[B! SSL] Nagataniã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

Nagatani id:Nagatani

SSLã«é–¢ã™ã‚‹Nagataniã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (13)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SymantecãŒå†ã³Googleã®ä¿¡é ¼ã‚’å¤±ã£ãŸä»¶ã«ã¤ã„ã¦ã®ãƒ¡ãƒ¢ - Technically, technophobic.
ï¼ˆåˆã‚ã«è¨€ã„è¨³ã—ã¦ãŠãã¨ã€è¨¼æ˜Žæ›¸ç•Œéšˆã«ã¤ã„ã¦ã¯è©³ã—ããªã„ã§ã™ã€‚æŸèª¤è¨³é‡ç”£ã‚µã‚¤ãƒˆãŒé©å½“ãªè¨˜äº‹ã‚’æ›¸ã„ã¦ã„ãŸã®ã§ã€ãªã«ã‹æ›¸ã‹ãã°ã¨æ€ã£ã¦æ›¸ã„ã¦ã„ã‚‹ã¨ã„ã†ç¨‹åº¦ã®ã¾ã¨ã‚è¨˜äº‹ã§ã™ã€‚é–“é•ã„ãªã©ã‚ã‚Œã°ã”æŒ‡æ‘˜ãã ã•ã„ï¼‰ ä½•ãŒèµ·ã“ã‚‹ã®ã‹ Ryan Sleeviã•ã‚“ï¼ˆGoogleã®äººï¼‰ãŒBlink-devã®ãƒ¡ãƒ¼ãƒªãƒ³ã‚°ãƒªã‚¹ãƒˆã«æŠ•ç¨¿ã—ãŸã“ã‚Œã«ã¾ã¨ã¾ã£ã¦ã„ã¾ã™ï¼šhttps://groups.google.com/a/chromium.org/d/msg/blink-dev/eUAKwjihhBs/rpxMXjZHCQAJ çµŒç·¯ã«ã¤ã„ã¦ã¯ã„ã£ãŸã‚“é£›ã°ã—ã¦ã€ã©ã®ã‚ˆã†ãªã‚¢ã‚¯ã‚·ãƒ§ãƒ³ãŒææ¡ˆã•ã‚Œã¦ã„ã‚‹ã®ã‹è¦‹ã¾ã™ã€‚ To restore confidence and security of our users, we propose the following steps: A reduction in the accepted
Nagatani 2017/03/27
google

ssl
ãƒªãƒ³ã‚¯
ãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«SSL/TLS
ã“ã¡ã‚‰ã¯æ”¹è¨‚å‰ã®æ—§ç‰ˆã®ãƒšãƒ¼ã‚¸ã§ã™ã€‚æ”¹é¡Œç¬¬2ç‰ˆã®å•†å“ãƒšãƒ¼ã‚¸ã‚’ã”è¦§ãã ã•ã„ Webã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è§£èª¬ã®æ±ºå®šç‰ˆ "Bulletproof SSL and TLS"Â ã®å…¨è¨³ï¼ˆåŽŸæ›¸2017å¹´ç‰ˆã¸ã®ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰æ¸ˆã¿ï¼‰ Ivan RistiÄ‡ è‘—ã€é½‹è—¤åé“ ç›£è¨³ 520ãƒšãƒ¼ã‚¸ B5åˆ¤ ISBNï¼š978-4-908686-00-9 é›»åæ›¸ç±ã®å½¢å¼ï¼šPDF 2020å¹´7æœˆ4æ—¥ ç¬¬1ç‰ˆç¬¬5åˆ· ç™ºè¡Œï¼ˆåŽŸæ›¸2017å¹´ç‰ˆã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰å¯¾å¿œæ¸ˆã¿ï¼‰ æœ¬ã‚µã‚¤ãƒˆã«ã¦ãƒ¦ãƒ¼ã‚¶ç™»éŒ²ã®ã†ãˆè³¼å…¥ã„ãŸã ãã¨ã€åŽŸè‘—æ”¹è¨‚ç¬¬2ç‰ˆã«åŽéŒ²ã•ã‚Œã‚‹TLS 1.3ã®è§£èª¬ç« ã‚’ä»˜éŒ²ã¨ã—ã¦å«ã‚“ã ç‰¹åˆ¥ç‰ˆPDFãŒãŠèªã¿ã„ãŸã ã‘ã¾ã™ ç¾ä»£ç”Ÿæ´»ã‚’æ”¯ãˆã‚‹ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã«ã¨ã£ã¦ã€é€šä¿¡ã®æš—å·åŒ–ã¯ä¸å¯æ¬ ã®æ©Ÿèƒ½ã§ã™ã€‚ã—ã‹ã—ã€å®Ÿéš›ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§æš—å·åŒ–é€šä¿¡ã‚’åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã«ã¯ã€æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®çŸ¥è˜ã ã‘ã§ãªãã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ—ãƒãƒˆã‚³ãƒ«ã¨ãã®å®Ÿè£…æŠ€è¡“ã€ã•ã‚‰ã«ã€åŸºç›¤ã¨ãªã‚‹ä¿¡
Nagatani 2017/03/15
SSL

