[B! ssl] griefworkerã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

griefworker id:griefworker

sslã«é–¢ã™ã‚‹griefworkerã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (15)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Let's Encrypt (certbot) ã§ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã§ããŸï¼ - Qiita
ã¯ã˜ã‚ã« å…ˆæ—¥ã€ Let's Encrypt (certbot) ã‚’ä½¿ã£ã¦ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã™ã‚‹ï¼(ã‚ã¨ã¡ã‚‡ã£ã¨) ã¨ã„ã†è¨˜äº‹ã‚’æ›¸ãã¾ã—ã¦ã€Qiitaã§ã®åˆæŠ•ç¨¿ã§ã‚ã£ãŸã«ã‚‚é–¢ã‚ã‚‰ãš5000ä»¥ä¸Šã®ã‚¢ã‚¯ã‚»ã‚¹ã€100ã„ã„ãã‚’é ‚ãã¾ã—ãŸã€‚ æŠ•ç¨¿æ™‚ç‚¹ã§ã¯ã¡ã‚ƒã‚“ã¨ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ãŒç™ºè¡Œã§ããŸã¨æ€ã£ã¦ã„ãŸã®ã§ã™ãŒã€å®Ÿéš›ã¯ã¾ã ã‚¹ãƒ†ãƒ¼ã‚¸ãƒ³ã‚°ã®æ®µéšŽã§ç„¡åŠ¹ãªè¨¼æ˜Žæ›¸ã—ã‹ç™ºè¡Œã•ã‚Œãªã„ã¨ã„ã†ãƒ„ãƒƒã‚³ãƒŸã‚’é ‚ãã¾ã—ã¦ã€ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã®èªã¿è¾¼ã¿ä¸è¶³ãƒ»æ¤œè¨¼ä¸è¶³ã‚’ç—›æ„Ÿã—è¨˜äº‹ã«è¿½è¨˜ã—ãŸã¨ã“ã‚ã§ã‚ã‚Šã¾ã™ã€‚ ã¨ã“ã‚ãŒã‚„ã£ã¨ã€ ACME v2 Production Environment & Wildcards ã€ŒACME v2ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆãŒProductionEnvironmentã¨ã—ã¦åˆ©ç”¨å¯èƒ½ã«ãªã£ãŸã€ã¨ã„ã†ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãŒã‚ã‚Šã€ ACME v2 Compatible Clients å¯¾å¿œã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆä¸€è¦§ã«certbotãŒå…¥ã£ã¦ã„
griefworker 2018/05/28
letsencrypt

ssl
ãƒªãƒ³ã‚¯
Web ã‚µãƒ¼ãƒ“ã‚¹ã«ãŠã‘ã‚‹ SSL ã®é¸å®š - ãƒœã‚¯ã‚³ã‚³
ã©ã‚‚ã€@kimihom ã§ã™ã€‚ å…ˆæ—¥ã€è‡ªç¤¾ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’ EV SSL ã¸é©ç”¨ã—ãŸã®ã§ã€ãã‚Œã«è‡³ã£ãŸçµŒç·¯ã¨ SSL ã«ã¤ã„ã¦æ€ã£ã¦ã„ã‚‹ã“ã¨ã‚’è¨˜ã™ã€‚ SSL åŒ–ã®æµã‚Œ ã‚‚ã¯ã‚„ã€ä»Šæ™‚ã®ã‚µãƒ¼ãƒ“ã‚¹ã§ SSL(HTTPS) åŒ–ã—ã¦ã„ãªã„Webã‚µãƒ¼ãƒ“ã‚¹ã¯ã»ã¨ã‚“ã©ãªããªã£ãŸã€‚ã¾ã—ã¦ã‚„ä¼æ¥æ¯Žã«é‡è¦ãªæƒ…å ±ã‚’ä¿å˜ã™ã‚‹ã‚±ãƒ¼ã‚¹ã®å¤šã„ SaaS ãªã©ã§ã¯ HTTPS åŒ–ã¯å¿…ãšã—ãªãã¦ã¯ãªã‚‰ãªã„å¯¾å¿œã®ä¸€ã¤ã¨ãªã£ã¦ã„ã‚‹ã€‚å€‹äººã®ãƒšãƒ¼ã‚¸ã‚„ ä¼šç¤¾HP ãªã©ã€ HTTP ã§ã‚‚ç‰¹ã«æŒ‡æ‘˜ã•ã‚Œã‚‹ã“ã¨ãŒãªã‹ã£ãŸã‚ˆã†ãªã‚µã‚¤ãƒˆã§ã‚‚ã€SSL ã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨ãŒé‡è¦ã«ãªã£ã¦ãã¦ã„ã‚‹ã€‚SSL ã‚’é©ç”¨ã—ã¦ã„ãªã„ãƒšãƒ¼ã‚¸ã®æ¤œç´¢é †ä½ãŒä¸‹ãŒã£ã¦ã—ã¾ãŸã‚Šã€ãƒšãƒ¼ã‚¸é–²è¦§æ™‚ã« Chrome ã‹ã‚‰è¦å‘Šè¡¨ç¤ºã•ã‚Œã¦ã—ã¾ã†ãŸã‚ã§ã‚ã‚‹ã€‚ ãã®æµã‚Œã®ä¸ã§ã€ã‚‚ã¯ã‚„ç§ãŸã¡ãŒ HTTPS ã‚’ä½¿ã‚ãªã„ç†ç”±ãŒå˜åœ¨ã—ãªã„ã€‚ä»Šã§ã¯ã€ Let's Encrypt ã®ã‚ˆã†ãªç„¡æ–™ã® SSL ã‚‚ç™»å ´
griefworker 2018/05/15
ssl

