[B! ssl] nobusueã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

nobusue id:nobusue

sslã«é–¢ã™ã‚‹nobusueã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SNIã§1å°ã®ã‚µãƒ¼ãƒä¸Šã«è¤‡æ•°ã®SSLã‚µã‚¤ãƒˆã‚’é‹ç”¨ â€“ å‰ç·¨ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
ã”ç„¡æ²™æ±°ã—ã¦ãŠã‚Šã¾ã™ã€‚ç´°ç¾½ã§ã™ã€‚ æ˜¨å¹´ã€Androidã«ãŠã‘ã‚‹SNIå¯¾å¿œçŠ¶æ³ã¨ã„ã†è¨˜äº‹ã§ã€SSL/TLSã®æ‹¡å¼µä»•æ§˜ã§ã‚ã‚‹SNI(Server Name Indication)ã«ã¤ã„ã¦è§¦ã‚Œã¾ã—ãŸã€‚ å°‘ã—ãƒ‹ãƒƒãƒãªãƒ†ãƒ¼ãƒžã ã¨æ€ã£ã¦ã„ã¾ã—ãŸãŒã€ã¤ã„å…ˆæ—¥ã€ã•ãã‚‰ã®ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã§SNI SSLã‚’æä¾›é–‹å§‹ã¨ã„ã†ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ãŒç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚åºƒã„ã‚µãƒ¼ãƒ“ã‚¹ã§SSL/TLSå°Žå…¥ã¸ã®éœ€è¦ãŒé«˜ã¾ã£ã¦ã„ã‚‹ä»Šã€ã“ã®ã‚ˆã†ãªäº‹ä¾‹ã¯ä»Šå¾Œå¢—ãˆã¦ã„ãã‚‚ã®ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ ãã“ã§æœ¬è¨˜äº‹ã§ã¯ã€é‡è¦åº¦ãŒé«˜ã¾ã£ã¦ã„ã‚‹SNIã«ã¤ã„ã¦ã€ãã®æŠ€è¡“ã®æ¦‚è¦ã‚’æ”¹ã‚ã¦ç†è§£ã—ã€å®Ÿéš›ã®é‹ç”¨ã«å½¹ç«‹ã¦ã‚‰ã‚Œã‚‹ã‚ˆã†ã«æ•´ç†ã‚’ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ çŸ¥è˜ã®æ•´ç†ã‚’ç›®çš„ã«ã—ãŸå‰ç·¨ã¨ã€å®Ÿè·µã‚’ç›®çš„ã«ã—ãŸå¾Œç·¨ã®2éƒ¨æ§‹æˆã§ãŠå±Šã‘ã—ã¾ã™ã€‚ ä»¥ä¸‹ãŒå‰ç·¨ã®å†…å®¹ã§ã™ã€‚ SNIã§ä½•ãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«ãªã‚‹ã®ã‹ SNIã§è¤‡æ•°ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒé‹ç”¨å¯èƒ½ã«ãªã‚‹ã¾ã§ SNIãŒé‡è¦ã«ãªã‚Šã¤ã¤ã‚ã‚‹èƒŒæ™¯ SSLé‹
nobusue 2018/07/24
SNI

