[B! gnupg] yukungã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yukung id:yukung

gnupgã«é–¢ã™ã‚‹yukungã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Terraformï¼‹GPG ã§ IAM User ã«ãƒã‚°ã‚¤ãƒ³ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®š | å¤–é“çˆ¶ã®åŒ
AWSï¼‹Terraform ã®è¨˜äº‹ã‚’æ›¸ãã®ã£ã¦ã‚ã¾ã‚Šå¥½ãã˜ã‚ƒãªã„ã‚“ã§ã™ã‘ã©ã€å¹´æœ«ãã‚‰ã„ï¼‘ã¤æ›¸ã„ã¦ãŠã“ã‹ãªã¨ã„ã†ç¾©å‹™æ„Ÿçš„ãªã‚¢ãƒ¬ã§ã™ã€ãƒã‚¤ã€‚ Terraform v0.7.8 ã‹ã‚‰ aws_iam_user_login_profile ãŒè¿½åŠ ã•ã‚Œï¼ˆCHANGELOGï¼‰ã€IAM User ã«ãƒã‚°ã‚¤ãƒ³ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’è¨å®šã—ã¦ã€æš—å·åŒ–ã—ã¦ state ãƒ•ã‚¡ã‚¤ãƒ«ã«ä¿å˜ã§ãã‚‹ã‚ˆã†ã«ãªã£ãŸã®ã§ã‚„ã£ã¦ã¿ã¾ã—ãŸã¨ã„ã†ã€ãŸã‚ã„ç„¡ã„å†…å®¹ã§ã”ã–ã„ã¾ã™ã€‚ æ¦‚è¦ Terraformã§IAM Userã‚’ä½œæˆã—ã¾ã™ã€‚ç®¡ç†ç”»é¢ãƒã‚°ã‚¤ãƒ³ç”¨ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰è¨å®šã‚‚è¡Œã„ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¯æš—å·åŒ–ã•ã‚ŒãŸçŠ¶æ…‹ã§ terraform.state ã«ä¿å˜ã•ã‚Œã¾ã™ã€‚ aws_iam_user_login_profile ã«æ›¸ã„ã¦ã‚ã‚Šã¾ã™ãŒã€ä½¿ç”¨ã™ã‚‹å…¬é–‹éµã¯ base64 ã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã—ãŸã‚‚ã®ã‚’ç›´æ›¸ãã™ã‚‹ã‹ã€keybase ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼åã‚’å…¥åŠ›ã™ã‚‹ã“ã¨ã«ãªã£ã¦
yukung 2017/04/18
aws

iam

tips

security

gpg

gnupg

tutorial

infrastructure
ãƒªãƒ³ã‚¯
GnuPGã®ä½¿ã„æ–¹ - ãŸã‘ãžã†ç€•æ»ãƒ–ãƒã‚°
gpgã§éµã®ä½œæˆãªã‚“ã¦ä¸€ç”Ÿã®ã†ã¡ã«ãã‚“ãªã«ä½•åº¦ã‚‚ã‚„ã‚‹ã‚‚ã®ã§ã‚‚ãªã„æ°—ã‚‚ã—ã¾ã™ãŒï¼ˆåƒ•ã‚‚æ•°å¹´ã¶ã‚Šï¼‰ã€ã„ã–æ–°ã—ãéµã‚’ä½œã‚ã†ã¨æ€ã£ãŸã‚‰å…¨ç„¶ä½¿ã„æ–¹ã‚’è¦šãˆã¦ãªãã¦Googleå…ˆç”Ÿã«ä½¿ã„æ–¹ã‚’æ•™ãˆã¦ã‚‚ã‚‰ã£ãŸã®ã§ä¸€é€šã‚Šãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ éµã®ä½œæˆã¨ã‚ãƒ¼ã‚µãƒ¼ãƒã¸ã®å…¬é–‹éµã®ã‚¢ãƒƒãƒ—ãƒãƒ¼ãƒ‰ã€‚ $ gpg --gen-key $ gpg --keyserver pgp.mit.edu --send-keys éµã®ID éµã®ä¸€è¦§ã‚’è¡¨ç¤ºã€‚ $ gpg --list-keys ã‚ãƒ¼ã‚µãƒ¼ãƒã‹ã‚‰å…¬é–‹éµã‚’ã‚¤ãƒ³ãƒãƒ¼ãƒˆã€‚ $ gpg --keyserver pgp.mit.edu --recv-keys éµã®ID å…¬é–‹éµã¨ç§˜å¯†éµã‚’ãƒ•ã‚¡ã‚¤ãƒ«ã«ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã€‚ $ gpg -a --export éµã®ID > pubkey.asc $ gpg -a --export-secret-key éµã®ID > seckey.asc ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã—ãŸ
yukung 2017/04/18
security

