hatekun33ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ / 2015å¹´4æœˆ7æ—¥ - ã¯ã¦ãªãƒ

SSLCipherSuite ã‚’å¤‰æ›´ã— perfect forward secrecy ã«ã‚‚å¯¾å¿œã—ã¦ã¿ã‚‹ - ã•ãã‚‰VPS CentOS 6.5 - IMPOV::In My Point Of View

SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã‚’è³¼å…¥ã—è¨ç½®ã‚’è¡Œã£ãŸã®ã§ã€ã“ã®æ©Ÿä¼šã«SSLã¾ã‚ã‚Šã®è¨å®šã‚’è¦‹ãªãŠã—ã¦ã¿ã‚‹ã“ã¨ã«ã—ãŸã€‚ ï¼ˆ2014/10/21è¿½è¨˜ï¼šPOODLE attack ã«å¯¾å¿œã™ã‚‹ãŸã‚ã€SSLProtocol ã« -SSLv3 ã‚’è¿½åŠ ã€‚ï¼‰ ï¼ˆ2016/03/03è¿½è¨˜ï¼šå¤ã„è¨˜äº‹ãªã®ã§ä»Šé¢¨ã®CipherSuiteã«ã¤ã„ã¦ã€æ–‡æœ«ã«è¿½è¨˜ã—ã¾ã—ãŸã€‚ï¼‰ ç¾çŠ¶ã®ç¢ºèª ã¾ãšã¯Qualys SSL Labs SSL Server Testã¨ã„ã†ã‚µã‚¤ãƒˆã¸è¡Œã£ã¦ã€ç¾çŠ¶ã‚’ãƒã‚§ãƒƒã‚¯ã€‚ æœ€è¿‘ãƒã‚§ãƒƒã‚¯ã•ã‚ŒãŸãƒ‰ãƒ¡ã‚¤ãƒ³ãƒªã‚¹ãƒˆã«åå‰ãŒå‡ºã¦ã—ã¾ã†ã®ã§ã€ãƒ‰ãƒ¡ã‚¤ãƒ³åå…¥åŠ›æ¬„ã®ä¸‹ã«ã‚ã‚‹ãƒã‚§ãƒƒã‚¯ãƒœãƒƒã‚¯ã‚¹ã‚’ã‚ªãƒ³ã«ã—ã¦ãƒªã‚¹ãƒˆæŽ²è¼‰ã‚’æ‹’å¦ã™ã‚‹ã€‚ æ•°åˆ†å¾…ã¤ã¨çµæžœãŒè¡¨ç¤ºã•ã‚Œã‚‹ã€‚ Beastæ”»æ’ƒãŒã©ã†ã ã¨ã‹ã€æš—å·å¼·åº¦ãŒä½Žã„ã ã¨ã‹ã€ã„ã‚ã„ã‚ã¨æŒ‡æ‘˜ã•ã‚Œã¦ã—ã¾ã†ã€‚ ã¾ãŸã€ãƒšãƒ¼ã‚¸ã®ä¸‹ã®æ–¹ã¸è¡Œãã¨ã€ãƒ¡ã‚¸ãƒ£ãƒ¼ãªãƒ–ãƒ©ã‚¦ã‚¶ã¨ã®æŽ¥ç¶šç¢ºèªã‚‚å¯èƒ½ã ã€‚ è¨å®šã®å¤‰æ›´ SSLã¾ã‚ã‚Šã®çŸ¥è˜

hatekun33 2015/04/07

ãƒªãƒ³ã‚¯

Apacheã§OpenSSLã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¼·åŒ–ã™ã‚‹ - Qiita