SSL

TLS
ãƒªãƒ³ã‚¯
Using Let's Encrypt with OpenShift
nobusue 2018/05/31
OpenShift

ssl
ãƒªãƒ³ã‚¯
Let's Encrypt (certbot) ã‚’ä½¿ã£ã¦ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã™ã‚‹ï¼(ã‚ã¨ã¡ã‚‡ã£ã¨) - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
nobusue 2018/03/05
ssl
ãƒªãƒ³ã‚¯
acmesmithã§SSLè¨¼æ˜Žæ›¸ã‚’ç®¡ç†ã™ã‚‹ - GeekFactory
é–‹ç™ºç’°å¢ƒãªã©ã®ãƒ†ãƒ³ãƒãƒ©ãƒªãªç’°å¢ƒã§SSLè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ãŸã„å ´åˆã¯Let's EncryptãŒä¾¿åˆ©ã§ã™ã€‚Let's Encryptã®è¨¼æ˜Žæ›¸ã‚’ç®¡ç†ã™ã‚‹ãƒ„ãƒ¼ãƒ«ã«ã¯certbotã‚„legoãªã©ãŒã‚ã‚Šã¾ã™ãŒã€ãã‚Œã‚‰ã¯éµã‚„è¨¼æ˜Žæ›¸ã‚’ãƒãƒ¼ã‚«ãƒ«ãƒ‡ã‚£ã‚¹ã‚¯ã«æ ¼ç´ã™ã‚‹ãŸã‚ã€ä»–ã®ã‚µãƒ¼ãƒã§è¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ãŸã„å ´åˆã«éµã‚„è¨¼æ˜Žæ›¸ã‚’å®‰å…¨ã«é…å¸ƒã™ã‚‹ä»•çµ„ã¿ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ã¾ãŸã€ç™ºè¡Œæ¸ˆã¿ã®è¨¼æ˜Žæ›¸ãŒè¤‡æ•°ã®ã‚µãƒ¼ãƒã«åˆ†æ•£ã—ã¦ã—ã¾ã†ã¨ã€æœ‰åŠ¹æœŸé™ã‚„SANï¼ˆSubject Alternative Nameï¼‰ã®æ›´æ–°ã«å¤šå¤§ãªæ‰‹é–“ãŒã‹ã‹ã‚Šã¾ã™ã€‚ ãã“ã§ã€acmesmithã¨ã„ã†ãƒ„ãƒ¼ãƒ«ã‚’åˆ©ç”¨ã™ã‚‹ã¨ã€S3ãªã©ã®ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã§éµã‚„è¨¼æ˜Žæ›¸ã‚’ä¸€å…ƒç®¡ç†ã§ãã¾ã™ã€‚ã“ã‚Œã«ã‚ˆã‚Šã€è¤‡æ•°ã®ã‚µãƒ¼ãƒã§è¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã™ã‚‹å ´åˆã®é‹ç”¨ãŒã¨ã¦ã‚‚æ¥½ã«ãªã‚Šã¾ã™ã€‚ github.com æœ¬ç¨¿ã§ã¯ã€acmesmithã‚’åˆ©ç”¨ã—ã¦è¨¼æ˜Žæ›¸ã‚’é‹ç”¨ã™ã‚‹æ–¹æ³•ã‚’èª¬æ˜Žã—ã¾ã™ã€‚ã“ã“ã§ã¯ã€Route53ã§ãƒ‰ãƒ¡ã‚¤ãƒ³
nobusue 2016/09/12
ssl

acmesmith
ãƒªãƒ³ã‚¯
SSL/TLS Offloading, Encryption, and Certificates with NGINX and NGINX Plus
F5 Sites DevCentral Connect & learn in our hosted community F5 Labs The latest threat intel and research to help protect your apps MyF5 Your key to everything F5, including support, registration keys, and subscriptions Partner Central Research and support for partners LearnF5 Guidance, insights, and how to use F5 products Contact F5 Contact F5 Sales Talk to an F5 sales representative Contact F5 Su
nobusue 2014/08/06
nginx

ssl
ãƒªãƒ³ã‚¯
ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’è¦æ±‚ã™ã‚‹ã‚µã‚¤ãƒˆã®æ§‹ç¯‰ï¼ˆApache+OpenSSLï¼‰ãã®1 - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
nobusue 2014/06/07
apache