gpg

gnupg

tutorial
ãƒªãƒ³ã‚¯
keysignparty-ja - GnuPG éµã®ä½œã‚Šæ–¹
ã“ã“ã§ã¯GnuPG ã®éµã‚’æŒã£ã¦ã„ãªã„äººãŒéµã‚’ä½œã‚‹æ–¹æ³•ã‚’èª¬æ˜Žã—ã¾ã™ã€‚4096bit ã®éµã‚’ä½œã‚‹èª¬æ˜Žã¨ãªã£ã¦ã„ã¾ã™ã€‚ ä½¿ã£ã¦ã„ã‚‹ OS ã« GnuPG ãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã“ã¨ã‚’å‰æã«èª¬æ˜Žã—ã¾ã™ã€‚ Debian / Ubuntu ç’°å¢ƒã§ã¯ã€dpkg -l gnupg ã‚’å®Ÿè¡Œã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã‹ã€ç¢ºèªã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ $ dpkg -l gnupg Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ åå‰ ãƒãƒ¼ã‚¸ãƒ§ãƒ³ èª¬æ˜Ž +++-===========
yukung 2017/04/18
security

gpg

gnupg

tutorial
ãƒªãƒ³ã‚¯
GNU Privacy Guardè¬›åº§ ãƒˆãƒƒãƒ— :: GNU Privacy Guardè¬›åº§
ãƒ‹ãƒ¥ãƒ¼ã‚¹ Letâ€™s Encryptã®è¨¼æ˜Žæ›¸ã«ã‚ˆã‚Šã€æš—å·åŒ–æŽ¥ç¶šãŒå¯èƒ½ã«ãªã‚Šã¾ã—ãŸã€‚https://gnupg.hclippr.comã§æŽ¥ç¶šã§ãã¾ã™ã€‚HSTSã‚’ä½¿ç”¨ã—ã¦ãŠã‚Šã€ä¸€åº¦æš—å·æŽ¥ç¶šã‚’è¡Œã†ã¨æœ€çµ‚ã‚¢ã‚¯ã‚»ã‚¹ã‚ˆã‚Šä¸€é€±é–“ã€è‡ªå‹•çš„ã«å¹³æ–‡ç‰ˆã«æŽ¥ç¶šã—ãŸå ´åˆã§ã‚‚æš—å·æŽ¥ç¶šã«åˆ‡ã‚Šæ›¿ã‚ã‚Šã¾ã™ã€‚ å½“ã‚µã‚¤ãƒˆã¯è©¦é¨“çš„é‹ç”¨ã¨ã—ã¦ã€Torã‚ˆã‚Šã®ã‚¢ã‚¯ã‚»ã‚¹ã«å¯¾å¿œã—ã¾ã—ãŸã€‚æ¬¡ã®ç§˜åŒ¿ã‚µãƒ¼ãƒ“ã‚¹URLãŒä½¿ç”¨ã§ãã¾ã™ã€‚http://gnupg4na2oymu5ls.onion GNU Privacy Guardã¨ã¯ï¼Ÿ GnuPGã¯GNUãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®RFC4880ã§å®šç¾©ã•ã‚Œã‚‹OpenPGPæ¨™æº–ã®å®Œå…¨ã§ãƒ•ãƒªãƒ¼ãªå®Ÿè£…ã§ã™ã€‚GnuPGã‚’ä½¿ç”¨ã™ã‚‹ã“ã¨ã«ã‚ˆã‚Šãƒ‡ãƒ¼ã‚¿ã‚„é€šä¿¡ ã‚’æš—å·åŒ–ã—ãŸã‚Šç½²åã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã€å¤šæ©Ÿèƒ½ã®éµç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ã‚„ã€å¤šãã®ç¨®é¡žã®å…¬é–‹éµãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’å¯èƒ½ã«ã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ãŒç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ã€‚ GnuPGã¯GPGã¨ã‚‚
yukung 2017/04/18
security

