[B! ssl] hokacchaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hokaccha id:hokaccha

sslã«é–¢ã™ã‚‹hokacchaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (19)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

è‡ªç¤¾ã‚µãƒ¼ãƒã¨äº¤ä¿¡ã™ã‚‹ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ‰‹æ³•ã«ã¤ã„ã¦ï¼ˆSSL Pinningã¨ç‹¬è‡ªCAå†è€ƒï¼‰
â– èƒŒæ™¯ è‡ªç¤¾ã®ã‚µãƒ¼ãƒã¨é€šä¿¡ã™ã‚‹è‡ªç¤¾ã‚¢ãƒ—ãƒªã«ã¤ã„ã¦ã€æœ¬æ¥ä¸è¦ã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšä»–ç¤¾ã§ã‚ã‚‹CAã«èªè¨¼æƒ…å ±ã®ç®¡ç†ã‚’å§”è¨—ã™ã‚‹ã“ã¨ãŒå¤šã„ã‚ã‘ã§ã™ãŒã€CAãŒè¨¼æ˜Žæ›¸ã‚’èª¤ç™ºè¡Œã—ãŸçµæžœæƒ…å ±æ¼æ´©ãŒç™ºç”Ÿã—ãŸã¨ã—ã¦ã€ãã®è²¬ä»»ã¯è‡ªç¤¾ã«ã¯ãªã„ã¨ä¸»å¼µã§ãã‚‹ã®ã‹ã€ã‚‚ã†ä¸€åº¦è€ƒãˆãªãŠã—ãŸã»ã†ãŒã„ã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨æ€ã†ã‚“ã§ã™ â€” Kazuho Oku (@kazuho) July 15, 2014 .@ockeghem @smbd @ando_Tw ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã®æä¾›ã«ãŠã„ã¦ã¯ã‚³ãƒ¼ãƒ‰ã®ç½²åéµã‚’å®‰å…¨ã«ç®¡ç†ã™ã‚‹ã“ã¨ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ãŒã€ãã®å‰æã«ãŠã„ã¦é€šä¿¡ç›¸æ‰‹ã®èªè¨¼ç®¡ç†ã‚’CAã«å§”è¨—ã™ã‚‹ã“ã¨ã«ã©ã‚Œã»ã©ã®æ„å‘³ãŒã‚ã‚‹ã‚“ã§ã—ã‚‡ã† â€” Kazuho Oku (@kazuho) July 14, 2014 â– ä»–ç¤¾CAã¯ä¿¡é ¼ã§ãã‚‹ã®ã‹ ç‰¹å®šã®CAã«pinningã™ã‚‹ã®ã¯ã—ãªã„ã‚ˆã‚Šå®‰å…¨ã ã‘ã©ã€ãã‚‚ãã‚‚èª¤ç™ºè¡Œã—ãªã„CAãªã‚“ã¦ã‚ã‚‹ã®ã‹ã¨ã„ã†è°è«–ã¯é‡è¦ã€‚è¦‹çŸ¥
hokaccha 2014/07/16
ssl

security
ãƒªãƒ³ã‚¯
Heart Bleedã‚’èªã‚“ã - The first cry of Atom
int dtls1_process_heartbeat(SSL *s) { unsigned char *p = &s->s3->rrec.data[0], *pl; unsigned short hbtype; unsigned int payload; unsigned int padding = 16; /* Use minimum padding */ heartbeatã¨ã„ã†æ©Ÿèƒ½ã®è©³ã—ã„ã“ã¨ã¯èª¿ã¹ã‚‰ã‚Œã¦ã„ãªã„ã‘ã‚Œã©ã©ã†ã‚„ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒ¼ã‚µãƒ¼ãƒåž‹ã®æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹ã‚‚ã®ã‚‰ã—ã„ã€‚ ã¤ã¾ã‚Šä½•ã‚‰ã‹ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–ã£ã¦ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’è¿”ã™ã‚ˆã†ãªã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹ã‚‚ã®ã‚‰ã—ã„ã€‚dtls1_process_heartbeatã§å¤§äº‹ãªã®ã¯ ãƒã‚¤ãƒ³ã‚¿pã ã€‚ã“ã‚Œã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‡ãƒ¼ã‚¿ã‚’å—ã‘å–ã£ã¦æ ¼ç´ã—ã¦ã„ã‚‹ã€‚ã“ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‡ãƒ¼ã‚¿ã¯æ§‹é€ ä½“ã«ãªã£ã¦ã„ã¦ã€ä»¥ä¸‹ã®ã‚ˆã†ã«è¨˜è¿°ã•ã‚Œã¦ã„ã‚‹ã€‚ typedef struct
hokaccha 2014/04/09
ssl

