—ã€ã¤ãã—ã€ãã‚Œã‚’æ”¹å–„ã™ã‚‹ãŸã‚ã«è¨¼æ˜Žæ›¸ã‚’ã‚¤ãƒ³ãƒãƒ¼ãƒˆã™ã‚‹ä½œæ¥ã‚‚æ£ç›´é¢å€’ã€‚ çµå±€Ã—ã¤ã„ãŸã¾ã¾ã‚„ã‚‹ã‚“ã ã‘ã©ã€ãã‚Œã ã¨wgetã‚‚ã¾ã¨ã‚‚ã«ã§ããªã„ã—ã€ã‚»ã‚ãƒ¥ã‚¢ã˜ã‚ƒãªã„ã£ã¦ãƒãƒƒãƒˆã§è¨€ã‚ã‚Œã¦ã„ã‚‹ã—ã€ã˜ã‚ƒãã©ã†ã™ã‚“ã®ã‚ˆï¼ï¼ ã£ã¦ãªã£ãŸæ™‚ã«ã€æº€ã‚’æŒã—ã¦ç™»å ´ã—ãŸã®ãŒã€ã€ŒLet's Encryptã€! ã„ã‚ã„ã‚ã‚ã£ã¦å…¬é–‹ãŒä½•åº¦ã‹å»¶æœŸã—ã¦ã„ãŸãŒã€ã“ã®åº¦ã‚ˆã†ã‚„ãã€ŒPublic Betaã€ã¨ãªã‚Šã€èª°ã§ã‚‚è‡ªç”±ã«ä½¿ãˆã‚‹ã‚ˆã†ã«ãªã£ãŸã®ã§ç´¹ä»‹ã—ã¾ã™ï¼ Lets Encryptã¨ã¯ï¼Ÿ å…¬å¼HPï¼šhttps://letsencrypt.org/
decoy2004 2015/12/21
ssl

qiita
ãƒªãƒ³ã‚¯
SSL Server Test: www5.econ.ne.jp (Powered by Qualys SSL Labs)
decoy2004 2015/06/07
SSL
ãƒªãƒ³ã‚¯
ã€æ‚²å ±ã€‘æ—¥æœ¬æœ€å¤§æ¨™æº–ã®æ±ºæ¸ˆã‚µã‚¤ãƒˆECONTEXT ãŒé…·ã™ãŽã‚‹ä»¶(2å›žç›®) - Windows 2000 Blog
Qualys SSL Labs - Projects / SSL Server Test / www5.econ.ne.jp å–ã‚Šæ•¢ãˆãšã€ã¤ããªã¿ã§ã™ãŒã€ QUALYS' SSL LABSã®çµæžœã€‚ No secure protocols supported ï¼ˆå®‰å…¨ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒãƒˆã‚³ãƒ«ãŒå˜åœ¨ã—ã¾ã›ã‚“ï¼ï¼‰ â€»æŽ¥ç¶šã§ããªã„å ´åˆã¯ www ç‰ã®ãƒ—ãƒ¬ãƒ•ã‚£ãƒƒã‚¯ã‚¹ã‚’å–ã‚Šé™¤ã„ã¦è©¦ã—ã¦ã¿ã¦ãã€ã¨ã‚ã‚Šã¾ã™ãŒã€ã‚µãƒ¼ãƒãƒ¼å†…ã§ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã¦ã‚‹å ´åˆã®è©± ã§ã™ã—ã€é™¤åŽ»ã™ã‚‹ã¨ econ.ne.jp (124.109.181.8) ã«ãªã£ã¦åˆ¥ã®ã‚µãƒ¼ãƒãƒ¼ã«ãªã‚Šã¾ã™ã€‚ ã¾ãã€ã“ã¡ã‚‰ã‚‚åŒã˜ã‚¨ãƒ©ãƒ¼ãªã®ã§ã™ãŒâ€¦ã€‚ Supported versions: SSLv3 TLSv1.0 Deflate compression: no Supported cipher suites (ORDER IS NOT SIGNIFICANT
decoy2004 2015/06/07
ã€Ž no secure protocol supported. ã€