gpg

gnupg

tutorial
ãƒªãƒ³ã‚¯
Macã§GnuPGã‚’ä½¿ã£ãŸç½²åã‚’è¡Œã£ã¦ã¿ã‚‹ - NO!ã¨è¨€ãˆã‚‹ã‚ˆã†ã«ãªã‚ŠãŸã„
GnuPGã¨ã¯Chain of Trustã«ã‚ˆã‚‹ä¿¡é ¼ãƒ¢ãƒ‡ãƒ«ã«åŸºã¥ã„ãŸPKIã§ã‚ã‚Šï¼Œã“ã‚Œã‚’ç”¨ã„ã‚‹ã¨ï¼Œç½²åï¼Œæš—å·åŒ–ãªã©ã‚’è¡Œã†ã“ã¨ãŒå‡ºæ¥ã‚‹ï¼ŽSSLãªã©ã®æ–¹å¼ã§ã¯ï¼Œä¿¡é ¼ã§ãã‚‹ç¬¬ä¸‰è€…ã®å˜åœ¨ï¼ˆä¾‹ãˆã°VeriSignãªã©ï¼‰ãŒå¿…è¦ã§ã‚ã‚‹ãŒï¼ŒGnuPGã§ã¯ãã‚ŒãŒå¿…è¦ãªã„ï¼Žãã®ä»£ã‚ã‚Šï¼Œã©ã®å…¬é–‹éµã‚’ä¿¡ç”¨ã™ã‚‹ã‹ã¨ã„ã£ãŸã“ã¨ãŒï¼Œå®Œå…¨ã«è‡ªåˆ†ã«ä»»ã•ã‚Œã¦ã—ã¾ã†ï¼Ž ã¾ãšã¯ï¼ŒMac Portsã‚’ä½¿ã£ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ï¼Ž $ sudo port gnupg2 æ¬¡ã«ï¼Œå…¬é–‹éµã¨ç§˜å¯†éµã‚’ä½œæˆï¼Ž $ gpg2 --gen-key Please select what kind of key you want: (1) RSA and RSA (default) (2) DSA and Elgamal (3) DSA (sign only) (4) RSA (sign only) Your selection?ã“ã“ã¯ï¼ŒRSAã§å•é¡Œãªã„ï¼Žå¤ã„
yukung 2017/04/18
security

