[B! ssl] nantanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

nantan id:nantan

sslã«é–¢ã™ã‚‹nantanã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹ã¾ã§ã®é“ã®ã‚Šï¼ˆå¾Œç·¨ï¼‰ - pixiv inside
ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ã§é–‹ç™ºåŸºç›¤ãƒãƒ¼ãƒ ã¨ã—ã¦åƒã„ã¦ã„ã‚‹ @catatsuy ã§ã™ã€‚ å‰ç·¨ã§ã¯pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹å‰ã«ã‚„ã£ãŸå‰æº–å‚™ã¨ã—ã¦ã€åºƒå‘Šã€ç”»åƒã¨ã„ã£ãŸãƒªã‚½ãƒ¼ã‚¹ã‚’HTTPSã«åˆ‡ã‚Šæ›¿ãˆã‚‹éš›ã®æ‰‹é †ã‚’ç´¹ä»‹ã—ã¾ã—ãŸã€‚ pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹ã¾ã§ã®é“ã®ã‚Šï¼ˆå‰ç·¨ï¼‰ - pixiv inside å¾Œç·¨ã§ã¯å®Ÿéš›ã«pixivã®ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³è‡ªä½“ã‚’å¸¸æ™‚HTTPSåŒ–ã—ã¦ã„ãæ‰‹é †ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ å¾“æ¥ã®HTTPSé…ä¿¡ pixivã¯PHPã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’å®Ÿè¡Œã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒãƒ¼(Apache/mod_php)ã®å‰æ®µã«nginxã‚’é…ç½®ã™ã‚‹æ§‹æˆã«ãªã£ã¦ã„ã¾ã™ã€‚ä»¥å‰ã‹ã‚‰ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£çš„ã«é‡è¦ãªãƒšãƒ¼ã‚¸ã¯HTTPSã§æä¾›ã—ã¦ãŠã‚Šã€nginxã§HTTPSçµ‚ç«¯å‡¦ç†ã‚’è¡Œã£ã¦ã„ã¾ã—ãŸã€‚HTTPSã§å¿œç”ã™ã‚‹å ´åˆã¯ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚µãƒ¼ãƒãƒ¼ã«X-HTTPSãƒ˜ãƒƒãƒ€ãƒ¼ã‚’ä»˜ã‘ã¦ãƒ—ãƒã‚¯ã‚·ãƒ¼ã—ã¦ã„ã¾ã™ã€‚ å…·ä½“çš„ã«ã¯ä»¥ä¸‹ã®ã‚ˆ
nantan 2017/06/20
nginx

https

pixiv

SSL
ãƒªãƒ³ã‚¯
cookpad.com å…¨ HTTPS åŒ–ã®è»Œè·¡
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æ‹…å½“è€…ã‹ã‚‰è¦‹ãŸ re:Invent ã¨ AWS Security Hub / Impression of re:Invent and AWS Security Hub
nantan 2017/01/31
cookpad