security
ãƒªãƒ³ã‚¯
docker ã§å…¨è‡ªå‹• Let's encrypt - Qiita
https-portal ãŒã‚ã¾ã‚ŠçŸ¥ã‚‰ã‚Œã¦ãªã„ã‚ˆã†ãªã®ã§ç´¹ä»‹è¨˜äº‹ã ã‘æ›¸ã„ã¨ãã€‚ https://github.com/SteveLTN/https-portal ã‚ãªãŸãŒã™ã§ã«httpã§å‹•ä½œã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®dockerã‚³ãƒ³ãƒ†ãƒŠã‚’æŒã£ã¦ã‚‹ãªã‚‰ã€ã“ã„ã¤ã‚’ docker-compose ã«åŠ ãˆã‚‹ã ã‘ã§ https å¯¾å¿œã¯å®Œäº†ã€‚ ãˆï¼Ÿ åŠ ãˆã‚‹ã ã‘ã§å®Œäº†ã€‚ ã¾ã˜ã§ã™ã€‚ https-portal ã¯ä½•ã‚’ã™ã‚‹ã‚‚ã®ã‹ åŸºæœ¬çš„ã«ã¯ https ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–ã‚Šã€ä»–ã®ã‚³ãƒ³ãƒ†ãƒŠã® http ã¸è»¢é€ã™ã‚‹ãƒªãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã¨ã—ã¦å‹•ä½œã™ã‚‹ nginx ã§ã‚ã‚‹ã€‚ ã¨ã“ã‚ã§ https ã‚’æä¾›ã™ã‚‹ã«ã¯è¨¼æ˜Žæ›¸ã®å–å¾—ã€è¨å®šãªã©ãŒå¿…è¦ã ãŒã€ã“ã„ã¤ã¯ãã‚Œã‚’å…¨è‡ªå‹•ã§ã‚„ã£ã¦ãã‚Œã‚‹ã€‚ ãˆï¼Ÿ è¨¼æ˜Žæ›¸ã®å–å¾—ã€è¨å®šã‚’å…¨è‡ªå‹•ã§ã‚„ã£ã¦ãã‚Œã‚‹ã€‚ ã¾ã˜ã§ã™ã€‚ æœŸé–“å»¶é•·ã‚‚è‡ªå‹•ã§ã‚„ã£ã¦ãã‚Œã‚‹ã‚‰ã—ã„ã€‚ ã¾ã‚ã¨ã«ã‹ãä¾¿åˆ©ãªã®ã§ã€ Let's encryp
griefworker 2017/02/17
docker