SSL

server

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

é›»åæ±ºæ¸ˆ
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/11/19/20141118mozilla-eff-and-others-band-together-to-provide-free-ssl-certificates/
decoy2004 2014/11/19
SSL

https

security

internet

web
ãƒªãƒ³ã‚¯
opensslã§RSAæš—å·ã¨éŠã¶ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
opensslã¨RSAæš—å·ã«ã¤ã„ã¦ã¡ã‚‡ã£ã¨èª¿ã¹ã¦ã¿ã‚ˆã†ã‹ãªã€ã¨æ€ã£ãŸã€‚ ã¾ãšRSAæš—å·ã¨ã¯ã€ å…¬é–‹éµæš—å·æ–¹å¼ã®å®Ÿè£…ã®ã²ã¨ã¤ã§ã‚ã‚‹ 2ã¤ã®ç´ æ•°ã®ç©(ã‚±ã‚¿æ•°ãŒå¤§ãã„å ´åˆã®ç´ å› æ•°åˆ†è§£ã®å›°é›£ã•)ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ ã£ã¦ã“ã¨ã‚’ç†å±ˆã¨ã—ã¦ã¯ç†è§£ã—ã¦ã„ã‚‹ã‘ã©ã€å®Ÿéš›ã«opensslã‚³ãƒžãƒ³ãƒ‰ã§ä½œã£ãŸéµãƒ•ã‚¡ã‚¤ãƒ«ã®ä¸èº«ãŒã©ã†ãªã£ã¦ã„ã‚‹ã®ã‹? ã¨ã„ã†ã“ã¨ã¾ã§è¸ã¿è¾¼ã‚“ã ã“ã¨ãŒç„¡ã‹ã£ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ã€ã¡ã‚‡ã£ã¨ãã®è¾ºã‚’ã‚³ãƒžãƒ³ãƒ‰å©ããªãŒã‚‰éŠã‚“ã§ã¿ã‚‹ã“ã¨ã«ã™ã‚‹ã€‚ ã¯ã˜ã‚ã«ï¼šopensslã®æ“ä½œã«ã¤ã„ã¦ opensslã‚³ãƒžãƒ³ãƒ‰ã¯å¢—ç¯‰ã«å¢—ç¯‰ã‚’é‡ãã™ãŽã¦ãŠã‚Šã€ã‚‚ã¯ã‚„ãã³ãˆç«‹ã¤Ã—Ã—ã®ã‚ˆã†ã§ã‚ã‚‹ã€‚ãƒ¤ãƒ´ã‚¡ã„ã“ã¨ã«ãªã£ãŸãƒ¬ãƒ™ãƒ«ã§æ©Ÿèƒ½ã¦ã‚“ã“ç››ã‚Šã®ã‚³ãƒžãƒ³ãƒ‰ãªã®ã§ã€ã‚µãƒ–ã‚³ãƒžãƒ³ãƒ‰ã¨ã—ã¦æ©Ÿèƒ½åã‚’æŒ‡å®šã—ã¦ä½¿ã†ã“ã¨ã«ãªã‚‹ã€‚ openssl command [ command_opts ] [ command_args ]ä¸Šä¾‹ã®ã€Œcommandã€ã«ã¯ã€R
decoy2004 2014/04/14
openssl

SSL
ãƒªãƒ³ã‚¯
ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’opensslã§ä½œã‚‹ï¼ˆè©³ç´°ç‰ˆï¼‰ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
å‰å›žã®opensslã§RSAæš—å·ã¨éŠã¶ã§RSAæš—å·ã‚„ç§˜å¯†éµã«ã¤ã„ã¦ä¸èº«ã‚’è‰²ã€…ã¨ã„ã˜ã£ã¦ã¿ãŸã€‚ç¶šã„ã¦ä»Šå›žã¯ã€Apacheã§ä½¿ã†ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã£ã¦ã¿ã‚‹ã€‚ ç´°ã‹ã„ã“ã¨ã¯ã„ã„ã‹ã‚‰ã€ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ã‚³ãƒžãƒ³ãƒ‰ã ã‘çŸ¥ã‚ŠãŸã„ ãŠæ€¥ãŽã®æ–¹ã¯ã€ä»¥ä¸‹3ã¤ã ã‘ã‚„ã‚Œã°è‰¯ã„ã€‚ã“ã‚Œã§10å¹´é–“(3650æ—¥)æœ‰åŠ¹ãªã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ãŒã§ãã‚ãŒã‚‹ã€‚ $ openssl genrsa 2048 > server.key $ openssl req -new -key server.key > server.csr $ openssl x509 -days 3650 -req -signkey server.key < server.csr > server.crtã§ãã‚ãŒã£ãŸserver.crtã¨server.keyã‚’ã€ä¾‹ãˆã°/etc/httpd/conf/ é…ä¸‹ã®ssl.crt/ ã¨ ssl.key/ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«è¨ç½®
decoy2004 2014/04/14
server

