[B! ssl] heavenshellã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

heavenshell id:heavenshell

sslã«é–¢ã™ã‚‹heavenshellã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

let's encrypt ã§è¤‡æ•°ãƒ›ã‚¹ãƒˆåå¯¾å¿œãªè¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ - æ—¥è¨˜
letâ€™s encrypt ã§è¤‡æ•°ãƒ›ã‚¹ãƒˆåå¯¾å¿œãªè¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ ã‚¿ã‚¤ãƒˆãƒ«é€šã‚Šã§ã™ãŒã€å‰²ã¨ç°¡å˜ã«è¤‡æ•°ã®ãƒ›ã‚¹ãƒˆåã«å¯¾å¿œã—ãŸè¨¼æ˜Žæ›¸ãŒå–å¾—ã§ãã‚‹ã®ã§ã€ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ ä»Šå›žã¯ ansible playbook ã®ãŠã¾ã‘ä»˜ãã§ã™ã€‚ letâ€™s encrypt ã®å›°ã£ãŸå•é¡Œ letâ€™s encrypt ã§ã¯ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ãŒç„¡ã„ã®ã§ã€è¤‡æ•°ã®ãƒ›ã‚¹ãƒˆåã‚’1å°ã®ã‚µãƒ¼ãƒã§ãƒ›ã‚¹ãƒ†ã‚£ãƒ³ã‚°ã§ããªã„ãŸã‚ã€ã¡ã‚‡ã£ã¨å›°ã£ã¦ã„ã¾ã—ãŸã€‚ ã‚°ã‚°ã£ã¦èª¿ã¹ã¦ã¿ãŸã‚‰ã€letâ€™s encrypt ã¯ SAN å¯¾å¿œã®è¨¼æ˜Žæ›¸ã ã£ãŸã‚‰ç™ºè¡Œã§ãã‚‹ã€ã¨è¨€ã†ã“ã¨ã ã£ãŸã®ã§å®Ÿéš›ã«ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ ãã®å‰ã«ã€SAN ã£ã¦ä½•ã‚ˆï¼Ÿ ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã ã¨è‰¯ãèžãã¨æ€ã†ã®ã§ã™ãŒã€ SAN ã£ã¦ä½•ã‚ˆï¼Ÿã¨æ€ã†äººã‚‚å¤šã„ã¨æ€ã„ã¾ã™ã€‚ SAN ã¨ã¯ Subject Alternative Name ã®ç•¥ç§°ã§ã€ã‚µãƒ–ã‚¸ã‚§ã‚¯ãƒˆã®åˆ¥åã§ã™ã€‚ ã‚“ï¼Ÿã‚µãƒ–ã‚¸ã‚§ã‚¯ãƒˆã£ã¦ãªã«ï¼Ÿã€€
heavenshell 2016/08/22
ssl
ãƒªãƒ³ã‚¯
SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘
1. SSL/TLSã®åŸºç¤Žã¨æœ€æ–°å‹•å‘ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚ãƒ£ãƒ³ãƒ— 2015 2015å¹´8æœˆ12æ—¥ IIJ å¤§æ´¥ ç¹æ¨¹ æ›´æ–°ç‰ˆè³‡æ–™ã®ç½®å ´ http://goo.gl/cX1M17 Github Repo: https://goo.gl/vRLzrj 2. è‡ªå·±ç´¹ä»‹ â€¢ å¤§æ´¥ ç¹æ¨¹ â€¢ æ ªå¼ä¼šç¤¾ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ– â€¢ ãƒ—ãƒãƒ€ã‚¯ãƒˆæœ¬éƒ¨ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºéƒ¨ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™º2èª² â€¢ NodeJS Technical Committee ãƒ¡ãƒ³ãƒãƒ¼ â€¢ (ä¸»ã«TLS/CRYPTO/OpenSSLãƒã‚¤ãƒ³ãƒ‡ã‚£ãƒ³ã‚°ã‚’æ‹…å½“ï¼‰ â€¢ IETF httpbis WG ã§ HTTP/2ç›¸äº’æŽ¥ç¶šè©¦é¨“ç‰ä»•æ§˜ç–å®šã«å‚ç”»ã€‚ â€¢ ãƒ–ãƒã‚°ï¼š http://d.hatena.ne.jp/jovi0608/ 3. ã¯ã˜ã‚ã« â€¢ TLS(Transport Layer Security)ã®ä»•çµ„ã¿ã«ã¤ã„ã¦å¦ã‚“ã§ã„ãŸã ã ã¾ã™ã€‚ â€¢
heavenshell 2015/08/14
ssl
ãƒªãƒ³ã‚¯
ç„¡æ–™ã®SSLè¨¼æ˜Žæ›¸StartSSLã‚’æ´»ç”¨ã™ã‚‹ - Qiita
èƒŒæ™¯ è‡ªå‰ã®ã‚µãƒ¼ãƒ“ã‚¹ã§httpsé€šä¿¡ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã«ã¯ã€SSLè¨¼æ˜Žæ›¸ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ è‡ªåˆ†ã§ä½¿ç”¨ã™ã‚‹ã ã‘ãªã‚‰ã€SSLè¨¼æ˜Žæ›¸ã‚‚è‡ªå‰ã§ä½œæˆã™ã‚‹ã„ã‚ã‚†ã‚‹ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ç”¨ã„ã¦ã‚‚è‰¯ã„ã®ã§ã™ãŒã€å¤–éƒ¨ã«å…¬é–‹ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®å ´åˆãã†ã¨ã‚‚è¡Œãã¾ã›ã‚“ã€‚ SSLè¨¼æ˜Žæ›¸ã¨ã„ã†ã¨å€¤æ®µãŒé«˜ã„å°è±¡ãŒã‚ã‚Šã¾ã—ãŸãŒã€StartSSLã¨ã„ã†ã‚µãƒ¼ãƒ“ã‚¹ã§ç„¡æ–™ã§SSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’å—ã‘ã‚‰ã‚Œã‚‹ã¨è¨€ã†ã“ã¨ã§è©¦ã—ã¦ã¿ã¾ã—ãŸã€‚ StartSSLã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã™ã‚‹ è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã‚’è¡Œã†å‰ã«ã€StartSSLã«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç™»éŒ²ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ StartSSLã‹ã‚‰ã€"StartSSL Free (Class1)"ã‚’é¸æŠžã—ã¾ã™ã€‚ Certificate Control Panelã‚’é¸æŠžã€‚ Sign-upã«é€²ã¿ã¾ã™ã€‚ åå‰ã€ä½æ‰€ã€ãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ãªã© å€‹äººæƒ…å ±ã®ç™»éŒ²ã‚’è¡Œã„ã¾ã™ã€‚ ç™»éŒ²ã—ãŸãƒ¡ãƒ¼ãƒ«ã‚¢ãƒ‰ãƒ¬ã‚¹ã«æœ¬äººç¢ºèªã®ãƒ¡ãƒ¼ãƒ«ãŒå±Šãã®ã§ã€å—ä¿¡ã—ãŸãƒ¡ãƒ¼ãƒ«ã®a
heavenshell 2014/05/10
çœŸã£å…ˆã«å¤§ä¸ˆå¤«ãªã®ã“ã‚Œã¨æ€ã£ã¦ã—ã¾ã£ãŸâ€¦ã€‚

