[B! SSL][openssl] justoneplanetã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

justoneplanet id:justoneplanet

SSLã¨opensslã«é–¢ã™ã‚‹justoneplanetã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OpenSSLã‚’ãƒ“ãƒ«ãƒ‰ã—ã¦Apacheã§åˆ©ç”¨ã™ã‚‹
ä»Šå›žã¯ã€Apache HTTP Serverã«è¿½åŠ ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’çµ„ã¿åˆã‚ã›ã¦ãƒ“ãƒ«ãƒ‰ã—ã¦ã¿ã¾ã™ã€‚å¤±æ•—ã—ãŸã¨ãã®å¯¾ç–ã‚‚ç´¹ä»‹ã—ã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«ã‹ã‹ã‚ã‚‹OpenSSLã¯è‡ªåˆ†ã§ãƒ“ãƒ«ãƒ‰ã™ã¹ã ç¬¬14å›žã‹ã‚‰Apache HTTP Serverï¼ˆä»¥ä¸‹Apacheï¼‰ã‚’ãƒ“ãƒ«ãƒ‰ã™ã‚‹æ–¹æ³•ã‚’è§£èª¬ã—ã¦ã„ã¾ã™ãŒã€ä»Šå›žã¯ã¡ã‚‡ã£ã¨å¯„ã‚Šé“ã‚’ã—ã¾ã—ã¦ã€OpenSSLã‚’ãƒ“ãƒ«ãƒ‰ã™ã‚‹æ–¹æ³•ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚OpenSSLã¯Apacheã‚’SSLã«å¯¾å¿œã•ã›ã‚‹ãŸã‚ã«å¿…è¦ã«ãªã‚‹ã€é‡è¦ãªå¤–éƒ¨ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã™ã€‚ OpenSSLã®ã‚ˆã†ãªãƒ©ã‚¤ãƒ–ãƒ©ãƒªã¯ã‚ã–ã‚ã–ãƒ“ãƒ«ãƒ‰ã™ã‚‹ã“ã¨ãªãã€å‰å›žèª¬æ˜Žã—ãŸã‚ˆã†ã«ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ãŒæä¾›ã™ã‚‹ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ä½¿ã†ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ã—ã‹ã—ã€ã‚‚ã—ãƒ‡ã‚£ã‚¹ãƒˆãƒªãƒ“ãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ãŒå¤ããªã‚Šã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã®æä¾›ãŒæœŸå¾…ã§ããªã„ã¨ã—ãŸã‚‰ã€ãã®ã¾ã¾ä½¿ã†ã®ã¯å•é¡ŒãŒã‚ã‚Šã¾ã™ã€‚SSLã®ã‚ˆã†ãªä¿¡é ¼æ€§ãŒå¤§åˆ‡ãªã‚‚ã®ã§ã¯ãªãŠã•ã‚‰ã§ã™ã€‚ãã“ã§
justoneplanet 2011/08/07
configure

apache

build

ssl

openSSL

Apache
ãƒªãƒ³ã‚¯
OpenSSLã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã¨ã‚ãƒ¼ãƒšã‚¢ã®ç”Ÿæˆ
OpenSSLã¯ãƒ•ãƒªãƒ¼ã®SSLå®Ÿè£…ã§ã€mod_sslã‚„Apache-SSLã€ã‚ã‚‹ã„ã¯OpenSSHãªã©ã§å¿…è¦ã«ãªã‚Šã¾ã™ã€‚Apacheã§SSLã‚’ä½¿ã„ãŸã„å ´åˆã¯ã€OpenSSLã®ã»ã‹ã«ã€mod_sslã¾ãŸã¯Apache-SSLã‚’å°Žå…¥ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ Apache 1.3.20 + mod_ssl 2.8.4ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ¡ãƒ¢ Apache 1.3.6 + SSL 1.3.2 (Apache-SSL)ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ¡ãƒ¢ INSTALLã®æ‰‹é †é€šã‚Šã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã—ã¾ã™ã€‚ $ tar xvfz openssl-0.9.6b.tar.gz $ cd openssl-0.9.6b $ ./config $ make $ make test rootã«ãªã£ã¦ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ã€‚ $ su # make install éµã®ä½œæˆã¨ã‚µã‚¤ãƒˆè¨¼æ˜Žæ›¸ã®ç™ºè¡Œ ãƒ‘ã‚¹ãƒ•ãƒ¬ãƒ¼ã‚ºã§ä¿è·ã•ã‚ŒãŸç§˜å¯†éµã‚’ç”Ÿæˆã—ã¾ã™ã€‚ $ su # cd
justoneplanet 2011/01/03
apache