https

SSL
ãƒªãƒ³ã‚¯
ç„¡å„ŸSSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸Letâ€™s Encryptã®æ™®åŠã¨HTTP/2ãŠã‚ˆã³å¸¸æ™‚SSLåŒ– | OSDN Magazine
Webã‚µã‚¤ãƒˆã®æš—å·åŒ–ï¼ˆSSLåŒ–ã€HTTPSå¯¾å¿œï¼‰ã¯ã“ã‚Œã¾ã§Eã‚³ãƒžãƒ¼ã‚¹ã‚„ãƒ—ãƒ©ã‚¤ãƒã‚·ã‚’å®ˆã‚‹ç›®çš„ã§éƒ¨åˆ†çš„ã«å°Žå…¥ã•ã‚Œã¦ããŸãŒã€SHA1ã‹ã‚‰SHA2ã¸ã®åˆ‡ã‚Šæ›¿ãˆã€ãƒ¢ãƒã‚¤ãƒ«ç«¯æœ«ã®æ™®åŠã‚„HTTP/2ã®ç™»å ´ã«ã‚ˆã£ã¦ã€ã‚µã‚¤ãƒˆå…¨ä½“ã‚’å¸¸ã«HTTPSé€šä¿¡ã«ã™ã‚‹å¸¸æ™‚SSLåŒ–ã®å‹•ããŒæ´»ç™ºã«ãªã£ã¦ã„ã‚‹ã€‚ã•ã‚‰ã«SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ç„¡å„Ÿã§å…¥æ‰‹å¯èƒ½ãªLetâ€™s Encryptã®ã‚µãƒ¼ãƒ“ã‚¹é–‹å§‹ã‚„ä¸»è¦ãªWebã‚µãƒ¼ãƒãƒ¼ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®å®‰å®šç‰ˆã§HTTP/2ãŒåˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã“ã¨ã§ãã®å‹•ãã¯åŠ é€Ÿã—ã¦ã„ã‚‹ã€‚æœ¬ç¨¿ã§ã¯SSLåŒ–ã‚’å–ã‚Šå·»ãæœ€è¿‘ã®çŠ¶æ³ã‚’æ•´ç†ã—ã€Nginxã¨Letâ€™s Encryptã«ã‚ˆã‚‹HTTP/2ï¼†SSLåŒ–ã®å®Ÿè£…ä¾‹ã‚‚ç´¹ä»‹ã—ã¦ã„ãã€‚ ã“ã‚Œã¾ã§è¨¼æ˜Žæ›¸ã®ç„¡å„Ÿå…¥æ‰‹ã¯é™å®šçš„ HTTPSã®Webã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ã«ã¯é€šå¸¸ã€å•†ç”¨ã®èªè¨¼å±€ã«SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’ç”³ã—è¾¼ã¿ã€å¿…ãšè²»ç”¨ãŒç™ºç”Ÿã™ã‚‹ã‚‚ã®ã ã£ãŸã€‚ä¸€éƒ¨é™å®šã—ãŸç›®çš„ã§ã¯ç„¡å„Ÿã§åˆ©ç”¨ã§ã
nantan 2016/06/29
ssl

https

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
App Transport Security (ATS)å¿…é ˆåŒ–ã«ã¤ã„ã¦
æ¦‚è¦ App Transport Security (ä»¥ä¸‹ ATS)å¯¾å¿œãŒå¿…é ˆã«ãªã‚‹ã¨ WWDC ã§ç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚ å€‹äººçš„ã«ã¯ã‚„ã£ã±ã‚ŠããŸã‹ã€æ€ã£ãŸã‚ˆã‚ŠçŒ¶äºˆæœŸé–“é•·ã„ãªã¨ã„ã†æ„Ÿæƒ³ã§ã™ã€‚ ã§ã‚‚ã€æ¯Žå›žã“ã†ã„ã†å¤§äº‹ãªã®ã‚’ Session ã§ã•ã‚‰ã£ã¨è¨€ã†ã®ã‚„ã‚ã¦ã»ã—ã„ã€‚ WWDC ã¯ Keynote ã¯ç¿Œæœã®ã¾ã¨ã‚ã‚µã‚¤ãƒˆã§ååˆ†ã€‚ ãã®å¾Œ1é€±é–“ã‹ã‘ã¦è¡Œã† Session ã®æ–¹ãŒãƒ¡ã‚¤ãƒ³ã ã¨æ€ã£ã¦ã¾ã™ã€‚ ã„ã¤ã‹ã‚‰ï¼Ÿ ã„ã‚ã‚“ãªã‚µã‚¤ãƒˆã§2017å¹´1æœˆã‹ã‚‰ã¨ã„ã£ã¦ã„ã‚‹ã®ã§ã™ãŒ Enforced at the end of 2016. Required by App Store at end of 2016. ãªã©ã€Œend of 2016ã€ã£ã¦ã©ã†è§£é‡ˆã™ã¹ããªã‚“ã§ã—ã‚‡ã†ãã€‚ è´ã„ã¦ã„ã‚‹ã¨2016å¹´ã®çµ‚ã‚ã‚Šé ƒã¨ã‚‚2017å¹´ã‹ã‚‰ã¨ã‚‚è§£é‡ˆã§ãã‚‹æ„Ÿã˜â€¦ iTunes Connectã®ã‚¯ãƒªã‚¹ãƒžã‚¹ä¼‘æš‡è¾ºã‚ŠãŒçµæ§‹æ€ªã—ã„æ°—ãŒã™
nantan 2016/06/17
iOS