ssl
ãƒªãƒ³ã‚¯
Mac OS X 10.9.2ã§GitHubã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ã‚¨ãƒ©ãƒ¼ãŒç™ºç”Ÿã™ã‚‹å ´åˆã®è§£æ±ºç– - orangain flavor
å•é¡Œ Mavericks ã®æœ€æ–°ã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆï¼ˆ10.9.2ï¼‰ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸå¾Œã€Google Chromeã§GitHubã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸæ™‚ã«ã€SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ã‚¨ãƒ©ãƒ¼ãŒè¡¨ç¤ºã•ã‚Œã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ ã“ã®ã‚ˆã†ã«ã€Œå®Ÿéš›ã® github.com ã«æŽ¥ç¶šã§ããªã„ã€ã¨è¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ ã‚¢ãƒ‰ãƒ¬ã‚¹ãƒãƒ¼ã®ã‚¢ã‚¤ã‚³ãƒ³ã‚’ã‚¯ãƒªãƒƒã‚¯ã—ã¦è¨¼æ˜Žæ›¸ã‚’è¡¨ç¤ºã•ã›ã‚‹ã¨ã€ä»¥ä¸‹ã®ã‚ˆã†ã«DigiCertã«ã‚ˆã£ã¦ç½²åã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒã‚ã‹ã‚Šã¾ã™ã€‚ Bitbucketã§ã‚‚åŒã˜ãã‚¨ãƒ©ãƒ¼ãŒè¡¨ç¤ºã•ã‚Œã¾ã™ã€‚Bitbucketã®è¨¼æ˜Žæ›¸ã‚‚DigiCertã«ã‚ˆã‚‹ã‚‚ã®ã§ã™ã€‚ Safariã§ã‚‚è¨¼æ˜Žæ›¸ã®ã‚¨ãƒ©ãƒ¼ãŒè¡¨ç¤ºã•ã‚Œã¾ã—ãŸã€‚ *1 ã‚¿ãƒ¼ãƒŸãƒŠãƒ«ã§ã€git cloneã—ãŸã¨ãã«ã‚‚ä»¥ä¸‹ã®ã‚ˆã†ã«ã‚¨ãƒ©ãƒ¼ãŒè¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ $ git clone https://github.com/rails/rails.git Cloning into 'rails'... e
heavenshell 2014/04/15
ssl

mac
ãƒªãƒ³ã‚¯
nginx ã§ SSL è¨¼æ˜Žæ›¸ã‚’ä½œæˆã—ãŸã¨ãã®æ‰‹é † - make world
ç§˜å¯†éµã®ç”Ÿæˆ # cd /etc/ssl # openssl sha1 /var/log/messages > rand.dat # ls openssl.conf rand.dat # openssl genrsa -rand rand.dat -des3 2048 > 20101128_key_with_pass.pem 66 semi-random bytes loaded Generating RSA private key, 2048 bit long modulus .........................................................................................+++ ............................................+++ e is 65537 (0x100
heavenshell 2011/01/26
nginx

ssl
ãƒªãƒ³ã‚¯
1