ssl
ãƒªãƒ³ã‚¯
let's encrypt ã§è¤‡æ•°ãƒ›ã‚¹ãƒˆåå¯¾å¿œãªè¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ - æ—¥è¨˜
letâ€™s encrypt ã§è¤‡æ•°ãƒ›ã‚¹ãƒˆåå¯¾å¿œãªè¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ ã‚¿ã‚¤ãƒˆãƒ«é€šã‚Šã§ã™ãŒã€å‰²ã¨ç°¡å˜ã«è¤‡æ•°ã®ãƒ›ã‚¹ãƒˆåã«å¯¾å¿œã—ãŸè¨¼æ˜Žæ›¸ãŒå–å¾—ã§ãã‚‹ã®ã§ã€ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ ä»Šå›žã¯ ansible playbook ã®ãŠã¾ã‘ä»˜ãã§ã™ã€‚ letâ€™s encrypt ã®å›°ã£ãŸå•é¡Œ letâ€™s encrypt ã§ã¯ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ãŒç„¡ã„ã®ã§ã€è¤‡æ•°ã®ãƒ›ã‚¹ãƒˆåã‚’1å°ã®ã‚µãƒ¼ãƒã§ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã§ããªã„ãŸã‚ã€ã¡ã‚‡ã£ã¨å›°ã£ã¦ã„ã¾ã—ãŸã€‚ ã‚°ã‚°ã£ã¦èª¿ã¹ã¦ã¿ãŸã‚‰ã€letâ€™s encrypt ã¯ SAN å¯¾å¿œã®è¨¼æ˜Žæ›¸ã ã£ãŸã‚‰ç™ºè¡Œã§ãã‚‹ã€ã¨è¨€ã†ã“ã¨ã ã£ãŸã®ã§å®Ÿéš›ã«ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ ãã®å‰ã«ã€SAN ã£ã¦ä½•ã‚ˆï¼Ÿ ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã ã¨è‰¯ãèžãã¨æ€ã†ã®ã§ã™ãŒã€ SAN ã£ã¦ä½•ã‚ˆï¼Ÿã¨æ€ã†äººã‚‚å¤šã„ã¨æ€ã„ã¾ã™ã€‚ SAN ã¨ã¯ Subject Alternative Name ã®ç•¥ç§°ã§ã€ã‚µãƒ–ã‚¸ã‚§ã‚¯ãƒˆã®åˆ¥åã§ã™ã€‚ ã‚“ï¼Ÿã‚µãƒ–ã‚¸ã‚§ã‚¯ãƒˆã£ã¦ãªã«ï¼Ÿã€€
griefworker 2016/08/25
ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒæ—¢ã«æ±ºã¾ã£ã¦ã„ã‚Œã°æœ‰åŠ¹ãªæ‰‹æ®µã€‚

security

ssl
ãƒªãƒ³ã‚¯
Heroku ã§ SSLï¼ˆhttpsï¼‰ã‚’å°Žå…¥ã™ã‚‹æ–¹æ³•ï¼ˆ2016å¹´7æœˆ æœ€æ–°ç‰ˆï¼ï¼‰ - sakagami memo
2016 - 07 - 10 Heroku ã§ SSLï¼ˆhttpsï¼‰ã‚’å°Žå…¥ã™ã‚‹æ–¹æ³•ï¼ˆ2016å¹´7æœˆ æœ€æ–°ç‰ˆï¼ï¼‰ heroku ã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒ“ã‚¹ list Tweet 2016å¹´5æœˆä¸‹æ—¬ã«ã€ã€ŒHeroku SSL ã€æ©Ÿèƒ½ãŒãƒ™ãƒ¼ã‚¿ç‰ˆã§å…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ https://blog.heroku.com/archives/2016/5/18/announcing_heroku_free_ssl_beta_and_flexible_dyno_hours ä»Šã¾ã§ã¯ $20 ã® SSL ã‚¢ãƒ‰ã‚ªãƒ³ã‚’ç”¨ã„ã¦ SSL ã‚’å°Žå…¥ã™ã‚‹æ–¹æ³•ã‚’ æä¾›ã—ã¦ã„ãŸã®ã§ã™ãŒã€Hobbyã€Professional Dyno ã‚’ç”¨ã„ã¦ã„ã‚‹ ç’°å¢ƒã«ãŠã„ã¦ã€ã“ã‚Œã‹ã‚‰ã¯ãã‚ŒãŒç„¡æ–™ã§å®Ÿç¾ã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã¨ã®ã“ã¨ã€‚ SSL ã‚’å°Žå…¥ã™ã‚‹ã“ã¨ã§ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å‘ä¸Šã«ã¤ãªãŒã‚‹ã“ã¨ã«åŠ ãˆã€ Google ãŒ HTTPS ã‚’ãƒ©ãƒ³ã‚ãƒ³ã‚° ã‚·ã‚°ãƒŠãƒ«ã«ä½¿
griefworker 2016/07/11
ã‚ã¨ Let's Encrypt ãŒä½¿ãˆã‚Œã°æœ€é«˜ãªã‚“ã ã‘ã©ãªã€‚

