[B! SSL] kuwalabã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kuwalab id:kuwalab

SSLã«é–¢ã™ã‚‹kuwalabã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (12)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Redirecting to ssl-config.mozilla.org...
Mozilla SSL Configuration Generator Redirecting to the updated SSL Configuration Generatorâ€¦
kuwalab 2015/04/01
SSL
ãƒªãƒ³ã‚¯
CVE-2014-0160 OpenSSL Heartbleed è„†å¼±æ€§ã¾ã¨ã‚ - ã‚ã‚‚ãŠãã°
å¿…è¦ãªæƒ…å ±ã¯ http://heartbleed.com/ ã«ã¾ã¨ã¾ã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€è‹±èªžã ã—é•·ã„ã—ã£ã¦äººã®ãŸã‚ã«æ‰‹çŸã«ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ ã©ã†ã™ã‚Œã°ã„ã„ã®ã‹ OpenSSL 1.0.1ã€œ1.0.1fã‚’ä½¿ã£ã¦ã„ãªã‘ã‚Œã°ã‚»ãƒ¼ãƒ• ã‚ã¦ã¯ã¾ã‚‹å ´åˆã«ã¯ã€ä¸€åˆ»ã‚‚æ—©ããƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã—ã¦ã€ã‚µãƒ¼ãƒã”ã¨å†èµ·å‹•(ã‚ã‹ã‚‹ã²ã¨ã¯ã‚µãƒ¼ãƒ“ã‚¹å˜ä½ã§ã‚‚OKã€ãŸã ã—reloadã§ã¯ã ã‚ãªã“ã¨ã‚‚) SSLè¨¼æ˜Žæ›¸ã§ã‚µãƒ¼ãƒã‚’å…¬é–‹ã—ã¦ã„ã‚‹ãªã‚‰ã€ç§˜å¯†éµã‹ã‚‰ä½œã‚Šç›´ã—ã¦è¨¼æ˜Žæ›¸ã‚’å†ç™ºè¡Œã—ã€éŽåŽ»ã®è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã•ã›ã‚‹(æœ«å°¾ã«é–¢é€£ãƒªãƒ³ã‚¯ã‚ã‚Š)ã€‚ ã‚µãƒ¼ãƒã‚’å…¬é–‹ã—ã¦ã„ãªã„å ´åˆã‚‚ã€å¤–éƒ¨ã¸ã®SSLé€šä¿¡ãŒã‚ã‚Œã°å½±éŸ¿ã‚’å—ã‘ã‚‹ã®ã§ã€è©³ã—ãç²¾æŸ»ã™ã‚‹ã€‚ PFS(perfect forward secrecy)ã‚’åˆ©ç”¨ã—ã¦ã„ãªã„å ´åˆã€éŽåŽ»ã®é€šä¿¡å†…å®¹ã‚‚å¾©å·ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ãŸã‚ã€è©³ã—ãç²¾æŸ»ã™ã‚‹ã€‚ æ¼æ´©ã™ã‚‹æƒ…å ±ã®å…·ä½“ä¾‹ã¯ã€OpenSSLã®è„†å¼±æ€§ã§æƒ³å®šã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ã¨ã—ã¦
kuwalab 2014/04/09
SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
openssl.cnf æ—¥æœ¬èªžè§£èª¬ç‰ˆ
# openssl.cnf æ—¥æœ¬èªžè§£èª¬ç‰ˆ 2005/1/31 # ã“ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯openssl projectã¨ã¯é–¢ä¿‚ã‚ã‚Šã¾ã›ã‚“ # æ—¥æ›¿ã‚ã‚Šå®Ÿé¨“å®¤ã®ç®¡ç†äººãŒæš‡ã¤ã¶ã—ã«ç¿»è¨³ã—ã¦æ‹¡å¼µã—ãŸã‚‚ã®ã§ã™ã€‚ # ã“ã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã«é–¢ã™ã‚‹è³ªå•ã‚„æŒ‡æ‘˜ã¯openssl projectã«ã¯ã—ãªã„ã§ãã ã•ã„ # é–“é•ã„ã®æŒ‡æ‘˜ãªã©ã¯ã“ã¡ã‚‰ã¸ãŠé¡˜ã„ã—ã¾ã™ # URL:http://www.yggdrasil.jp/ # Mailto:meguro at yggdrasil.jp s/ at /@/ #################################################################### [ ca ] default_ca = CA_default # ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®CAã‚»ã‚¯ã‚·ãƒ§ãƒ³ã‚’æŒ‡å®š ########################################
kuwalab 2012/06/14
ç¿»è¨³ã•ã‚Œã¦ãŸã€‚