security
ãƒªãƒ³ã‚¯
Heartbleed Bug
The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, em ail, instant messaging (IM) and some virtual private network
hokaccha 2014/04/09
ssl

security
ãƒªãƒ³ã‚¯
Y!J API ãŒæ¢ã¾ã£ãŸæ—¥ - GlobalSign ã® Root è¨¼æ˜Žæ›¸åˆ‡ã‚Œã‹ã‚‰å¦ã‚“ã ã“ã¨ - OAuth.jp
æ˜¨æ—¥ã‚ãŸã‚Šã‹ã‚‰ã€Yahoo! Wallet ã‚„ YConnect ã¨ã„ã£ãŸã€Yahoo! Japan ã® API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ãŸã£ã¦äººã€ã¡ã‚‰ã»ã‚‰ã„ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãã€‚ åƒ•ã‚‚ã¡ã‚‡ã£ã¨ãã†ã„ã†ã‚±ãƒ¼ã‚¹è¦‹ã‹ã‘ã¾ã—ãŸã€‚ ãªã‚“ã‹ Yahoo! Japan ãŒãƒã‚«ã—ã¡ã‚ƒã£ãŸã®ï¼Ÿã¨ã‹ã€ã¾ãæ˜¨æ—¥ã¾ã§å¥åº·ã«å‹•ã„ã¦ãŸã‚·ã‚¹ãƒ†ãƒ ãŒçªç„¶ Yahoo! Japan ã® API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ã¡ã‚ƒã£ãŸã‚“ã ã—ã€ãã‚‰ãã†æ€ã†ã®ã‚‚ãƒ ãƒªã¯ãªã„ã€‚ ãŒã€ä»Šå›žã®ã‚±ãƒ¼ã‚¹ã€Yahoo! ã¯å…¨ãæ‚ªããªã„ï¼ ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒ•ãƒªãƒ¼ã‚¯ã¯ã©ã†ã‹ã¨æ€ã†ãŒãªï¼ï¼ ã§ã¯æ—©é€Ÿã€ä»Šå›žèµ·ã“ã£ãŸã“ã¨ã‚’ã€æŒ¯ã‚Šè¿”ã£ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ Yahoo! API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ãŸ Yahoo! Japan ã¯ã€yahoo.co.jp ä»¥å¤–ã«ã‚‚ã€CDN ç”¨ã‚„ API ç”¨ãªã©ã€ç”¨é€”ã”ã¨ã«ã„ãã¤ã‹ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’æŒã£ã¦ã¾ã™ã€‚ ä»Šå›žæ¢ã¾ã£ãŸã®ã¯ã€ãã®ä¸ã® API ç”¨
hokaccha 2014/01/31
ssl

