[B! openssl] toshi3221ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

toshi3221 id:toshi3221

opensslã«é–¢ã™ã‚‹toshi3221ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’opensslã§ä½œã‚‹ï¼ˆè©³ç´°ç‰ˆï¼‰ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
å‰å›žã®opensslã§RSAæš—å·ã¨éŠã¶ã§RSAæš—å·ã‚„ç§˜å¯†éµã«ã¤ã„ã¦ä¸èº«ã‚’è‰²ã€…ã¨ã„ã˜ã£ã¦ã¿ãŸã€‚ç¶šã„ã¦ä»Šå›žã¯ã€Apacheã§ä½¿ã†ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã£ã¦ã¿ã‚‹ã€‚ ç´°ã‹ã„ã“ã¨ã¯ã„ã„ã‹ã‚‰ã€ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ã‚³ãƒžãƒ³ãƒ‰ã ã‘çŸ¥ã‚ŠãŸã„ ãŠæ€¥ãŽã®æ–¹ã¯ã€ä»¥ä¸‹3ã¤ã ã‘ã‚„ã‚Œã°è‰¯ã„ã€‚ã“ã‚Œã§10å¹´é–“(3650æ—¥)æœ‰åŠ¹ãªã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ãŒã§ãã‚ãŒã‚‹ã€‚ $ openssl genrsa 2048 > server.key $ openssl req -new -key server.key > server.csr $ openssl x509 -days 3650 -req -signkey server.key < server.csr > server.crtã§ãã‚ãŒã£ãŸserver.crtã¨server.keyã‚’ã€ä¾‹ãˆã°/etc/httpd/conf/ é…ä¸‹ã®ssl.crt/ ã¨ ssl.key/ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«è¨ç½®
toshi3221 2014/08/25
httpd

ssl

è¨¼æ˜Žæ›¸

ã‚µãƒ¼ãƒ

server

openssl

apache
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/04/08/20140407massive-security-bug-in-openssl-could-effect-a-huge-chunk-of-the-internet/
toshi3221 2014/04/08
openssl

apache

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL

ã‚µãƒ¼ãƒ

ãƒ‹ãƒ¥ãƒ¼ã‚¹

security
ãƒªãƒ³ã‚¯
RVM: Ruby Version Manager - Please use 'rvm autolibs enable'
RVM is maintained by community of volunteers, report issues to RVM issues tracker. RVM Github organization. Love RVM? Help us maintain RVM, a donation can help with it. Want to help in other way, want to be a sponsor? Michal Papis âˆžRVM Packages This functionality has been deprecated by autolibs which is now enabled by default, however if you still need it - it is there. âˆžInstalling from source In
toshi3221 2012/08/26
Linux Mintã§opensslã§bundle installãŒã“ã‘ãŸã¨ãã«rvm pkg install opensslã™ã‚‹ã“ã¨ã§è§£æ±ºã§ããŸ

