[B! OpenSSL] rin51ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

rin51 id:rin51

OpenSSLã«é–¢ã™ã‚‹rin51ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (25)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Logjam Attackã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ - piyolog
Diffie-Hellmanï¼ˆDHï¼‰éµäº¤æ›ã®è„†å¼±æ€§ã‚’ä½¿ã£ãŸTLSãƒ—ãƒãƒˆã‚³ãƒ«ã«å¯¾ã™ã‚‹æ”»æ’ƒã€ŒLogjam Attackã€ã«é–¢ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¾ã™ã€‚ è„†å¼±æ€§æ¦‚è¦ è„†å¼±æ€§ã®æ¦‚è¦æƒ…å ±ã¯æ¬¡ã®é€šã‚Šã€‚ æ„›ç§° Logjam Attack (æ”»æ’ƒæ‰‹æ³•ã®æ„›ç§°) Webã‚µã‚¤ãƒˆ https://weakdh.org/ ã‚¢ã‚¤ã‚³ãƒ³ ç„¡ã— CVE CVE-2015-1716(Microsoft) ç™ºè¦‹è€…å æ¬¡ã®åˆåŒãƒãƒ¼ãƒ ã«ã‚ˆã‚Šç™ºè¦‹ ãƒ•ãƒ©ãƒ³ã‚¹å›½ç«‹ç§‘å¦ç ”ç©¶ã‚»ãƒ³ã‚¿ãƒ¼(CNRS) ãƒ•ãƒ©ãƒ³ã‚¹å›½ç«‹æƒ…å ±å¦è‡ªå‹•åˆ¶å¾¡ç ”ç©¶æ‰€(INRIA) Microsoft Research ã‚¸ãƒ§ãƒ³ã‚ºãƒ›ãƒ—ã‚ãƒ³ã‚¹å¤§å¦ ãƒŸã‚·ã‚¬ãƒ³å¤§å¦ ãƒšãƒ³ã‚·ãƒ«ãƒãƒ‹ã‚¢å¤§å¦ Logjam Attackã®æ¦‚è¦ Diffie-Hellmanï¼ˆDHï¼‰éµäº¤æ›ã®è„†å¼±æ€§ã€‚ã“ã®è„†å¼±æ€§ã‚’ç”¨ã„ã¦ä¸é–“è€…æ”»æ’ƒãŒè¡Œã‚ã‚Œã¦ã„ã‚‹ç’°å¢ƒã«ãŠã„ã¦ã€TLSæŽ¥ç¶šã‚’512bitã®è¼¸å‡ºã‚°ãƒ¬ãƒ¼ãƒ‰æš—å·ã«ãƒ€ã‚¦ãƒ³ã‚°ãƒ¬ãƒ¼ãƒ‰ã—ã€é€šä¿¡çµŒ
rin51 2022/07/15
OpenSSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Let's Encryptã§ECDSAã‹ã¤ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰ã‚’å«ã‚€ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹ - Qiita
å‰ææ¡ä»¶ DNSã‚µãƒ¼ãƒ(BIND9)ãŒå°Žå…¥æ¸ˆã¿ ãã®ä»–ã®DNSã‚µãƒ¼ãƒã‚„Route 53ãªã©ã¯ç’°å¢ƒã«å¿œã˜ã¦æ›¸ãæ›ãˆã¦ãã ã•ã„ã€‚ ç™ºè¡Œå…ˆã®ãƒ‰ãƒ¡ã‚¤ãƒ³åãŒ *.example.jp, example.jp éµç”Ÿæˆã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒ ECDSA P_256 ç”Ÿæˆã•ã‚Œã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã¯ä¸‹è¨˜ã®é€šã‚Š privkey.pem (ç§˜å¯†éµ) cert.pem (ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸) chain.pem (ä¸é–“è¨¼æ˜Žæ›¸) fullchain.pem (ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸+ä¸é–“è¨¼æ˜Žæ›¸) csr.pem (è¨¼æ˜Žæ›¸ç½²åè¦æ±‚)[ä¸é–“ãƒ•ã‚¡ã‚¤ãƒ«] æ¤œè¨¼ç’°å¢ƒ $ uname -sr Linux 4.18.0-193.6.3.el8_2.x86_64 $ cat /etc/redhat-release CentOS Linux release 8.2.2004 (Core) $ openssl version OpenSSL 1.1.1c FIPS 2
rin51 2020/12/09
DNS

