[B! ssl] yifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yife id:yife

sslã«é–¢ã™ã‚‹yifeã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (43)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Google Chrome ã§ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ ï¼ˆæ—§ãƒ™ãƒªã‚µã‚¤ãƒ³ï¼‰ ç™ºè¡Œ SSL è¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æœŸé™ãŒå¼·åˆ¶çš„ã«çŸç¸®ã•ã‚ŒãŸã‚Šã€EV ï¼ˆæ‹¡å¼µèªè¨¼ï¼‰ ãŒç„¡åŠ¹ã«ãªã‚‹ã‹ã‚‚ã¨ã„ã†è©±
Google Chrome ã§ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ ï¼ˆæ—§ãƒ™ãƒªã‚µã‚¤ãƒ³ï¼‰ ç™ºè¡Œ SSL è¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æœŸé™ãŒå¼·åˆ¶çš„ã«çŸç¸®ã•ã‚ŒãŸã‚Šã€EV ï¼ˆæ‹¡å¼µèªè¨¼ï¼‰ ãŒç„¡åŠ¹ã«ãªã‚‹ã‹ã‚‚ã¨ã„ã†è©± æœ€å¤§æ‰‹ã®èªè¨¼å±€ ï¼ˆCAï¼šCertification Authorityï¼‰ ã§ã‚ã‚‹ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ï¼ˆæ—§ãƒ™ãƒªã‚µã‚¤ãƒ³ï¼‰ãŒã€é©åˆ‡ãªèªè¨¼æ‰‹ç¶šãã‚’è¡Œã‚ãšã« SSL è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ã„ãŸã¨ã•ã‚Œã‚‹å•é¡Œã§ã€Chrome ãƒãƒ¼ãƒ ãŒææ¡ˆã—ãŸè¨¼æ˜Žæ›¸æœ‰åŠ¹æœŸé™ã®æ®µéšŽçš„ãªçŸç¸®ã‚„ EV è¨¼æ˜Žæ›¸ã®ç„¡åŠ¹åŒ–ã«ã¤ã„ã¦ã¾ã¨ã‚ã¾ã™ã€‚ é€±æœ«ã«æŸ 2ch ã¾ã¨ã‚ã‚µã‚¤ãƒˆã§å–ã‚Šä¸Šã’ã‚‰ã‚Œã¦è©±é¡Œã«ãªã£ã¦ã„ã¾ã—ãŸãŒã€Google Chrome ã«ãŠã„ã¦ã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ - Symantec ï¼ˆæ—§ãƒ™ãƒªã‚µã‚¤ãƒ³ - Verisignï¼‰ ç™ºè¡Œã® SSL è¨¼æ˜Žæ›¸ãŒãƒ–ãƒãƒƒã‚¯ã•ã‚Œã‚‹ã‹ã‚‚ã¨ã„ã†è©±ã€‚ ã¾ã¨ã‚ã‚µã‚¤ãƒˆã§æ›¸ã‹ã‚Œã¦ã„ãŸã‚ˆã†ãª ã€Œå•ç”ç„¡ç”¨ã§ãƒ–ãƒãƒƒã‚¯ã€ ã¨ã„ã†ã®ã¯ç…½ã‚Šã‚¿ã‚¤ãƒˆãƒ«ãªã®ã§ã‚ã¾ã‚ŠçœŸã«å—ã‘ã‚‹ã®ã¯ã‚„ã‚ãŸ
yife 2017/03/27
EV

