[B! RFC5280] ra1gawaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ra1gawa id:ra1gawa

RFC5280ã«é–¢ã™ã‚‹ra1gawaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

RFC 5280 ã® 3.3. Revocation
è¨¼æ˜Žæ›¸ã®å¤±åŠ¹ã«é–¢ã—ã¦ã§ã™ è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã™ã‚‹å¿…è¦æ€§ã¨ å¤±åŠ¹ã—ãŸè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨è€…ã«ä¼ãˆã‚‹æ–¹æ³•ã«ã¤ã„ã¦è¿°ã¹ã‚‰ã‚Œã¾ã™ ä»Šã¾ã§è¨¼æ˜Žæ›¸å¤±åŠ¹ãƒªã‚¹ãƒˆã¨æ›¸ã„ã¦ã„ã¾ã—ãŸãŒé¢å€’ãªã®ã¨ OCSP (Online Certificate Status Protocol) ã®å’Œè¨³ãŒã‚¢ãƒ›ãã•ã„ã®ã§ CRL (Certificate Revocation List) ã¨è¨˜è¿°ã—ã¦ã—ã¾ã†ã“ã¨ã«ã—ã¾ã™ è¨¼æ˜Žæ›¸ã«ã¯æœ‰åŠ¹æœŸé™ãŒè¨å®šã•ã‚Œã¦ã„ã‚‹ã‚ã‘ã§ã™ãŒ å¿…ãšã—ã‚‚æœ‰åŠ¹æœŸé™ã¾ã§è¨¼æ˜Žã—ãŸå†…å®¹ãŒä¿æŒã•ã‚Œã‚‹ã¨ã¯é™ã‚Šã¾ã›ã‚“ ä¾‹ãˆã°ç¤¾åãŒå¤‰æ›´ã«ãªã‚‹ã¨è¨¼æ˜Žæ›¸ã«è¨˜è¼‰ã®çµ„ç¹”åãŒå¤‰ã‚ã£ã¦ã—ã¾ã„ã¾ã™ ã¾ãŸã€ç§˜å¯†éµãŒæ¼æ´©ã—ãŸå±é™ºæ€§ãŒã‚ã‚‹ã¨åˆ¤æ–ã•ã‚ŒãŸå ´åˆã«ã‚‚ æ‚ªæ„ã®ã‚ã‚‹äººãŒæ¼æ´©ã—ãŸç§˜å¯†éµã‚’ç”¨ã„ã¦ã€Œãªã‚Šã™ã¾ã—ã€ã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã®ã§ èªè¨¼å±€ã¯è¨¼æ˜Žæ›¸ã‚’ç„¡åŠ¹ã¨ã—ã¦åˆ©ç”¨è€…ã«çŸ¥ã‚‰ã›ã‚‹ã¹ãã§ã™ ã“ã®ã‚ˆã†ãªå ´åˆã«ã¯ X.509 ã§ã¯èªè¨¼å±€ãŒ CRL ã‚’å®šæœŸçš„ã«ç™ºè¡Œã—ã¦ è¨¼æ˜Žæ›¸ãŒ
ra1gawa 2014/04/14
RFC5280
ãƒªãƒ³ã‚¯
RFC5280 ã® 4.1.2.4. Issuer
ç½²åã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®æ¬¡ã«è¨˜è¼‰ã•ã‚Œã‚‹ã®ãŒèªè¨¼å±€ã®åå‰ã§ã™ Issuer ã¯ã€Œç™ºè¡Œè€…ã€ã¨è¨³ã—ã¾ã—ã‚‡ã† ã¤ã¾ã‚Šã€ãã®è¨¼æ˜Žæ›¸ã«ç½²åã—ã¦ç™ºè¡Œã—ã¦ã„ã‚‹ã®ã¯èª°ã‹? ã¨ã„ã†ã“ã¨ãŒæ›¸ã‹ã‚Œã¾ã™ ã“ã“ã¯ç©ºã§ã¯ã„ã‘ã¾ã›ã‚“ (MUST) åå‰ã®è¨˜è¿°æ–¹æ³•ã¯ X.501 ã«æ›¸ã„ã¦ã‚ã‚Šã¾ã™ X.500 ç•ªå°ã£ã¦ã®ã¯ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚·ã‚¹ãƒ†ãƒ ã£ã¦ã„ã†ä½æ‰€éŒ²ã®ä»•æ§˜ã‚’æ±ºã‚ã¦ã¾ã—ãŸ ã‚‚ã¡ã‚ã‚“ä½•å‡¦ã®èª°ã‹ã‚’æŒ‡ã—ç¤ºã™æ–¹æ³•ã‚‚æ±ºã‚ã¦ãªãã¦ã¯ã„ã‘ãªã„ã‚ã‘ã§ã™ãŒ ãã®æŒ‡å®šã®ä»•æ–¹ã‚’ distinguished name (DN) ã¨è¨€ã„ã¾ã™ åŒºåˆ¥ã§ãã‚‹åå‰ã¨ã„ã†ã“ã¨ã§ã™ã‹ã å…·ä½“çš„ã«ã¯å›½ãƒ»ä½æ‰€ãƒ»çµ„ç¹”åãƒ»åå‰ãªã©ã‚’éšŽå±¤ã¨ã—ã¦ä¸¦ã¹ã¦æ›¸ãã¾ã™ ã†ã ã†ã æ›¸ãã‚ˆã‚Šè¦‹ãŸæ–¹ãŒåˆ†ã‹ã‚Šæ˜“ã„ã§ã™ã ä¸‹ã‹ã‚‰ type -> value ã¨ã„ã†å½¢ã§éšŽå±¤ä¸‹ã£ã¦è¦‹ã¦ã„ãã¨ã€ countryName (å›½å) -> USorganizationName (çµ„ç¹”) -> VeriSi
ra1gawa 2014/04/14
RFC5280
ãƒªãƒ³ã‚¯
RFC 5280 ã® 4.2.1.3. Key Usage
Key Usage ã¯ã€Œã‚ãƒ¼ä½¿ç”¨æ³•ã€ è¨¼æ˜Žæ›¸ã«ç½²åã—ãŸèªè¨¼å±€ãŒ ãã®è¨¼æ˜Žæ›¸ã®å…¬é–‹éµã®ä½¿ç”¨æ–¹æ³•ã¨ã—ã¦èªã‚ã¦ã‚‹ç”¨é€”ã®ãƒªã‚¹ãƒˆã«ãªã‚Šã¾ã™ ç”¨é€”ã‚’åˆ¶é™ã—ãŸã„ã¨ãã«ã¯ã“ã®æ‹¡å¼µã‚’ä½¿ã„ã¾ã™ (ç„¡åˆ¶é™ãªã‚‰æ›¸ã‹ãªã„?) ASN.1 ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã¯ã“ã‚“ãªã‹ã‚“ã˜ id-ce-keyUsage OBJECT IDENTIFIER ::=Â { id-ce 15 } KeyUsage ::= BIT STRING { digitalSignatureÂ Â Â Â Â Â Â (0), nonRepudiationÂ Â Â Â Â Â Â Â Â (1), -- recent editions of X.509 have -- renamed this bit to contentCommitment keyEnciphermentÂ Â Â Â Â Â Â Â (2), dataEnciphermentÂ Â Â Â Â Â Â (3), keyAgreementÂ Â
ra1gawa 2014/04/14
RFC5280
ãƒªãƒ³ã‚¯
RFC 5280 ã® 3.1. X.509 Version 3 Certificate