TLS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Let's Encrypt ç·åˆãƒãƒ¼ã‚¿ãƒ«
Let's Encrypt æœ€æ–°æƒ…å ± ãƒ»ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã¨ ACME v2 ã¸å¯¾å¿œãŒå®Œäº†ã—ã¾ã—ãŸï¼ˆ2018å¹´03æœˆ15æ—¥ æ›´æ–°ï¼‰ â€»æŠ€è¡“çš„ãªè©³ç´°ã«ã¤ã„ã¦ã¯ ACME v2 ã¨ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã®æŠ€è¡“æƒ…å ± ã‚’ã”è¦§ãã ã•ã„ã€‚ â€»ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã®å–å¾—ã«ã¯ã€ACME v2 ãƒ—ãƒãƒˆã‚³ãƒ«ã«å¯¾å¿œã—ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ DNS ã«ã‚ˆã‚‹èªè¨¼ãŒå¿…è¦ã§ã™ã€‚è¨¼æ˜Žæ›¸ã®å–å¾—ãƒ»æ›´æ–°ã®éš›ã«ã€DNS ã®ã€ŒTXT ãƒ¬ã‚³ãƒ¼ãƒ‰ã€ã«ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç™»éŒ²ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ â€»ã‚µãƒ–ã‚¸ã‚§ã‚¯ãƒˆã®ä»£æ›¿åï¼ˆSAN : Subject Alternative Nameï¼‰ã‚’ä½¿ç”¨ã—ãŸ è¤‡æ•°ã®ãƒ‰ãƒ¡ã‚¤ãƒ³åãƒ»ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³åã«å¯¾ã—ã¦æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ ã‚‚å¼•ãç¶šãå–å¾—å¯èƒ½ã§ã™ã€‚ Let's Encrypt ã«ã¤ã„ã¦ Let's Encrypt ã¯ã€èªè¨¼å±€ï¼ˆCAï¼‰ã¨ã—ã¦ã€ŒSSL/TLSã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã€ã‚’ç„¡æ–™ã§ç™ºè¡Œã™ã‚‹ã¨ã¨ã‚‚ã«ã€è¨¼æ˜Žæ›¸ã®ç™ºè¡Œãƒ»ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ»
Nagatani 2015/12/05
SSL