security

SSL
ãƒªãƒ³ã‚¯
HTTPSã«ã¾ã¤ã‚ã‚‹æ€ªã—ã„ä¼èª¬ã‚’æ¤œè¨¼ã™ã‚‹ - Google I/O 2016ã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‹ã‚‰ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article? ä»Šå¹´ã¯Google I/Oã«åˆã‚ã¦ç¤¾å“¡ã§ã¯ãªã„ç«‹å ´ã§å‚åŠ ã—ã¾ã—ãŸã€‚å…¨ä½“ã®æ„Ÿæƒ³ã¯ Google I/O 2016ã¾ã¨ã‚ï¼ˆWebçš„è¦–ç‚¹ï¼‰ ã§å…¬é–‹ã—ã¦ã„ã¾ã™ãŒã€ä»Šå›žã¯ãã®ä¸ã§ã€æ°—ã«å…¥ã£ãŸã‚»ãƒƒã‚·ãƒ§ãƒ³ã®1ã¤ã§ã‚ã‚‹"Mythbusting HTTPS: Squashing securityâ€™s urban legends"ã«ã¤ã„ã¦æ›¸ã„ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã‚»ãƒƒã‚·ãƒ§ãƒ³ã¯å¤§å¤‰è‰¯ãã¾ã¨ã¾ã£ã¦ã„ã¾ã™ã®ã§ã€YouTubeã«ã‚ãŒã£ã¦ã„ã‚‹å‹•ç”»ã‚’è¦‹ã‚Œã‚‹äººã¯å‹•ç”»ã‚’è¦‹ã¦è²°ãˆã‚Œã°è‰¯ã„ã®ã§ã™ãŒã€æ™‚é–“ãŒç„¡ã„ã¨ã„ã†äººã®ãŸã‚ã«ã€ãã®å†…å®¹ã‚’ã¾ã¨ã‚ã¾ã—ãŸã€‚åŸºæœ¬çš„ã«ã¯æ–‡å—èµ·ã“ã—ã«è¿‘ã„
yife 2016/07/12
SSL
ãƒªãƒ³ã‚¯
SSL and TLS Deployment Best Practices
Version 1.6-draft (15 January 2020) SSL/TLS is a deceptively simple techno logy. It is easy to deploy, and it just works--except when it does not. The main probl em is that encryption is not often easy to deploy correctly. To ensure that TLS provides the necessary security, system administrators and developers must put extra effort into properly configuring their servers and developing their applica
yife 2016/06/30
SSL/TLSè¨å®šæ™‚ã®æ³¨æ„äº‹é …ã¾ã¨ã‚ã€‚å…ˆæ—¥ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã•ã‚Œã¾ã—ãŸ

security

ssl
ãƒªãƒ³ã‚¯
ã‚µãƒ¼ãƒãŒã‚µãƒãƒ¼ãƒˆã™ã‚‹æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’sslscanã‚³ãƒžãƒ³ãƒ‰ã§ç¢ºèªã™ã‚‹
HTTPSé€šä¿¡ã‚’Burpã§ã†ã¾ãé–²è¦§ã§ããªã„å•é¡Œã‚’è§£æ±ºã™ã‚‹åˆ‡ã‚Šå£ã®ï¼‘ã¤ã¨ã—ã¦ã€ã‚µãƒ¼ãƒå´ã§ã‚µãƒãƒ¼ãƒˆã™ã‚‹æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’æŠŠæ¡ã™ã‚‹ã“ã¨ãŒæŒ™ã’ã‚‰ã‚Œã¾ã™ã€‚ ã‚µãƒ¼ãƒãŒã‚µãƒãƒ¼ãƒˆã™ã‚‹æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’æŠŠæ¡ã™ã‚‹ã“ã¨ã§ã€ä¾‹ãˆã°æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®å¼·åº¦ã®åˆ¶é™ã«ã‚ˆã‚‹å½±éŸ¿ã§ã¯ãªã„ã‹ã¨ã„ã†è¦³ç‚¹ã‚’å¾—ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ æœ¬ç¨¿ã§ã¯sslscanã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã†æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ ä½¿ã„æ–¹ ä»¥ä¸‹ã®ã‚ˆã†ã«ã‚³ãƒžãƒ³ãƒ‰ã‚’ç™ºè¡Œã™ã‚‹ã“ã¨ã§ç›®çš„ã®æƒ…å ±ã‚’å¾—ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ $ sslscan --no-failed ãƒ›ã‚¹ãƒˆå:ãƒãƒ¼ãƒˆç•ªå· ã€Œ--no-failedã€ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’æŒ‡å®šã™ã‚‹ã“ã¨ã§ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®ã¿ã‚’è¡¨ç¤ºã—ã¾ã™ã€‚ ã‚µãƒ¼ãƒå´ã§ã‚µãƒãƒ¼ãƒˆã™ã‚‹æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’æŠŠæ¡ã™ã‚‹ç›®çš„ã§ã¯ã€ã“ã®ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’ä»˜ã‘ã¦ãŠã„ãŸã»ã†ãŒå¯èªæ€§ãŒä¸ŠãŒã‚Šã¾ã™ã€‚ å®Ÿé¨“ å‰å›žä½¿ç”¨ã—ãŸç’°å¢ƒä¸Šã§sslscanã‚³ãƒžãƒ³ãƒ‰ã‚’ç™ºè¡Œã—ã€socatã‚³ãƒžãƒ³ãƒ‰ã«æŒ‡å®š
yife 2016/06/01
SSL