heroku

ssl
ãƒªãƒ³ã‚¯
[AWS Certificate Manager]æ±äº¬ã§ã‚‚ç„¡æ–™ã§SSLè¨¼æ˜Žæ›¸ãŒä½¿ç”¨å¯èƒ½ã«ãªã‚Šã¾ã—ãŸï¼ | DevelopersIO
â€»ï¼šCloudFrontã¯ç±³å›½æ±éƒ¨ (ãƒãƒ¼ã‚¸ãƒ‹ã‚¢åŒ—éƒ¨)ã§è¨å®šã‚’è¡Œã†ãŸã‚ã€CloudFrontã®å…¨ã‚¨ãƒƒã‚¸ãƒã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ACMã‚’ä½¿ç”¨ã§ãã¾ã™ã€‚ æ—©é€Ÿè©¦ã—ã¾ã™ ACMã‚’è¨å®šã™ã‚‹ è¨å®šã®æ‰‹é †ã®è©³ç´°ã¯ã€[ACM] SSLè¨¼æ˜Žæ›¸ç™ºè¡Œæ™‚ã®ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ãƒ¡ãƒ¼ãƒ«ã‚’SESã§å—ã‘å–ã£ã¦ã¿ãŸã‚’å‚ç…§ã—ã¦ä¸‹ã•ã„ã€‚ã“ã®ã‚¨ãƒ³ãƒˆãƒªã®ã€ŒACMè¨å®šã€ã¾ã§ã‚’å®Ÿæ–½ã—ã¾ã™ã€‚ æ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã§Amazon Linux 2016.03ã®EC2ã‚’èµ·å‹•ã—ã¦ã€ä»¥ä¸‹ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã—ã¾ã™ã€‚ï¼ˆWebã‚µãƒ¼ãƒã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€index.htmlã®ä½œæˆã€Webã‚µãƒ¼ãƒã®é–‹å§‹ï¼‰ $ sudo yum install -y httpd $ sudo echo "AWS Certificate Manager" | sudo tee /var/www/html/index.html $ sudo service httpd start æ¬¡ã«ã€æ±äº¬ãƒªãƒ¼ã‚¸ãƒ§ãƒ³ã®EL
griefworker 2016/05/17
ssl

aws
ãƒªãƒ³ã‚¯
ç„¡æ–™ã§è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦HTTPSã®å°Žå…¥ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã€ŒLetâ€™s Encryptã€ãŒãƒ™ãƒ¼ã‚¿ç‰ˆã‹ã‚‰æ£å¼ç‰ˆã«
By Sean MacEntee SSLã‚’ç”¨ã„ãŸHTTPé€šä¿¡ã®æš—å·åŒ–ã‚’èª°ã§ã‚‚æ‰‹è»½ã«è¡Œãˆã‚‹ã‚ˆã†ã«ã™ã‚‹ãŸã‚ã«ç«‹ã¡ä¸ŠãŒã£ãŸã®ãŒEFFã€Mozillaã€Cisco Systemsã€Akamai Techno logiesã€IdenTrustã€ãƒŸã‚·ã‚¬ãƒ³å¤§å¦ã®ç ”ç©¶è€…ãªã©ã§ã€ã“ã‚Œã‚‰ã®ãƒ¡ãƒ³ãƒãƒ¼ãŒHTTPSæ™®åŠã®ãŸã‚ã«ã‚¹ã‚¿ãƒ¼ãƒˆã—ãŸå–ã‚Šçµ„ã¿ãŒã€ŒLet's Encryptã€ã§ã™ã€‚ã“ã‚Œã¾ã§æ‰‹é–“ãŒã‹ã‹ã‚Šé‡‘éŠçš„ãªè² æ‹…ã‚‚å¤§ãã„ã¨è¨€ã‚ã‚Œã¦ããŸã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’ç„¡æ–™ã§è¡Œãˆã‚‹ã‚ˆã†ã«ãªã‚‹ã®ã§ã™ãŒã€åŒå–ã‚Šçµ„ã¿ã¯ã¤ã„ã«ãƒ™ãƒ¼ã‚¿ç‰ˆã‹ã‚‰æ£å¼ç‰ˆã«ã‚µãƒ¼ãƒ“ã‚¹ã‚’ç§»è¡Œã—ã¦ã„ã¾ã™ã€‚ Leaving Beta, New Sponsors - Let's Encrypt - Free SSL/TLS Certificates https://letsencrypt.org//2016/04/12/leaving-beta-new-sponsors.h
griefworker 2016/04/14
ssl