gpg

gnupg

tutorial
ãƒªãƒ³ã‚¯
gpgã‚³ãƒžãƒ³ãƒ‰ã‚ã‚‚ - æ°—ã¾ã¾ãªã¤ã¶ã‚„ã
gpgã‚³ãƒžãƒ³ãƒ‰ã¾ã‚ã‚Šã®ã‚ã‚‚ã€‚ GPGã®ãƒ„ãƒ¼ãƒ«ã¨ã‹ã‚ã‚‹ã‘ã©ã€ GPG Keychain Access | GPGTools (OpenPGP Tools for Apple OS X) macä½¿ã£ã¦ã‚‹ãªã‚‰ã€ã‚³ãƒžãƒ³ãƒ‰ãƒ™ãƒ¼ã‚¹ã®æ–¹ãŒã‚ˆã£ã½ã©æ¥½ãªã‚ãŸã—ã€‚ å¥½ã¿ã®å•é¡Œã ã‘ã©(â—‹Â´Ï‰ï½€â—‹)ã‚ž ä¿„ç„¶ã€æœ¬å®¶ã®ãƒšãƒ¼ã‚¸ãŒå‚è€ƒã«ãªã‚‹ã€‚ http://www.gnupg.org/documentation/manuals/gnupg.pdf gpgã‚³ãƒžãƒ³ãƒ‰ macã‚‚ã¨ã‚‚ã¨gpgã‚³ãƒžãƒ³ãƒ‰ã¯ã„ã£ã¦ã‚‹ãŠ ã‚ãŸã—ã®ã¯ã“ã‚“ãªæ„Ÿã˜ $ gpg --version gpg (GnuPG) 1.4.9 å…¬é–‹éµã¨ç§˜å¯†éµã®ç”Ÿæˆ éµã®ãƒšã‚¢ã‚’ä½œæˆã™ã‚‹ $gpg --gen-key.gnupgãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªé…ä¸‹ã« pubring.gpgï¼ˆå…¬é–‹éµï¼‰ã¨secring.gpgï¼ˆç§˜å¯†éµï¼‰ãŒã§ãã‚‹ æ¥½å‹(vÂ´âˆ€ï½€)ï¾Š(Â´âˆ€ï½€v)ï¾”ï½¯ï¾€ï¾ˆâ˜† ãªã‚“ã‹ãƒ¡ãƒƒã‚»
yukung 2017/04/18
security

gpg

gnupg

tutorial
ãƒªãƒ³ã‚¯
gpgã§ã®ãƒ•ã‚¡ã‚¤ãƒ«ã®æš—å·åŒ–åŸºç¤Ž - akihiro_obã®æ—¥è¨˜
ãªã‹ãªã‹SICPã«æ‰‹ã‚’ä»˜ã‘ã‚Œãšãªã®ã§ã€ä»•äº‹ã§å§‹ã‚ã¦è§¦ã£ãŸGPGã®ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ä¸Šã§ã®æš—å·åŒ–å¾©å·åŒ–ã«ã¤ã„ã¦ãƒ¡ãƒ¢ã£ã¦ãŠã“ã†ã¨æ€ã†ã€‚ GPGã¨ã¯ã€Wikipediaã«ã‚ˆã‚‹ã¨ GNU Privacy Guard (GnuPG) ã¨ã¯ã€Pretty Good Privacy (PGP) ã®åˆ¥å®Ÿè£…ã¨ã—ã¦ã€GPL ã«åŸºã¥ã„ãŸæš—å·åŒ–ã‚½ãƒ•ãƒˆã§ã‚ã‚‹ã€‚ OpenPGP è¦æ ¼ (RFC4880) ã«å®Œå…¨æº–æ‹ ã—ã¦ã„ã‚‹ãŒã€å¤ã„ PGP ã¨ã®äº’æ›æ€§ã¯å®Œå…¨ã§ã¯ãªã„ã€‚ ã¨ã„ã†ã“ã¨ã‚‰ã—ã„ã€‚ èªè˜ã§ã¯ã€å…¬é–‹éµæš—å·æ–¹å¼ã§ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æš—å·åŒ–ã™ã‚‹ã‚‚ã®ã¨æ€ã£ã¦ã‚‹ã€‚ é€šä¿¡ç³»ã«ã‚‚ä½¿ã‚ã‚Œã¦ã‚‹ã®ã‹ãªï¼Ÿ ä»Šå›žä½¿ã†ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¯ã“ã‚“ãªæ„Ÿã˜ã€‚ $ gpg --version gpg (GnuPG) 1.4.11 Copyright (C) 2010 Free Software Foundation, Inc. License GPLv3+: GNU G
yukung 2017/04/18
security

gpg

gnupg

tutorial
ãƒªãƒ³ã‚¯
1