openssl

rvm

Ruby
ãƒªãƒ³ã‚¯
Webã‚µãƒ¼ãƒãƒ¼é–“é€šä¿¡å†…å®¹æš—å·åŒ–(Apache+mod_SSL) - CentOSã§è‡ªå®…ã‚µãƒ¼ãƒãƒ¼æ§‹ç¯‰
ãƒ¦ãƒ¼ã‚¶ãƒ¼åã‚„ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ç‰ã®æ©Ÿå¯†æƒ…å ±ã‚’Webãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰å…¥åŠ›ã™ã‚‹å ´åˆã€ç›—è´ã•ã‚Œã‚‹æã‚ŒãŒã‚ã‚‹ãŸã‚ã€Webã‚µãƒ¼ãƒãƒ¼é–“ã®é€šä¿¡å†…å®¹ã‚’æš—å·åŒ–ã™ã‚‹ã€‚ ã“ã“ã§ã¯ã€Webã‚µãƒ¼ãƒãƒ¼ã«mod_sslã‚’å°Žå…¥ã—ã¦ã€URLã‚’http://ï½žã§ã¯ãªãã€https://ï½žã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€Webã‚µãƒ¼ãƒãƒ¼é–“ã®é€šä¿¡å†…å®¹ã‚’æš—å·åŒ–ã™ã‚‹ã‚ˆã†ã«ã™ã‚‹ã€‚ ãªãŠã€Webã‚µãƒ¼ãƒãƒ¼ã¨ã®é€šä¿¡å†…å®¹ã‚’æš—å·åŒ–ã™ã‚‹ã«ã¯ã€ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹å¿…è¦ãŒã‚ã‚‹ãŒã€ã“ã“ã§ã¯ã€è‡ªä½œã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦å„ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã‚¤ãƒ³ãƒãƒ¼ãƒˆã™ã‚‹ã€‚ â€»ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’å„ã‚¯ãƒ©ã‚¤ãƒ³ãƒˆã¸ã‚¤ãƒ³ãƒãƒ¼ãƒˆã—ãªãã¦ã‚‚æš—å·åŒ–é€šä¿¡ã¯è¡Œãˆã‚‹ãŒã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒé€šä¿¡ã™ã‚‹ãŸã³ï¼ˆWebãƒ–ãƒ©ã‚¦ã‚¶èµ·å‹•æ¯Žï¼‰ã«ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®è¦å‘ŠãŒè¡¨ç¤ºã•ã‚Œã¦ã—ã¾ã† [root@centos ~]# cd /etc/pki/tls/certs/ã€€â†ã€€ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªç§»å‹• [root@centos certs]# sed -i
toshi3221 2011/01/20
VMwareã§èµ·å‹•ã—ãŸã‚²ã‚¹ãƒˆOSã®CentOSã§hostsã§å®šç¾©ã—ãŸãƒ‰ãƒ¡ã‚¤ãƒ³åã«ã¦ã‚ãƒ¼ã‚’ä½œã£ã¦ç«‹ã¡ä¸ŠãŒã‚‹ã¨ã“ã‚ã¾ã§æˆåŠŸ

centos

mod_ssl

openssl

Apache

CentOS

ã‚µãƒ¼ãƒãƒ¼

SSL
ãƒªãƒ³ã‚¯
Apache SSL
ã“ã®ã‚µã‚¤ãƒˆã¯ã€ Apache/2.0.48 (Win32) mod_ssl/2.0.48 OpenSSL/0.9.7c ã‚’ç¨¼å‹•ã•ã›ã‚‹ãŸã‚è‡ªåˆ†ã§è¡Œã£ãŸæ“ä½œã‚’è§£èª¬ã™ã‚‹ã‚‚ã®ã§ã™ã€‚ ã‚¢ã‚¯ã‚»ã‚¹ãŒå¤šãã€å¤šãã®æ–¹ãŒæƒ…å ±ã‚’å¿…è¦ã¨ã—ã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ ã›ã£ã‹ããªã‚‰æƒ…å ±å…±æœ‰ã‚’ã—ãŸã‚‰ã‚ˆã„ãªã¨æ„Ÿã˜ã€æŽ²ç¤ºæ¿ã‚’ä»˜ã‘ã¦ã¿ã¾ã—ãŸã€‚ ã©ã†ãžã”åˆ©ç”¨ãã ã•ã„ã€‚ ä»Šã¾ã§ã®æŽ²ç¤ºæ¿ã€ASAHIãƒãƒƒãƒˆã®ä¼šå“¡ç”¨æŽ²ç¤ºæ¿ã§ã—ãŸã€‚ åˆ¶ç´„ãŒã‚ã£ã¦èª°ã§ã‚‚ãŒæ›¸ãè¾¼ã¿å‡ºæ¥ãªã‹ã£ãŸã‚ˆã†ã§ã™ã€‚ ç‹¬è‡ªæŽ²ç¤ºæ¿ã¨ã—ã¾ã—ãŸã®ã§ã€ã”åˆ©ç”¨ãã ã•ã„ã€‚ æŽ²ç¤ºæ¿ ã“ã®ã‚µã‚¤ãƒˆã®å„ç¨®è¨å®šã‚’è¡Œã†ãŸã‚ã€ç§ã¯ãƒ‘ã‚½ã‚³ãƒ³ãŠã‚„ã˜æ§˜ã®ã‚µã‚¤ãƒˆ http://www.aconus.com/~oyaji/(2006/01/12)ãƒªãƒ³ã‚¯åˆ‡ã‚Œã‚’ä¿®æ£ ã‚’å¤§å¤‰å‚è€ƒã«ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ ã‚ˆã‚Šè©³ã—ã„è§£èª¬ã‚’ã”è¦§ã«ãªã‚ŠãŸã„æ–¹ã¯ã€ã©ã†ãžã”è¦§ãã ã•ã„ã€‚ ã¾ãŸã€Apacheãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã®çš†æ§˜ã«ã‚‚æƒ…å ±ã‚’é ‚ãã¾ã—ãŸ
toshi3221 2011/01/19
openssl