ssl

apache

openssl

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
Wiresharkã§SSLé€šä¿¡ã®ä¸èº«ã‚’è¦—ã„ã¦ã¿ã‚‹ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
OpenSSLã®è„†å¼±æ€§ã€ŒHeartbleedã€ãŒä¸–é–“ã‚’è³‘ã‚ã›ã¦ã„ã¾ã™ãŒã€è‰²ã€…ã¨ä¹—ã‚Šé…ã‚Œã¦ã—ã¾ã£ãŸæ„ŸãŒã‚ã‚‹ã®ã§ã€ã‚†ã‚‹ã‚†ã‚‹ã¨è½ã¡ç©‚æ‹¾ã„ã‚’ã—ã‚ˆã†ã‹ã¨æ€ã„ã¾ã™ã€‚ Heartbleedã§ç§˜å¯†éµã‚’æ‰‹ã«å…¥ã‚ŒãŸã‚‰SSLé€šä¿¡ã®ä¸èº«å…¨éƒ¨è¦‹ãˆã¡ã‚ƒã†ã˜ã‚ƒã‚“!! ã¨ã„ã†äº‹æ…‹ã«ãªã£ã¦ã„ã¾ã™ãŒã€ãªã‚“ã¨ãªãç†è«–çš„ã«ãã†ã ã‚ã†ãªã¨åˆ†ã‹ã‚‹ã‚‚ã®ã®ã‚¤ãƒžã‚¤ãƒå…·ä½“çš„ãªæ‰‹é †ãŒåˆ†ã‹ã‚‰ãªã„ã€‚ ã¨ã„ã†ã‚ã‘ã§ä»Šå›žã®ãƒ†ãƒ¼ãƒžã¨ã—ã¦ã€æ‰‹å…ƒã«ã‚µãƒ¼ãƒã®ç§˜å¯†éµã¨ã€SSLé€šä¿¡ã‚’ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ã—ãŸpcapãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚‹ã¨ãã«ã€Wiresharkã§ã©ã‚“ãªæ„Ÿã˜ã§SSLé€šä¿¡ã‚’ã€Œã»ã©ãã€ã®ã‹â€¦â€¦ã¨ã„ã†å…·ä½“çš„ãªæ‰‹é †ã‚’ã€ãƒãƒžã‚Šæ‰€ã‚’å«ã‚ã¦ã¾ã¨ã‚ã¦ãŠã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ ã¨ã„ã†ã‹ã€ç§è‡ªèº«ãŒãƒãƒžã£ãŸã®ã§è‡ªåˆ†ç”¨ãƒ¡ãƒ¢ã§ã™ãªã€‚ãªãŠã“ã®æ–‡æ›¸ã§ã¯"SSL"ã¨ã ã‘è¨˜è¿°ã—ã€TLSã¯ç„¡è¦–ã—ã¦ã„ã¾ã™ã€‚ å‰ææ¡ä»¶ ã¨ã‚Šã‚ãˆãšä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã®æ¤œè¨¼ç’°å¢ƒã§è©¦ã—ã¾ã—ãŸã€‚ IPã‚¢ãƒ‰ãƒ¬ã‚¹ èª¬æ˜Ž ãƒ›ã‚¹ãƒˆO
decoy2004 2014/04/14
ssl

