[B! ssl][security] hokacchaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hokaccha id:hokaccha

sslã¨securityã«é–¢ã™ã‚‹hokacchaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

è‡ªç¤¾ã‚µãƒ¼ãƒã¨äº¤ä¿¡ã™ã‚‹ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ‰‹æ³•ã«ã¤ã„ã¦ï¼ˆSSL Pinningã¨ç‹¬è‡ªCAå†è€ƒï¼‰
â– èƒŒæ™¯ è‡ªç¤¾ã®ã‚µãƒ¼ãƒã¨é€šä¿¡ã™ã‚‹è‡ªç¤¾ã‚¢ãƒ—ãƒªã«ã¤ã„ã¦ã€æœ¬æ¥ä¸è¦ã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšä»–ç¤¾ã§ã‚ã‚‹CAã«èªè¨¼æƒ…å ±ã®ç®¡ç†ã‚’å§”è¨—ã™ã‚‹ã“ã¨ãŒå¤šã„ã‚ã‘ã§ã™ãŒã€CAãŒè¨¼æ˜Žæ›¸ã‚’èª¤ç™ºè¡Œã—ãŸçµæžœæƒ…å ±æ¼æ´©ãŒç™ºç”Ÿã—ãŸã¨ã—ã¦ã€ãã®è²¬ä»»ã¯è‡ªç¤¾ã«ã¯ãªã„ã¨ä¸»å¼µã§ãã‚‹ã®ã‹ã€ã‚‚ã†ä¸€åº¦è€ƒãˆãªãŠã—ãŸã»ã†ãŒã„ã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨æ€ã†ã‚“ã§ã™ â€” Kazuho Oku (@kazuho) July 15, 2014 .@ockeghem @smbd @ando_Tw ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã®æä¾›ã«ãŠã„ã¦ã¯ã‚³ãƒ¼ãƒ‰ã®ç½²åéµã‚’å®‰å…¨ã«ç®¡ç†ã™ã‚‹ã“ã¨ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ãŒã€ãã®å‰æã«ãŠã„ã¦é€šä¿¡ç›¸æ‰‹ã®èªè¨¼ç®¡ç†ã‚’CAã«å§”è¨—ã™ã‚‹ã“ã¨ã«ã©ã‚Œã»ã©ã®æ„å‘³ãŒã‚ã‚‹ã‚“ã§ã—ã‚‡ã† â€” Kazuho Oku (@kazuho) July 14, 2014 â– ä»–ç¤¾CAã¯ä¿¡é ¼ã§ãã‚‹ã®ã‹ ç‰¹å®šã®CAã«pinningã™ã‚‹ã®ã¯ã—ãªã„ã‚ˆã‚Šå®‰å…¨ã ã‘ã©ã€ãã‚‚ãã‚‚èª¤ç™ºè¡Œã—ãªã„CAãªã‚“ã¦ã‚ã‚‹ã®ã‹ã¨ã„ã†è°è«–ã¯é‡è¦ã€‚è¦‹çŸ¥
hokaccha 2014/07/16
ssl

security
ãƒªãƒ³ã‚¯
Heart Bleedã‚’èªã‚“ã - The first cry of Atom
int dtls1_process_heartbeat(SSL *s) { unsigned char *p = &s->s3->rrec.data[0], *pl; unsigned short hbtype; unsigned int payload; unsigned int padding = 16; /* Use minimum padding */ heartbeatã¨ã„ã†æ©Ÿèƒ½ã®è©³ã—ã„ã“ã¨ã¯èª¿ã¹ã‚‰ã‚Œã¦ã„ãªã„ã‘ã‚Œã©ã©ã†ã‚„ã‚‰ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãƒ¼ã‚µãƒ¼ãƒåž‹ã®æ©Ÿèƒ½ã‚’æä¾›ã™ã‚‹ã‚‚ã®ã‚‰ã—ã„ã€‚ ã¤ã¾ã‚Šä½•ã‚‰ã‹ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’å—ã‘å–ã£ã¦ãƒ¬ã‚¹ãƒãƒ³ã‚¹ã‚’è¿”ã™ã‚ˆã†ãªã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹ã‚‚ã®ã‚‰ã—ã„ã€‚dtls1_process_heartbeatã§å¤§äº‹ãªã®ã¯ ãƒã‚¤ãƒ³ã‚¿pã ã€‚ã“ã‚Œã¯ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‡ãƒ¼ã‚¿ã‚’å—ã‘å–ã£ã¦æ ¼ç´ã—ã¦ã„ã‚‹ã€‚ã“ã®ãƒªã‚¯ã‚¨ã‚¹ãƒˆãƒ‡ãƒ¼ã‚¿ã¯æ§‹é€ ä½“ã«ãªã£ã¦ã„ã¦ã€ä»¥ä¸‹ã®ã‚ˆã†ã«è¨˜è¿°ã•ã‚Œã¦ã„ã‚‹ã€‚ typedef struct
hokaccha 2014/04/09
ssl