TLS
ãƒªãƒ³ã‚¯
ç†è§£ã—ã¦ã‚‹ã¤ã‚‚ã‚Šã® SSL/TLS ã§ã‚‚ã€ã‚‚ã£ã¨ç†è§£ã—ãŸã‚‰é¢ç™½ã‹ã£ãŸè©± Â· ã‘ã‚“ã”ã®ãŠå±‹æ•·
apache ã‚„ nginx ã®è¨å®šã‚’ã—ãŸã“ã¨ãŒã‚ã‚Œã°ä»¥ä¸‹ã®æ§˜ãªè¡Œã‚’è¦‹ãŸã“ã¨ãŒã‚ã‚‹äººã‚‚å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚(â€» ä¸‹è¨˜ã¯ nginx ã®è¨å®šã€‚apache ã®å ´åˆã¯ SSLCipherSuite ã§ã™ã€‚) ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; ã“ã‚ŒãŒæš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã‚’æŒ‡å®šã—ã¦ã„ã‚‹ç®‡æ‰€ã§ã™ã€‚ãã—ã¦ã“ã®éƒ¨åˆ†ã€ã‚ã‘ã®ã‚ã‹ã‚‰ãªã„æ–‡å—åˆ—ã®ç¾…åˆ—ãªã®ã§ã™ã”ãå–ã£ã¤ãã«ããã¦ä½•ã‚’æŒ‡å®šã—ãŸã‚‰ã„ã„ã‹ã‚ã‹ã‚‰ãªã„ã®ã§ã€ã‚³ãƒ”ãƒšã—ã¦ã—ã¾ã†äººã‚‚å¤šã„ã‚“ã˜ã‚ƒãªã„ã§ã—ã‚‡ã†ã‹ã€‚ã‹ãã„ã†ç§ã‚‚æ•°å¹´å‰ã«è¶£å‘³ã§ TLS å¯¾å¿œã® Web ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä½œã£ãŸæ™‚ã¯ã‚³ãƒ”ãƒšã§æ¸ˆã¾ã›ã¦ã„ã¾ã—ãŸã€‚ã“ã®æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãª OpenSSL ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã£ã¦å¯¾å¿œã—ã¦ã„ã‚‹ä¸€è¦§ã‚’è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ $ openssl ciphers -v AES128-SH
Nagatani 2015/12/02
TLS

SSL
ãƒªãƒ³ã‚¯
websec-room.comÂ -Â websec room ãƒªã‚½ãƒ¼ã‚¹ãŠã‚ˆã³æƒ…å ±
This webpage was generated by the domain owner using Sedo Domain Parking. Disclaimer: Sedo maintains no relationship with third party advertisers. Reference to any specific service or trade mark is not controlled by Sedo nor does it constitute or imply its association, endorsement or recommendation.
Nagatani 2015/12/01
SSL
ãƒªãƒ³ã‚¯
SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘
1. SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ãƒ£ãƒ³ãƒ— 2015 2015å¹´8æœˆ12æ—¥ IIJ å¤§æ´¥ ç¹æ¨¹ æ›´æ–°ç‰ˆè³‡æ–™ã®ç½®å ´ http://goo.gl/cX1M17 Github Repo: https://goo.gl/vRLzrj 2. è‡ªå·±ç´¹ä»‹ â€¢ å¤§æ´¥ ç¹æ¨¹ â€¢ æ ªå¼ä¼šç¤¾ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ– â€¢ ãƒ—ãƒãƒ€ã‚¯ãƒˆæœ¬éƒ¨ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºéƒ¨ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™º2èª² â€¢ NodeJS Technical Committee ãƒ¡ãƒ³ãƒãƒ¼ â€¢ (ä¸»ã«TLS/CRYPTO/OpenSSLãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’æ‹…å½“ï¼‰ â€¢ IETF httpbis WG ã§ HTTP/2ç›¸äº’æŽ¥ç¶šè©¦é¨“ç‰ä»•æ§˜ç–å®šã«å‚ç”»ã€‚ â€¢ ãƒ–ãƒã‚°ï¼š http://d.hatena.ne.jp/jovi0608/ 3. ã¯ã˜ã‚ã« â€¢ TLS(Transport Layer Security)ã®ä»•çµ„ã¿ã«ã¤ã„ã¦å¦ã‚“ã§ã„ãŸã ã ã¾ã™ã€‚ â€¢
Nagatani 2015/08/14
SSL