openssl

ssl
ãƒªãƒ³ã‚¯
SSLå…¥é–€
2005/10/02æ›´æ–° é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ã‚’æ‹è¦‹ã™ã‚‹ã«ã¤ã‘ã€PKI ã¨ã—ã¦ã® SSL ãŒ ä¸é€”åŠç«¯ãªç†è§£ã«ã‚ˆã‚Šå°ç„¡ã—ã«ã•ã‚Œã¦ã„ã‚‹å ´é¢ãŒå¤šã„ã‚ˆã†ã«æ€ãˆã¾ã™ã€‚ãã“ã§ï¼ˆã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å°‚é–€å®¶ã§ã¯ãªã„ã‚‚ã®ã®ï¼‰ç§ãŒç†è§£ã—ã¦ã„ã‚‹ç¯„å›²ã§è‡ªåˆ†ãªã‚Šã«å…¥é–€è§£èª¬ã‚’æ›¸ã„ã¦ã¿ã¾ã—ãŸã€‚ ã¡ãªã¿ã«ã€SSL v3 ã«å°‘ã—ã®æ”¹è‰¯ã‚’åŠ ãˆãŸã‚‚ã®ãŒ TLS v1.0 ã§ã™ãŒã€æŠ€è¡“çš„ãªç´°ã‹ã„ç‚¹ã‚’æ°—ã«ã—ãªã„ å ´åˆã¯ã€SSLã¨ç·ç§°ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã“ã§ã‚‚ã€ãã‚“ãªç´°ã‹ã„ã“ã¨ã¯æ°—ã«ã—ã¦ã„ãªã„ã®ã§ SSL ã¨ç·ç§°ã—ã¦ã„ã¾ã™ã€‚ SSLã—ãã¿è§£èª¬ ã¾ãšã€SSLã‚’ç†è§£ã™ã‚‹ãŸã‚ã«å¿…è¦ãªç”¨èªžã‚’è§£èª¬ã—ã€æ¬¡ã« SSLãŒ PKI ã¨ã—ã¦ã©ã®ã‚ˆã†ãªæ§‹æˆè¦ç´ ã§å®‰å…¨ãªé€šä¿¡è·¯ã‚’å½¢æˆã—ã¦ã„ã‚‹ã‹è§£èª¬ã—ã¾ã™ã€‚ æš—å·åŒ–ã¨å¾©å·åŒ– ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã§æš—å·åŒ–ã¨ã„ã†ã¨ã€æš—å·åŒ–ã™ã‚‹å‰ã®ãƒ‡ãƒ¼ã‚¿ ï¼ˆä»¥ä¸‹ã€ã€Œå¹³æ–‡ï¼ˆã²ã‚‰ã¶ã‚“ï¼‰ã€ã¨å‘¼ã³ã¾ã™ï¼‰ã¨éµã¨ãªã‚‹ãƒ‡ãƒ¼ã‚¿ï¼ˆä»¥ä¸‹ã€Œéµã€ã¨å‘¼ã³ã¾ã™ï¼‰ ã‚’ä½¿ã£ã¦
justoneplanet 2010/08/24
mysql

ssl

èªè¨¼

è¨¼æ˜Žæ›¸

openssl
ãƒªãƒ³ã‚¯
OpenSSLã§è‡ªå·±èªè¨¼å±€ã¨è¨¼æ˜Žæ›¸ã®ä½œæˆ - bnote
ã¾ãšã€OpenSSLãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã¨ã—ã¦é€²ã‚ã¾ã™ã€‚ æœ¬æ¥ã€ä¿¡é ¼ã®ã‚ã‚‹èªè¨¼å±€ã«èªè¨¼ã—ã¦ã‚‚ã‚‰ã„ã¾ã™ãŒ ä»Šå›žã¯ã€è‡ªåˆ†ã§èªè¨¼ã™ã‚‹ãŸã‚ã®è‡ªå·±èªè¨¼å±€ã‚’ä½œæˆã—ã¾ã™ã€‚ CAã®ä½œæˆã¯ã€/usr/local/ssl/CAã«è¡Œã„ã¾ã™ã€‚ ã‚ã‚‰ã‹ã˜ã‚ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã‚’ä½œæˆã—ã¦ãŠãã¾ã™ã€‚ OpenSSLãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«ã‚ã‚‹ miscãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«CA.shã¨ã„ã†ã‚¹ã‚¯ãƒªãƒ—ãƒˆãŒã‚ã‚Šã¾ã™ã€‚ ã“ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã§èªè¨¼å±€ã‚’æ§‹ç¯‰ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ CA.shã‚’CAã®ä½œæˆå ´æ‰€ã«ã‚³ãƒ”ãƒ¼ã—ã¾ã™ã€‚ cp CA.sh /usr/local/ssl/CA æ§‹ç¯‰ã™ã‚‹å ´æ‰€ç‰ã‚’å¤‰æ›´ã™ã‚‹ãŸã‚ã‚¹ã‚¯ãƒªãƒ—ãƒˆã‚’å°‘ã—ä¿®æ£ã—ã¾ã™ã€‚ openssl.cnfã®[CA_default]-dirã‚‚åŒæ§˜ã«ä¿®æ£ã—ã¾ã™ã€‚ DAYS="-day 3650" CATOP=/usr/local/ssl/CA CAKEY=./cakey.pem CACER
justoneplanet 2010/08/24
mysql