TLS

æš—å·åŒ–

securitiy
ãƒªãƒ³ã‚¯
æœ¬å½“ã¯æ€–ã„AES-GCMã®è©± - ã¼ã¡ã¼ã¡æ—¥è¨˜
Disclaimer æœ¬ã‚¨ãƒ³ãƒˆãƒªãƒ¼ã¯ã€ã“ã®å¤ blackhat usa 2016ã§è¡Œã‚ã‚Œã‚‹äºˆå®šã®è¬›æ¼”ã€ŒNONCE-DISRESPECTING ADVERSARIES: PRACTICAL FORGERY ATTACKS ON GCM IN TLSã€ ã®ãƒã‚¿ãƒãƒ¬ã‚’å«ã‚“ã§ã„ã¾ã™ã€‚ç¾åœ°ã§ç›´æŽ¥èžãæ–¹ã¯èªã¾ãªã„ã‚ˆã†æ°—ã‚’ã¤ã‘ã¦ä¸‹ã•ã„ã€‚ 0. çŸã„ã¾ã¨ã‚ ä»Šå›žã¯çŸã‚ã«ã¨æ€ã£ãŸã®ã§ã™ãŒã€ã‚„ã£ã±ã‚Šãã‚Œãªã‚Šã®åˆ†é‡ã§ã—ãŸã€‚ãªã®ã§çŸã„ã¾ã¨ã‚ã‚’æ›¸ã„ã¦ãŠãã¾ã™ã€‚ 4åƒä¸‡ä»¥ä¸Šã®ã‚µã‚¤ãƒˆå¯¾ã—ã¦AES-GCMä½¿ã£ãŸTLSé€šä¿¡ã®åˆæœŸãƒ™ã‚¯ãƒˆãƒ«(IV)ãƒ‡ãƒ¼ã‚¿ã®ã‚µãƒ¼ãƒ™ã‚¤ãŒè¡Œã‚ã‚Œã€7ä¸‡ç¨‹ã®ã‚µã‚¤ãƒˆã§IVã®å€¤ãŒå†åˆ©ç”¨ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã—ãŸã€‚IVãŒå†åˆ©ç”¨ã•ã‚ŒãŸå ´åˆã€AES-GCMã®å®‰å…¨æ€§ã¯è‡´å‘½çš„ãªå½±éŸ¿ã‚’å—ã‘ã¾ã™ã€‚IVã®å†åˆ©ç”¨ãŒåˆ¤æ˜Žã—ãŸå¹¾ã¤ã‹å®Ÿè£…ã‹ã‚‰æ—¢ã«è„†å¼±æ€§ã®ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ãŒå‡ºã¦ã„ã¾ã™ã€‚ IVãŒå†åˆ©ç”¨ã•ã‚ŒãŸå ´åˆã€ç¾å®Ÿçš„ã«HTTPS
yife 2016/05/24
security

TLS

SSL
ãƒªãƒ³ã‚¯
Letâ€™s Encryptã¨Nginx : ã‚»ã‚ãƒ¥ã‚¢ãªWebãƒ‡ãƒ—ãƒã‚¤ãƒ¡ãƒ³ãƒˆã®ç¾çŠ¶ | POSTD
æœ€è¿‘ã¾ã§ã€SSLæš—å·åŒ–é€šä¿¡ã¯ã€Œã‚ã‚‹ã¨å¥½ã¾ã—ã„æ©Ÿèƒ½ã€ã¨ã„ã†ç¨‹åº¦ã«ã—ã‹è€ƒãˆã‚‰ã‚Œã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚ãã®ãŸã‚ã€å®‰å…¨ãªã®ã¯ã‚¢ãƒ—ãƒªã®ãƒã‚°ã‚¤ãƒ³ãƒšãƒ¼ã‚¸ã ã‘ã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ãŒæ•°å¤šãå˜åœ¨ã—ã¦ã„ã¾ã—ãŸã€‚ ã—ã‹ã—ã€çŠ¶æ³ã¯è‰¯ã„æ–¹å‘ã¸ã¨å¤‰åŒ–ã—ã¦ã„ã¾ã™ã€‚ç¾åœ¨ã§ã¯æš—å·åŒ–ã¯å¿…é ˆã¨è€ƒãˆã‚‰ã‚Œã€ã»ã¨ã‚“ã©ã®é–‹ç™ºè€…ãŒå°Žå…¥ã‚’ç¾©å‹™ä»˜ã‘ã¦ã„ã¾ã™ã€‚ã¾ãŸã€å·¨å¤§æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³Googleã§ã¯ã€SSLã®å°Žå…¥ãŒæ¤œç´¢çµæžœã®é †ä½ã‚’æ±ºå®šã™ã‚‹è¦å› ã«ã•ãˆãªã£ã¦ã„ã¾ã™ã€‚ ã—ã‹ã—ã€SSLãŒåºƒç¯„ã«æ™®åŠã—ã¦ã„ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšã€ã‚»ã‚ãƒ¥ã‚¢ãªWebã‚µãƒ¼ãƒ“ã‚¹ã‚’æ§‹ç¯‰ã™ã‚‹ã“ã¨ã¯ã€æœªã ã«é¢å€’ã§ã€æ™‚é–“ãŒã‹ã‹ã‚Šã€ã‚¨ãƒ©ãƒ¼ã®åŽŸå› ã«ãªã‚Šã‚„ã™ã„ã¨è€ƒãˆã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ æœ€è¿‘ã“ã®åˆ†é‡Žã§ã¯ã€ Letâ€™s Encrypt ãŒã€SSLè¨¼æ˜Žæ›¸ã‚’ã‚ˆã‚Šåºƒãæ™®åŠã•ã›ã€Webã‚µã‚¤ãƒˆã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç¶æŒã«ä¿‚ã‚‹ãƒ¯ãƒ¼ã‚¯ãƒ•ãƒãƒ¼ã‚’å¤§å¹…ã«ç°¡ç•¥åŒ–ã—ã‚ˆã†ã¨å–ã‚Šçµ„ã‚“ã§ã„ã¾ã™ã€‚ å¼·åŠ›ãªWebã‚µãƒ¼ãƒNginxã‚„ã€ä»–ã®ãƒãƒ¼ãƒ‰ãƒ‹ãƒ³ã‚°æ–¹æ³•ã¨çµ„ã¿åˆã‚
yife 2016/04/20
nginx