security
ãƒªãƒ³ã‚¯
ã‚«ã‚¹ã‚¿ãƒ ãƒ‰ãƒ¡ã‚¤ãƒ³ã® GitHub Pages ã§ HTTPS ã‚’ä½¿ã† - Qiita
2018/5/10 è¿½è¨˜: GitHub ãŒå…¬å¼ã«ã‚«ã‚¹ã‚¿ãƒ ãƒ‰ãƒ¡ã‚¤ãƒ³ã® HTTPS ã§ã®é…ä¿¡ã‚’ã‚µãƒãƒ¼ãƒˆã—ãŸãŸã‚ã€ä¸‹è¨˜ã®æ‰‹é †ã‚’åˆ©ç”¨ã™ã‚‹å¿…è¦ãŒãªããªã‚Šã¾ã—ãŸ è©³ã—ãã¯ Custom domains on GitHub Pages gain support for HTTPS | The GitHub Blog ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ GitHub Pages ã§ã¯ *.github.io ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒå‰²ã‚Šå½“ã¦ã‚‰ã‚Œã¦ HTTPS ã‚‚æœ‰åŠ¹ã«ãªã£ã¦ã„ã¾ã™ãŒã€ã‚«ã‚¹ã‚¿ãƒ ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’ä½¿ã†ã¨ HTTPS ã‚’ä½¿ã†ã“ã¨ãŒã§ãã¾ã›ã‚“ã€‚ã“ã“ã§ã¯ CloudFlare ã‚’ä½¿ã£ã¦ã‚«ã‚¹ã‚¿ãƒ ãƒ‰ãƒ¡ã‚¤ãƒ³ã® GitHub Pages ã§ HTTPS ã‚’ä½¿ã†æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ GitHub Pages ã«ã‚µã‚¤ãƒˆã‚’æ§‹ç¯‰ã™ã‚‹ ã¾ãš GitHub Pages ã§ã‚µã‚¤ãƒˆã‚’æ§‹ç¯‰ã—ãªã„ã“ã¨ã«ã¯å§‹ã¾ã‚Šã¾ã›ã‚“ã€‚ä»Šå›žã¯ã‚«ã‚¹ã‚¿ãƒ ãƒ‰ãƒ¡ã‚¤ãƒ³ã§ HTTPS ã‚’ä½¿
griefworker 2015/12/14
ssl
ãƒªãƒ³ã‚¯
Let's Encrypt ã‚’ä½¿ã£ã¦è¨¼æ˜Žæ›¸ã‚’å–å¾—ã—ãŸã®ã§ Azure Web Apps ã«è¨å®šã—ã¦ç¢ºèªã—ã¦ã¿ãŸ - ã—ã°ã‚„ã‚“é›‘è¨˜
Let's Encrypt åŽ»å¹´ã‹ã‚‰æ°—ã«ãªã£ã¦ã„ãŸ Let's Encrypt ãŒã‚¯ãƒãƒ¼ã‚ºãƒ‰ãƒ™ãƒ¼ã‚¿ã«ãªã‚Šã€ç”³è«‹ã™ã‚Œã°å®Ÿéš›ã«è¨¼æ˜Žæ›¸ã®ç™ºè¡ŒãŒãƒ†ã‚¹ãƒˆã§ãã‚‹ã¨èžã„ãŸã®ã§ã€æ—©é€Ÿç”³è«‹ã—ã¦è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’è¡Œã£ã¦ã¿ã¾ã—ãŸã€‚ãŸã ã— IIS ã§ä½¿ã†å‰æã§ã™ã€‚ Letâ€™s Encryptã§ValidãªSSL/TLSè¨¼æ˜Žæ›¸ã‚’å–å¾—ã™ã‚‹ | DevelopersIO Dockerã§Letâ€™s Encryptã—ã‚ˆã£ã‹ - Qiita æ—¢ã«è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’è©¦ã—ãŸæ–¹ã‚‚å±…ãŸã®ã§å‚è€ƒã«ã—ã¦ã„ãŸã®ã§ã™ãŒã€æ—¢ã«å¾®å¦™ã«æŒ™å‹•ãŒå¤‰ã‚ã£ã¦ã„ã‚‹ã®ã§æ³¨æ„ã—ãŸã„ã§ã™ã€‚ä¸€å¿œãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã‚‚å…¬é–‹ã•ã‚Œã¦ã¾ã™ãŒã€ãƒ¡ãƒ¼ãƒ«ã«æ›¸ã„ã¦ã‚ã£ãŸåˆ†ã§ååˆ†ãªæ„Ÿã˜ã§ã™ã€‚ User Guide The Letâ€™s Encrypt project â€” letsencrypt latest documentation Let's Encrypt ã§ã¯ Web ã‚µãƒ¼ãƒãƒ¼ã¸ã®è¨¼æ˜Žæ›¸è¨å®š
griefworker 2015/11/11
ssl