OpenSSL

ã‚ãƒ£ãƒ—ãƒãƒ£

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
Heartbleedè„†å¼±æ€§ã¨ã€ãã®èƒŒå¾Œã«ã‚ã‚‹Webã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã®ä¸€èˆ¬çš„æ¬ é™¥ã«ã¤ã„ã¦
â– Heartbleedã®ãƒªã‚¹ã‚¯ã¨å–„å¾Œç– Heartbleedã¯ã€æ”»æ’ƒè€…ãŒä¸€å®šã®æ¡ä»¶ã‚’æº€ãŸã™OpenSSLãŒå‹•ä½œã—ã¦ã„ã‚‹ã‚µãƒ¼ãƒã®ã€ä»»æ„ä½ç½®ã®ãƒ¡ãƒ¢ãƒªã‚’å¤–éƒ¨ã‹ã‚‰èªã¿å‡ºã™ã“ã¨ãŒã§ãã¦ã—ã¾ã†ã¨ã„ã†è„†å¼±æ€§ã§ã™ã€‚å…·ä½“çš„ã«ã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãªãƒªã‚¹ã‚¯ãŒæƒ³å®šã•ã‚Œã¦ã„ã¾ã™ã€‚ ç§˜å¯†éµã®æ¼æ´©ã«ã‚ˆã‚‹ã€å½ã‚µã‚¤ãƒˆã®å‡ºç¾ï¼ˆã‚ã‚‹ã„ã¯ä¸é–“è€…æ”»æ’ƒï¼‰ ç§˜å¯†éµã®æ¼æ´©ã«ã‚ˆã‚Šã€ï¼ˆéŽåŽ»ã®ã‚‚ã®ã‚’å«ã‚€ï¼‰ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ã®è§£èª ã‚µãƒ¼ãƒã®åŒä¸€ãƒ—ãƒã‚»ã‚¹ãŒè¡Œã£ãŸå‡¦ç†ã«é–¢é€£ã™ã‚‹ï¼ˆä»–ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ¼ã‚’å«ã‚€ï¼‰ãƒ‡ãƒ¼ã‚¿ã®æ¼æ´© æ¼æ´©ã—ãŸç§˜å¯†éµã‚’ç”¨ã„ãŸæ”»æ’ƒã«ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’å½ã‚µã‚¤ãƒˆã¸èª˜å°Žã§ããŸã‚Šã€ãƒ‘ã‚±ãƒƒãƒˆã®çµŒç”±ç‚¹ã‚’ç®¡ç†ã—ã¦ã„ã‚‹ãªã©ã®ã€çµŒè·¯ä¸Šã®è¦ä»¶ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ä»–ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‡ãƒ¼ã‚¿ã®æ¼æ´©ã«ã¤ã„ã¦ã¯ã€çµŒè·¯ä¸Šã®è¦ä»¶ã¯ä¸è¦ãªä¸€æ–¹ã€æ”»æ’ƒã®å®Ÿæ–½ã«è¿‘ã„ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ã‚µãƒ¼ãƒã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‡ãƒ¼ã‚¿ã—ã‹æ¼ã‚Œãªã„ã€ã¨ã„ã†é•ã„ãŒã‚ã‚Šã¾ã™ã€‚ ã©ã“ã¾ã§å¯¾ç–ã‚’æ–½ã™ã¹
decoy2004 2014/04/12
ssl

OpenSSL

Heartbleed

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
OpenSSLã®è„†å¼±æ€§ã§æƒ³å®šã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ - ã‚ã‚‚ãŠãã°
JVNã‚„JPCERT/CCã®è¨˜äº‹ãŒã‚ã¾ã‚Šã«ã‚‚ã•ã‚‰ã£ã¨æ›¸ã‹ã‚Œã¦ã„ã¦ã€å…·ä½“çš„ãªãƒªã‚¹ã‚¯ãŒæƒ³åƒã—ã¥ã‚‰ã„ã¨æ€ã†ã®ã§èª¬æ˜Žã—ã¾ã™ã€‚ ä»ŠåŒ—ç”£æ¥ (ä»Šãƒ‹ãƒ¥ãƒ¼ã‚¹è¦‹ã¦æ¥ãŸã‹ã‚‰ä¸‰è¡Œã§æ•™ãˆã¦æ¬²ã—ã„ã¨ã„ã†äººå‘ã‘ã®ã¾ã¨ã‚) ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã®ã€Œæš—å·åŒ–ã€ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹OpenSSLã¨ã„ã†ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãŒ2å¹´é–“å£Šã‚Œã¦ã„ã¾ã—ãŸã€‚ ã“ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã¯ä¾¿åˆ©ãªã®ã§ã€Facebookã ã¨ã‹YouTubeã ã¨ã‹ã€ã‚ã¡ã“ã¡ã®ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã§ä½¿ã£ã¦ã„ã¾ã—ãŸã€‚ ä»–ã®äººã®å…¥åŠ›ã—ãŸIDã¨ã‹ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨ã‹ã‚¯ãƒ¬ã‚«ç•ªå·ã¨ã‹ã‚’ã€æ‚ªã„äººãŒè¦‹ã‚‹ã“ã¨ãŒã§ãã¦ã—ã¾ã„ã¾ã™ã€‚(å®Ÿéš›ã«æ¼ã‚Œã¦ã‚‹ä¾‹) ä»–ã«ã‚‚è‰²ã€…æ¼ã‚Œã¦ã¾ã™ãŒã€ã¨ã‚Šã‚ãˆãšã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ä»¥å¤–ã®äººãŒè¦šãˆã¦ãŠãã¹ãã¯ã“ã“ã¾ã§ã§OKã§ã™ã€‚ã‚‚ã†å°‘ã—åˆ†ã‹ã‚Šã‚„ã™ã„æƒ…å ±ãŒä»¥ä¸‹ã«ã‚ã‚Šã¾ã™ã€‚ OpenSSL ã®è„†å¼±æ€§ã«å¯¾ã™ã‚‹ã€ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆåˆ©ç”¨è€…ï¼ˆä¸€èˆ¬ãƒ¦ãƒ¼ã‚¶ï¼‰ã®å¯¾å¿œã«ã¤ã„ã¦ ã¾ã ç›´ã£ã¦ã„ãªã„ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚‚ã‚ã‚Œã°ã€å…ƒã€…å£Šã‚Œã¦ã„ãªã„ã‚¦ã‚§ãƒ–
decoy2004 2014/04/10
ssl