security
ãƒªãƒ³ã‚¯
herokuã«ã¦ç‹¬è‡ªãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚¢ãƒ—ãƒªã§SSLã‚’ä½¿ã†(SNI SSL) | Offside
herokuã§SSLã‚’ä½¿ã†å ´åˆã€ä»¥ä¸‹ã®4ã¤ã®ãƒ—ãƒ©ãƒ³ãŒã‚ã‚Šã¾ã™ã€‚ Piggyback SSL (ç„¡æ–™) SNI SSL ($5/æœˆ) Hostname Based SSL ($20/æœˆ) IP Based Custom SSL ($100/æœˆ) herokuã§å‹•ã‹ã™ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒã€heroku.comãƒ‰ãƒ¡ã‚¤ãƒ³ã§è‰¯ã„å ´åˆã¯Piggyback SSLã‚’ä½¿ã†ã“ã¨ãŒã§ãã¾ã™ãŒã€ç‹¬è‡ªãƒ‰ãƒ¡ã‚¤ãƒ³ã§SSLã‚’ä½¿ã†å ´åˆã€ä»–ã®ãƒ—ãƒ©ãƒ³ã‚’é¸æŠžã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ä»Šå›žã¯æœ€ã‚‚å®‰ä¾¡ãªSNI SSLã«ã¤ã„ã¦èª¿ã¹ã¦ã¿ã¾ã—ãŸã€‚ ãã‚‚ãã‚‚ã€SNIã¨ã¯ä½•ã‹ï¼Ÿã§ã™ãŒã€http://www.ssl-secure.jp/faq.html#about_sniã«ã‚ˆã‚‹ã¨ã€ SNIæ‹¡å¼µã¯ã€ã€Œåå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã€ã§è¤‡æ•°ã®SSLç’°å¢ƒã‚’åˆ©ç”¨å‡ºæ¥ã‚‹ã‚ˆã†ã«ã™ã‚‹æŠ€è¡“ã§ã™ã€‚ å¾“æ¥ã€ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆç’°å¢ƒã§SSLã‚’åˆ©ç”¨ã™ã‚‹ã«ã¯ã€ŒIPãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«
hokaccha 2012/02/20
heroku

ssl
ãƒªãƒ³ã‚¯
Heroku SSL | Heroku Dev Center
SSL is a cryptographic protocol that provides end-to-end encryption and integrity for all web requests. Enable SSL on apps that transmit sensitive data to ensure all information is transmitted securely. Heroku SSL is a combination of features that enables SSL for all Heroku apps. Heroku SSL uses Server Name Indication (SNI), an extension of the widely supported TLS protocol. Certificate Options Ap
hokaccha 2012/02/20
heroku

ssl
ãƒªãƒ³ã‚¯
How To Setup SSL on Heroku - @ayb's Posterous
hokaccha 2012/02/20
heroku

ssl
ãƒªãƒ³ã‚¯
iOSç‰ˆã®Pathã¯SSLã®è¨¼æ˜Žæ›¸ã‚¨ãƒ©ãƒ¼ã‚’ç„¡è¦–ã—ã¦ã„ã‚‹ â†’ ä¿®æ£ã•ã‚ŒãŸ - é‡‘åˆ©0ç„¡åˆ©æ¯ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚° â€“ ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚°ã§ãã¾ã™ - subtech
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
hokaccha 2012/02/15
ssl

security

path
ãƒªãƒ³ã‚¯
Furlã§httpsãƒªã‚¯ã‚¨ã‚¹ãƒˆãŒtimeoutã«ãªã‚‹å ´åˆãŒã‚ã‚‹ä»¶
FUJI Goro @__gfx__ ãªãœã ã‚ã†ã€‚ç’°å¢ƒã¯ï¼Ÿé€†ã«bufsizeãŒå°ã•ã„ã¨ã‚‚ã£ã¨å°‘ãªãã¦ã‚‚å•é¡ŒãŒãŠãã‚‹ã®ã‹ãªï¼Ÿ / Furlã§èº“ã„ã¦ã‚‹é€”ä¸ - ã™ãŽã‚ƒãƒ¼ã‚“ãƒ¡ãƒ¢ http://t.co/UU4TWm4 ã™ãŽã‚ƒãƒ¼ã‚“ðŸ’¯ @sugyan @__gfx__ ã‚ã€è‡ªåˆ†ã®Macãƒãƒ¼ã‚«ãƒ«ç’°å¢ƒã§ã—ã‹è©¦ã—ã¦ãªã„ã§ã™ã€‚å¤–éƒ¨ã‚µã‚¤ãƒˆã¨ã‹ã§ã‚‚bufsizeå°ã•ãã™ã‚‹ã¨èµ·ã“ã‚‹ã“ã¨ãŒã‚ã£ãŸã‚“ã§ã™ãŒ ã†ã¾ãå†ç¾ã§ããšã€ã€
hokaccha 2011/08/23
perl