install

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

Apache

SSLè¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
ï¼ ITï¼šApacheã§SSLã‚’ä½¿ã†ã«ã¯
ã“ã“ã§ã¯ã€LANå†…ãªã©ç‰¹å®šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼å‘ã‘ã«Webã‚µãƒ¼ãƒã‚’å…¬é–‹ã™ã‚‹ã“ã¨ã‚’å‰æã«ã€SSLã‚’ä½¿ç”¨ã™ã‚‹æ–¹æ³•ã‚’èª¬æ˜Žã™ã‚‹ï¼ˆæ³¨ï¼‰ã€‚ãªãŠã€ä»¥ä¸‹ã®èª¬æ˜Žã¯Fedora Core 3ã‚’å‰æã¨ã—ã¦ã„ã‚‹ã€‚ SSLã¯ã€Apacheã®ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ï¼ˆä¾‹ãˆã°httpd-2.0.52-3.1ï¼‰ã¨åŒã˜ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®mod_sslãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ï¼ˆåŒmod_ssl-2.0.52-3.1ï¼‰ãŒå¿…è¦ã¨ãªã‚‹ã€‚mod_sslã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹ã¨ã€/etc/httpd/conf.d/ssl.confã¨ã„ã†è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ãŒç”Ÿæˆã•ã‚Œã‚‹ã€‚ã“ã®ãƒ•ã‚¡ã‚¤ãƒ«ã¯ã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆçŠ¶æ…‹ã§ã‚‚å¿…è¦ãªè¨å®šãŒã²ã¨ã¨ãŠã‚Šè¡Œã‚ã‚Œã¦ã„ã‚‹ãŸã‚ã€ç‰¹ã«å¤‰æ›´ã™ã‚‹å¿…è¦ã¯ãªã„ã€‚ãªãŠã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ã€ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯/etc/httpd/conf/ssl.crt/server.crtã«ã€ã‚µãƒ¼ãƒç”¨ã®ç§˜å¯†éµã¯/etc/httpd/conf/ssl.key/server.keyã«ãªã£ã¦ã„ã‚‹ã€‚ SSLã‚’ä½¿ç”¨ã™ã‚‹ã«
toshi3221 2011/01/19
SSL

openssl

mod_ssl

è¨¼æ˜Žæ›¸

apache

ã‚µãƒ¼ãƒ
ãƒªãƒ³ã‚¯
apache+mod_sslã§SSL
SHA2ã®è¨¼æ˜Žæ›¸ä½œæˆã«ã¤ã„ã¦ 2015.10.10è¿½è¨˜ SSLè¨¼æ˜Žæ›¸ã®æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒSHA-1ã‹ã‚‰SHA-2ï¼ˆsha256ï¼‰ã¸å¤‰æ›´ã•ã‚Œã¦ã„ã‚‹ã¨ã“ã‚ã§ã™ã€‚ SHA-2ã‚’ä½¿ç”¨ã—ã¦ã®ã‚ªãƒ¬ã‚ªãƒ¬ï¼ˆè‡ªå·±è¨¼æ˜Žï¼‰è¨¼æ˜Žæ›¸ä½œæˆæ‰‹é †ã‚’ã“ã¡ã‚‰ã®ãƒšãƒ¼ã‚¸ã§èª¬æ˜Žã—ã¦ã¾ã™ã€‚ æ¤œè¨¼ç’°å¢ƒ OS:CentOS 4.4 httpd: 2.0.52-28.ent.centos4 mod_ssl-2.0.52-28.ent.centos4 openssl-0.9.7a-43.10 apache+mod_sslã«ã‚ˆã‚‹SSLè¨å®š apache+mod_sslã®SSLå¯¾å¿œè¨å®šã§ã™ã€‚ apacheã¯rpmã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ç’°å¢ƒã§æ¤œè¨¼ã—ã¦ã„ã¾ã™ã€‚ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ç¢ºèª SSLã®è¨å®šã«å¿…è¦ãªmod_sslã¨opensslãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã‹ç¢ºèªã—ã¾ã™ã€‚ mod_sslã®ç¢ºèª # rpm -qa | grep mod_ssl m
toshi3221 2011/01/19
SSL