SSL

ATS
ãƒªãƒ³ã‚¯
Macã«æœ€åˆã‹ã‚‰å…¥ã£ã¦ã„ã‚‹Apacheã§SSLé€šä¿¡ã™ã‚‹ç’°å¢ƒã‚’æ•´ãˆãŸ
ã“ã®è¨˜äº‹ã¯ã€Mountain Lion ã«æœ€åˆã‹ã‚‰å…¥ã£ã¦ã„ã‚‹ Apache ã¨ OpenSSL ã‚’ä½¿ã£ã¦ SSL(https) é€šä¿¡ã™ã‚‹ç’°å¢ƒã‚’æ•´ãˆãŸã¨ãã®ãƒ¡ãƒ¢ã§ã™ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ https://localhost ã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã€ã€ŒIt Works!ã€ã®ãƒšãƒ¼ã‚¸ã‚’è¡¨ç¤ºã™ã‚‹ã¾ã§ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ å‹•ä½œç¢ºèªç’°å¢ƒ OS X Mountain Lion ç›®æ¬¡ ã‚µãƒ¼ãƒç§˜å¯†éµã‚’ä½œæˆã™ã‚‹ è¨¼æ˜Žæ›¸ç½²åè¦æ±‚(CSR)ã‚’ä½œæˆã™ã‚‹ è‡ªå·±ç½²åè¨¼æ˜Žæ›¸(CRT)ã‚’ä½œæˆã™ã‚‹ ç§˜å¯†éµã¨è¨¼æ˜Žæ›¸ã‚’ Apache ã‹ã‚‰å‚ç…§ã§ãã‚‹å ´æ‰€ã«è¨ç½® Apache ãŒ SSL è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿è¾¼ã‚ã‚‹ã‚ˆã†ã«ã™ã‚‹ Apache ã‚’å†èµ·å‹•ã—ã¦å‹•ä½œç¢ºèª ã‚µãƒ¼ãƒç§˜å¯†éµã‚’ä½œæˆã™ã‚‹ ä¹±æ•°ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ MD5 ã§ä½œæˆã—ã¾ã™ã€‚ã“ã®å¾Œã€ã‚µãƒ¼ãƒç§˜å¯†éµã‚’ä½œã‚‹æ™‚ã«ä½¿ã„ã¾ã™ã€‚ $ openssl dgst -md5 /var/log/system.log > rand.d
nantan 2015/08/21
Mac

ssl

apache
ãƒªãƒ³ã‚¯
Nginxã§HTTPS : ã‚¼ãƒã‹ã‚‰å§‹ã‚ã¦SSLã®è©•ä¾¡ã‚’A+ã«ã™ã‚‹ã¾ã§ Part 1 | POSTD
æ•°å¹´å‰ã€Webã¯å…¨ä½“çš„ã«æš—å·åŒ–ã•ã‚Œã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚HTTPSã¯Webãƒšãƒ¼ã‚¸ã®æœ€ã‚‚é‡è¦ãªéƒ¨åˆ†ã ã‘ã®ãŸã‚ã«ç¢ºä¿ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚æš—å·åŒ–ãŒå¿…è¦ãªã®ã¯å¤§åˆ‡ãªãƒ¦ãƒ¼ã‚¶ãƒ‡ãƒ¼ã‚¿ã ã‘ã§ã€Webãƒšãƒ¼ã‚¸ã®å…¬é–‹ã•ã‚Œã‚‹éƒ¨åˆ†ã¯æš—å·åŒ–ã›ãšã«é€ã£ã¦ã‚‚ã„ã„ã¨ã„ã†ã“ã¨ã§æ„è¦‹ãŒä¸€è‡´ã—ã¦ã„ã¾ã—ãŸã€‚ ã—ã‹ã—ã€ ä»Šã¯ çŠ¶æ³ ãŒ é•ã„ã¾ã™ ã€‚ç¾åœ¨ã§ã¯ã€ã©ã‚“ãªWebãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã§ã‚‚æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„ã®ã¯è‰¯ããªã„ã¨ã„ã†ã“ã¨ãŒåˆ†ã‹ã£ã¦ã„ã‚‹ã®ã§ã€Webã‚µã‚¤ãƒˆã‚’é‹å–¶ã™ã‚‹èª°ã‚‚ãŒã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«é–¢ä¿‚ãªãå¼·å›ºãªHTTPSã‚’è¨å®šã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ ãŠæ¥ãšã‹ã—ã„è©±ã§ã™ãŒã€ç§è‡ªèº«ã®Webã‚µã‚¤ãƒˆã¯2å¹´è¿‘ãã‚‚å…¨ãHTTPSã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã›ã‚“ã§ã—ãŸ ^(1) ã€‚ Eric Mill ã® ä»Šã™ãç„¡æ–™ã§HTTPSã«åˆ‡ã‚Šæ›¿ãˆã‚ˆã† ã¨ã„ã†ç´ æ™´ã‚‰ã—ã„è¨˜äº‹ãŒæœ€çµ‚çš„ã«ç§ã«å–ã‚’å…¥ã‚Œã¦ãã‚Œã¾ã—ãŸã€‚ç§ã¯ä¼‘æš‡ä¸ã€HTTPSã‚’ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ã—ã¦ Qualys SSL Report ã§
nantan 2015/03/20
https