http

ssl
ãƒªãƒ³ã‚¯
stone ã‚’ä½¿ã£ã¦ tiarra ã‚’ SSL åŒ–ã™ã‚‹æ–¹æ³• - KAYAC Engineers' Blog
ãƒžãƒ³ã‚¬ååˆºã‚’å¿ƒå¾…ã¡ã«ã—ã¦ã„ã‚‹ nagata (@handlename) ã§ã™ã€‚ ä»Šå›žã¯ IRC proxy ã® tiarra ã‚’ SSL ã§ä½¿ã†æ–¹æ³•ã‚’ç´¹ä»‹ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ tiarra ã£ã¦ï¼Ÿ ã‚µãƒ¼ãƒãƒ¼ã«å¸¸é§ã™ã‚‹IRCã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå…¼ã‚µãƒ¼ãƒãƒ¼ã€ã¨ã§ã‚‚è¨€ãˆã°ã„ã„ã®ã§ã—ã‚‡ã†ã‹ã€‚ IRCä½¿ã†äººã«ã¨ã£ã¦ã¯å‰²ã¨å¸¸è˜ã£ã½ã„ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¿ãŸã„ã§ã™ï¼ˆã¼ãã¯æœ€è¿‘çŸ¥ã‚Šã¾ã—ãŸï¼‰ã€‚ é€šå¸¸IRCã¯æŽ¥ç¶šã—ã¦ã„ã‚‹é–“ã®ç™ºè¨€ã—ã‹è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã›ã‚“ã€‚ ãŒã€ã‚µãƒ¼ãƒãƒ¼ã«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’å¸¸é§ã•ã›ã€ ãã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«å¯¾ã—ã¦ãƒãƒ¼ã‚«ãƒ«ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚’æŽ¥ç¶šã™ã‚‹ã“ã¨ã«ã‚ˆã£ã¦ã€ ãƒãƒ¼ã‚«ãƒ«ãªã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰æŽ¥ç¶šã—ã¦ã„ãªã„çŠ¶æ…‹ã®ç™ºè¨€ã‚‚æ‹¾ã†ã“ã¨ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ SSL æŽ¥ç¶šã—ãŸã„ï¼ ä¾¿åˆ©ãª tiarra ãªã®ã§ã™ãŒã€ã„ã¾ã®ã¨ã“ã‚ SSL æŽ¥ç¶šã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã›ã‚“ã€‚ SSL ã§æŽ¥ç¶šã§ããªã„ã¨ãƒ»ãƒ»ãƒ» IRC ã®ç™ºè¨€ã¯å¹³æ–‡ã§ã‚„ã‚Šã¨ã‚Šã•ã‚Œã‚‹
hokaccha 2010/11/18
irc

ssl
ãƒªãƒ³ã‚¯
stunnel ã‚’ä½¿ã£ã¦ irssi ã‚’ SSL åŒ–ã™ã‚‹æ–¹æ³• - KAYAC Engineers' Blog
æœ€è¿‘ã€è‡ªç”±ãŒä¸˜ã®ã‚ãƒ£ãƒƒãƒˆãƒ•ã‚¡ã‚¤ãƒˆï¼ˆãƒªã‚¢ãƒ«çŒ«çš„ãªæ„å‘³ã§ï¼‰ãŒå…ƒæ°—ã ãªãã€ã¨æ„Ÿã˜ã¦ã„ã‚‹ã€æŠ€è¡“éƒ¨ã®taiyohã§ã™ã€‚ å¼Šç¤¾é•·ç”°ãŒå…ˆã»ã©ã€Œstone ã‚’ä½¿ã£ã¦ tiarra ã‚’ SSL åŒ–ã™ã‚‹æ–¹æ³•ã€ã¨ã„ã†ã‚¨ãƒ³ãƒˆãƒªã‚’ã‚¢ãƒƒãƒ—ã—ã¦ã„ã¾ã—ãŸãŒã€åƒ•ã¯é•ã†ã‚„ã‚Šæ–¹ã ãªãã€ã¨ã„ã†ã“ã¨ã§ã€æ›¸ãæ®‹ã—ã¦ãŠãã¾ã™ã€‚ ã¾ãšã€irc proxyã«ã¯irssiã‚’ä½¿ç”¨ã—ã¦ã„ã¾ã™ã€‚ ã“ã®ã‚ãŸã‚Šã®ç’°å¢ƒæ§‹ç¯‰æ–¹æ³•ã«ã¤ã„ã¦ã¯ã€@hokacchaã®ãƒ–ãƒã‚°ã®ç¥žã‚¨ãƒ³ãƒˆãƒªã€Œirssiã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦ã‹ã‚‰ã‚„ã£ãŸã“ã¨ã®ã¾ã¨ã‚ã€ã‚’ã”å‚ç…§ã„ãŸã ããŸã„ã¨æ€ã„ã¾ã™ã€‚ ã•ã¦ã€è‚å¿ƒã®é€šä¿¡ã®SSLåŒ–ã«ã¤ã„ã¦ã§ã™ãŒã€è¡¨é¡Œã«ã‚‚ã‚ã‚Šã¾ã™ãŒã€åƒ•ã¯stunnelã¨ã„ã†ãƒ„ãƒ¼ãƒ«ã‚’ä½¿ã£ã¦ã„ã¾ã™ã€‚ æ£ç›´ãªã¨ã“ã‚ã€stoneã¨ã®é•ã„ãŒã‚ˆãåˆ†ã‹ã£ã¦ã„ã¾ã›ã‚“ã€‚stoneãŒãƒ—ãƒã‚»ã‚¹å˜ä½ã§ãƒãƒ¼ãƒˆã‚’ç«‹ã¦ã‚‹ã®ã«å¯¾ã—ã¦ã€stunnelã¯è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½¿ã£ã¦ã€ï¼‘ãƒ—ãƒã‚»ã‚¹ã§ãƒãƒ¼ãƒˆã®ç®¡ç†ã‚’ã™ã¹ã¦è¡Œã„ã¾ã™
hokaccha 2010/11/18
irc