security

OpenSSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Heartbleed
ãƒªãƒ³ã‚¯
CVE-2014-0160 OpenSSL Heartbleed è„†å¼±æ€§ã¾ã¨ã‚ - ã‚ã‚‚ãŠãã°
å¿…è¦ãªæƒ…å ±ã¯ http://heartbleed.com/ ã«ã¾ã¨ã¾ã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€è‹±èªžã ã—é•·ã„ã—ã£ã¦äººã®ãŸã‚ã«æ‰‹çŸã«ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ ã©ã†ã™ã‚Œã°ã„ã„ã®ã‹ OpenSSL 1.0.1ã€œ1.0.1fã‚’ä½¿ã£ã¦ã„ãªã‘ã‚Œã°ã‚»ãƒ¼ãƒ• ã‚ã¦ã¯ã¾ã‚‹å ´åˆã«ã¯ã€ä¸€åˆ»ã‚‚æ—©ããƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã—ã¦ã€ã‚µãƒ¼ãƒã”ã¨å†èµ·å‹•(ã‚ã‹ã‚‹ã²ã¨ã¯ã‚µãƒ¼ãƒ“ã‚¹å˜ä½ã§ã‚‚OKã€ãŸã ã—reloadã§ã¯ã ã‚ãªã“ã¨ã‚‚) SSLè¨¼æ˜Žæ›¸ã§ã‚µãƒ¼ãƒã‚’å…¬é–‹ã—ã¦ã„ã‚‹ãªã‚‰ã€ç§˜å¯†éµã‹ã‚‰ä½œã‚Šç›´ã—ã¦è¨¼æ˜Žæ›¸ã‚’å†ç™ºè¡Œã—ã€éŽåŽ»ã®è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã•ã›ã‚‹(æœ«å°¾ã«é–¢é€£ãƒªãƒ³ã‚¯ã‚ã‚Š)ã€‚ ã‚µãƒ¼ãƒã‚’å…¬é–‹ã—ã¦ã„ãªã„å ´åˆã‚‚ã€å¤–éƒ¨ã¸ã®SSLé€šä¿¡ãŒã‚ã‚Œã°å½±éŸ¿ã‚’å—ã‘ã‚‹ã®ã§ã€è©³ã—ãç²¾æŸ»ã™ã‚‹ã€‚ PFS(perfect forward secrecy)ã‚’åˆ©ç”¨ã—ã¦ã„ãªã„å ´åˆã€éŽåŽ»ã®é€šä¿¡å†…å®¹ã‚‚å¾©å·ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ãŸã‚ã€è©³ã—ãç²¾æŸ»ã™ã‚‹ã€‚ æ¼æ´©ã™ã‚‹æƒ…å ±ã®å…·ä½“ä¾‹ã¯ã€OpenSSLã®è„†å¼±æ€§ã§æƒ³å®šã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ã¨ã—ã¦
decoy2004 2014/04/10
security