TLS

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
SSLè¨¼æ˜Žæ›¸ãªã‚‰ã•ãã‚‰ã®SSLï½œã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ
æ³•äººãƒ»çµ„ç¹”ã®ãŠå®¢æ§˜ ã‚³ãƒ¼ãƒãƒ¬ãƒ¼ãƒˆã‚µã‚¤ãƒˆã«ã¯ä¼æ¥èªè¨¼ï¼ˆOVï¼‰ã€ECã‚µã‚¤ãƒˆãªã©å€‹äººæƒ…å ±ã‚’å–ã‚Šåˆã†ã‚µã‚¤ãƒˆã«ã¯EVï¼ˆExtended Validationï¼‰èªè¨¼ã‚’åˆ©ç”¨ã—ã¾ã™ã€‚
Nagatani 2015/07/31
SSL

ã•ãã‚‰ã®VPS
ãƒªãƒ³ã‚¯
è¯éº—ãªã‚‹å› æ•°åˆ†è§£:FREAKæ”»æ’ƒã®ä»•çµ„ã¿ - ã¼ã¡ã¼ã¡æ—¥è¨˜
1. ã¯ã˜ã‚ã« ã¡ã‚‡ã†ã©ä»Šæœ OpenSSLã‚’ã¯ã˜ã‚ã¨ã—ãŸæ§˜ã€…ãªTLSå®Ÿè£…ã®è„†å¼±æ€§ã®è©³ç´°ãŒå…¬è¡¨ã•ã‚Œã¾ã—ãŸã€‚ ã“ã® Inriaã¨MSRã®ã‚°ãƒ«ãƒ¼ãƒ—ã¯ä»¥å‰ã‹ã‚‰TLSã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã—ã¦éžå¸¸ã«ã‚¢ã‚¯ãƒ†ã‚£ãƒ–ã«èª¿æŸ»ãƒ»æ¤œè¨¼ã‚’ã—ã¦ã„ã‚‹ã‚°ãƒ«ãƒ¼ãƒ—ã§ã€ä»Šå›žã‚‚é©šãã®å†…å®¹ã§ã—ãŸã€‚ ã“ã®ã‚°ãƒ«ãƒ¼ãƒ—ã¯ã€TLSã®ãƒãƒ³ãƒ‰ã‚·ã‚§ã‚¤ã‚¯æ™‚ã®çŠ¶æ…‹é·ç§»ã‚’åŽ³å¯†ã«ãƒã‚§ãƒƒã‚¯ã™ã‚‹ãƒ„ãƒ¼ãƒ«ã‚’é–‹ç™ºã—ã€æ§˜ã€…ãªTLSå®Ÿè£…ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ãƒ»å ±å‘Šã‚’è¡Œã£ã¦ã„ãŸã‚ˆã†ã§ã™ã€‚ ç‰¹ã«FREAKã¨å‘¼ã°ã‚Œã‚‹OpenSSLã®è„†å¼±æ€§(CVE-2015-0204)ã«é–¢ã—ã¦ã¯ã€ã¡ã‚‡ã†ã©ä¿®æ£ç›´å¾Œã®1æœˆåˆã‚ã« Only allow ephemeral RSA keys in export ciphersuites ã§è¦‹ã¦ã„ã¾ã—ãŸãŒã€å…·ä½“çš„ã«ã©ã®ã‚ˆã†ã«æ”»æ’ƒã™ã‚‹ã®ã‹ã•ã£ã±ã‚Šã‚¤ãƒ¡ãƒ¼ã‚¸ã§ããšã€ã‚ã®ã‚°ãƒ«ãƒ¼ãƒ—ã ã‹ã‚‰ã¾ãŸè¶…çµ¶å¤‰æ…‹ãªæ‰‹æ³•ã ã‚ã†ãŒã€ã¾ããã‚Œã»ã©æ·±åˆ»ã˜ã‚ƒãªã„ã ã‚ã†ã¨è¦‹è¾¼ã‚“ã§ã„ã¾ã—ãŸã€‚ ä»Šå›ž
Nagatani 2015/03/05
FREAK