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ©ãƒ³ã‚¯ã®ç¢ºèª OpenSSLã‚’åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹æ–¹ã¯ä¸‹è¨˜ã‚µã‚¤ãƒˆã§ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ©ãƒ³ã‚¯ã‚’ç¢ºèªã—ã¦ã¿ã‚‹ã¨è‰¯ã„ã§ã—ã‚‡ã†ã€‚ https://sslcheck.globalsign.com/ja/ apacheã®è¨å®š /etc/httpd/conf.d/ssl.confãªã©ã«ä¸‹è¨˜ã‚’è¿½åŠ ã—ã¾ã—ã‚‡ã†ã€‚ $ sudo vim /etc/httpd/conf.d/ssl.conf SSLHonorCipherOrder ON ##è¿½è¨˜ SSLCipherSuite EECDH+HIGH:EDH+HIGH:HIGH:MEDIUM:+3DES:!ADH:!RC4:!MD5:!aNULL:!eNULL:!SSLv2:!LOW:!EXP:!PSK:!SRP:!DSS:!KRB5 ##è¿½è¨˜ [è¨±å¯ã•ã‚Œã¦ã‚‹æš—å·æ–¹å¼ã®ç¢ºèªæ–¹æ³•] $ openssl ciphers -v [åˆ¶é™ã—ãŸã¨ãã®æš—å·æ–¹å¼ã®ç¢ºèª] $ ope

hatekun33 2015/04/07

ãƒªãƒ³ã‚¯

ã€ç”»åƒã‚ã‚Šã€‘æ—¥æœ¬ã®æœ€ã‚‚ç¾Žã—ã„å ´æ‰€31é¸ : æš‡äººï¼¼(^o^)ï¼é€Ÿå ± - ãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢ãƒ–ãƒã‚°

ã€ç”»åƒã‚ã‚Šã€‘æ—¥æœ¬ã®æœ€ã‚‚ç¾Žã—ã„å ´æ‰€31é¸ Tweet 1ï¼š ãƒ“ãƒƒã‚°ãƒ–ãƒ¼ãƒ„(æ±æ—¥æœ¬)ï¼ ï¼¼(^o^)ï¼ï¼š2015/04/03(é‡‘) 22:27:23.57 ID:CWhOyPmi0.net ã‚¢ãƒ¡ãƒªã‚«ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹å°‚é–€æ”¾é€å±€ãƒ»CNNã®ã‚¦ã‚§ãƒ–ç‰¹é›†ã«ã¦ã€Œæ—¥æœ¬ã®æœ€ã‚‚ç¾Žã—ã„å ´æ‰€31é¸ ï¼ˆJapanâ€™s 31 most beautiful placesï¼‰ã€ãŒç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚ æ—¥æœ¬ã®ç¾Žã—ã„é¢¨æ™¯ã‚’ã¾ã¨ã‚ãŸã“ã®ç‰¹é›†ã¯ã€æ—¥æœ¬äººã§ã‚‚ã€Œè¡Œã£ã¦ã¿ãŸã„ï¼ã€ã¨æ€ã£ã¦ã—ã¾ã†çµ¶æ™¯ãŸã¡ãŒã‚ºãƒ©ãƒªã€‚ ä¸–ç•Œéºç”£ã«æŒ‡å®šã•ã‚Œã¦ã„ã‚‹ã‚‚ã®ã‹ã‚‰ã€æ—¥æœ¬äººã§ã‚‚æ„å¤–ã¨çŸ¥ã‚‰ãªã‹ã£ãŸã‚¹ãƒãƒƒãƒˆã‚„ã‚¤ãƒ™ãƒ³ãƒˆã‚‚å…¥ã£ã¦ã„ã¾ã—ãŸã€‚ â–¼æ—¥æœ¬ã®æœ€ã‚‚ç¾Žã—ã„å ´æ‰€31é¸ã€€ä¸€è¦§ æ²³å†…è—¤åœ’ï¼ˆç¦å²¡ï¼‰ ç™½é¦¬å…«æ–¹æ± ï¼ˆé•·é‡Žï¼‰ å…ƒä¹ƒéš…ç¨²æˆç¥žç¤¾ï¼ˆå±±å£ï¼‰ äº”ç®‡å±± åˆæŽŒã®é‡Œï¼ˆå¯Œå±±ï¼‰ è”µçŽ‹æ¸©æ³‰ã‚¹ã‚ãƒ¼å ´ï¼ˆå±±å½¢ï¼‰ å›½å–¶ã²ãŸã¡æµ·æµœå…¬åœ’ã®ãƒãƒ¢ãƒ•ã‚£ãƒ©ãƒãƒ¼ãƒ¢ãƒ‹ãƒ¼ï¼ˆèŒ¨åŸŽï¼‰ åˆ¥åºœãƒãƒ¼ãƒ—ã‚¦ã‚§ã‚¤ï¼ˆå¤§åˆ†ï¼‰ æ¾æœ¬åŸŽï¼ˆé•·é‡Žï¼‰ ç™½