ssl

Let's Encrypt
ãƒªãƒ³ã‚¯
POODLEè„†å¼±æ€§ãŒSSL 3.0ã‹ã‚‰TLS 1.0 / TLS 1.1ã«æ‹¡å¤§
2014å¹´10æœˆ15æ—¥ã€ã€ŒãŠå®¢æ§˜ã¸ã®é‡è¦ãªãŠçŸ¥ã‚‰ã›ã€ã«ã¦ã”å ±å‘Šã—ãŸã€ŽSSL 3.0ã«é–¢ã™ã‚‹è„†å¼±æ€§ã«ã¤ã„ã¦ (Padding Oracle On Downgraded Legacy Encryption)ã€ã§ã¯ã€SSL 3.0ãƒ—ãƒãƒˆã‚³ãƒ«ã«ã®ã¿å½±éŸ¿ãŒã‚ã‚‹ã¨ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ã—ã‹ã—ã€ã“ã®ãŸã³ä¸€éƒ¨ã®TLS 1.0 / TLS 1.1ã«ãŠã„ã¦ã‚‚ã€SSLã§ä¿è·ã•ã‚ŒãŸã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã¨ãƒ–ãƒ©ã‚¦ã‚¶ã®é–“ã§ã€ãƒãƒƒã‚«ãƒ¼ã®é€šä¿¡å‚å—ã‚„æš—å·è§£èªãŒå¯èƒ½ã§ã‚ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã—ãŸã€‚ TLSãƒ‘ã‚±ãƒƒãƒˆå†…ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°æ§‹æˆã‚’é©åˆ‡ã«ãƒã‚§ãƒƒã‚¯ã—ã¦ã„ãªã„å®Ÿè£…ãŒã•ã‚Œã¦ã„ã‚‹å ´åˆã€ã“ã®è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ã¾ã™ã€‚ä»Šã®ã¨ã“ã‚ã€F5ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¹ã¨A10ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¹ã®ãƒãƒ¼ãƒ‰ãƒãƒ©ãƒ³ã‚µã§TLSæŽ¥ç¶šã‚’ãƒãƒ³ãƒ‰ãƒ«ã—ã¦ã„ã‚‹ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã§ã€ã“ã®è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã‚ˆã‚ŠæŠ€è¡“çš„ãªçŸ¥è¦‹ã¯Google ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢Adam Langleyã®æŠ•ç¨¿ã€ŽT
yife 2016/03/24
TLS1.2ä»¥å¤–ã¯ã‚„ã£ã±ãƒ€ãƒ¡ã§ã™ã

