FREAK: OpenSSL vulnerability (CVE-2015-0204) - Red Hat Customer Portal
In January 2015, Red Hat Product Security addressed the CVE-2015-0204 vulnerability in OpenSSL with this advisory: RHSA-2015-0066 and RHSA-2015-0800. The vulnerability was rated as having a Moderate impact. This vulnerability is now being referred to as FREAK in the press. Background Information OpenSSL clients accepted EXPORT-grade (insecure) keys even when the client had not initially asked for
å…«ä¸å €ã®æ—¦é‚£ » Apache+OpenSSLã«ã‚ˆã‚‹ CSRã®ä½œæˆã¨SSL証明書インストール
â– CSRä½œæˆ ã¾ãšã¯ã€CSRã®ä½œæˆæ‰‹é †ã§ã™ãŒã€çµæ§‹ã„ã‚ã„ã‚ã¨èª¬æ˜Žã—ã¦ã„るサイトãŒã‚ã‚‹ã®ã§ã™ãŒã€ã©ã‚Œã‚‚微妙ã«é•ã†ã¨ã“ã‚ãŒã‚ã£ã¦ã‚ã‹ã‚Šã«ãã‹ã£ãŸã®ã§ã€ç§ãŒå®Ÿéš›ã«ã‚„ã£ãŸã‚„り方を記録ã—ã¦ãŠãã¾ã™ã€‚ ã¡ãªã¿ã«ã€ä»Šå›žã®ç§ã®ç’°å¢ƒã¯ã€ã•ãらインターãƒãƒƒãƒˆã®VPSã§ã€CentOS5+Apache2ã®ç’°å¢ƒã§ã™ã€‚ 証明書ã¯ã€RapidSSLã§apacheã¨OpenSSLã¯ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã‚る状態ã§ã™ã€‚ ã•ã¦ã€ã¾ãšã¯ã˜ã‚ã«CSR作æˆã®é€”ä¸ã§å…¥åŠ›ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„次ã®é …ç›®ã«ã¤ã„ã¦ã‚らã‹ã˜ã‚準備ã—ã¦ãŠãã¾ã™ã€‚ コモンãƒãƒ¼ãƒ sample.jp confã¾ã§ã®ãƒ‘ス　/etc/httpd/conf/ 秘密éµãƒ•ã‚¡ã‚¤ãƒ«å samplejp.2011.key 秘密éµãƒ•ã‚¡ã‚¤ãƒ«å(パスフレーズ) samplejp.2011_withpass.key CSRファイルå samplejp.2011.csr 証明書ファイル sample
ã‚»ã‚ュリティã®ãƒˆãƒ“ラ(14) 公衆無線LANã®ãƒªã‚¹ã‚¯ã¨ãã®ä½Žæ¸›ç–を知る
先日ã€æˆç”°ãƒ»é–¢è¥¿ãƒ»ç¥žæˆ¸ã®3空港ãŒæä¾›ã™ã‚‹ç„¡æ–™ã®å…¬è¡†ç„¡ç·šLANサービスãŒæš—å·åŒ–ã•ã‚Œã¦ã„ãªã„ãŸã‚ã€ãƒ¡ãƒ¼ãƒ«ã®å†…容や閲覧ä¸ã®Webサイトã®URLãŒã®ãžã見ã§ãる状態ã§ã‚ã‚‹ã“ã¨ãŒç¥žæˆ¸å¤§å¦å¤§å¦é™¢ã®æ£®äº•æ˜Œå…‹æ•™æŽˆã®å®Ÿåœ°èª¿æŸ»ã®çµæžœåˆ¤æ˜Žã—ãŸã¨ã®å ±é“ãŒãªã•ã‚Œã¾ã—ãŸã€‚ ãã‚Œã«ã¤ã„ã¦ã€è‰²ã€…ãªæ–¹ã€…ã®è‰²ã€…ãªåå¿œãŒã‚ã£ãŸã‚ˆã†ã§ã™ã€‚ä¸ã§ã‚‚ 「今更ã€ã‚ã–ã‚ã–調査ã™ã‚‹ã‚ˆã†ãªã“ã¨ã§ã¯ãªã„〠「暗å·åŒ–ã•ã‚Œã¦ã„ãªã„ã®ã ã‹ã‚‰è¦—ã見ã§ãã¦å½“ãŸã‚Šå‰ã€ ã¨ã„ã†è¶£æ—¨ã‚‚ã®ãŒç›®ç«‹ã£ãŸã‚ˆã†ã«æ€ã„ã¾ã—ãŸã€‚ (1)ã«é–¢ã—ã¦ã¯ã€ã§ãã‚‹ã ã‚ã†ã¨åˆ†ã‹ã£ã¦ã„ã‚‹ã“ã¨ã§ã‚‚実地ã§ã‚„ã£ã¦ã¿ãªã„ã“ã¨ã«ã¯ã§ãã‚‹(ã§ããŸ)ã¨æ–言ã§ããªã‹ã£ãŸã‚Šã€ã‚„ã£ã¦ã¿ã¦åˆã‚ã¦åˆ†ã‹ã‚‹ã“ã¨ã‚‚ã‚ã‚‹ãŸã‚実施ã•ã‚ŒãŸã®ã§ã—ょã†ã€‚ (2)ã«é–¢ã—ã¦ã¯ã€äº‹å®Ÿã¨ã—ã¦ãã®é€šã‚Šã§ã¯ã‚ã‚‹ã®ã§ã™ãŒè‡ªåˆ†ã«ã¨ã£ã¦å½“ãŸã‚Šå‰ã§ã‚ã‚‹ã“ã¨ã¯ã€å¿…ãšã—も他人ã«ã¨ã£ã¦ã‚‚当ãŸã‚Šå‰ã¨ã¯é™ã‚Šã¾ã›ã‚“。 今回ã€èª¿æŸ»/å ±é“ã•ã‚ŒãŸã‚ˆã†ãªäº‹å®Ÿã‚’知らãš
複眼ä¸å¿ƒ : Xp on Mac (XOM) How to 日本語訳
Tats Shibata (柴田竜典, ã‚·ãƒã‚¿ãƒ„) has 15+ years of experience in database technology, performance engineering, and pre-sales. As a Senior Manager and Head of Japan Data Service Specialist Solutions Architects at Amazon Web Services Japan, he leads a team of 10+ database and analytics technical experts who provide solution architecting for AWS customers across various industries.
1
ランã‚ング
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
httpsã ã‹ã‚‰ã¨ã„ã†ã ã‘ã§å®‰å…¨ï¼Ÿèª¿ã¹ãŸã‚‰æ€–ããªã£ã¦ããŸSSLã®è©±!？ - Qiita
{{#tags}}- {{label}}
{{/tags}}