hatekun33 2015/04/07

ãƒªãƒ³ã‚¯

æœ€è¿‘ Stop using tail -f (mostly) ã‚„ ã€Œtail -fã€ã‚’ä½¿ã†ã®ã¯æƒ…å¼±ã€æƒ…å¼·ã¯ã€Œless +Fã€ã‚’ä½¿ã† ãªã©lessæŠ¼ã—ãªè¨˜äº‹ãŒå¹¾ã¤ã‹ä¸ŠãŒã£ã¦ã„ã‚‹ã‚“ã ã‘ã©ã€ã‚¿ã‚¤ãƒˆãƒ«ãŒç…½ã‚Šæ°—å‘³ãªã®ã‹è‹¥å¹²åæ„Ÿã‚’å‘¼ã‚“ã§ã„ã‚‹ã‚ˆã†ãªã®ã§lessæ´¾ãŒè·å ´ã§è‚©èº«ã®ç‹ã„æ€ã„ã‚’ã—ãªã„ã‚ˆã†ã«ã‚‚ã†å°‘ã—ä¾¿åˆ©ãªä½¿ã„æ–¹ã‚’ç´¹ä»‹ã—ãŸã„ã€‚ tail -fã®æ§˜ãªScroll forward less +Fã§èµ·å‹•ã¾ãŸã¯lessèµ·å‹•ä¸ã«F å…ƒè¨˜äº‹ã«ã‚‚ã‚ã‚‹tail -fã¨åŒæ§˜ã®æŒ¯ã‚‹èˆžã„ã€‚æ£ç›´ã“ã®æ©Ÿèƒ½ã¨æ¤œç´¢ã ã‘ã§ã„ã„ã®ã§ã‚ã‚Œã°tailã§ååˆ†ã€‚lessã®ä¾¿åˆ©ãªã¨ã“ã‚ã¯æ§˜ã€…ãªæ©Ÿèƒ½ã¨ã®çµ„ã¿åˆã‚ã›ã«ã‚ã£ã¦ã€ã“ã‚Œã‹ã‚‰ç´¹ä»‹ã™ã‚‹æ©Ÿèƒ½ã¯åŸºæœ¬çš„ã«ã“ã®ãƒ¢ãƒ¼ãƒ‰ã¨çµ„ã¿åˆã‚ã›ãŒå¯èƒ½ã ã€‚ã‚ã¨ã€lessé–‹ã„ã¦Fã®ã»ã†ãŒã‚¿ã‚¤ãƒ—ãŒé¢å€’ãã•ããªã„ã®ã§ãŠã™ã™ã‚ã€‚ 1è¡Œã§è¡¨ç¤ºã™ã‚‹ (æ”¹è¡Œã—ãªã„) less -Sã§èµ·å‹•ã¾ãŸã¯lessèµ·å‹•ä¸ã«-Sr(-Sã§ãƒ¢ãƒ¼ãƒ‰åˆ‡

hatekun33 2015/04/07

ãƒªãƒ³ã‚¯

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ã‚¿ã‚°

2015å¹´4æœˆ7æ—¥ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4ä»¶)

SSLCipherSuite ã‚’å¤‰æ›´ã— perfect forward secrecy ã«ã‚‚å¯¾å¿œã—ã¦ã¿ã‚‹ - ã•ãã‚‰VPS CentOS 6.5 - IMPOV::In My Point Of View

Apacheã§OpenSSLã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¼·åŒ–ã™ã‚‹ - Qiita