ssl

ClientCert
ãƒªãƒ³ã‚¯
ã‚ªãƒ¬ã‚ªãƒ¬èªè¨¼å±€ã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ ï½ž ã‚¦ã‚§ãƒ–ã® Basic èªè¨¼ã‚’ãƒªãƒ—ãƒ¬ãƒ¼ã‚¹ - OPTPiX Labs Blog
JINS PC ã‚’ä½¿ã„å§‹ã‚ã¾ã—ãŸã€‚æ™®æ®µã¯ãƒ¡ã‚¬ãƒã‚’ã‹ã‘ã¦ã„ãªã„ãŸã‚ã€ãƒ¬ãƒ³ã‚ºã«ç…§æ˜ŽãŒã†ã¤ã‚Šè¾¼ã‚€ã®ãŒæ°—ã«ãªã‚‹ã€è€³ãŒç—›ã„ã€ã¨æ°—ã«ãªã£ã¦æ°—ã«ãªã£ã¦ã—ã‹ãŸãŒãªã„ yone ã§ã™ã€‚åŠ¹æžœãŒã‚ã‚Œã°ã‚ˆã„ã®ã§ã™ãŒã€‚ 1. ã‚ªãƒ¬ã‚ªãƒ¬èªè¨¼å±€ã®æ´»ç”¨ å‰å›žã®è¨˜äº‹ã§ã€ã‚ªãƒ¬ã‚ªãƒ¬èªè¨¼å±€ (ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆèªè¨¼å±€) ã®æ§‹ç¯‰ã¨ã€ãã‚Œã‚’ä½¿ã£ãŸã‚¦ã‚§ãƒ–ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’ç´¹ä»‹ã—ã¾ã—ãŸã€‚è¨˜äº‹ã®æœ€å¾Œã«ã€ãã®ä»–ã®è¨¼æ˜Žæ›¸æ´»ç”¨ã‚’ç´¹ä»‹ã—ã¾ã—ãŸãŒã€ä»Šå›žã¯ãã®ãªã‹ã‹ã‚‰ã€Œã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã€ã®äº‹ä¾‹ã‚’è§£èª¬ã—ã¾ã™ã€‚ 2. ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ ä¸€èˆ¬å…¬é–‹ã—ã¦ã„ã‚‹ã‚¦ã‚§ãƒ–ãƒšãƒ¼ã‚¸ã§ã¯ãªãã€ç‰¹å®šã®äººã ã‘ã«è¦‹ã›ãŸã„ãƒšãƒ¼ã‚¸ã‚’ä½œã‚‹å ´åˆã€Basic èªè¨¼ã‚’ä½¿ã†ã“ã¨ãŒå¤šã„ã§ã—ã‚‡ã†ã€‚ã»ã¼å…¨ã¦ã®ãƒ–ãƒ©ã‚¦ã‚¶ãŒå¯¾å¿œã—ã¦ãŠã‚Šã€åºƒãä½¿ã‚ã‚Œã¦ã„ã¾ã™ã€‚ ãŠæ‰‹è»½ã§ã‚ˆã„ã®ã§ã™ãŒã€ç›—è´ãƒ»æ”¹ç«„ã«å¼±ã„ã¨ã„ã†å¼±ç‚¹ãŒã‚ã‚Šã¾ã™ã€‚å¼±ç‚¹ã‚’æ”¹å–„ã—ãŸ Digest èªè¨¼ã¨ã„ã†ã‚‚ã®ãŒã‚ã‚Šã¾ã™ãŒã€Basic èªè¨¼ã»ã©æ™®åŠã—ã¦ã„
nobusue 2014/06/07
apache