ssl
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ã€ŒVeriSignã‚·ãƒ¼ãƒ«ã€ã¨ã„ã†å¹»æƒ³
â– ã€ŒVeriSignã‚·ãƒ¼ãƒ«ã€ã¨ã„ã†å¹»æƒ³ ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã§ã¯ãªã„SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯ã€2ã¤ã®ç‹¬ç«‹ã—ãŸæ©Ÿèƒ½ã‚’æžœãŸã—ã¦ã„ã‚‹ã¨è¨€ãˆã‚‹ã€‚1ã¤ç›®ã¯ã€SSLãƒ—ãƒãƒˆã‚³ãƒ«ã«ã‚ˆã‚‹ã‚µãƒ¼ãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã®æš—å·åŒ–é€šä¿¡ã®ãŸã‚ã«ä¸å¯æ¬ ãªå½¹å‰²ã§ã‚ã‚Šã€2ã¤ç›®ã¯å½“è©²ã‚µã‚¤ãƒˆé‹å–¶è€…ã®å®Ÿåœ¨è¨¼æ˜Žã®æ©Ÿèƒ½ã§ã‚ã‚‹ã€‚ãŸã ã—ã€ä»Šæ—¥ã§ã¯ã€å¾Œè€…ã‚’å«ã¾ãªã„ã€å‰è€…ã ã‘ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚‚ã‚ã‚‹ã€‚ å¾Œè€…ã®å®Ÿåœ¨è¨¼æ˜Žã¯ã€ã‹ã¤ã¦ã¯èªè¨¼å±€ã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹å„äº‹æ¥è€…ãŒãã‚Œãžã‚Œã®ç‹¬è‡ªã®åŸºæº–ã§ã€ã‚µã‚¤ãƒˆé‹å–¶è€…ã®å®Ÿåœ¨æ€§ã‚’ç¢ºèªã€èªè¨¼ã—ã¦ã„ãŸãŒã€ãã‚Œã§ã¯åˆ©ç”¨è€…ã«ã‚ã‹ã‚Šã«ãã„ã“ã¨ã‹ã‚‰ã€èªè¨¼ã®éš›ã®å®Ÿåœ¨æ€§ç¢ºèªã®æ–¹æ³•ãŒæ¨™æº–åŒ–ã•ã‚Œã€èª•ç”Ÿã—ãŸã®ãŒEV SSLã§ã‚ã£ãŸã€‚ ãã®çµæžœã€VeriSignãªã©ã€å¤ãã‹ã‚‰å®Ÿåœ¨è¨¼æ˜Žã«åŠ›ã‚’å…¥ã‚Œã¦ã„ãŸèªè¨¼å±€ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ã€EVã®ã‚‚ã®ã¨EVã§ãªã„å®Ÿåœ¨è¨¼æ˜Žä»˜ãã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®2ç¨®é¡žãŒå˜åœ¨ã™ã‚‹ã“ã¨ã¨ãªã£ãŸã€‚VeriSignã§ã¯ã€EVè¨¼æ˜Žæ›¸ã®æä¾›é–‹å§‹å¾Œã‚‚ã€EVã§ãªã„å®Ÿ
hokaccha 2010/06/01
ssl