OpenSSL

SSL
ãƒªãƒ³ã‚¯
PKIé–¢é€£æŠ€è¡“ã«é–¢ã™ã‚‹ã‚³ãƒ³ãƒ†ãƒ³ãƒ„
å‰ã®ãƒšãƒ¼ã‚¸ ç›®æ¬¡ æ¬¡ã®ãƒšãƒ¼ã‚¸ æœ€çµ‚æ›´æ–°æ—¥ï¼š2002å¹´12æœˆ12æ—¥ 3.3 é›»åè¨¼æ˜Žæ›¸ 3.3.1Â X.509 è¨¼æ˜Žæ›¸ è¨¼æ˜Žæ›¸ï¼ˆå…¬é–‹éµè¨¼æ˜Žæ›¸ï¼‰ã®æ¨™æº–ã¨ã—ã¦ã€ITU-T ãŒç–å®šã—ãŸ X.509 ãŒã‚ã‚Šã¾ã™ã€‚X.509 ã¯ X.500 ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚·ãƒªãƒ¼ã‚ºã®1ã¤ã§ã‚ã‚Šã€ISO/IEC ã®å›½éš›æ¨™æº–ã¨ã—ã¦è¦å®šã•ã‚Œã¦ã„ã¾ã™ã€‚ X.509 ã®æœ€åˆã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³(X.509v1)ã¯ 1988å¹´ã«ç™ºè¡Œã•ã‚Œã¾ã—ãŸã€‚ã•ã‚‰ã« 1997å¹´ã«ç™ºè¡Œã•ã‚ŒãŸæœ€æ–°ãƒãƒ¼ã‚¸ãƒ§ãƒ³(X.509v3) ã«ãŠã„ã¦ã¯ã€è¨¼æ˜Žæ›¸ã«æ‹¡å¼µé ˜åŸŸãŒè¨ã‘ã‚‰ã‚Œä»»æ„ã®æ‹¡å¼µãŒå¯èƒ½ã«ãªã‚Šã¾ã—ãŸã€‚X.509v3 ã¯ 2000å¹´ã«æ”¹å®šã•ã‚Œã€å¾Œè¿°ã™ã‚‹ãƒ‡ãƒ«ã‚¿ CRL ã¨å±žæ€§è¨¼æ˜Žæ›¸ã®å®šç¾©ãŒæ˜Žç¢ºã«ãªã£ã¦ã„ã¾ã™ã€‚ X.509v3 ã‚’ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§åˆ©ç”¨ã™ã‚‹ã“ã¨ã‚’ç›®çš„ã¨ã—ã¦ã€IETF ã® PKIX ä½œæ¥éƒ¨ä¼šã«ã‚ˆã£ã¦ RFC2459 ãŒ 1999å¹´ã«ç–å®šã•ã‚Œã¾ã—ãŸã€‚RFC245
kuwalab 2012/06/14
SSL
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : å°†æ¥Google ChromeãŒSSLè¨¼æ˜Žæ›¸ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³å¤±åŠ¹æ¤œè¨¼ã‚’ã‚„ã‚ã¦ç‹¬è‡ªã®å¤±åŠ¹æƒ…å ±ãƒ—ãƒƒã‚·ãƒ¥ã‚’è¡Œã†ã¨ã„ã†å›°ã£ãŸè©± - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
CRLSetã§ã¯ZIPå¾©å…ƒå‡¦ç†ãŒ2å›žã‚ã‚‹ã®ã§CRLã®ASN.1ã® å‡¦ç†ã‚³ã‚¹ãƒˆã¨æ¯”è¼ƒã—ã¦5åˆ†5åˆ†ã¨ã„ã£ãŸã¨ã“ã‚ã ã‚ã†ã‹ã€‚ ã¡ãªã¿ã«ã€ç¾åœ¨ãƒ—ãƒƒã‚·ãƒ¥ã—ã¦ã„ã‚‹CRLSetã¯ãŸã£ãŸ35ã®ãƒ«ãƒ¼ãƒˆCA,ä¸é–“CAã—ã‹ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ãªã„ã€‚ ImperialVioletã®ãƒ–ãƒã‚°ã®ä¸»å¼µã®ãŠã‹ã—ãªç‚¹ ã€Œã‚ªãƒ³ãƒ©ã‚¤ãƒ³å¤±åŠ¹æ¤œè¨¼ãŒã§ããªã„å ´åˆæ§˜ã€…ãªå•é¡ŒãŒèµ·ãã‚‹ã€ã¨ã—ã¦å¹¾ã¤ã‹å•é¡Œç‚¹ã‚’è¿°ã¹ã¦ã„ã‚‹ã€‚ ã€Œ"captive portal"(ãƒ›ãƒ†ãƒ«ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãªã©ã§ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ã§èªè¨¼ã—ã¦ã‹ã‚‰ ãƒãƒƒãƒˆãŒä½¿ãˆã‚‹ã‚ˆã†ã«ãªã‚‹ä»•çµ„ã¿ã®äº‹)ãªã©ã§ã¯æŽ¥ç¶šå‰ã¯ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã®å¤±åŠ¹æ¤œè¨¼ãŒ ã§ããªã„ã€ã¨ã—ã¦ã„ã‚‹ãŒã€ãã®æ™‚ç‚¹ã§ã¯ãƒ›ãƒ†ãƒ«ã®ã‚µãƒ¼ãƒ“ã‚¹ã®èªè¨¼ã®ãƒšãƒ¼ã‚¸ã—ã‹ç¹‹ãŒã‚‹ å¿…è¦ãŒç„¡ã„ã®ã§ã‚ã¾ã‚Šå¤§ããªãƒªã‚¹ã‚¯ã¨ã‚‚æ€ãˆãªã„ã€‚ç‰¹å®šã®å•é¡Œãªã®ã§ åˆ¥ã«è§£æ±ºç–ã‚‚ã‚ã‚‹ã¨æ€ã†ã€‚ ã€Œèªè¨¼å±€ã®CRLã‚’æä¾›ã™ã‚‹ãƒªãƒã‚¸ãƒˆãƒªã‚„OCSPãƒ¬ã‚¹ãƒãƒ³ãƒ€ãŒãƒ€ã‚¦ãƒ³ã—ãŸå ´åˆã€ ãã“ãŒå˜ä¸€éšœå®³ç‚¹ã«ãª
kuwalab 2012/06/13
Chrome