X.509 ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 3 ã§å®šç¾©ã•ã‚Œã¦ã„ã‚‹é›»åè¨¼æ˜Žæ›¸ã«é–¢ã—ã¦æ¦‚èª¬ã•ã‚Œã¦ã„ã¾ã™ å†…å®¹ã¯ é›»åè¨¼æ˜Žæ›¸ã«é–¢ã—ã¦æ¦‚èª¬X.509 ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 3 ã¾ã§ã®æ´å²1. é›»åè¨¼æ˜Žæ›¸ã«é–¢ã—ã¦æ¦‚èª¬ å…¬é–‹éµæš—å·æ–¹å¼ã¨ã„ã†ã®ãŒã‚ã‚Šã¾ã—ã¦ ã€Œå…¬é–‹éµã€ã£ã¦ãƒ‡ãƒ¼ã‚¿ã§æš—å·åŒ–ã€å¯¾ã«ãªã‚‹ã€Œç§˜å¯†éµã€ã£ã¦ãƒ‡ãƒ¼ã‚¿ã§å¾©å·åŒ–ã—ã¾ã™ å…¬é–‹éµã‚’ä¸–é–“ã«å…¬é–‹ã—ã¡ã‚ƒã£ã¦çš†ã‹ã‚‰æš—å·åŒ–ã—ãŸãƒ‡ãƒ¼ã‚¿ã‚’é€ã£ã¦ã‚‚ã‚‰ãˆã‚‹ã˜ã‚ƒã‚“ æš—å·åŒ–ã ã‘ã§ãªãé›»åç½²åã‚‚ä½¿ãˆã‚‹ = PKI ã£ã¦ç´ æ•µ!! ã£ã¦ã„ã†è©±ã§ã—ãŸ æš—å·åŒ–ã—ãŸãƒ‡ãƒ¼ã‚¿ã‚’èª°ã‹ã«é€ã‚‹ã®ã«ã€é€ã‚‹ç›¸æ‰‹ãŒå…¬é–‹ã—ãŸå…¬é–‹éµã‚’ä½¿ã†ã‚ã‘ã§ã™ãŒ æžœãŸã—ã¦ãã®å…¬é–‹éµã¯æœ¬å½“ã«ç§ãŒé€ã‚ŠãŸã„ç›¸æ‰‹ã®å…¬é–‹éµã‹? ã¨ã„ã†ã®ã¯å¤§å•é¡Œã§ã™ ã‚‚ã—å½ã®å…¬é–‹éµã‚’æŽ´ã¾ã•ã‚Œã¦ã—ã¾ã£ãŸã‚‰ç›—è´ã®æœ«ã«ç§˜å¯†ã®ãƒ‡ãƒ¼ã‚¿ãŒæ¼ã‚Œã¡ã‚ƒã†ã— å…¨ç„¶çŸ¥ã‚‰ãªã„äººãŒç½²åã—ãŸæ–‡ç« ã‚’çŸ¥ã£ã¦ã‚‹äººã®ç½²åã—ãŸæ–‡ç« ã ã¨ä¿¡ã˜ã¡ã‚ƒã†ã‹ã‚‚ ãã“ã§ã€ãã®å…¬é–‹éµã¨å¯¾ã«ãªã‚‹ç§˜å¯†éµã‚’æŒã£ã¦ã„ã‚‹ã®ãŒä½•å‡¦
ra1gawa 2014/04/14
RFC5280
ãƒªãƒ³ã‚¯
NPOæ—¥æœ¬ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å”ä¼š|PKI Day 2009ï¼ï¼œæ§˜ã€…ãªåˆ†é‡Žã«å±•é–‹ã•ã‚Œã‚‹PKIã®æœ€æ–°å‹•å‘ï¼ž
æ±äº¬ã‚¦ã‚¤ãƒ¡ãƒ³ã‚ºãƒ—ãƒ©ã‚¶ãƒ›ãƒ¼ãƒ«ï¼ˆ246å¸ï¼‰ JRå±±æ‰‹ç·šãƒ»æ±æ€¥æ±æ¨ªç·šãƒ»äº¬çŽ‹äº•ã®é ç·šï¼šæ¸‹è°·é§…ä¸‹è»Šå¾’æ©12åˆ† åœ°ä¸‹é‰„éŠ€åº§ç·šãƒ»åŠè”µé–€ç·šãƒ»åƒä»£ç”°ç·šï¼šè¡¨å‚é“é§…ä¸‹è»Šå¾’æ©7åˆ† éƒ½ãƒã‚¹(æ¸‹88ç³»çµ±)ï¼šæ¸‹è°·é§…ã‹ã‚‰ãƒã‚¹4åˆ†é’å±±å¦é™¢å‰ãƒã‚¹åœä¸‹è»Šå¾’æ©2åˆ†
ra1gawa 2014/04/14
JNSA