security
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - å…±ç”¨SSLã‚µãƒ¼ãƒã®å±é™ºæ€§ãŒç†è§£ã•ã‚Œã¦ã„ãªã„
â– å…±ç”¨SSLã‚µãƒ¼ãƒã®å±é™ºæ€§ãŒç†è§£ã•ã‚Œã¦ã„ãªã„ ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®å…¬å¼FAQã«æ¬¡ã®è¨˜è¿°ãŒã‚ã‚‹ã®ã«æ°—ã¥ã„ãŸã€‚ [000735]å…±æœ‰SSLã®åˆ©ç”¨ã‚’è€ƒãˆã¦ã„ã¾ã™ãŒã€æ³¨æ„ã™ã¹ãäº‹é …ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ, ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ ã‚ˆãã‚ã‚‹è³ªå•ï¼ˆFAQï¼‰, 2010å¹´2æœˆ10æ—¥æ›´æ–°ï¼ˆåˆå‡ºæ—¥ä¸æ˜Žï¼‰ Cookieã¯ã€ãƒ‘ã‚¹ãªã©ã‚’æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã‚‹ãŸã‚ã€åˆæœŸãƒ‰ãƒ¡ã‚¤ãƒ³ä»¥å¤–ã§ã¯å…±æœ‰SSLã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹å ´åˆã«Cookieã®ãƒ‘ã‚¹ã‚’æ£ã—ãæŒ‡å®šã—ãªã„ã¨ã€åŒã˜ã‚µãƒ¼ãƒã®ä»–ãƒ¦ãƒ¼ã‚¶ã«ç›—ã¾ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ï¼ˆç•¥ï¼‰ ä¸Šè¨˜ã«ã¤ã„ã¦ã¯ã€ã€ŒåŒã‚µãƒ¼ãƒã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ã ã‘ãŒCookieã‚’ã®ãžãè¦‹ã‚‹ã“ã¨ãŒã§ãã‚‹ã€ã¨ã„ã†ã”ãé™å®šçš„ãªå½±éŸ¿ã‚’ç¤ºã—ã¦ã„ã¦ã„ã¾ã™ã€‚ã¾ãŸã€Cookieã®å–æ‰±ã„ã«ã¤ã„ã¦ã€å•ã„åˆã‚ã›ãƒ•ã‚©ãƒ¼ãƒ ã‚„ã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ã‚«ãƒ¼ãƒˆç‰ã€ãƒ“ã‚¸ãƒã‚¹å‘ã‘ã®ã‚¦ã‚§ãƒ–ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’è¨ç½®ã•ã‚Œã¦ã„ãªã‘ã‚Œã°ç‰¹ã«å¤§ããªå•é¡Œã¨ã¯ãªã‚Šã¾ã›ã‚“ãŒã€å€‹äººæƒ…å ±ã‚’å–ã‚Šæ‰±ã‚ã‚Œã‚‹ç®¡
hokaccha 2010/05/12
ssl