BIND

openssl

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
Missing definitions in Headerfile dh.h (openssl 1.1.0f)
rin51 2020/08/17
opaque structure ãªã‚“ã¦åˆã‚ã¦çŸ¥ã£ãŸã®ã ã‚

OpenSSL

æ§‹é€ ä½“
ãƒªãƒ³ã‚¯
OpenSSL/GnuTLS ã§ã® CSR ã®ä½œã‚Šæ–¹ - @znz blog
ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ã‚‚ã‚‰ã†æ™‚ãªã©ã«æ¯Žå›žèª¿ã¹ã¤ã¤ CSR ã‚’ä½œæˆã—ã¦ã„ã‚‹ã®ã§ã€ GnuTLS ã¨ OpenSSL ã‚’ä½¿ã£ãŸæ–¹æ³•ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« OpenSSL ã®æ–¹ã¯å…¥ã£ã¦ã„ã‚‹ã“ã¨ãŒå¤šã„ã¨æ€ã„ã¾ã™ãŒã€å…¥ã£ã¦ã„ãªã‘ã‚Œã° openssl ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ã„ã‚Œã¦ãŠãã¾ã™ã€‚ GnuTLS ã®æ–¹ã¯ Debian ã‚„ Ubuntu ã®å ´åˆã¯ gnutls-bin ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã« gnutls-cli ã‚³ãƒžãƒ³ãƒ‰ãªã©ãŒå…¥ã£ã¦ã„ã¾ã™ã€‚ RHEL ãªã©ã§ã¯ gnutls-utils ã¨ã„ã†ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«å…¥ã£ã¦ã„ã‚‹ã‚‰ã—ã„ã§ã™ã€‚ certtool ã‚³ãƒžãƒ³ãƒ‰ certtool ã‚³ãƒžãƒ³ãƒ‰ã¯ Mac OS X ã«ã‚‚ã‚ã‚Šã¾ã™ãŒã€ GnuTLS ã®ã‚‚ã®ã¨ã¯åˆ¥ç‰©ã§ã™ã€‚ ã“ã“ã§èª¬æ˜Žã—ã¦ã„ã‚‹ã®ã¯ GnuTLS ã® certtool ã‚³ãƒžãƒ³ãƒ‰ã§ã™ã€‚ ç§˜å¯†éµä½œæˆ ç§˜å¯†éµã®ç”Ÿæˆã¯ãƒ©ãƒ³ãƒ€ãƒ ãªæƒ…å ±ã‚’å…ƒã«ç”Ÿæˆã™ã‚‹ã®ã§ã€
rin51 2018/11/07
OpenSSL

GnuTLS

è¨¼æ˜Žæ›¸

ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’opensslã§ä½œã‚‹ï¼ˆè©³ç´°ç‰ˆï¼‰ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
å‰å›žã®opensslã§RSAæš—å·ã¨éŠã¶ã§RSAæš—å·ã‚„ç§˜å¯†éµã«ã¤ã„ã¦ä¸èº«ã‚’è‰²ã€…ã¨ã„ã˜ã£ã¦ã¿ãŸã€‚ç¶šã„ã¦ä»Šå›žã¯ã€Apacheã§ä½¿ã†ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã£ã¦ã¿ã‚‹ã€‚ ç´°ã‹ã„ã“ã¨ã¯ã„ã„ã‹ã‚‰ã€ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ã‚³ãƒžãƒ³ãƒ‰ã ã‘çŸ¥ã‚ŠãŸã„ ãŠæ€¥ãŽã®æ–¹ã¯ã€ä»¥ä¸‹3ã¤ã ã‘ã‚„ã‚Œã°è‰¯ã„ã€‚ã“ã‚Œã§10å¹´é–“(3650æ—¥)æœ‰åŠ¹ãªã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ãŒã§ãã‚ãŒã‚‹ã€‚ $ openssl genrsa 2048 > server.key $ openssl req -new -key server.key > server.csr $ openssl x509 -days 3650 -req -signkey server.key < server.csr > server.crtã§ãã‚ãŒã£ãŸserver.crtã¨server.keyã‚’ã€ä¾‹ãˆã°/etc/httpd/conf/ é…ä¸‹ã®ssl.crt/ ã¨ ssl.key/ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«è¨ç½®
rin51 2018/09/13
OpenSSL