security
ãƒªãƒ³ã‚¯
Heartbleed Bug
The Heartbleed Bug is a serious vulnerability in the popular OpenSSL cryptographic software library. This weakness allows stealing the information protected, under normal conditions, by the SSL/TLS encryption used to secure the Internet. SSL/TLS provides communication security and privacy over the Internet for applications such as web, em ail, instant messaging (IM) and some virtual private network
hokaccha 2014/04/09
ssl

security
ãƒªãƒ³ã‚¯
Y!J API ãŒæ¢ã¾ã£ãŸæ—¥ - GlobalSign ã® Root è¨¼æ˜Žæ›¸åˆ‡ã‚Œã‹ã‚‰å¦ã‚“ã ã“ã¨ - OAuth.jp
æ˜¨æ—¥ã‚ãŸã‚Šã‹ã‚‰ã€Yahoo! Wallet ã‚„ YConnect ã¨ã„ã£ãŸã€Yahoo! Japan ã® API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ãŸã£ã¦äººã€ã¡ã‚‰ã»ã‚‰ã„ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãã€‚ åƒ•ã‚‚ã¡ã‚‡ã£ã¨ãã†ã„ã†ã‚±ãƒ¼ã‚¹è¦‹ã‹ã‘ã¾ã—ãŸã€‚ ãªã‚“ã‹ Yahoo! Japan ãŒãƒã‚«ã—ã¡ã‚ƒã£ãŸã®ï¼Ÿã¨ã‹ã€ã¾ãæ˜¨æ—¥ã¾ã§å¥åº·ã«å‹•ã„ã¦ãŸã‚·ã‚¹ãƒ†ãƒ ãŒçªç„¶ Yahoo! Japan ã® API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ã¡ã‚ƒã£ãŸã‚“ã ã—ã€ãã‚‰ãã†æ€ã†ã®ã‚‚ãƒ ãƒªã¯ãªã„ã€‚ ãŒã€ä»Šå›žã®ã‚±ãƒ¼ã‚¹ã€Yahoo! ã¯å…¨ãæ‚ªããªã„ï¼ ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒ•ãƒªãƒ¼ã‚¯ã¯ã©ã†ã‹ã¨æ€ã†ãŒãªï¼ï¼ ã§ã¯æ—©é€Ÿã€ä»Šå›žèµ·ã“ã£ãŸã“ã¨ã‚’ã€æŒ¯ã‚Šè¿”ã£ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ Yahoo! API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ãŸ Yahoo! Japan ã¯ã€yahoo.co.jp ä»¥å¤–ã«ã‚‚ã€CDN ç”¨ã‚„ API ç”¨ãªã©ã€ç”¨é€”ã”ã¨ã«ã„ãã¤ã‹ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’æŒã£ã¦ã¾ã™ã€‚ ä»Šå›žæ¢ã¾ã£ãŸã®ã¯ã€ãã®ä¸ã® API ç”¨
hokaccha 2014/01/31
ssl