security

sakura
ãƒªãƒ³ã‚¯
IRC ã‚’ SSL ã§å®‰å…¨ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚’ - lql.be::hateda
IRC ã¨ã„ã†ã®ã¯æ—¥å¸¸ã«ãŠã„ã¦é‡è¦ãªãƒ•ã‚¡ã‚¯ã‚¿ãƒ¼ã‚’å ã‚ã¦ã„ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšå¹³æ–‡ã§ã‚„ã‚Šå–ã‚Šã—ã¦ã„ã‚‹ã¨ã„ã†æ—¥ã€…ã«å®‰æ¯ã¯ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ ã¨ã„ã†ã“ã¨ã‚’å”çªã«æ€ã£ãŸã®ã§ãªã‚“ã‹ SSL é€šä¿¡ã—ãŸã„ãªãƒ¼ã¨æ€ã£ãŸã‚“ã ã‘ã© Tiarra ã¯ SSLå¯¾å¿œã—ã¦ãªã„ã—ãªãƒ¼ã¨æ‚©ã‚“ã§ãŸã¨ã“ã‚ stone ã§æ¥½ãƒãƒ³ã« IRC ã‚’ SSL åŒ–ã§ãã‚‹ã‚‰ã—ã„ã®ã§ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ stone ã¨ã„ã†ã®ã¯ãƒˆãƒ³ãƒãƒ«ã‚½ãƒ•ãƒˆã§ã‚µãƒ¼ãƒå†…ã§ãƒãƒ¼ãƒˆã‹ã‚‰ãƒãƒ¼ãƒˆã¸ãƒ‘ã‚±ãƒƒãƒˆã‚’é€šã™ã¨ã„ã†ã“ã¨ãŒã§ãã¦çµæ§‹ port 22 ãŒç©ºã„ã¦ãªã„ã¨ãã« stone ã§åˆ¥ã®ãƒãƒ¼ãƒˆã‹ã‚‰é€šã™ãªã‚“ã¦ã“ã¨ã‚’ã™ã‚‹ã‚“ã ã‘ã© stone è‡ªä½“ãŒSSLé€šä¿¡ã‚’è¡Œãªãˆã‚‹ãŸã‚ tiarra ã¨ stone ã‚’é€šã—ã¦ãƒ‘ã‚±ãƒƒãƒˆã®ã‚„ã‚Šå–ã‚ŠãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ã“ã‚Œã‚’åˆ©ç”¨ã—ã¦ Tiarra ã‚’ SSL ã«å¯¾å¿œã•ã›ã¾ã™ã€‚ æ‰‹é † Simple Repeater `stone' å…¬å¼ã‹ã‚‰ã‚½ãƒ¼ã‚¹ã‚’æŒ
hokaccha 2010/05/07
irc

tiarra

ssl
ãƒªãƒ³ã‚¯
æ—¥æœ¬ãƒ™ãƒªã‚µã‚¤ãƒ³ - Enterprise & Internet Security Solutions
Discover Domain Names Explore Registry Services About Verisign Support
hokaccha 2010/04/26
ssl
ãƒªãƒ³ã‚¯
Apacheã®è¨å®šã‚’å¤‰æ›´ã—ã€å˜ä¸€IPã‚¢ãƒ‰ãƒ¬ã‚¹ä¸Šã§è¤‡æ•°ã®SSLã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ - builder by ZDNet Japan
Apacheã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.2.12ä»¥é™ã§ã¯ã€SNIï¼ˆServer Name Indicationï¼‰ã¨ã„ã†ã€SSLãƒ—ãƒãƒˆã‚³ãƒ«ã«å¯¾ã™ã‚‹æ‹¡å¼µæ©Ÿèƒ½ãŒã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ãŸã‚ã€åå‰ãƒ™ãƒ¼ã‚¹ã®HTTPã‚µã‚¤ãƒˆã‚’è¨å®šã™ã‚‹å ´åˆã¨åŒã˜ã‚ˆã†ã«åå‰ãƒ™ãƒ¼ã‚¹ã®HTTPSã‚µã‚¤ãƒˆã‚’è¨å®šã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã£ã¦ã„ã‚‹ã€‚æœ¬è¨˜äº‹ã§ã¯ã€Apacheã®ã“ã®æ©Ÿèƒ½ã«ã¤ã„ã¦ç´¹ä»‹ã™ã‚‹ã€‚ Apache Webã‚µãƒ¼ãƒãŒãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã—ã€æˆç†Ÿã—ã¦ã„ãã«ä¼´ã„ã€æ–°æ©Ÿèƒ½ã®è¿½åŠ ã‚„ãƒã‚°ã®ä¿®æ£ãŒè¡Œã‚ã‚Œã¦ãã¦ã„ã‚‹ã€‚ãã—ã¦ã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³2.2.12ã§è¿½åŠ ã•ã‚ŒãŸæ©Ÿèƒ½ã®ã†ã¡ã€æœ€ã‚‚é‡è¦ãªã‚‚ã®ã¯ãŠãã‚‰ãã€å˜ä¸€IPã‚¢ãƒ‰ãƒ¬ã‚¹ä¸Šã§è¤‡æ•°ã®SSLã‚µã‚¤ãƒˆã‚’é‹ç”¨ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ã¨ã„ã†ã€é•·ã‚‰ãæŒã¡æœ›ã¾ã‚Œã¦ã„ãŸæ©Ÿèƒ½ã ã‚ã†ã€‚ ã“ã‚Œã¾ã§ã¯ã€ç‰¹å®šã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã«å¯¾ã—ã¦SSLå¯¾å¿œã®Webã‚µã‚¤ãƒˆã‚’å‰²ã‚Šå½“ã¦ãŸå ´åˆã€ãã®ã‚µã‚¤ãƒˆ1ã¤ã—ã‹SSLå¯¾å¿œã®Webã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ã“ã¨ãŒã§ããªã‹ã£ãŸã€‚ã¤ã¾ã‚Šã€IPã‚¢ãƒ‰ãƒ¬
hokaccha 2009/10/28
apache