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
OpenSSL error handling
rin51 2018/09/07
openssl

ã‚¨ãƒ©ãƒ¼
ãƒªãƒ³ã‚¯
Handling SSL_shutdown correctly
rin51 2018/09/07
é—‡ã«é£²ã¾ã‚Œã‚ˆ > openssl is a bit of a dark art.

OpenSSL
ãƒªãƒ³ã‚¯
JVNVU#93502675: OpenSSL ã«è¤‡æ•°ã®è„†å¼±æ€§
2018å¹´3æœˆ27æ—¥ã€OpenSSL Project ã‚ˆã‚Š OpenSSL Security Advisory [27 Mar 2018] ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªã«ã‚ˆã‚‹ã¨ã€æ¬¡ã«æŒ™ã’ã‚‹è„†å¼±æ€§ãŒä¿®æ£ã•ã‚Œã€ä¿®æ£ç‰ˆã® OpenSSL 1.0.2oã€1.1.0h ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ã¾ã™ã€‚ ãªãŠã€CVE-2017-3738 ã«ã¤ã„ã¦ã¯ä»¥å‰ã® OpenSSL security advisory ã§æƒ…å ±å…¬é–‹ã•ã‚Œã€OpenSSL 1.0.2 å‘ã‘ã®ä¿®æ£ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¦ã„ã¾ã—ãŸãŒã€ä»Šå›ž OpenSSL 1.1.0 å‘ã‘ã®ä¿®æ£ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚‚ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã¾ã—ãŸã€‚ æ·±åˆ»åº¦ - ä¸ (Severity: Moderate) Incorrect CRYPTO_memcmp on HP-UX PA-RISC (CVE-2018-0733) Constructed ASN.1 types with a r
rin51 2018/09/06
security

OpenSSL

SSL

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
SSL/TLSï¼ˆSSL3.0ï½žTLS1.2ï¼‰ã®ãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯ã‚’å¾©ç¿’ã™ã‚‹
ä»¥ä¸‹é †ã‚’è¿½ã£ã¦èª¬æ˜Žã—ã¾ã™ã€‚ HelloRequest ç›¸æ‰‹ã«ClientHelloã‚’é€ä¿¡ã™ã‚‹ã‚ˆã†ä¿ƒã™ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§ã™ã€‚é€ä¿¡ã—ãªãã¦ã‚‚æ§‹ã„ã¾ã›ã‚“ã€‚ ClientHello ServerHello ClientHelloã¨ServerHelloã¯ã€TLSã®ã²ã¨ã¤ã‚ã®è‚ã§ã™ã€‚å¾Œã»ã©èª¬æ˜Žã—ã¾ã™ã€‚ ServerCertificate ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’é€ä¿¡ã—ã¾ã™ã€‚ä¸é–“CAè¨¼æ˜Žæ›¸ãªã©ã‚‚ã€ã“ã“ã§é€ã‚Šã¾ã™ã€‚ ServerKeyExchange éµäº¤æ›ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãã®ï¼‘ã§ã™ã€‚éµäº¤æ›ã¯TLSã®ãµãŸã¤ã‚ã®è‚ã§ã€ã“ã‚Œã‚‚å¾Œã»ã©èª¬æ˜Žã—ã¾ã™ã€‚ CertificateRequest ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’é€ä¿¡ã™ã‚‹ã‚ˆã†ã«ä¿ƒã™ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã§ã™ã€‚ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ãŒå¿…è¦ãªå ´åˆã«é€ä¿¡ã—ã¾ã™ã€‚ä½•ãã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã£ã¦ï¼Ÿã¨æ€ã£ãŸæ–¹ã¯èªã¿é£›ã°ã—ã¦æ§‹ã„ã¾ã›ã‚“ã€‚ ServerHelloDone ã‚µãƒ¼ãƒã‹ã‚‰ã®é€ä¿¡çµ‚äº†ã‚’ç¤ºã™ã‚¨ãƒ³ãƒ‰ãƒžãƒ¼ã‚¯ã§ã™ã€‚ Cli
rin51 2018/08/28
TLS
ãƒªãƒ³ã‚¯
using SSL without certificate
rin51 2018/08/27
ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ä½¿ã‚ãªã„(ãã®å ´åˆã¯åŒ¿åæš—å·åŒ–ã‚’ä½¿ã†)ã“ã¨ã¯å¯èƒ½ã ãŒä¸é–“è€…æ”»æ’ƒã‚’å—ã‘ã‚‹ãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã®ã§ã€éžæŽ¨å¥¨