TLS

ssl

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ç´°ã‹ã™ãŽã¦ä¼ã‚ã‚‰ãªã„SSL/TLS
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã€Œç´°ã‹ã„ã¨è¨€ã†ã‚ˆã‚Šé•·ã„ã‚ˆãã€ ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€‚ATS ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸå°æŸ´ã•ã‚“ã‚„ ATS ã« HTTP/2 ã®å®Ÿè£…ã‚’è¡Œã£ã¦ã„ã‚‹å¤§ä¹…ä¿ã•ã‚“ã¨åŒã˜ãƒãƒ¼ãƒ ã®ä¸€å¹´ç›®ã€åŒ¿åç¤¾å“¡M ã•ã‚“ã‹ã‚‰ã„ã˜ã‚‰ã‚Œã¦ã„ã‚‹æ–°äººã§ã™ã€‚ä»Šå›žã‚ã‚ŠãŒãŸã„äº‹ã«ã€ã“ã†ã„ã£ãŸã™ã”ã„æ–¹ã€…ã‚’å«ã‚ãƒ¢ãƒ’ã‚«ãƒ³è«¸å…ˆè¼©æ–¹ã‚ˆã‚Šã€Œä½•ã‹æ›¸ã‹ãªã„ã®ï¼Ÿã€ã€Œã„ã¤æ›¸ãã®ï¼Ÿã€ã¨ã„ã†æ•°ã€…ã®ãƒ—ãƒ¬ãƒƒã‚·ãƒ£ãƒ¼ãŠè¨€è‘‰ã‚’ã„ãŸã ãã¾ã—ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ã€SSL/TLS ã® Session å†é–‹æ©Ÿèƒ½ã«é–¢ã—ã¦æ›¸ã„ã¦ã„ã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ SSL/TLS ã¯æ©Ÿå¯†æ€§ã€å®Œå…¨æ€§ãã—ã¦çœŸæ£æ€§ã«å¯¾ã—ã¦å®‰å…¨ãªé€šä¿¡ã‚’è¡Œã†ãŸã‚ã®ä»•çµ„ã¿ã§ã™ã€‚ã—ã‹ã—ã€ã“ã®ä»•çµ„ã¿ã¯æš—å·æŠ€è¡“ã‚’å¤šç”¨ã—ç‰¹ã«æŽ¥ç¶šã«ãŠã„ã¦è¤‡é›‘ãªãƒ—ãƒãƒˆã‚³ãƒ«ã‚’ç”¨ã„ã€Client, Se
Nagatani 2015/01/23
TLS

