CentOSã§ã‚‚h2oã§OCSP Staplingã—ãŸã„ - （ã²ï¼‰ãƒ¡ãƒ¢h2o/1.5.2ã§ã™ã€‚ （ãŸã„ã¦ã„ãã†ã ã¨æ€ã„ã¾ã™ãŒï¼‰ä¸é–“CAã‹ã‚‰ç™ºè¡Œã•ã‚ŒãŸã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®å ´åˆã¯ã€h2oã§ã¯certificate-fileã§æŒ‡å®šã™ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã®å†…容を サーãƒãƒ¼è¨¼æ˜Žæ›¸ ä¸é–“CAã®è¨¼æ˜Žæ›¸ ã¨ã„ã†é †åºã§catã§çµåˆã—ãŸã‚‚ã®ã«ã—ã¾ã™ã€‚é †åºãŒã‚ã‚‹ã®ã§æ³¨æ„ã—ã¦ãã ã•ã„。å‚考： スマートフォンç‰ã€æºå¸¯ç«¯æœ«ã®ä¸€éƒ¨ã®ã¿ã€Œè¨¼æ˜Žæ›¸ãŒä¿¡é ¼ã§ããªã„ã€ã¨è¦å‘ŠãŒè¡¨ç¤ºã•ã‚Œã¾ã™ | Symantec ã•ã¦ã€h2oã¯èµ·å‹•æ™‚ã«OCSPレスãƒãƒ³ãƒ€ã‹ã‚‰ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’å¾—ã¦ã€ãã‚Œã®verifyãŒæˆåŠŸã™ã‚Œã°OCSP Staplingを有効ã«ã—ã¾ã™ã€‚ 具体的ã«ã¯ã€share/h2o/fetch-ocsp-response ã®ä¸ã§opensslコマンドを使ã£ã¦ã“ã®æ§˜ã«ã—ã¦ã„ã¾ã™ã€‚ # certificate-fileã§æŒ‡å®šã•ã‚ŒãŸã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‹ã‚‰OCSPレスãƒãƒ³ãƒ€ã®URIã‚’å¾—ã‚‹ openssl x509 -in $cer
Neverbleed - RSAã®ç§˜å¯†éµæ¼”算を別プãƒã‚»ã‚¹ã«åˆ†é›¢ã™ã‚‹è©±
OpenSSLã®è„†å¼±æ€§(CVE-2015-1793)ã«ã‚ˆã‚‹Altãƒã‚§ãƒ¼ãƒ³è¨¼æ˜Žæ›¸å½é€ ã®ä»•çµ„ã¿ - ã¼ã¡ã¼ã¡æ—¥è¨˜
[openssl-announce] Forthcoming OpenSSL releases
ç´°ã‹ã™ãŽã¦ä¼ã‚らãªã„SSL/TLS
Node-v0.10.34ãŒã¯ã¾ã£ãŸã‚¯ãƒã‚¹ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã¨OpenSSLã®è½ã¨ã—ç©´ - ã¼ã¡ã¼ã¡æ—¥è¨˜
OpenSSLã®è„†å¼±æ€§(CVE-2014-3511)ã§TLSプãƒãƒˆã‚³ãƒ«ã®åŸºç¤Žã‚’å¦ã¶ - ã¼ã¡ã¼ã¡æ—¥è¨˜
Googleã«ã‚ˆã‚‹OpenSSLã®forkã€BoringSSLを試ã™ã€‚ - ã¼ã¡ã¼ã¡æ—¥è¨˜
GoogleãŒOpenSSLをフォークã—ãŸã€ŒBoringSSLã€ã‚’公開 | スラド ã‚»ã‚ュリティ
OpenSSLã®æ–°ãŸãªè„†å¼±æ€§ CCS Injection ãŒç™ºè¦‹ã•ã‚Œã‚‹
OpenSSL #ccsinjection Vulnerability
How I discovered CCS Injection Vulnerability (CVE-2014-0224) - OpenSSL #ccsinjection Vulnerability
GitHub - indutny/heartbleed: Extracting server private key using Heartbleed OpenSSL vulnerability.
DeNA Engineering - DeNAエンジニアã®ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆ
Heart Bleedã‚’èªã‚“ã - The first cry of Atom
{{#tags}}- {{label}}
{{/tags}}