ssl

poodle

security
ãƒªãƒ³ã‚¯
ãƒ•ã‚¡ãƒ¼ã‚¹ãƒˆã‚µãƒ¼ãƒã€ç„¡æ–™SSLè¨¼æ˜Žæ›¸ã€ŒLet's Encryptã€ã®å–ã‚Šæ‰±ã„ã‚’é–‹å§‹ã€€
yife 2016/02/26
SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
SSLè¨¼æ˜Žæ›¸ã®KEYãƒ•ã‚¡ã‚¤ãƒ«ãƒ»CSRãƒ•ã‚¡ã‚¤ãƒ«ãƒ»CRTãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒã‚§ãƒƒã‚¯æ–¹æ³• - install memo
SSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œãƒ—ãƒã‚»ã‚¹ã§ã¯ã€KEYãƒ•ã‚¡ã‚¤ãƒ«ã¨CSRãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½œã‚‹ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ã¾ãŸã€è¨¼æ˜Žæ›¸ä¼šç¤¾ã‹ã‚‰ã¯CRTãƒ•ã‚¡ã‚¤ãƒ«ãŒé€ã‚‰ã‚Œã¦ãã¾ã™ã€‚ã“ã‚Œã‚‰ãŒæ£ã—ã„ã‹ã©ã†ã‹ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ KEYãƒ•ã‚¡ã‚¤ãƒ«ã¨ã¯ KEYãƒ•ã‚¡ã‚¤ãƒ«ã¨ã„ã†ã®ãŒæ£å¼åç§°ã ã¨ã¯æ€ãˆã¾ã›ã‚“ãŒã€ã“ã“ã§ã¯SSLé€šä¿¡ã«åˆ©ç”¨ã™ã‚‹å…¬é–‹éµæš—å·ç³»ã®ç§˜å¯†éµãƒ•ã‚¡ã‚¤ãƒ«ã‚’æŒ‡ã—ã¾ã™ï¼ˆãŠãã‚‰ãå…¬é–‹éµæƒ…å ±ã‚‚å«ã‚“ã§ã„ã‚‹ã‚“ã ã¨æ€ã„ã¾ã™ãŒã€ã“ã®ã‚ãŸã‚Šã¯ã‚ˆãã‚ã‹ã£ã¦ã„ã¾ã›ã‚“ï¼‰ã€‚ ç§˜å¯†éµãƒ•ã‚¡ã‚¤ãƒ«ã¯æ¬¡ã®ã‚ˆã†ãªãƒ˜ãƒƒãƒ€ãƒ»ãƒ•ãƒƒã‚¿ã‚’åˆ©ç”¨ã—ã¾ã™ã€‚ -----BEGIN RSA PRIVATE KEY----- -----END RSA PRIVATE KEY-----ä¸‹è¨˜ã®ã‚ˆã†ã«ã™ã‚Œã°ã€KEYãƒ•ã‚¡ã‚¤ãƒ«ãŒæ£ã—ã„ã‹ã©ã†ã‹ç¢ºèªã§ãã¾ã™ã€‚ $ openssl rsa -in ssl_example_jp.key -check -noout verify OK $ CSRãƒ•ã‚¡
yife 2016/02/19
ssl

security
ãƒªãƒ³ã‚¯
websec-room.comÂ -Â websec room ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±
This webpage was generated by the domain owner using Sedo Domain Parking. Disclaimer: Sedo maintains no relationship with third party advertisers. Reference to any specific service or trade mark is not controlled by Sedo nor does it constitute or imply its association, endorsement or recommendation.
yife 2015/12/01
SSL
ãƒªãƒ³ã‚¯
Redirecting to ssl-config.mozilla.org...
Mozilla SSL Configuration Generator Redirecting to the updated SSL Configuration Generatorâ€¦
yife 2015/10/28
ssl

TLS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

ã‚¸ã‚§ãƒãƒ¬ãƒ¼ã‚¿ãƒ¼
ãƒªãƒ³ã‚¯
Let's Encrypt - It's happening
Using Lets Encrypt Today, the Let's Encrypt team announced beta program launch. This is a huge step forward for the Internet in general. We are living in a world where a Symantec account manager actually believes a business should sink $2,490 into a certificate that is identical in security level (no, I don't count "identity" if end users can't tell the difference) to a $9 alternative. Costs aside
yife 2015/10/28
certificate

ssl

let's encrypt
ãƒªãƒ³ã‚¯
Technology
The objective of Letâ€™sÂ Encrypt and the ACME protocol is to make it possible to set up an HTTPS server and have it automatically obtain a browser-trusted certificate, without any human intervention. This is accomplished by running a certificate management agent on the web server. To understand how the techno logy works, letâ€™s walk through the process of setting up https://example.com/ with a certifi
yife 2015/10/22
ssl