security
ãƒªãƒ³ã‚¯
iOSç‰ˆã®Pathã¯SSLã®è¨¼æ˜Žæ›¸ã‚¨ãƒ©ãƒ¼ã‚’ç„¡è¦–ã—ã¦ã„ã‚‹ â†’ ä¿®æ£ã•ã‚ŒãŸ - é‡‘åˆ©0ç„¡åˆ©æ¯ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚° â€“ ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚°ã§ãã¾ã™ - subtech
ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®çµ‚äº†æ—¥ã‚’2020å¹´1æœˆ31æ—¥(é‡‘)ã«æ±ºå®šã—ã¾ã—ãŸ ä»¥ä¸‹ã®ã‚¨ãƒ³ãƒˆãƒªã®é€šã‚Šã€ä»Šå¹´æœ«ã‚’ç›®å‡¦ã«ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã‚’çµ‚äº†äºˆå®šã§ã‚ã‚‹æ—¨ã‚’ãŠçŸ¥ã‚‰ã›ã—ã¦ãŠã‚Šã¾ã—ãŸã€‚ 2019å¹´æœ«ã‚’ç›®å‡¦ã«ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®æä¾›ã‚’çµ‚äº†ã™ã‚‹äºˆå®šã§ã™ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã“ã®ãŸã³ã€æ£å¼ã«çµ‚äº†æ—¥ã‚’æ±ºå®šã„ãŸã—ã¾ã—ãŸã®ã§ã€ä»¥ä¸‹ã®é€šã‚Šã”ç¢ºèªãã ã•ã„ã€‚ çµ‚äº†æ—¥: 2020å¹´1æœˆ31æ—¥(é‡‘) ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆå¸Œæœ›ç”³è«‹æœŸé™:2020å¹´1æœˆ31æ—¥(é‡‘) çµ‚äº†æ—¥ä»¥é™ã¯ã€ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã®é–²è¦§ãŠã‚ˆã³æŠ•ç¨¿ã¯è¡Œãˆã¾ã›ã‚“ã€‚æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãŒå¿…è¦ãªæ–¹ã¯ä»¥ä¸‹ã®è¨˜äº‹ã«ã—ãŸãŒã£ã¦æ‰‹ç¶šãã‚’ã—ã¦ãã ã•ã„ã€‚ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—ã«æŠ•ç¨¿ã•ã‚ŒãŸæ—¥è¨˜ãƒ‡ãƒ¼ã‚¿ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆã«ã¤ã„ã¦ - ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ ã”åˆ©ç”¨ã®ã¿ãªã•ã¾ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã„ãŸã—ã¾ã™ãŒã€ã©ã†ãžã‚ˆã‚ã—ããŠé¡˜ã„ã„ãŸã—ã¾ã™ã€‚ 2020-06-25 è¿½è¨˜ ã¯ã¦ãªã‚°ãƒ«ãƒ¼ãƒ—æ—¥è¨˜ã®ã‚¨ã‚¯ã‚¹ãƒãƒ¼ãƒˆãƒ‡ãƒ¼ã‚¿ã¯2020å¹´2æœˆ28
hokaccha 2012/02/15
ssl

security

path
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - ã€ŒVeriSignã‚·ãƒ¼ãƒ«ã€ã¨ã„ã†å¹»æƒ³
â– ã€ŒVeriSignã‚·ãƒ¼ãƒ«ã€ã¨ã„ã†å¹»æƒ³ ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã§ã¯ãªã„SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯ã€2ã¤ã®ç‹¬ç«‹ã—ãŸæ©Ÿèƒ½ã‚’æžœãŸã—ã¦ã„ã‚‹ã¨è¨€ãˆã‚‹ã€‚1ã¤ç›®ã¯ã€SSLãƒ—ãƒãƒˆã‚³ãƒ«ã«ã‚ˆã‚‹ã‚µãƒ¼ãƒã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã®æš—å·åŒ–é€šä¿¡ã®ãŸã‚ã«ä¸å¯æ¬ ãªå½¹å‰²ã§ã‚ã‚Šã€2ã¤ç›®ã¯å½“è©²ã‚µã‚¤ãƒˆé‹å–¶è€…ã®å®Ÿåœ¨è¨¼æ˜Žã®æ©Ÿèƒ½ã§ã‚ã‚‹ã€‚ãŸã ã—ã€ä»Šæ—¥ã§ã¯ã€å¾Œè€…ã‚’å«ã¾ãªã„ã€å‰è€…ã ã‘ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚‚ã‚ã‚‹ã€‚ å¾Œè€…ã®å®Ÿåœ¨è¨¼æ˜Žã¯ã€ã‹ã¤ã¦ã¯èªè¨¼å±€ã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã™ã‚‹å„äº‹æ¥è€…ãŒãã‚Œãžã‚Œã®ç‹¬è‡ªã®åŸºæº–ã§ã€ã‚µã‚¤ãƒˆé‹å–¶è€…ã®å®Ÿåœ¨æ€§ã‚’ç¢ºèªã€èªè¨¼ã—ã¦ã„ãŸãŒã€ãã‚Œã§ã¯åˆ©ç”¨è€…ã«ã‚ã‹ã‚Šã«ãã„ã“ã¨ã‹ã‚‰ã€èªè¨¼ã®éš›ã®å®Ÿåœ¨æ€§ç¢ºèªã®æ–¹æ³•ãŒæ¨™æº–åŒ–ã•ã‚Œã€èª•ç”Ÿã—ãŸã®ãŒEV SSLã§ã‚ã£ãŸã€‚ ãã®çµæžœã€VeriSignãªã©ã€å¤ãã‹ã‚‰å®Ÿåœ¨è¨¼æ˜Žã«åŠ›ã‚’å…¥ã‚Œã¦ã„ãŸèªè¨¼å±€ã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ã€EVã®ã‚‚ã®ã¨EVã§ãªã„å®Ÿåœ¨è¨¼æ˜Žä»˜ãã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®2ç¨®é¡žãŒå˜åœ¨ã™ã‚‹ã“ã¨ã¨ãªã£ãŸã€‚VeriSignã§ã¯ã€EVè¨¼æ˜Žæ›¸ã®æä¾›é–‹å§‹å¾Œã‚‚ã€EVã§ãªã„å®Ÿ
hokaccha 2010/06/01
ssl