security
ãƒªãƒ³ã‚¯
Let's Encrypt ã‚’æ”¯ãˆã‚‹ ACME ãƒ—ãƒãƒˆã‚³ãƒ« - Block Rockinâ€™ Codes
Intro å…ˆæ—¥ #http2study ã§ mozilla ã® Richard Barnes ãŒ Let's Encrypt ã«ã¤ã„ã¦è©±ã—ã¦ãã‚Œã¾ã—ãŸã€‚ è³‡æ–™: Let's Encrypt Overview ã“ã®è³‡æ–™ã®ç¿»è¨³ ã¯ã—ãŸã®ã§ã™ãŒã€ã„ã‚‰ãªããªã£ã¦ã—ã¾ã£ãŸã®ã§ä¾›é¤Šã‚‚ã‹ãã¦ã“ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ãƒ¢ãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã€ Web ã§ãŠã“ã£ã¦ã„ã‚‹ HTTPS æŽ¨é€²ã®ãŸã©ã‚‹é“ã«ã¤ã„ã¦ã€è³‡æ–™ã‚’è£œè¶³ã—ã¤ã¤ç´¹ä»‹ã—ã¾ã™ã€‚ çµè«–ã‹ã‚‰è¨€ã†ã¨ Let's Encrypt ã¯ã‚‚ã¡ã‚ã‚“ ACME ãƒ—ãƒãƒˆã‚³ãƒ« ã«ã¤ã„ã¦ã‚‚æ˜¯éžçŸ¥ã£ã¦ãŠãã¨è‰¯ã„ã¨æ€ã„ã¾ã™ã€‚ HTTPS ã®å•é¡Œ ã™ã§ã«ã“ã®ãƒ–ãƒã‚°ã§ã‚‚ç´¹ä»‹ã—ã¦ã„ã‚‹ã‚ˆã†ã«ã€ Web ã«ãŠã‘ã‚‹ HTTPS ã®é‡è¦æ€§ã¯å¢—ã—ã€ãã‚Œã®æ™®åŠã‚’å¾ŒæŠ¼ã—ã™ã‚‹æ´»å‹•ãŒå„æ‰€ã§é€²ã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ HTTPS åŒ–ã™ã‚‹ Web ã‚’ã©ã†è€ƒãˆã‚‹ã‹ ã‚ˆãè¨€ã‚ã‚Œã‚‹ç›—è´é˜²æ¢ã‚’å§‹ã‚ã€æš—å·åŒ–ã‚’è¡Œã†ã“ã¨ã§é˜²ã’ã‚‹å•é¡Œã¯å¤šãã‚
griefworker 2015/11/09
æ—©ããƒ™ãƒ¼ã‚¿çµ‚ã‚ã£ã¦æ£å¼å…¬é–‹ã—ã¦æ¬²ã—ã„ã€‚