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

HTTP
ãƒªãƒ³ã‚¯
è„†å¼±æ€§äº‹ä¾‹ã«å¦ã¶ã‚»ã‚ãƒ¥ã‚¢ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã€ŒSSL/TLSè¨¼æ˜Žæ›¸æ¤œè¨¼ã€ç·¨ (KOF2014)
1. ï½žèª°ã‹ã®å¤±æ•—ã‚’ä»–å±±ã®çŸ³ã«ï½ž è„†å¼±æ€§äº‹ä¾‹ã«å¦ã¶ã‚»ã‚ãƒ¥ã‚¢ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚° ã€ŒSSL/TLSè¨¼æ˜Žæ›¸æ¤œè¨¼ã€ç·¨ JPCERT/CC æƒ…å ±æµé€šå¯¾ç–ã‚°ãƒ«ãƒ¼ãƒ— æˆ¸ç”° æ´‹ä¸‰ (yozo.toda@jpcert.or.jp) 1 KOF2014 version 2. CopyrightÂ©2014 JPCERT/CC All rights reserved. è‡ªå·±ç´¹ä»‹ http://www.tomo.gr.jp/root/e9706.html JPCERT/CC æƒ…å ±æµé€šå¯¾ç–ã‚°ãƒ«ãƒ¼ãƒ— è§£æžãƒãƒ¼ãƒ ãƒªãƒ¼ãƒ‰ã‚¢ãƒŠãƒªã‚¹ãƒˆ æˆ¸ç”° æ´‹ä¸‰ è„†å¼±æ€§æƒ…å ±åˆ†æž, ã‚»ã‚ãƒ¥ã‚¢ã‚³ãƒ¼ ãƒ‡ã‚£ãƒ³ã‚°æ™®åŠå•“ç™ºæ´»å‹•â€¦â€¦ ã«åŠªã‚ã¦ã¾ã™ 2
Nagatani 2014/11/17
SSL

TLS

programming
ãƒªãƒ³ã‚¯
SSL 3.0 ã®è„†å¼±æ€§ã€ŒPOODLE ã€ã¨ã¯ï¼Ÿ
ã‚ªãƒ³ãƒ—ãƒ¬ãƒŸã‚¹ã‹ã‚‰ã‚¯ãƒ©ã‚¦ãƒ‰ã¸ã®ç§»è¡Œã‚’ã¯ã˜ã‚ã€ãƒã‚¤ãƒ–ãƒªãƒƒãƒ‰ã‚¯ãƒ©ã‚¦ãƒ‰ç’°å¢ƒã‚’ã‚·ãƒ¼ãƒ ãƒ¬ã‚¹ã«ä¿è·ã—ãªãŒã‚‰ã€ã‚¯ãƒ©ã‚¦ãƒ‰ã®åˆ©ç‚¹ã‚’å®Ÿç¾ã—ã¾ã™ã€‚ è©³ã—ãã¯ã“ã¡ã‚‰
Nagatani 2014/10/17
SSL

è„†å¼±æ€§

POODLE
ãƒªãƒ³ã‚¯
Wiresharkã§SSLé€šä¿¡ã®ä¸èº«ã‚’è¦—ã„ã¦ã¿ã‚‹ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
OpenSSLã®è„†å¼±æ€§ã€ŒHeartbleedã€ãŒä¸–é–“ã‚’è³‘ã‚ã›ã¦ã„ã¾ã™ãŒã€è‰²ã€…ã¨ä¹—ã‚Šé…ã‚Œã¦ã—ã¾ã£ãŸæ„ŸãŒã‚ã‚‹ã®ã§ã€ã‚†ã‚‹ã‚†ã‚‹ã¨è½ã¡ç©‚æ‹¾ã„ã‚’ã—ã‚ˆã†ã‹ã¨æ€ã„ã¾ã™ã€‚ Heartbleedã§ç§˜å¯†éµã‚’æ‰‹ã«å…¥ã‚ŒãŸã‚‰SSLé€šä¿¡ã®ä¸èº«å…¨éƒ¨è¦‹ãˆã¡ã‚ƒã†ã˜ã‚ƒã‚“!! ã¨ã„ã†äº‹æ…‹ã«ãªã£ã¦ã„ã¾ã™ãŒã€ãªã‚“ã¨ãªãç†è«–çš„ã«ãã†ã ã‚ã†ãªã¨åˆ†ã‹ã‚‹ã‚‚ã®ã®ã‚¤ãƒžã‚¤ãƒå…·ä½“çš„ãªæ‰‹é †ãŒåˆ†ã‹ã‚‰ãªã„ã€‚ ã¨ã„ã†ã‚ã‘ã§ä»Šå›žã®ãƒ†ãƒ¼ãƒžã¨ã—ã¦ã€æ‰‹å…ƒã«ã‚µãƒ¼ãƒã®ç§˜å¯†éµã¨ã€SSLé€šä¿¡ã‚’ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ã—ãŸpcapãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚‹ã¨ãã«ã€Wiresharkã§ã©ã‚“ãªæ„Ÿã˜ã§SSLé€šä¿¡ã‚’ã€Œã»ã©ãã€ã®ã‹â€¦â€¦ã¨ã„ã†å…·ä½“çš„ãªæ‰‹é †ã‚’ã€ãƒãƒžã‚Šæ‰€ã‚’å«ã‚ã¦ã¾ã¨ã‚ã¦ãŠã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ ã¨ã„ã†ã‹ã€ç§è‡ªèº«ãŒãƒãƒžã£ãŸã®ã§è‡ªåˆ†ç”¨ãƒ¡ãƒ¢ã§ã™ãªã€‚ãªãŠã“ã®æ–‡æ›¸ã§ã¯"SSL"ã¨ã ã‘è¨˜è¿°ã—ã€TLSã¯ç„¡è¦–ã—ã¦ã„ã¾ã™ã€‚ å‰ææ¡ä»¶ ã¨ã‚Šã‚ãˆãšä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã®æ¤œè¨¼ç’°å¢ƒã§è©¦ã—ã¾ã—ãŸã€‚ IPã‚¢ãƒ‰ãƒ¬ã‚¹ èª¬æ˜Ž ãƒ›ã‚¹ãƒˆO
Nagatani 2014/04/15
SSL