ssl

sni
ãƒªãƒ³ã‚¯
ã‚¦ãƒŽã‚¦ãƒ©ãƒœ Unoh Labs: PHPã§SSLé€šä¿¡ã™ã‚‹æ™‚ã®æ³¨æ„ç‚¹
yukiã§ã™ã€‚ ä»Šå›žã¯PHPã§SSLé€šä¿¡ã—ãŸã„æ™‚ã®æ³¨æ„ç‚¹ãªã©ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ PHPã§SSLé€šä¿¡ã‚’è¡Œã†éš›ã«ã¯ã€ fsockopenpfsockopenfile_get_contentsfopenstream_socket_client ãªã©æ§˜ã€…ã§ã‚ã‚Šã€åˆ©ç”¨ã™ã‚‹å ´é¢ãŒã‚ã‚Šã¾ã™ãŒã€SSLé€šä¿¡ãŒè¨±å¯ã•ã‚Œã¦ã„ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã‚ˆãHTTP_Requestãªã©ã‚’åˆ©ç”¨ã—ã¦POSTã—ãŸã„ãŒhttpsã ã¨ã†ã¾ãã„ã‹ãªã„ï¼ã¨ã„ã†è¨˜äº‹ã‚’è¦‹ã‹ã‘ã¾ã™ãŒã€å‚è€ƒã«ãªã‚Œã°ã¨æ€ã„ã¾ã™ã€‚ * allow_url_fopenãŒæœ‰åŠ¹ã‹ã©ã†ã‹ ä¸Šè¨˜ã®é–¢æ•°ã«ã¤ã„ã¦file_get_contentsãƒ»fopenã§ã¯ä¸Šè¨˜è¨å®šãŒæœ‰åŠ¹ã‹ã‚’èª¿ã¹ã¾ã™ã€‚ php.iniã§è¨å®šã•ã‚Œã¦ã„ã¾ã™ãŒã€é€šå¸¸ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ä½¿ç”¨å¯èƒ½ãªã®ã§ã™ãŒã€ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãƒ¼ãªã©ã§ã¯ä½¿ãˆãªã„ã“ã¨ã‚‚ã‚ã‚Šã¾ã™ã®ã§èª¿ã¹ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ phpinfo()é–¢æ•°ã‚’åˆ©ç”¨ã™ã‚‹ã‹
hokaccha 2007/09/18
ssl

php
ãƒªãƒ³ã‚¯
ã€Œhttpsâ‡’httpãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆæ™‚ã®è¦å‘Šãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã€ï¼ˆ1ï¼‰ Java Solution ï¼ ï¼ IT
ï¼ IT ä¼šè°å®¤ Indexãƒªãƒ³ã‚¯ Windows Server Insider Insider.NET System Insider XML & SOA Linux Square Master of IP Network Java Solution Security & Trust Database Expert RFIDï¼‹IC ãƒªãƒƒãƒã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ & å¸³ç¥¨ Server ï¼† Storage Coding Edge ï¼ ITã‚¯ãƒ©ãƒ– Cafe VBæ¥å‹™ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³é–‹ç™ºç ”ç©¶ ï¼ IT SpecialPR
hokaccha 2007/06/15
ssl

php
ãƒªãƒ³ã‚¯
1