SSL
ãƒªãƒ³ã‚¯
SSLå…¥é–€
2005/10/02æ›´æ–° é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ã‚’æ‹è¦‹ã™ã‚‹ã«ã¤ã‘ã€PKI ã¨ã—ã¦ã® SSL ãŒ ä¸é€”åŠç«¯ãªç†è§£ã«ã‚ˆã‚Šå°ç„¡ã—ã«ã•ã‚Œã¦ã„ã‚‹å ´é¢ãŒå¤šã„ã‚ˆã†ã«æ€ãˆã¾ã™ã€‚ãã“ã§ï¼ˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å°‚é–€å®¶ã§ã¯ãªã„ã‚‚ã®ã®ï¼‰ç§ãŒç†è§£ã—ã¦ã„ã‚‹ç¯„å›²ã§è‡ªåˆ†ãªã‚Šã«å…¥é–€è§£èª¬ã‚’æ›¸ã„ã¦ã¿ã¾ã—ãŸã€‚ ã¡ãªã¿ã«ã€SSL v3 ã«å°‘ã—ã®æ”¹è‰¯ã‚’åŠ ãˆãŸã‚‚ã®ãŒ TLS v1.0 ã§ã™ãŒã€æŠ€è¡“çš„ãªç´°ã‹ã„ç‚¹ã‚’æ°—ã«ã—ãªã„ å ´åˆã¯ã€SSLã¨ç·ç§°ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã“ã§ã‚‚ã€ãã‚“ãªç´°ã‹ã„ã“ã¨ã¯æ°—ã«ã—ã¦ã„ãªã„ã®ã§ SSL ã¨ç·ç§°ã—ã¦ã„ã¾ã™ã€‚ SSLã—ãã¿è§£èª¬ ã¾ãšã€SSLã‚’ç†è§£ã™ã‚‹ãŸã‚ã«å¿…è¦ãªç”¨èªžã‚’è§£èª¬ã—ã€æ¬¡ã« SSLãŒ PKI ã¨ã—ã¦ã©ã®ã‚ˆã†ãªæ§‹æˆè¦ç´ ã§å®‰å…¨ãªé€šä¿¡è·¯ã‚’å½¢æˆã—ã¦ã„ã‚‹ã‹è§£èª¬ã—ã¾ã™ã€‚ æš—å·åŒ–ã¨å¾©å·åŒ– ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã§æš—å·åŒ–ã¨ã„ã†ã¨ã€æš—å·åŒ–ã™ã‚‹å‰ã®ãƒ‡ãƒ¼ã‚¿ ï¼ˆä»¥ä¸‹ã€ã€Œå¹³æ–‡ï¼ˆã²ã‚‰ã¶ã‚“ï¼‰ã€ã¨å‘¼ã³ã¾ã™ï¼‰ã¨éµã¨ãªã‚‹ãƒ‡ãƒ¼ã‚¿ï¼ˆä»¥ä¸‹ã€Œéµã€ã¨å‘¼ã³ã¾ã™ï¼‰ ã‚’ä½¿ã£ã¦
kuwalab 2007/09/26
SSL
ãƒªãƒ³ã‚¯
Oracle Java Technologies | Oracle
Java Is the Language of Possibilities Java is powering the innovation behind our digital world. Harness this potential with Java resources for student coders, hobbyists, developers, and IT leaders.
kuwalab 2006/04/03
Java