SSL

OpenSSL

Heartbleed

è„†å¼±æ€§

Vulnerability
ãƒªãƒ³ã‚¯
iOS7ã‚¢ãƒ—ãƒªé–‹ç™ºè€…ã®æ‚²é³´ã«GMOãŒç¥žå¯¾å¿œã€SSLç„¡å„Ÿæä¾›é–‹å§‹ ã€@maskinã€‘ | TechWaveï¼ˆãƒ†ãƒƒã‚¯ã‚¦ã‚§ãƒ¼ãƒ–ï¼‰
1990å¹´ä»£åˆé ã‹ã‚‰è¨˜è€…ã¨ã—ã¦ã¾ãŸèµ·æ¥å®¶ã¨ã—ã¦ITã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—æ¥ç•Œã®ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢ã‹ã‚‰ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®äº‹æ¥å‰µå‡ºã«é–¢ã‚ã‚‹ã€‚ã‚·ãƒªã‚³ãƒ³ãƒãƒ¬ãƒ¼ã‚„EUç‰ã§ã®ã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—ã‚’çµŒé¨“ã€‚æ—¥æœ¬ã§ã¯ãƒãƒƒãƒˆã‚¨ã‚¤ã‚¸ç‰ã«æ‰€å±žã€å¤§æ‰‹ä¼æ¥ã®æ–°è¦äº‹æ¥å‰µå‡ºã«å”åŠ›ã€‚ãƒ–ãƒã‚°ã‚„SNSã€LINEãªã©ã®èª•ç”Ÿã‹ã‚‰æ™®åŠæˆé•·ã¾ã§ã‚’æœ€å‰ç·šã§è¦‹ã¦ããŸç”Ÿãå—å¼•ã¨ã—ã¦æ³¨ç›®ã•ã‚Œã‚‹ã€‚é€šä¿¡ã‚ãƒ£ãƒªã‚¢ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ãƒãƒ¼ã‚¿ãƒ«ã®å‰µæ¥ãƒ‡ã‚¹ã‚¯ã¨ã—ã¦æ•°å„„PVäº‹æ¥ã«ã€‚ä¸–ç•Œæœ€å¤§ITç³»ãƒ¡ãƒ‡ã‚£ã‚¢ï¼ˆã‚¹ãƒšã‚¤ãƒ³ï¼‰ã®å…ƒæ—¥æœ¬ç·¨é›†é•·ã€World Innovation Lab(WiL)ãªã©ã‚’çµŒã¦ã€ç¾åœ¨ã€ã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—æ”¯æ´å´ã®å–ã‚Šçµ„ã¿ã«æ³¨åŠ›ä¸ã€‚ [èªäº†æ™‚é–“: 2åˆ†] ç±³AppleãŒ2014å¹´3æœˆ11æ—¥ã«æä¾›ã‚’é–‹å§‹ã—ãŸã€ŒiOS 7.1ã€ã€‚ UI(ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ã‚¤ã‚¹)ãªã©ã®æ”¹å–„ã‚’ä¸å¿ƒã«è»Šè¼‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®æž çµ„ã¿ã€ŒCarPlayã€ãªã©ã¸ã®å¯¾å¿œãªã©ã‚‚æ³¨ç›®ã‚’æµ´ã³ãŸã€‚ ä¸€æ–¹ã§ã€ã‚¢ãƒ—ãƒªé–‹ç™ºè€…ã‹ã‚‰ã€Œé–‹ç™ºä¸ã®
decoy2004 2014/03/22
ssl

è¨¼æ˜Žæ›¸

iOS
ãƒªãƒ³ã‚¯
ç„¡æ–™ã®SSLè¨¼æ˜Žæ›¸StartSSLã‚’æ´»ç”¨ã™ã‚‹ - Qiita
èƒŒæ™¯ è‡ªå‰ã®ã‚µãƒ¼ãƒ“ã‚¹ã§httpsé€šä¿¡ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã«ã¯ã€SSLè¨¼æ˜Žæ›¸ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ è‡ªåˆ†ã§ä½¿ç”¨ã™ã‚‹ã ã‘ãªã‚‰ã€SSLè¨¼æ˜Žæ›¸ã‚‚è‡ªå‰ã§ä½œæˆã™ã‚‹ã„ã‚ã‚†ã‚‹ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ç”¨ã„ã¦ã‚‚è‰¯ã„ã®ã§ã™ãŒã€å¤–éƒ¨ã«å…¬é–‹ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®å ´åˆãã†ã¨ã‚‚è¡Œãã¾ã›ã‚“ã€‚ SSLè¨¼æ˜Žæ›¸ã¨ã„ã†ã¨å€¤æ®µãŒé«˜ã„å°è±¡ãŒã‚ã‚Šã¾ã—ãŸãŒã€StartSSLã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã§ç„¡æ–™ã§SSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’å—ã‘ã‚‰ã‚Œã‚‹ã¨è¨€ã†ã“ã¨ã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ StartSSLã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã™ã‚‹ è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’è¡Œã†å‰ã«ã€StartSSLã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ StartSSLã‹ã‚‰ã€"StartSSL Free (Class1)"ã‚’é¸æŠžã—ã¾ã™ã€‚ Certificate Control Panelã‚’é¸æŠžã€‚ Sign-upã«é€²ã¿ã¾ã™ã€‚ åå‰ã€ä½æ‰€ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ãªã© å€‹äººæƒ…å ±ã®ç™»éŒ²ã‚’è¡Œã„ã¾ã™ã€‚ ç™»éŒ²ã—ãŸãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«æœ¬äººç¢ºèªã®ãƒ¡ãƒ¼ãƒ«ãŒå±Šãã®ã§ã€å—ä¿¡ã—ãŸãƒ¡ãƒ¼ãƒ«ã®a
decoy2004 2013/11/01
ssl