HTTPS
ãƒªãƒ³ã‚¯
httpsã ã‹ã‚‰ã¨ã„ã†ã ã‘ã§å®‰å…¨ï¼Ÿèª¿ã¹ãŸã‚‰æ€–ããªã£ã¦ããŸSSLã®è©±!ï¼Ÿ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
yife 2015/10/20
ssl

security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
opensslã‚³ãƒžãƒ³ãƒ‰ã§è¨¼æ˜Žæ›¸æƒ…å ±ã‚’ç¢ºèªã—ãŸã„ | GMOã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³ ã‚µãƒãƒ¼ãƒˆ
ã‚µãƒ¼ãƒã«è¨å®šã•ã‚Œã¦ã„ã‚‹è¨¼æ˜Žæ›¸ã‚’ç¢ºèªã™ã‚‹æ–¹æ³• ãƒ–ãƒ©ã‚¦ã‚¶ã‹ã‚‰ã®æŽ¥ç¶šã§ã¯ã€ä¸é–“CAè¨¼æ˜Žæ›¸ãŒæ£ã—ãè¨å®šã•ã‚Œã¦ã„ã‚‹ã‹ãªã©ã®è©³ç´°ã‚’ç¢ºèªã™ã‚‹ã“ã¨ãŒã§ããªã„ãŸã‚ã€è©³ç´°ã‚’ç¢ºèªã™ã‚‹ã«ã¯opensslã‚³ãƒžãƒ³ãƒ‰ãŒæœ‰åŠ¹ã§ã™ã€‚ ã‚³ãƒžãƒ³ãƒ‰ã®ä¾‹ openssl s_client -connect ssl.example.org:443 -showcerts ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ãƒãƒ¼ãƒˆç•ªå·ã¯ä»¥ä¸‹ã®ã¨ãŠã‚Šã§ã™ã€‚ HTTPSã€€ã€€443 POP over SSLã€€ 995 SMTP over SSLã€€ 465 IMAPSã€€ã€€993 å‡ºåŠ›çµæžœã®ä¾‹ ã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯3éšŽå±¤ã§ã™ã®ã§ã€ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã®ä¸‹ã«ã¯2æžšã®è¨¼æ˜Žæ›¸ãŒå˜åœ¨ã—ã¦ã„ã¾ã™ã€‚ [-----BEGIN CERTIFICATE-----] ã‹ã‚‰ [-----END CERTIFICATE-----] ã¾ã§ãŒè¨¼æ˜Žæ›¸ã§ã™ã€‚ 1æžšç›®ã¯ãŠå®¢æ§˜ã®è¨¼æ˜Žæ›¸ã€2æžšç›®ã¯ä¸é–“CAè¨¼æ˜Žæ›¸ã§ã‚ã‚‹ã“
yife 2015/10/07
security

ssl

openssl
ãƒªãƒ³ã‚¯
ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’opensslã§ä½œã‚‹ï¼ˆè©³ç´°ç‰ˆï¼‰ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
å‰å›žã®opensslã§RSAæš—å·ã¨éŠã¶ã§RSAæš—å·ã‚„ç§˜å¯†éµã«ã¤ã„ã¦ä¸èº«ã‚’è‰²ã€…ã¨ã„ã˜ã£ã¦ã¿ãŸã€‚ç¶šã„ã¦ä»Šå›žã¯ã€Apacheã§ä½¿ã†ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã£ã¦ã¿ã‚‹ã€‚ ç´°ã‹ã„ã“ã¨ã¯ã„ã„ã‹ã‚‰ã€ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ã‚³ãƒžãƒ³ãƒ‰ã ã‘çŸ¥ã‚ŠãŸã„ ãŠæ€¥ãŽã®æ–¹ã¯ã€ä»¥ä¸‹3ã¤ã ã‘ã‚„ã‚Œã°è‰¯ã„ã€‚ã“ã‚Œã§10å¹´é–“(3650æ—¥)æœ‰åŠ¹ãªã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ãŒã§ãã‚ãŒã‚‹ã€‚ $ openssl genrsa 2048 > server.key $ openssl req -new -key server.key > server.csr $ openssl x509 -days 3650 -req -signkey server.key < server.csr > server.crtã§ãã‚ãŒã£ãŸserver.crtã¨server.keyã‚’ã€ä¾‹ãˆã°/etc/httpd/conf/ é…ä¸‹ã®ssl.crt/ ã¨ ssl.key/ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«è¨ç½®
yife 2015/09/28
ssl