PKIDay

RFC5280
ãƒªãƒ³ã‚¯
https://www.nic.ad.jp/ja/newsletter/No44/NL44_all.pdf
ra1gawa 2014/04/14
JPNIC

RFC5280
ãƒªãƒ³ã‚¯
repository
æ–°åž‹ã‚³ãƒãƒŠã‚¦ã‚¤ãƒ«ã‚¹æ„ŸæŸ“ç—‡å¯¾ç–ã¨ã—ã¦ã€æ”¿åºœã‹ã‚‰ä¼æ¥ã«å¯¾ã—ãƒ†ãƒ¬ãƒ¯ãƒ¼ã‚¯ã®ç©æ¥µå°Žå…¥ãŒè¦è«‹ã•ã‚Œã€ãƒªãƒ¢ãƒ¼ãƒˆä½œæ¥ãŒä¸€èˆ¬åŒ–ã™ã‚‹ä¸ã§ã€ç¤¾å†…æ‰‹ç¶šãã‚„å–å¼•æ›¸é¡žã®é›»ååŒ–ã€ã•ã‚‰ã«ã¯ãƒ†ãƒ¬ãƒ¯ãƒ¼ã‚¯ã§æ´»ç”¨ã™ã‚‹ãƒ„ãƒ¼ãƒ«ã®å®‰å…¨æ€§ç‰ã®èª²é¡ŒãŒæ”¹ã‚ã¦æµ®ãå½«ã‚Šã¨ãªã‚Šã¾ã—ãŸã€‚ é›»ååŒ–ã¯ã€å˜ã«æ™‚é–“ãƒ»å ´æ‰€ã®åˆ¶é™ã‚’ãªãã™ã ã‘ã§ãªãã€å„ç¨®ãƒ‡ãƒ¼ã‚¿ãã®ã‚‚ã®ã®æ´»ç”¨ã«ã‚ˆã‚ŠåŠ¹çŽ‡çš„ãƒ»åŠ¹æžœçš„ãªåƒãæ–¹ã‚’å¯èƒ½ã¨ã—ã¾ã™ã€‚ãã®ä¸€æ–¹ã§ã€é›»åãƒ‡ãƒ¼ã‚¿ã¨ãªã£ãŸæƒ…å ±ã¯ã€ãã®çœŸæ£æ€§ãƒ»æ£å½“æ€§ã‚’æ‹…ä¿ã™ã‚‹ã“ã¨ãŒã“ã‚Œã¾ã§ä»¥ä¸Šã«é‡è¦ã¨ãªã‚Šã¾ã™ã€‚ JIPDECã¯ã€ä¼æ¥ã«ãŠã‘ã‚‹å¥‘ç´„æ‰‹ç¶šãã«åŠ ãˆã¦ã€å»ºç¯‰è¨è¨ˆå›³æ›¸ã€ä¸å‹•ç”£é‘‘å®šè©•ä¾¡æ›¸ã€å–ç· å½¹ä¼šè°äº‹éŒ²ç‰ã®é›»ååŒ–ã‚’æ”¯æ´ã—ã¦ã„ã¾ã™ã€‚ JIPDECã¯ã€é›»åå¥‘ç´„ã‚’ã¯ã˜ã‚ã¨ã—ãŸé›»åæ–‡æ›¸ç‰ã®æ™®åŠã‚’å›³ã‚‹ãŸã‚ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã«ãŠã‘ã‚‹äººãƒ»çµ„ç¹”ãƒ»ãƒ‡ãƒ¼ã‚¿ç‰ã®æ”¹ã–ã‚“ã‚„é€ä¿¡å…ƒã®ãªã‚Šã™ã¾ã—ç‰ã‚’é˜²æ¢ã™ã‚‹ä»•çµ„ã¿ï¼ˆãƒˆãƒ©ã‚¹ãƒˆã‚µãƒ¼ãƒ“ã‚¹ï¼‰ã®å®Ÿç¾ã«å–ã‚Šçµ„ã‚“ã§ãã¾ã—ãŸã€‚ã™ãªã‚ã¡ã€é›»åç½²åã‚’ã¯ã˜
ra1gawa 2011/08/04
ã•ã¦ã€ã©ã†ãªã‚‹ã‹ï¼

JCAN

JIPDEC
ãƒªãƒ³ã‚¯
1