ã€ç”»åƒã‚ã‚Šã€‘æ—¥æœ¬ã®æœ€ã‚‚ç¾Žã—ã„å ´æ‰€31é¸ : æš‡äººï¼¼(^o^)ï¼é€Ÿå ± - ãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢ãƒ–ãƒã‚°

Lessã®ä¾¿åˆ©ãªä½¿ã„æ–¹

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

ã€Œã‚ã¨ã§èªã‚€ã€ã‚¿ã‚°ã§æŒ¯ã‚Šè¿”ã‚‹2024å¹´ ã€œä»Šå¹´ã®ã€Œã‚ã¨ã§èªã‚€ã€ã€ä»Šå¹´ã®ã†ã¡ã«ã€œ

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

ã‚¿ã‚°

2015å¹´4æœˆ7æ—¥ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4ä»¶)

SSLCipherSuite ã‚’å¤‰æ›´ã— perfect forward secrecy ã«ã‚‚å¯¾å¿œã—ã¦ã¿ã‚‹ - ã•ãã‚‰VPS CentOS 6.5 - IMPOV::In My Point Of View

Apacheã§OpenSSLã®ã‚»ã‚­ãƒ¥ãƒªãƒ†ã‚£ã‚’å¼·åŒ–ã™ã‚‹ - Qiita

ã€ç”»åƒã‚ã‚Šã€‘æ—¥æœ¬ã®æœ€ã‚‚ç¾Žã—ã„å ´æ‰€31é¸ : æš‡äººï¼¼(^o^)ï¼é€Ÿå ± - ãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢ãƒ–ãƒ­ã‚°

Lessã®ä¾¿åˆ©ãªä½¿ã„æ–¹

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚­ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

ã€Œã‚ã¨ã§èª­ã‚€ã€ã‚¿ã‚°ã§æŒ¯ã‚Šè¿”ã‚‹2024å¹´ ã€œä»Šå¹´ã®ã€Œã‚ã¨ã§èª­ã‚€ã€ã€ä»Šå¹´ã®ã†ã¡ã«ã€œ

å…¬å¼Twitter

ã‚­ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹

2015å¹´4æœˆ7æ—¥ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (4ä»¶)

SSLCipherSuite ã‚’å¤‰æ›´ã— perfect forward secrecy ã«ã‚‚å¯¾å¿œã—ã¦ã¿ã‚‹ - ã•ãã‚‰VPS CentOS 6.5 - IMPOV::In My Point Of View

Apacheã§OpenSSLã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å¼·åŒ–ã™ã‚‹ - Qiita

ã€ç”»åƒã‚ã‚Šã€‘æ—¥æœ¬ã®æœ€ã‚‚ç¾Žã—ã„å ´æ‰€31é¸ : æš‡äººï¼¼(^o^)ï¼é€Ÿå ± - ãƒ©ã‚¤ãƒ–ãƒ‰ã‚¢ãƒ–ãƒã‚°

Lessã®ä¾¿åˆ©ãªä½¿ã„æ–¹

ãŠçŸ¥ã‚‰ã›

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2025å¹´1æœˆç¬¬1é€±ï¼‰

ä»Šé€±ã®ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯æ•°ãƒ©ãƒ³ã‚ãƒ³ã‚°ï¼ˆ2024å¹´12æœˆç¬¬4é€±ï¼‰

ã€Œã‚ã¨ã§èªã‚€ã€ã‚¿ã‚°ã§æŒ¯ã‚Šè¿”ã‚‹2024å¹´ ã€œä»Šå¹´ã®ã€Œã‚ã¨ã§èªã‚€ã€ã€ä»Šå¹´ã®ã†ã¡ã«ã€œ

å…¬å¼Twitter

ã‚ãƒ¼ãƒœãƒ¼ãƒ‰ã‚·ãƒ§ãƒ¼ãƒˆã‚«ãƒƒãƒˆä¸€è¦§

ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

å…¬å¼Twitter

ã¯ã¦ãªã®ã‚µãƒ¼ãƒ“ã‚¹