wireshark

Heartbleed
ãƒªãƒ³ã‚¯
ç„¡æ–™ã®SSLè¨¼æ˜Žæ›¸StartSSLã‚’æ´»ç”¨ã™ã‚‹ - Qiita
èƒŒæ™¯ è‡ªå‰ã®ã‚µãƒ¼ãƒ“ã‚¹ã§httpsé€šä¿¡ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã«ã¯ã€SSLè¨¼æ˜Žæ›¸ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ è‡ªåˆ†ã§ä½¿ç”¨ã™ã‚‹ã ã‘ãªã‚‰ã€SSLè¨¼æ˜Žæ›¸ã‚‚è‡ªå‰ã§ä½œæˆã™ã‚‹ã„ã‚ã‚†ã‚‹ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ç”¨ã„ã¦ã‚‚è‰¯ã„ã®ã§ã™ãŒã€å¤–éƒ¨ã«å…¬é–‹ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®å ´åˆãã†ã¨ã‚‚è¡Œãã¾ã›ã‚“ã€‚ SSLè¨¼æ˜Žæ›¸ã¨ã„ã†ã¨å€¤æ®µãŒé«˜ã„å°è±¡ãŒã‚ã‚Šã¾ã—ãŸãŒã€StartSSLã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã§ç„¡æ–™ã§SSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’å—ã‘ã‚‰ã‚Œã‚‹ã¨è¨€ã†ã“ã¨ã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ StartSSLã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã™ã‚‹ è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’è¡Œã†å‰ã«ã€StartSSLã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ StartSSLã‹ã‚‰ã€"StartSSL Free (Class1)"ã‚’é¸æŠžã—ã¾ã™ã€‚ Certificate Control Panelã‚’é¸æŠžã€‚ Sign-upã«é€²ã¿ã¾ã™ã€‚ åå‰ã€ä½æ‰€ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ãªã© å€‹äººæƒ…å ±ã®ç™»éŒ²ã‚’è¡Œã„ã¾ã™ã€‚ ç™»éŒ²ã—ãŸãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«æœ¬äººç¢ºèªã®ãƒ¡ãƒ¼ãƒ«ãŒå±Šãã®ã§ã€å—ä¿¡ã—ãŸãƒ¡ãƒ¼ãƒ«ã®a
Nagatani 2013/10/30
SSLè¨¼æ˜Žæ›¸

SSL
ãƒªãƒ³ã‚¯
1