security
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - å…±ç”¨SSLã‚µãƒ¼ãƒã®å±é™ºæ€§ãŒç†è§£ã•ã‚Œã¦ã„ãªã„
â– å…±ç”¨SSLã‚µãƒ¼ãƒã®å±é™ºæ€§ãŒç†è§£ã•ã‚Œã¦ã„ãªã„ ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®å…¬å¼FAQã«æ¬¡ã®è¨˜è¿°ãŒã‚ã‚‹ã®ã«æ°—ã¥ã„ãŸã€‚ [000735]å…±æœ‰SSLã®åˆ©ç”¨ã‚’è€ƒãˆã¦ã„ã¾ã™ãŒã€æ³¨æ„ã™ã¹ãäº‹é …ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ, ã•ãã‚‰ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆ ã‚ˆãã‚ã‚‹è³ªå•ï¼ˆFAQï¼‰, 2010å¹´2æœˆ10æ—¥æ›´æ–°ï¼ˆåˆå‡ºæ—¥ä¸æ˜Žï¼‰ Cookieã¯ã€ãƒ‘ã‚¹ãªã©ã‚’æŒ‡å®šã™ã‚‹ã“ã¨ãŒã§ãã‚‹ãŸã‚ã€åˆæœŸãƒ‰ãƒ¡ã‚¤ãƒ³ä»¥å¤–ã§ã¯å…±æœ‰SSLã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹å ´åˆã«Cookieã®ãƒ‘ã‚¹ã‚’æ£ã—ãæŒ‡å®šã—ãªã„ã¨ã€åŒã˜ã‚µãƒ¼ãƒã®ä»–ãƒ¦ãƒ¼ã‚¶ã«ç›—ã¾ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ï¼ˆç•¥ï¼‰ ä¸Šè¨˜ã«ã¤ã„ã¦ã¯ã€ã€ŒåŒã‚µãƒ¼ãƒã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ¦ãƒ¼ã‚¶ã ã‘ãŒCookieã‚’ã®ãžãè¦‹ã‚‹ã“ã¨ãŒã§ãã‚‹ã€ã¨ã„ã†ã”ãé™å®šçš„ãªå½±éŸ¿ã‚’ç¤ºã—ã¦ã„ã¦ã„ã¾ã™ã€‚ã¾ãŸã€Cookieã®å–æ‰±ã„ã«ã¤ã„ã¦ã€å•ã„åˆã‚ã›ãƒ•ã‚©ãƒ¼ãƒ ã‚„ã‚·ãƒ§ãƒƒãƒ”ãƒ³ã‚°ã‚«ãƒ¼ãƒˆç‰ã€ãƒ“ã‚¸ãƒã‚¹å‘ã‘ã®ã‚¦ã‚§ãƒ–ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã‚’è¨ç½®ã•ã‚Œã¦ã„ãªã‘ã‚Œã°ç‰¹ã«å¤§ããªå•é¡Œã¨ã¯ãªã‚Šã¾ã›ã‚“ãŒã€å€‹äººæƒ…å ±ã‚’å–ã‚Šæ‰±ã‚ã‚Œã‚‹ç®¡
hokaccha 2010/05/12
ssl

security

sakura
ãƒªãƒ³ã‚¯
1