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³äº‹ä»¶ã®è£ã§èµ·ãã¦ã„ãŸSSLç§˜å¯†éµã‚’å·¡ã‚‹æˆ¦ã„:Geekãªãºãƒ¼ã˜
ä»Šæœˆ7æ—¥ã‹ã‚‰9æ—¥ã«ã‚¢ãƒªã‚¾ãƒŠå·žã§é–‹å‚¬ã•ã‚ŒãŸNANOG 59ã§ã€Ladar Levisonæ°ãŒFBIã«ã‚µãƒ¼ãƒ“ã‚¹å…¨ä½“ã®SSLç§˜å¯†éµã‚’è¦æ±‚ã•ã‚ŒãŸè©±ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ Ladar Levisonæ°ãŒé‹å–¶ã—ã¦ã„ãŸã€Lavabitã¨ã„ã†é›»åãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã¯ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³äº‹ä»¶ã«é–¢é€£ã—ã¦çªå¦‚8æœˆ8æ—¥ã«é–‰éŽ–ã•ã‚Œã¦ã„ã¾ã™ã€‚ é–‰éŽ–æ™‚ã«ã¯è©³ç´°ãŒæ›¸ã‹ã‚Œã¦ãŠã‚‰ãšã€æ§˜ã€…ãªæ†¶æ¸¬ãŒèªžã‚‰ã‚Œã¦ã„ã¾ã—ãŸãŒã€ä¸–ç•Œä¸ã‹ã‚‰å¤šæ•°ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŒé›†ã¾ã‚‹NANOGã§ã€ãã®ä¸€éƒ¨å§‹çµ‚ãŒèªžã‚‰ã‚Œã¾ã—ãŸã€‚ ã“ã®ç™ºè¡¨ã¯ã€NANOG 59ãŒé–‹å§‹ã•ã‚Œã‚‹å‰ã®é€±ã«ã€è£åˆ¤æ‰€ãŒèª¿æŸ»å¯¾è±¡ã®æ°åä»¥å¤–ã‚’æ©Ÿå¯†è§£é™¤ã—ãŸã“ã¨ã«ã‚ˆã£ã¦å®Ÿç¾ã—ã¦ã„ã¾ã™ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã§æä¾›ã•ã‚Œã¦ã„ã‚‹ã‚µãƒ¼ãƒ“ã‚¹äº‹æ¥è€…ã«SSLç§˜å¯†éµã‚’æå‡ºã•ã›ã€ã‹ã¤ã€ãã®äº‹å®Ÿã®å…¬è¡¨ãŒé•æ³•è¡Œç‚ºã¨ãªã‚‹ã‚ˆã†ã«ã•ã‚Œã¦ã—ã¾ã£ã¦ã„ã‚‹ä¸€æ–¹ã§ã€ã“ã†ã„ã£ãŸå†…å®¹ã‚’å…¬çš„ã«èªžã‚Œã‚‹ã‚ˆã†ã«è£åˆ¤æ‰€ã§æˆ¦ã£ã¦ã€å®Ÿéš›ã«ãã‚Œã‚’å‹ã¡å–ã‚‹ã¨ã„ã†ã®ã¯å‡„
decoy2004 2013/10/18
security

ssl
ãƒªãƒ³ã‚¯
1