ssl

ClientCert
ãƒªãƒ³ã‚¯
SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã®æ£ã—ã„ä½¿ã„æ–¹ï¼ˆã‚‚ã—ãã¯ã€ã‚³ãƒ¢ãƒ³ãƒãƒ¼ãƒ ã®æ¤œè¨¼ã«ã¤ã„ã¦ï¼‰
ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã®å¸‚å ´æ‹¡å¤§ã«ä¼´ã„ã€ç›´æŽ¥SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ä½¿ç”¨ã™ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ ã‚’æ›¸ãæ©Ÿä¼šã‚‚å¢—ãˆã¦ãã¦ã„ã‚‹ä»Šæ—¥ã“ã®é ƒã‹ã¨æ€ã„ã¾ã™ã€‚ SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ä½¿ã†éš›ã«ã¯ã€æŽ¥ç¶šç¢ºç«‹æ™‚ã«ã‚µãƒ¼ãƒã®èªè¨¼ã‚’æ£ã—ãè¡Œã†å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚å…·ä½“çš„ã«ã¯ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒ—ãƒã‚°ãƒ©ãƒ ã§ä»¥ä¸‹ã®ï¼’ç¨®é¡žã®æ¤œè¨¼ã‚’è¡Œã†ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªãŒã‚µãƒ¼ãƒã®è¨¼æ˜Žæ›¸ã®æ¤œè¨¼ã«æˆåŠŸã—ãŸã“ã¨ ã‚µãƒ¼ãƒã®è¨¼æ˜Žæ›¸ã«å«ã¾ã‚Œã‚‹ã‚³ãƒ¢ãƒ³ãƒãƒ¼ãƒ æ³¨1ãŒæŽ¥ç¶šã—ã‚ˆã†ã¨ã—ãŸã‚µãƒ¼ãƒã¨åŒä¸€ã§ã‚ã‚‹ã“ã¨ å‰è€…ã«ã¤ã„ã¦ã¯ã€OpenSSLã®å ´åˆã¯SSL_CTX_set_verifyã®å¼•æ•°ã«SSL_VERIFY_PEERã‚’æŒ‡å®šã™ã‚‹ãªã©ã—ã¦ã€ãƒ©ã‚¤ãƒ–ãƒ©ãƒªå´ã§å‡¦ç†ã‚’è¡Œã‚ã›ã‚‹ã“ã¨ãŒå¯èƒ½ã§ã™ï¼ˆè¨¼æ˜Žæ›¸ã®æ¤œè¨¼ã«å¤±æ•—ã—ãŸå ´åˆã¯SSL_connectãŒã‚¨ãƒ©ãƒ¼ã‚’è¿”ã—ã¾ã™ï¼‰ã€‚ ä¸€æ–¹ã€å¾Œè€…ã«ã¤ã„ã¦ã¯SSL/TLSãƒ©ã‚¤ãƒ–ãƒ©ãƒªã«ã‚ˆã£ã¦å·®ãŒã‚ã‚Šã€æ¤œè¨¼æ©Ÿèƒ½ã‚’æœ‰åŠ¹ã«ã™ã‚‹ãŸã‚ã«ç‰¹åˆ¥ãªå‘¼å‡ºãŒå¿…è¦ã ã£
nobusue 2014/01/29
ssl

security
ãƒªãƒ³ã‚¯
Rails ã§ã€Controller ã«å®šç¾©ã•ã‚Œã¦ã„ã‚‹ action ã‚’ä¸€åº¦ã«å–å¾—ã™ã‚‹æ–¹æ³•ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ - QA@IT
å¹³ç´ ã‚ˆã‚ŠQAï¼ ITã‚’ã”åˆ©ç”¨ã„ãŸã ãã€èª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ QAï¼ ITã¯ã€Œè³ªå•ã‚„å›žç”ã‚’ã€Žå…±æœ‰ã€ã—ã€Žç·¨é›†ã€ã—ã¦ã„ãã“ã¨ã§ãƒ™ã‚¹ãƒˆãªQAã‚’è“„ç©ã§ãã‚‹ã€IT ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãŸã‚ã®å•é¡Œè§£æ±ºã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£ãƒ¼ã€ã¨ã—ã¦ç´„7å¹´é–“é‹å–¶ã‚’ã—ã¦ãã¾ã—ãŸã€‚ã“ã‚Œã¾ã§ã‚µãƒ¼ãƒ“ã‚¹ã‚’ç¶šã‘ã‚‹ã“ã¨ãŒã§ããŸã®ã¯ã€QAï¼ ITã®ã‚³ãƒ³ã‚»ãƒ—ãƒˆã«å…±æ„Ÿã‚’ã„ãŸã ãã€é©åˆ‡ãªè³ªå•ã‚„å›žç”ã‚’ãŠå¯„ã›ã„ãŸã ã„ãŸçš†ã•ã¾ã®ã”æ”¯æ´ãŒã‚ã£ãŸã‹ã‚‰ã“ãã¨è€ƒãˆã¦ãŠã‚Šã¾ã™ã€‚é‡ãã¦å¾¡ç¤¼ç”³ã—ä¸Šã’ã¾ã™ã€‚ ã—ã‹ã—ãªãŒã‚‰ã€ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®æƒ…å ±å…¥æ‰‹æ–¹æ³•ã®å¤šæ§˜åŒ–ã‚„QAã‚µãƒ¼ãƒ“ã‚¹å¸‚å ´ã®çŠ¶æ³ã€ï¼ ITã®ä»Šå¾Œã®ãƒ¡ãƒ‡ã‚£ã‚¢é‹å–¶æ–¹é‡ãªã©ã‚’æ¤œè¨Žã—ãŸçµæžœã€2020å¹´2æœˆ28æ—¥ï¼ˆé‡‘ï¼‰15:00ã‚’ã‚‚ã¡ã¾ã—ã¦QAï¼ ITã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’çµ‚äº†ã™ã‚‹ã“ã¨ã«ã—ã¾ã—ãŸã€‚ ã“ã‚Œã¾ã§ã”åˆ©ç”¨ã‚’ã„ãŸã ãã¾ã—ãŸçš†ã•ã¾ã«ã¯æ®‹å¿µãªãŠçŸ¥ã‚‰ã›ã¨ãªã‚Šã€èª ã«å¿ƒè‹¦ã—ãæ€ã£ã¦ãŠã‚Šã¾ã™ã€‚ä½•ã¨ãžã€ã”ç†è§£ã‚’ã„ãŸã ã‘ã¾ã™ã¨å¹¸ã„ã§ã™ã€‚ QAï¼ ITã®7å¹´é–“ã§çš†ã•ã¾ã®çŸ¥è˜
nobusue 2013/11/21
Java