openssl

è¨¼æ˜Žæ›¸

security
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : Certificate Transparencyã§ã‚ã‹ã£ãŸã¨ã„ã†Thawteã«ã‚ˆã‚‹google.comè¨¼æ˜Žæ›¸ã®ä¸æ£ç™ºè¡Œï¼Ÿï¼Ÿï¼Ÿ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
åŸºæœ¬ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆãè¶£å‘³ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKIãƒ»ç½²åãƒ»èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚æ—…å¥½ãã€‚ãƒ†ãƒ¬ãƒ“å¥½ãã§èŠ¸èƒ½é€š 2015å¹´9æœˆ19æ—¥(åœŸ)ã«ã€ŒSymantec caught issuing rogue Google.com certificatesã€ ã¨ã„ã†è¨˜äº‹ãŒé£›ã³è¾¼ã‚“ã§ãã¦ã€èªè¨¼å±€ã€è¨¼æ˜Žæ›¸ã€SSLé–¢ä¿‚ã®ã‚¤ãƒ³ã‚·ãƒ‡ãƒ³ãƒˆã ã¨ ã‚ãã‚ãã—ã¦é£›ã³ã¤ãã‚ã‘ã§ã™ãŒã€ã–ã£ã¨èªã‚“ã§ã¿ã‚‹ã¨ å¤§æ‰‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ™ãƒ³ãƒ€ãƒ¼ã®Symantecã®åä¼šç¤¾ã§ä½Žä¾¡ãªè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚µãƒ¼ãƒ“ã‚¹ã‚’ã‚„ã£ã¦ã„ã‚‹ ThawteãŒã€2015å¹´9æœˆ14æ—¥ã«google.comã€www.google.comç”¨ã®EV SSLè¨¼æ˜Žæ›¸ã‚’ã€Googleã«äº†è§£ãªã ä¸æ£ã«ç™ºè¡Œã—ã¦ã„ãŸã“ã¨ãŒã€è¨¼æ˜Žæ›¸ã®å…¬é–‹ç›£æŸ»è¨˜éŒ²(Certificate Transparency)ã«ã‚ˆã‚Šã‚ã‹ã£ãŸã€‚ ã¨ã„ã†äº‹ã®ã‚ˆã†ã§ã™ã€‚åŽ³æ ¼ãªå¯©æŸ»ã§ç™ºè¡Œã•
yife 2015/09/22
security

SSL

TLS

certificate

EV
ãƒªãƒ³ã‚¯
ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãƒ–ãƒ©ã‚¦ã‚¶ã€ŒGoogle Chromeã€åˆ©ç”¨æ™‚ã®ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ä¸€éƒ¨é–²è¦§ä¸å¯ã«ã¤ã„ã¦ | ãƒ¤ãƒžãƒˆé‹è¼¸
å¹³æˆ27å¹´9æœˆ7æ—¥ ãŠå®¢æ§˜å„ä½ ã„ã¤ã‚‚ãƒ¤ãƒžãƒˆé‹è¼¸ã‚’ã”åˆ©ç”¨ã„ãŸã ãã¾ã—ã¦ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ 2015å¹´9æœˆ1æ—¥ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã€ŒGoogle Chromeã€Verï¼Ž45ï¼Ž0ï¼Ž2454ä»¥ä¸Šã‚’ã”åˆ©ç”¨ã®ãŠå®¢æ§˜ãŒã€å¼Šç¤¾ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã®ä¸€éƒ¨ãƒšãƒ¼ã‚¸ã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€ŒSSLã‚µãƒ¼ãƒãƒ¼ãŒå¤ã„å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ã€ã¨è¡¨ç¤ºã•ã‚Œã€é–²è¦§ãŒã§ããªã„äº‹è±¡ãŒç™ºç”Ÿã—ã¦ãŠã‚Šã¾ã™ã€‚ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã—ã€èª ã«ç”³ã—è¨³ã”ã–ã„ã¾ã›ã‚“ã€‚ ç¾åœ¨ã€å¼Šç¤¾å´ã®å¯¾å¿œã‚’é€²ã‚ã¦ã¯ãŠã‚Šã¾ã™ãŒã€å¯¾å¿œå®Œäº†ã¾ã§ã®é–“ã€ã€ŒInternet Explorerã€ã€ã€ŒSafariã€ã¾ãŸã¯Androidã®å ´åˆã¯ã€Œæ¨™æº–ãƒ–ãƒ©ã‚¦ã‚¶ã€ã‹ã‚‰ã”è¦§ã„ãŸã ãã¾ã™ã‚ˆã†ãŠé¡˜ã„ç”³ã—ä¸Šã’ã¾ã™ã€‚ ãŠå•ã„åˆã‚ã›ã¯ã€å¼Šç¤¾ã‚µãƒ¼ãƒ“ã‚¹ã‚»ãƒ³ã‚¿ãƒ¼ã¾ã§ãŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ ï¼ˆãƒ•ãƒªãƒ¼ãƒ€ã‚¤ãƒ¤ãƒ«0120-01-9625ã€€ã€€æºå¸¯é›»è©±ã‹ã‚‰ã¯ãƒŠãƒ“ãƒ€ã‚¤ãƒ¤ãƒ«0570-200-000ï¼‰ ä»¥ä¸Š
yife 2015/09/09
security