OpenSSL

SSL
ãƒªãƒ³ã‚¯
Is it safe to use HTTPS without SSL certificates for my own domains?
rin51 2018/08/27
ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ä½¿ã‚ãªã„(ãã®å ´åˆã¯åŒ¿åæš—å·åŒ–ã‚’ä½¿ã†)ã“ã¨ã¯å¯èƒ½ã ãŒä¸é–“è€…æ”»æ’ƒã‚’å—ã‘ã‚‹ãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã®ã§ã€éžæŽ¨å¥¨

OpenSSL

SSL
ãƒªãƒ³ã‚¯
In which cases can an SSL server omit sending the certificate?
rin51 2018/08/27
ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ä½¿ã‚ãªã„(ãã®å ´åˆã¯åŒ¿åæš—å·åŒ–ã‚’ä½¿ã†)ã“ã¨ã¯å¯èƒ½ã ãŒä¸é–“è€…æ”»æ’ƒã‚’å—ã‘ã‚‹ãƒªã‚¹ã‚¯ãŒã‚ã‚‹ã®ã§ã€éžæŽ¨å¥¨

OpenSSL

SSL
ãƒªãƒ³ã‚¯
OpenSSLãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’ä½¿ã£ã¦ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°(1) - å†å¸°ã®åå¾©blog
ã«ã‚ã‹çŸ¥è˜ SSLâ€¦â€¦Secure Socket Layerã€‚SSLv2ã¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®æ¬ é™¥ãŒè¤‡æ•°è¦‹ã¤ã‹ã£ã¦ã„ã‚‹ã®ã§ä½¿ã†ã¹ãã§ã¯ãªã„ã€‚ç¾åœ¨ä½¿ã‚ã‚Œã¦ã„ã‚‹ã®ã¯SSLv3(SSL3.0)ã€‚ TLSâ€¦â€¦Transport Layer Securityã€‚IETFãŒæ¨™æº–åŒ–ã—ãŸè¦æ ¼ã€‚SSLã¨ã„ã†åå‰ã¯æ„å›³çš„ã«é¿ã‘ãŸã¿ãŸã„ã€‚SSLã¨ã®äº’æ›æ€§ã¯ãªã„ã€‚ç¾åœ¨ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯1.0(ã ã‘ã©ãƒ—ãƒãƒˆã‚³ãƒ«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®å€¤ã¯3.1)ã€‚ SSL/TLSã§ã®ã€Œã‚»ãƒƒã‚·ãƒ§ãƒ³ã€ã¨ã€Œã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã€ SSL/TLSã«ã¯ã€Œã‚»ãƒƒã‚·ãƒ§ãƒ³ã€ã¨ã€Œã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã€ã¨ã„ã†ãµãŸã¤ã®ç”¨èªžãŒã‚ã‚‹ã€‚ ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã¯ã€TCPã®æŽ¥ç¶šã«å¯¾å¿œã™ã‚‹ã€‚ã‚½ã‚±ãƒƒãƒˆæŽ¥ç¶šã²ã¨ã¤ã«å¯¾ã—ã¦ã²ã¨ã¤ã®ã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã‚µãƒ¼ãƒã®å…±æœ‰ç§˜å¯†æƒ…å ±(master_secretã¨å‘¼ã°ã‚Œã‚‹)ã²ã¨ã¤ã«å¯¾ã—ã¦ã€ã²ã¨ã¤ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒå¯¾å¿œã™ã‚‹ã€‚ master_secretã‚’å…±æœ‰ã™ã‚‹ãŸã‚ã®è¨ˆç®—ã‚³ã‚¹ãƒˆ
rin51 2018/07/27
OpenSSL

ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°
ãƒªãƒ³ã‚¯
Simple TLS Server - OpenSSLWiki
rin51 2018/07/27
ã‚µãƒ¼ãƒãƒ¼ã®ä¾‹

OpenSSL
ãƒªãƒ³ã‚¯
OpenSSL for 64-bit Windows and "no shared cipher"
rin51 2018/07/27
SSL_newã®å‰ã«è¨¼æ˜Žæ›¸ã¨ç§˜å¯†éµã‚’èªã¿è¾¼ã¾ãªã„ã¨ã‚¨ãƒ©ãƒ¼ã«ãªã‚‹

OpenSSL
ãƒªãƒ³ã‚¯
Using TLS1.3 with OpenSSL
Feb 8, 2018 Note: This is an outdated version of this blog post. This information is now maintained in a wiki page. See here for the latest version. The forthcoming OpenSSL 1.1.1 release will include support for TLSv1.3. The new release will be binary and API compatible with OpenSSL 1.1.0. In theory, if your application supports OpenSSL 1.1.0, then all you need to do to upgrade is to drop in the n
rin51 2018/07/20
TLSv1.3

TLS

OpenSSL
ãƒªãƒ³ã‚¯
OpenSSLã‚’SSL/TLSã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã—ã¦ä½¿ã£ã¦ã¿ã‚‹
$ openssl s_client -connect servername:443 ã§ SSL æŽ¥ç¶š HTTP ã®æŽ¥ç¶šã‚’ç¢ºèªã—ãŸãã¦ telnet ã‚’ä½¿ã†ã“ã¨ãŒã‚ã‚‹ã€‚ ãŸã¨ãˆã°ã€ telnet ã§ http://www.google.com:80/ ã« GET ã™ã‚‹ã«ã¯ä»¥ä¸‹ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã€‚ $ telnet www.google.com 80 Trying 173.194.117.145... Connected to www.google.com. Escape character is '^]'. GET / HTTP/1.1 host: www.google.com HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=UTF-8 Location: http://www.goog
rin51 2018/07/17
TLS

SSL

openssl
ãƒªãƒ³ã‚¯
SSL_set_fd - è»Šè¼ªã®xç™ºæ˜Ž ~B.G's Blog~
SSL_set_fdã§ã€SSLæŽ¥ç¶šæƒ…å ±ã¨ã‚½ã‚±ãƒƒãƒˆãƒ•ã‚¡ã‚¤ãƒ«ãƒ‡ã‚£ã‚¹ã‚¯ãƒªãƒ—ã‚¿ã‚’ç´ã¥ã‘ã‚‹ã“ã¨ã§ã€ãã®ã‚½ã‚±ãƒƒãƒˆé€šä¿¡ã‚’SSLé€šä¿¡ã¨ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ Manual:SSL set fd(3) - OpenSSLWiki SSL_set_fd.cã§ã€ "www.google.co.jp"ã«ãƒãƒ¼ãƒˆ443ã§æŽ¥ç¶šã™ã‚‹ã‚½ã‚±ãƒƒãƒˆsocã‚’ä½œæˆã—ã€SSL_set_fdã§sslã¨socã‚’ç´ã¥ã‘ã‚‹ã€‚ 1ãŒè¿”ã£ã¦ããŸã‚‰æˆåŠŸã€‚ $ vi SSL_set_fd.c $ gcc -o SSL_set_fd SSL_set_fd.c -lssl -lcrypto $ ./SSL_set_fd connect success. ctx = 02416fc0 ssl = 02417bf0 SSL_set_fd success! $ã“ã‚Œã§sslã¨socã‚’ç´ã¥ã‘ã‚‹ã“ã¨ã¯ã§ããŸã€‚ Sample/openssl/SSL_set_fd/SSL_
rin51 2018/07/17
OpenSSL