apache

openssl

ssl

ã‚µãƒ¼ãƒæ§‹ç¯‰

ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«
ãƒªãƒ³ã‚¯
SSL ä¸Šã§ WEBrick ã‚’å‹•ã‹ã™ - elm200 ã®æ—¥è¨˜(æ—§ã¯ã¦ãªãƒ€ã‚¤ã‚¢ãƒªãƒ¼)
ä½•ãŒã†ã‚Œã—ã„ã‹ Rails ã§ WEBrick on SSL ã—ã¦ã¿ãŸã€‚ åŸºæœ¬ã¯ã€ã“ã“ã¿ãŸã„ã«ã‚„ã‚Œã°ã„ã„ã®ã ãŒã€ã‚‚ã†ã¡ã‚‡ã£ã¨æ¨™æº–ã® script/server ã‚³ãƒžãƒ³ãƒ‰ã«è¿‘ã„ãƒŽãƒªã«ã—ã¦ã¿ãŸã€‚ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ãƒãƒ¼ãƒˆã¯ãªã‚“ã¨ãªã 3500 ç•ªã«ã—ã¦ã‚ã‚‹ãŒã€ % ruby script/webrick_ssl --port=3600 ã¨ã™ã‚Œã°ã€3600ç•ªã«ãªã‚‹ã—ã€--daemon ã¨æŒ‡å®šã™ã‚Œã°ã€ãƒ‡ãƒ¼ãƒ¢ãƒ³ã¨ã—ã¦èµ·å‹•ã™ã‚‹ã€‚ã“ã“ã‚‰ã¸ã‚“ã¯ã€æ™®é€šã® server ã‚³ãƒžãƒ³ãƒ‰ã¨åŒã˜ã€‚ è©¦ã—ãŸç’°å¢ƒ Rails 1.2.3 Linux 2.4.27 i686 GNU/Linux Ruby 1.8.6 ï¼ˆãŸã¶ã‚“ Windows ã‚„ Mac ã§ã‚‚ OK ã ã‚ã†ï¼‰ å‹•ã‹ã—æ–¹ OpenSSL ãŒãªã‹ã£ãŸã‚‰å…¥ã‚Œã‚‹ã€‚(Debian ãªã‚‰ % aptitude install openssl libssl0.9.7 libssl-
toshi3221 2011/01/19
rails2.2.2ã‚‚å‹•ä½œã¯ã—ãŸãŒopensslã§ã‚¨ãƒ©ãƒ¼ã§ãŸã‚Šã—ã¦ã‚‹

SSL

openssl

ruby on rails

rails

https

WEBrick
ãƒªãƒ³ã‚¯
CentOS OpenSSL ã‚’ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã™ã‚‹ - foldrr's weblog
ç’°å¢ƒ CentOS 5.3 å•é¡Œ OpenSSL ã‚’ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã—ãŸã„ã€‚ CentOS ã® yum ãƒªãƒã‚¸ãƒˆãƒªã¯æ›´æ–°ãŒé…ã„ã®ã§ã€yum ã§ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã§ããªã„ã€‚ è§£æ±ºæ–¹æ³• ç¾åœ¨ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ç¢ºèªã™ã‚‹ã€‚ $ openssl versionã‚½ãƒ¼ã‚¹ã®ãƒ‘ã‚¹ã‚’ç¢ºèªã™ã‚‹ã€‚ http://www.openssl.org/source/ ã‚’è¦‹ã¦ã€å–å¾—ã—ãŸã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ç¢ºèªã™ã‚‹ã€‚ ç¢ºèªã—ãŸã‚½ãƒ¼ã‚¹ã‚’å–å¾—ã—ã¦ãƒ“ãƒ«ãƒ‰ã™ã‚‹ã€‚ # cd /usr/local/src # wget http://www.openssl.org/source/openssl-0.9.8k.tar.gz # tar zxvf openssl-0.9.8k.tar.gz # cd openssl-0.9.8k.tar.gz # ./config --prefix=/usr --openssldir=/etc/pki/tls shared #
toshi3221 2010/12/06
centos

openssl
ãƒªãƒ³ã‚¯
1