web

Security

Nginx

ssl
ãƒªãƒ³ã‚¯
OpenSSLã«ã¾ãŸé‡å¤§ãªè„†å¼±æ€§ã€ç›´ã¡ã«ãƒ‘ãƒƒãƒé©ç”¨ã‚’
è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚ŒãŸå ´åˆã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒé–“ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã®æš—å·ã‚’è§£é™¤ã•ã‚Œã€æ”¹ã–ã‚“ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ã€‚ ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®SSLï¼TLSå®Ÿè£…ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã€ŒOpenSSLã€ã«æ–°ãŸãªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã‚Šã€6æœˆ5æ—¥ï¼ˆç±³å›½æ™‚é–“ï¼‰ã«ä¿®æ£ãƒ‘ãƒƒãƒãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã€‚è„†å¼±æ€§ã¯ã‚µãƒ¼ãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ä¸¡æ–¹ãŒå½±éŸ¿ã‚’å—ã‘ã€OpenSSLã§ä¿è·ã—ã¦ã„ãŸã¯ãšã®æƒ…å ±ãŒæ¼ãˆã„ã™ã‚‹æã‚ŒãŒã‚ã‚‹ã€ OpenSSLã¯åŒæ—¥å…¬é–‹ã—ãŸã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æƒ…å ±ã§ã€6ä»¶ã®è„†å¼±æ€§ã‚’ä¿®æ£ã—ãŸã“ã¨ã‚’æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ä¸ã§ã‚‚ã€ŒSSL/TLSã®ä¸é–“è€…æ”»æ’ƒã®è„†å¼±æ€§ã€ã§ã¯ã€æ”»æ’ƒè€…ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒé–“ã®ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã®æš—å·ã‚’è§£é™¤ã•ã‚Œã€æ”¹ã–ã‚“ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ã€‚ ã“ã®è„†å¼±æ€§ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ã¯OpenSSLã®å…¨ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒå½±éŸ¿ã‚’å—ã‘ã‚‹ã€‚ã‚µãƒ¼ãƒã§ã¯OpenSSL 1.0.1ï¼1.0.2-beta1ã®ã¿ã«å½±éŸ¿ãŒç¢ºèªã•ã‚Œã¦ã„ã‚‹ãŒã€1.0.1ã‚ˆã‚Šå‰ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ä½¿ã£ã¦ã„ã‚‹å ´åˆã‚‚å¿µã®ãŸã‚ã«
nantan 2014/06/06
ã‚µãƒ¼ãƒ