security

http

ssl
ãƒªãƒ³ã‚¯
Letâ€™s Encryptã§ValidãªSSL/TLSè¨¼æ˜Žæ›¸ã‚’å–å¾—ã™ã‚‹ | DevelopersIO
ã©ã‚‚ã€å¤§ç€§ã§ã™ã€‚ ç„¡å„Ÿã§åˆ©ç”¨ã§ãã‚‹SSLè¨¼æ˜Žæ›¸ç™ºè¡Œã‚µãƒ¼ãƒ“ã‚¹ã§ã‚ã‚‹Let's EncryptãŒã‚¯ãƒãƒ¼ã‚ºãƒ‰ãƒ™ãƒ¼ã‚¿ã«ãªã‚Šã¾ã—ãŸã€‚æ—©é€Ÿãƒ™ãƒ¼ã‚¿ç”³è«‹ãŒé€šã£ãŸã®ã§ã€è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ã¿ãŸæ§˜åã‚’ãƒ¬ãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ å‹•ä½œç¢ºèªç’°å¢ƒ ç«¯æœ« : OS X El Capitan Webã‚µãƒ¼ãƒãƒ¼ : Debian Wheezy æ‰‹é † ç¾åœ¨ã¯ã‚¯ãƒãƒ¼ã‚ºãƒ‰ãƒ™ãƒ¼ã‚¿ãªã®ã§ã€äº‹å‰ã«ãƒ™ãƒ¼ã‚¿ã«ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã—ã¦ã„ãŸãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«æ‹›å¾…ãƒ¡ãƒ¼ãƒ«ãŒå±Šãã“ã¨ã§åˆ©ç”¨å¯èƒ½ã«ãªã‚Šã¾ã™ã€‚æ‰‹é †è‡ªä½“ã¯ä»¥ä¸‹ã®ãƒšãƒ¼ã‚¸ã§ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã¦ã„ã‚‹ã‚‚ã®ã§ã™ã€‚ Beta Program Announcements - Let's Encrypt Community Support ã¾ãšã¯ãƒãƒ¼ã‚«ãƒ«ã«ãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«&å®Ÿè¡Œã—ã¾ã™ã€‚OSXã®å ´åˆã¯è‡ªå‹•ã§Homebrewã‚’æ¤œå‡ºã—ä¾å˜ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¾ã™ã€‚ç’°å¢ƒã‚’æ±šã—ãŸããªã„ã¨ã„ã†æ–¹ã¯Dockerã‚’åˆ©ç”¨ã™ã‚‹ã®ã‚‚è‰¯
griefworker 2015/10/28
ssl
ãƒªãƒ³ã‚¯
ãˆã€1å¹´é–“ç„¡æ–™!? ãªã‚‰ã°åƒ•ã‚‰ã‚‚ã•ãã‚‰ã§SSLã‚’å°Žå…¥ã ï¼ï¼ˆå¾Œç·¨ï¼‰
ä¹å·žæŸçœŒã§SNSã‚’é–‹ç™ºï¼é‹å–¶ã™ã‚‹ã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—ä¼æ¥ã€ã‚¿ãƒ“ã‚¸ç¤¾ã€‚CTOã®ã‚¤ã‚ºãƒŸãã‚“ã¯ã€ãŠé‡‘ã‚’ã‹ã‘ã‚‰ã‚Œãªã„å‹‰å¼·ä¼šç”¨ã‚µã‚¤ãƒˆã«ã€Œãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼SSLè¨¼æ˜Žæ›¸ï¼ˆãƒ©ãƒ”ãƒƒãƒ‰SSLï¼‰ã€ã‚’ä½¿ã†ã“ã¨ã«ã—ãŸã€‚ç™ºè¡ŒãŒã‚¹ãƒ”ãƒ¼ãƒ‡ã‚£ã ã¨ã„ã†ãŒã€ã•ã¦ã€ã©ã®ãã‚‰ã„æ—©ã„ã®ã ã‚ã†ï¼Ÿ ï¼ˆâ€»ã“ã®ç‰©èªžã¯ãƒ•ã‚£ã‚¯ã‚·ãƒ§ãƒ³ã§ã™ã€‚ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä»¥å¤–ã®å®Ÿåœ¨ã™ã‚‹å›£ä½“ãƒ»äººç‰©ã¨ã¯ä¸€åˆ‡é–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ï¼‰ â€¦â€¦ç¿Œã€€æ—¥â€¦â€¦ ãµã‚ãï½žã€‚æ—¥æ›œæ—¥ã ã¨ã„ã†ã®ã«æ—©èµ·ãã—ã¦ã€åˆå‰ä¸ã‹ã‚‰å‡ºç¤¾ã—ã¦ã—ã¾ã£ãŸã‚ˆã€‚ä»Šæ—¥ã¯ã€Œãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼SSLè¨¼æ˜Žæ›¸ï¼ˆãƒ©ãƒ”ãƒƒãƒ‰SSLï¼‰ã€ã®ç”³è«‹ã¨ã€ã‚µãƒ¼ãƒãƒ¼ã¸ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ä½œæ¥ã‚’ã‚„ã£ã¦ã—ã¾ãŠã†ã€‚ åƒ•ã¯å…ˆæœˆã€æœ¬æ¥ã§ã‚ã‚‹ã‚¿ãƒ“ã‚¸SNSç”¨ã®SSLè¨¼æ˜Žæ›¸ã‚’ç”³è«‹ã—ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸã°ã‹ã‚Šã ã€‚ã‚ã£ã¡ã¯ã€Œä¼æ¥èªè¨¼SSLè¨¼æ˜Žæ›¸ã€ãªã®ã§ç”³è«‹æ‰‹é †ã¯å°‘ã—é•ã†ã®ã ã‘ã©ã€åŸºæœ¬çš„ãªä½œæ¥ã®æµã‚Œã¯åŒã˜ã ã€‚ ã¾ãŸã€å‹‰å¼·ä¼šç”¨ã‚µã‚¤ãƒˆã®ã‚µãƒ¼ãƒãƒ¼OSã‚‚ã‚¿ãƒ“ã‚¸SNSã¨åŒã˜Ubuntu ãªã®ã§ã€CS
griefworker 2015/09/02
ssl