ssl
ãƒªãƒ³ã‚¯
ç„¡æ–™ã®SSLè¨¼æ˜Žæ›¸StartSSLã‚’æ´»ç”¨ã™ã‚‹ - Qiita
èƒŒæ™¯ è‡ªå‰ã®ã‚µãƒ¼ãƒ“ã‚¹ã§httpsé€šä¿¡ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã«ã¯ã€SSLè¨¼æ˜Žæ›¸ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ è‡ªåˆ†ã§ä½¿ç”¨ã™ã‚‹ã ã‘ãªã‚‰ã€SSLè¨¼æ˜Žæ›¸ã‚‚è‡ªå‰ã§ä½œæˆã™ã‚‹ã„ã‚ã‚†ã‚‹ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ç”¨ã„ã¦ã‚‚è‰¯ã„ã®ã§ã™ãŒã€å¤–éƒ¨ã«å…¬é–‹ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®å ´åˆãã†ã¨ã‚‚è¡Œãã¾ã›ã‚“ã€‚ SSLè¨¼æ˜Žæ›¸ã¨ã„ã†ã¨å€¤æ®µãŒé«˜ã„å°è±¡ãŒã‚ã‚Šã¾ã—ãŸãŒã€StartSSLã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã§ç„¡æ–™ã§SSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’å—ã‘ã‚‰ã‚Œã‚‹ã¨è¨€ã†ã“ã¨ã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ StartSSLã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã™ã‚‹ è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’è¡Œã†å‰ã«ã€StartSSLã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ StartSSLã‹ã‚‰ã€"StartSSL Free (Class1)"ã‚’é¸æŠžã—ã¾ã™ã€‚ Certificate Control Panelã‚’é¸æŠžã€‚ Sign-upã«é€²ã¿ã¾ã™ã€‚ åå‰ã€ä½æ‰€ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ãªã© å€‹äººæƒ…å ±ã®ç™»éŒ²ã‚’è¡Œã„ã¾ã™ã€‚ ç™»éŒ²ã—ãŸãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«æœ¬äººç¢ºèªã®ãƒ¡ãƒ¼ãƒ«ãŒå±Šãã®ã§ã€å—ä¿¡ã—ãŸãƒ¡ãƒ¼ãƒ«ã®a
nobusue 2013/10/30
web

ssl

nginx
ãƒªãƒ³ã‚¯
1