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘
1. SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ãƒ£ãƒ³ãƒ— 2015 2015å¹´8æœˆ12æ—¥ IIJ å¤§æ´¥ ç¹æ¨¹ æ›´æ–°ç‰ˆè³‡æ–™ã®ç½®å ´ http://goo.gl/cX1M17 Github Repo: https://goo.gl/vRLzrj 2. è‡ªå·±ç´¹ä»‹ â€¢ å¤§æ´¥ ç¹æ¨¹ â€¢ æ ªå¼ä¼šç¤¾ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ– â€¢ ãƒ—ãƒãƒ€ã‚¯ãƒˆæœ¬éƒ¨ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºéƒ¨ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™º2èª² â€¢ NodeJS Technical Committee ãƒ¡ãƒ³ãƒãƒ¼ â€¢ (ä¸»ã«TLS/CRYPTO/OpenSSLãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’æ‹…å½“ï¼‰ â€¢ IETF httpbis WG ã§ HTTP/2ç›¸äº’æŽ¥ç¶šè©¦é¨“ç‰ä»•æ§˜ç–å®šã«å‚ç”»ã€‚ â€¢ ãƒ–ãƒã‚°ï¼š http://d.hatena.ne.jp/jovi0608/ 3. ã¯ã˜ã‚ã« â€¢ TLS(Transport Layer Security)ã®ä»•çµ„ã¿ã«ã¤ã„ã¦å¦ã‚“ã§ã„ãŸã ã ã¾ã™ã€‚ â€¢
yife 2015/08/13
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security

ssl

tls
ãƒªãƒ³ã‚¯
ã€ŒYahoo!æ¤œç´¢ã€SSLåŒ–ã®ãŠçŸ¥ã‚‰ã› - Yahoo!æ¤œç´¢ã‚¬ã‚¤ãƒ‰ - Yahoo! JAPAN
ã„ã¤ã‚‚ã€ŒYahoo!æ¤œç´¢ã€ã‚’ã”åˆ©ç”¨ã„ãŸã ãã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ã“ã®åº¦ã€ŒYahoo!æ¤œç´¢ã€ã§ã¯ã€ã‚ˆã‚Šå¼·åŠ›ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£åŸºæº–ã‚’æŽ¡ç”¨ã—ãŸã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹ãŸã‚ã€2015å¹´8æœˆ18æ—¥ã‚ˆã‚Šæ®µéšŽçš„ã«ã€æ¤œç´¢çµæžœã«SSLã¨å‘¼ã°ã‚Œã‚‹æš—å·åŒ–ãƒ—ãƒãƒˆã‚³ãƒ«ã‚’ä½¿ç”¨ã™ã‚‹ã“ã¨ã«ã„ãŸã—ã¾ã—ãŸã®ã§ã€ãŠçŸ¥ã‚‰ã›ã„ãŸã—ã¾ã™ã€‚ SSLåŒ–ã«ä¼´ã„ã€ã”åˆ©ç”¨ã®OSã«ã‚ˆã£ã¦ã¯ã€ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãŒè¡¨ç¤ºã•ã‚Œã‚‹ãªã©ã€æ¤œç´¢çµæžœãŒæ£å¸¸ã«é–²è¦§ã§ããªã„å¯èƒ½æ€§ãŒã”ã–ã„ã¾ã™ã€‚å¯¾å¿œæ–¹æ³•ãªã©ã€è©³ã—ãã¯ä»¥ä¸‹ãƒšãƒ¼ã‚¸ã‚’ã”ç¢ºèªãã ã•ã„ã€‚ Windows XPã‚’ã”åˆ©ç”¨ã®ãŠå®¢æ§˜ã¸ https://about.yahoo.co.jp/info/notice/sha1xp.html ãªãŠã€ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã«è¡¨ç¤ºã•ã‚Œã‚‹æ¤œç´¢çµæžœã®ã‚¢ãƒ‰ãƒ¬ã‚¹ã¯ https://search.yahoo.co.jp/* ã‹ã‚‰ https://search.yahoo.co.jp/* ã«å¤‰ã‚ã‚Šã¾ã™ã€‚
yife 2015/08/12
search

yahoo

security

yahoo!

ssl
ãƒªãƒ³ã‚¯
1 2 3 æ¬¡ã®ãƒšãƒ¼ã‚¸