security
ãƒªãƒ³ã‚¯
ãˆã€1å¹´é–“ç„¡æ–™!? ãªã‚‰ã°åƒ•ã‚‰ã‚‚ã•ãã‚‰ã§SSLã‚’å°Žå…¥ã ï¼ï¼ˆå‰ç·¨ï¼‰
ä¹å·žæŸçœŒã§SNSã‚’é–‹ç™ºï¼é‹å–¶ã™ã‚‹ã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—ä¼æ¥ã€ã‚¿ãƒ“ã‚¸ç¤¾ã€‚CTOã®ã‚¤ã‚ºãƒŸãã‚“ã¯ã€æ–°ã—ã„ã‚µã‚¤ãƒˆã®æ§‹ç¯‰ã«åŠ±ã¿ãªãŒã‚‰ã€ãŠé‡‘ã‚’ã‹ã‘ã‚‰ã‚Œãªã„ã“ã®ã‚µã‚¤ãƒˆã‚’ã©ã†ã‚„ã£ã¦SSLå¯¾å¿œã«ã™ã‚Œã°ã„ã„ã®ã‹æ‚©ã‚“ã§ã„ãŸã€‚ãã‚“ãªã¨ãã€ã‚¤ã‚ºãƒŸå›ãŒç™ºè¦‹ã—ãŸã‚‚ã®ã¨ã¯â€¦â€¦ï¼Ÿ ï¼ˆâ€»ã“ã®ç‰©èªžã¯ãƒ•ã‚£ã‚¯ã‚·ãƒ§ãƒ³ã§ã™ã€‚ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä»¥å¤–ã®å®Ÿåœ¨ã™ã‚‹å›£ä½“ãƒ»äººç‰©ã¨ã¯ä¸€åˆ‡é–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ï¼‰ ã€Œãµã‚ãï½žã€æ—…ã«å‡ºãŸã„ãªãï½žã£ï¼ã€ åœŸæ›œæ—¥ã®å¤œã€PCã«å‘ã‹ã£ã¦ä½•æ™‚é–“ã‚‚ã‚ãƒ¼ã‚’å©ãç¶šã‘ã¦ã„ãŸåƒ•ã¯ã€å¤§ããä¼¸ã³ã‚’ã—ãªãŒã‚‰å«ã‚“ã ã€‚ã“ã“ã¯ä¹å·žã®æŸçœŒæŸå¸‚ã«ã‚ã‚‹ãƒžãƒ³ã‚·ãƒ§ãƒ³ã®ä¸€å®¤ã€‚åƒ•ã‚‰ã€Œã‚¿ãƒ“ã‚¸ç¤¾ã€ã®ã‚ªãƒ•ã‚£ã‚¹ã§ã‚ã‚‹ã€‚ ã‚¿ãƒ“ã‚¸ç¤¾ã¯ã€ãã®åã®ã¨ãŠã‚Šã€Œæ—…ã€ã‚’ãƒ†ãƒ¼ãƒžã«ã—ãŸSNSã‚’é–‹ç™ºã€é‹å–¶ã™ã‚‹ã‚¹ã‚¿ãƒ¼ãƒˆã‚¢ãƒƒãƒ—ä¼æ¥ã ã€‚å…ƒã€…ãƒ—ãƒã‚°ãƒ©ãƒžãƒ¼ã‚„Webãƒ‡ã‚¶ã‚¤ãƒŠãƒ¼ã ã£ãŸæ—…å¥½ãã®3äººãŒæ„æ°—æŠ•åˆã—ã€é…’ã®å¸ã§ã€Œä¼šç¤¾ã‚„ã‚ã†ãœã£ï¼ã€ã¨ç››ã‚Šä¸ŠãŒã£ãŸçµæžœã€1å¹´ã»ã©å‰ã«èµ·æ¥ã—ãŸã€‚ ç¾åœ¨ã¯ã€ç¤¾äº¤çš„ãªæ€§æ ¼ã®ã‚ªã‚ª
griefworker 2015/09/02
ssl

security
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/11/19/20141118mozilla-eff-and-others-band-together-to-provide-free-ssl-certificates/
griefworker 2014/11/19
web

ssl

security
ãƒªãƒ³ã‚¯
Herokuã®æœ¬ç•ªç’°å¢ƒã«Railsã§SSL(https)ã‚’å°Žå…¥ã™ã‚‹æ–¹æ³• - Qiita
$ openssl req -new -key server.key -out server.csr You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Na
griefworker 2013/11/27
heroku

ssl
ãƒªãƒ³ã‚¯
1