SSL_set_fd
ãƒªãƒ³ã‚¯
[openssl-users] make test failure OpenSSL 1.0.2o
rin51 2018/07/10
1.0.2ç³»ã§ã®make testã¯å¿…ãšfailedã«ãªã‚‹ã®ã§æ°—ã«ã™ã‚“ãªã¨ã®ã“ã¨

OpenSSL
ãƒªãƒ³ã‚¯
RSAéµã€è¨¼æ˜Žæ›¸ã®ãƒ•ã‚¡ã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«ã¤ã„ã¦ - Qiita
RSAã®å…¬é–‹éµæš—å·æŠ€è¡“ã‚’åˆ©ç”¨ã™ã‚‹ãŸã‚ã«ã¯ã€éµã‚„è¨¼æ˜Žæ›¸ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ‰±ã†å¿…è¦ãŒã‚ã‚‹ãŸã‚ã€ãã®ãƒ•ã‚¡ã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«ã¤ã„ã¦ç†è§£ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ å®Ÿéš›ã€ã„ã‚ã‚“ãªæ‹¡å¼µåãŒç™»å ´ã™ã‚‹ã®ã§ã€ãã‚Œãžã‚Œã®æ„å‘³ã‚’ç†è§£ã—ã¦ã„ãªã„ã¨ã™ãã«ã‚ã‘ãŒã‚ã‹ã‚‰ãªããªã‚Šã¾ã™ã€‚ãã‚“ãªã¨ãã®ãŸã‚ã«å‚™å¿˜éŒ²ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µåã®æ³¨æ„ç‚¹ .DERã¨ .PEMã¨ã„ã†æ‹¡å¼µåã¯éµã®ä¸èº«ã˜ã‚ƒãªãã¦ã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’è¡¨ã—ã¦ã„ã‚‹ ãƒ‡ã‚¸ã‚¿ãƒ«æš—å·åŒ–éµã‚„ãƒ‡ã‚¸ã‚¿ãƒ«è¨¼æ˜Žæ›¸ã¯ãƒã‚¤ãƒŠãƒªãƒ‡ãƒ¼ã‚¿ãªã®ã§ã™ãŒã€MD5ã®ãƒãƒƒã‚·ãƒ¥å€¤ã®ã‚ˆã†ãªå˜ãªã‚‹ å€¤ ã§ã¯ãªãã€ãƒ‡ãƒ¼ã‚¿æ§‹é€ ã‚’ã‚‚ã£ã¦ã„ã¾ã™ã€‚.DERã‚„ .PEMã¯ãã®ãƒ‡ãƒ¼ã‚¿æ§‹é€ ã‚’ã©ã†ã„ã†ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã—ã¦ã„ã‚‹ã‹ã‚’è¡¨ã—ã¦ã„ã¾ã™ã€‚ãã®ãŸã‚ã€.DERã‚„.PEMã¨ã„ã†æ‹¡å¼µåã‹ã‚‰ãã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒä½•ã‚’è¡¨ã—ã¦ã„ã‚‹ã®ã‹ã¯ã‚ã‹ã‚Šã¾ã›ã‚“ã€‚æš—å·åŒ–éµã®å ´åˆã‚‚ã‚ã‚‹ã—ã€è¨¼æ˜Žæ›¸ã®å ´åˆã‚‚ã‚ã‚Šã¾ã™ã€‚ .DER éµã‚„è¨¼æ˜Žæ›¸ã‚’AS
rin51 2018/07/10
è¨¼æ˜Žæ›¸

SSL

OpenSSL

certificate
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