JSSE

SSL
ãƒªãƒ³ã‚¯
æ¨ªæµœå¸‚é›»åç”³è«‹ã‚µãƒ¼ãƒ“ã‚¹
kuwalab 2006/02/04
Java

JDBC

SSL
ãƒªãƒ³ã‚¯
OpenSSLã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã¨ã‚ãƒ¼ãƒšã‚¢ã®ç”Ÿæˆ
OpenSSLã¯ãƒ•ãƒªãƒ¼ã®SSLå®Ÿè£…ã§ã€mod_sslã‚„Apache-SSLã€ã‚ã‚‹ã„ã¯OpenSSHãªã©ã§å¿…è¦ã«ãªã‚Šã¾ã™ã€‚Apacheã§SSLã‚’ä½¿ã„ãŸã„å ´åˆã¯ã€OpenSSLã®ã»ã‹ã«ã€mod_sslã¾ãŸã¯Apache-SSLã‚’å°Žå…¥ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ Apache 1.3.20 + mod_ssl 2.8.4ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ¡ãƒ¢ Apache 1.3.6 + SSL 1.3.2 (Apache-SSL)ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ¡ãƒ¢ INSTALLã®æ‰‹é †é€šã‚Šã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã—ã¾ã™ã€‚ $ tar xvfz openssl-0.9.6b.tar.gz $ cd openssl-0.9.6b $ ./config $ make $ make test rootã«ãªã£ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ã€‚ $ su # make install éµã®ä½œæˆã¨ã‚µã‚¤ãƒˆè¨¼æ˜Žæ›¸ã®ç™ºè¡Œ ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã§ä¿è·ã•ã‚ŒãŸç§˜å¯†éµã‚’ç”Ÿæˆã—ã¾ã™ã€‚ $ su # cd
kuwalab 2006/02/04
Apache

OpenSSL

ssl
ãƒªãƒ³ã‚¯
[pgsql-jp: 31660] Re: JDBCã§ã®SSLæŽ¥ç¶š
kuwalab 2006/02/04
PostgreSQL

Java

JDBC

SSL
ãƒªãƒ³ã‚¯
http://www.rccm.co.jp/~juk/pgsql/Using-SSL_on_8.0.txt
kuwalab 2006/02/04
PostgreSQL

Java

JDBC

SSL
ãƒªãƒ³ã‚¯
http://www.h7.dion.ne.jp/~matsu/feature/uzumi/httpclient/ssl.html
kuwalab 2006/02/04
PostgreSQL

Java

JDBC

SSL
ãƒªãƒ³ã‚¯
1