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
SSLã‚µã‚¤ãƒˆã®JavaScriptã«ç‰¹å®šã®æ–‡å—åˆ—ãŒã‚ã‚‹ã¨ã€IE8ã§ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã§ä¿è·ã•ã‚ŒãŸâ€¦ã€ã®è¦å‘ŠãŒå‡ºã‚‹ï¼ˆè§£æ±ºï¼‰ - coldcupã®ãƒ¡ãƒ¢
çµè«–ï¼šJavascriptã‚½ãƒ¼ã‚¹ä¸ã®javascript:void(0)ã‚’å‰Šé™¤ã™ã‚‹ï¼ˆç½®ãæ›ãˆã‚‹ï¼‰ ã€Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã§ä¿è·ã•ã‚ŒãŸwebãƒšãƒ¼ã‚¸ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã®ã¿è¡¨ç¤ºã—ã¾ã™ã‹ã€ã¨ã„ã†ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦å‘Šã¯ã€é€šå¸¸ã¯httpsï¼ˆSSLï¼‰ã®ãƒšãƒ¼ã‚¸ã§httpï¼ˆéžSSLé€šä¿¡ï¼‰ã§ãƒ•ã‚¡ã‚¤ãƒ«ãŒèªã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ã¨è¡¨ç¤ºã•ã‚Œã‚‹ã‚‚ã®ã€‚ ã“ã®è¦å‘Šã«é–¢ã—ã¦ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã®ãƒ–ãƒ©ã‚¦ã‚¶ã§è¡¨ç¤ºã—ãªã„è¨å®šã«ã™ã‚‹è¨˜äº‹ã¯ãŸãã•ã‚“å˜åœ¨ã™ã‚‹ã‚‚ã®ã®ï¼ˆä¾‹ï¼‰ã€ã‚µã‚¤ãƒˆåˆ¶ä½œå´ã®æƒ…å ±ã¯å°‘ãªã„ã€‚ ä»Šå›žã®ã‚±ãƒ¼ã‚¹ã¯ ç™ºç”Ÿã—ãŸç’°å¢ƒã¯WindowsXPãƒ»InternetExplorer8 å…¨ã¦ã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒSSLã§èªã¿è¾¼ã¾ã‚Œã¦ã„ã‚‹ï¼ˆå‚è€ƒï¼šFirebugã§èª¿ã¹ã‚‹æ–¹æ³•ï¼‰ CSSã‚„JSã®ä¸ã¾ã§ç¢ºèªã—ãŸ 404ã«ãªã£ã¦ã„ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã¯ç„¡ã—ï¼ˆå‚è€ƒï¼‰ãªã© åŒã˜ãƒžã‚·ãƒ³ã§ã‚‚é•ã†ãƒ–ãƒ©ã‚¦ã‚¶ã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨è¦å‘Šã¯å‡ºãªã„ Windows7ãƒ»IE9ã¨ã„ã†åˆ¥ã®ç’°å¢ƒã§ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã‚‚è¦å‘Šã¯å‡ºãªã„ ã“ã‚Œã¯
nantan 2014/01/29
javascript

ssl
ãƒªãƒ³ã‚¯
HTTPSã§ã‚µãƒ¼ãƒãƒ¼ã«æŽ¥ç¶š - ã†ãªã®æ—¥è¨˜
net/httpsã‚’ä½¿ã£ã¦HTTPSã§ã‚µãƒ¼ãƒãƒ¼ã«æŽ¥ç¶šã—ã¾ã™ã€‚ ã‚µãƒ¼ãƒãƒ¼ã®å…¬é–‹éµè¨¼æ˜Žæ›¸ã‚’å¾—ã‚‹ æŽ¥ç¶šã—ãŸã„ã‚µãƒ¼ãƒãƒ¼ã®å…¬é–‹éµè¨¼æ˜Žæ›¸ã‚’å–å¾—ã—ã¾ã™ã€‚Windowsç’°å¢ƒã§ã‚ã‚Œã°IEã‚’ä½¿ã†ã®ãŒç°¡å˜ã§ã™ã€‚(IE 6ã§ç¢ºèª) IEã§æŽ¥ç¶šã—ãŸã„ã‚µãƒ¼ãƒãƒ¼ã«httpsã§ã‚¢ã‚¯ã‚»ã‚¹ã€‚ SSLé€šä¿¡ã®å ´åˆå³ä¸‹ã«è¡¨ç¤ºã•ã‚Œã‚‹ã€Œéµã€ãƒžãƒ¼ã‚¯ã‚’ãƒ€ãƒ–ãƒ«ã‚¯ãƒªãƒƒã‚¯ã€‚ ã€Œè¨¼æ˜Žæ›¸ã€ãƒ€ã‚¤ã‚¢ãƒã‚°ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã®ã§ã€ã€Œè©³ç´°ã€ã‚¿ãƒ–ã®ã€Œãƒ•ã‚¡ã‚¤ãƒ«ã«ã‚³ãƒ”ãƒ¼ã€ãƒœã‚¿ãƒ³ã‚’æŠ¼ã™ã€‚ ã€Œè¨¼æ˜Žæ›¸ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã‚¦ã‚£ã‚¶ãƒ¼ãƒ‰ã€ãŒé–‹å§‹ã•ã‚Œã‚‹ã€‚ã€Œæ¬¡ã¸ã€ãƒœã‚¿ãƒ³ã‚’æŠ¼ã™ã€‚ ãƒ•ã‚¡ã‚¤ãƒ«å½¢å¼ã‚’ã€ŒBase64 Encoded X509ã€(PEMå½¢å¼)ã¨ã™ã‚‹ã€‚ ã‚ã¨ã¯ã‚¦ã‚£ã‚¶ãƒ¼ãƒ‰ã«å¾“ã£ã¦ã€é©å½“ãªãƒ•ã‚¡ã‚¤ãƒ«ã«ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã™ã‚‹ã€‚ æŽ¥ç¶šã™ã‚‹ã€‚ ã‚µãƒ³ãƒ—ãƒ«ã¯ã€ã€ŒRubyãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ãƒžãƒ‹ãƒ¥ã‚¢ãƒ« - net/httpsã€è¨˜è¼‰ã®ã‚‚ã®ã¨ã»ã¼åŒã˜ã§ã™ã€‚ã€Œhttps.ca_fileã€ã§ã€ä¸Šã§å–å¾—ã—ãŸæŽ¥ç¶šå…ˆã‚µãƒ¼ãƒãƒ¼ã®å…¬é–‹éµè¨¼
nantan 2009/02/20
ruby

ssl

https

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
rubyã§sslé€šä¿¡ - chakokuã®ãƒ–ãƒã‚°(rev4)
rubyã‚’ä½¿ã£ã¦httpsã§Webã‚µã‚¤ãƒˆã¨é€šä¿¡ã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’ä½œæˆã€‚ã©ã†ã—ã¦ã‚‚SSLã®ã‚µãƒ¼ãƒèªè¨¼ãŒã†ã¾ãé€šã‚‰ãªã‹ã£ãŸã€‚ ã‚¨ãƒ©ãƒ¼ã®ä¾‹ /usr/lib/ruby/1.8/net/http.rb:586:in `connect': certificate verify failed (OpenSSL::SSL::SSLError)ã„ã‚ã‚“ãªã‚µã‚¤ãƒˆã‚’è¦‹ã¦ã„ã‚‹ã¨ã€ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’å–å¾—ã—ã¦ã€ãƒ‘ã‚¹ã‚’åˆ‡ã‚Œã¨ã‚ã‚‹ã€‚ ã„ã‚ã„ã‚ã‚„ã£ãŸçµæžœã€ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’å–ã£ã¦ãã¦ã€ãã“ã«ãƒ‘ã‚¹ã‚’åˆ‡ã‚‹ã®ãŒæ£ã—ã„ã¨æ€ã‚ã‚Œã‚‹ã€‚ï¼ˆçµæžœã‚ˆã‚Šåˆ¤æ–ï¼‰ å‚è€ƒã«ã—ãŸã€Œã†ãªã®æ—¥è¨˜ã€æ§˜ã§ã¯ã€ã‚µã‚¤ãƒˆã®è¨¼æ˜Žæ›¸ã¨ã‚ã‚Šã€æœ¬å½“ã¯ã©ã£ã¡ãŒæ£ã—ã„ã®ã‹åˆ†ã‹ã‚Šã¾ã›ã‚“ã€‚æœ¬æ°—ã§ã‚„ã‚‹ãªã‚‰ã€rubyãŒå‘¼ã³å‡ºã—ã¦ã„ã‚‹ã¨æ€ã‚ã‚Œã‚‹opensslã‚’ã¡ã‚ƒã‚“ã¨èª¿ã¹ãªã„ã¨ã„ã‘ãªã„ã¨æ€ã‚ã‚Œã¾ã™ã€‚ ä»¥ä¸‹ã¯Googleã®WebAPI Auth REST?ã‚’rubyã§å‘¼ã³å‡ºã™ã‚µãƒ³ãƒ—ãƒ«ã€‚ã€‚ requi
nantan 2009/02/20
ruby

ssl

https

web
ãƒªãƒ³ã‚¯
1