ssl

èªè¨¼

è¨¼æ˜Žæ›¸

openssl
ãƒªãƒ³ã‚¯
guro_chanã®æ—¥è¨˜ Â» MySQLã‚µãƒ¼ãƒã«SSLã§æŽ¥ç¶šã™ã‚‹
ã¨ã„ã†ä½œæ¥ãŒé›¢ã‚ŒãŸã¨ã“ã‚ã§é€²è¡Œä¸ã§ã‚ã‚‹ã“ã¨ã‚’èžãã¤ã‘ãŸã€‚æ„Ÿèˆˆã‚’ããã‚‹ã€‚ã—ã‹ã—ç«¯ã§ä¼šè©±ã‚’èžã„ã¦ã„ã‚‹ã¨x509ã®è¨¼æ˜Žæ›¸ã‹ã©ã†ã®ã¨ã‹Grantæ§‹æ–‡ã§REQUIREç¯€ãŒã“ã†ã®ã¨äº‘ã†ã“ã¨ã§ã‚ã‚Šå¾®å¡µã‚‚ç†è§£ã§ããªã„ã€‚äººã®ä¼šè©±ã¾ã§ã‚‚æš—å·åŒ–ã¨ã¯SSLæã‚Œå…¥ã£ãŸã€‚æµè¡Œã«ç½®ãåŽ»ã‚Šã«ã•ã‚Œã¬ã‚ˆã†å®Ÿéš›ã«è¨å®šã—ã¦ãŠãå¿…è¦ã‚’å¼·ãæ„Ÿãšã‚‹ã€‚ã²ã¨ã¾ãš MySQLã‚µãƒ¼ãƒ(192.168.0.8) <---SSLæŽ¥ç¶š--- MySQLã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ(192.168.0.10) ã“ã†ã„ã†ç›®è«–è¦‹ã‚’ç«‹ã¦ã¦ã€ã¾ãšã¯MySQLã‚µãƒ¼ãƒã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã€‚æš—å·åŒ–æŽ¥ç¶šã®ã‚µãƒãƒ¼ãƒˆã‚’æœ‰åŠ¹ã«ã™ã‚‹ã«ã¯ --with-ssl ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚’ã¤ã‘ã¦ã®ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ãŒå¿…éœ€ã¨ã„ã†ã“ã¨ã§ã‚ã‚‹ã€‚ $ wget -c http://dev.mysql.com/get/Downloads/MySQL-5.1/mysql-5.1.35.tar.gz/from/http://ftp.j
justoneplanet 2010/08/24
mysql

ssl

èªè¨¼

è¨¼æ˜Žæ›¸

openssl
ãƒªãƒ³ã‚¯
ï¼»MySQLã‚¦ã‚©ãƒƒãƒï¼½ç¬¬19å›žã€€MySQL 5.0ã§å®¹æ˜“ã«ãªã£ãŸSSLã«ã‚ˆã‚‹æš—å·åŒ–é€šä¿¡
æœ¬å¹´4æœˆã‹ã‚‰å€‹äººæƒ…å ±ä¿è·æ³•ãŒæœ¬æ ¼æ–½è¡Œã•ã‚Œï¼Œã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«å¯¾ã™ã‚‹é–¢å¿ƒã‚„å¿…è¦æ€§ãŒé«˜ã¾ã£ã¦ã„ã‚‹ã€‚ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹ã¯æ§˜ã€…ãªãƒ‡ãƒ¼ã‚¿ã‚’æ ¼ç´ã—ã¦ãŠã‚Šï¼Œé‡è¦ãªã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¯¾ç–å¯¾è±¡ã§ã‚ã‚‹ã€‚MySQLã¯ï¼Œãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ä¸Šã®ç›—è´ã«å¯¾å¿œã™ã‚‹ãŸã‚ã®æš—å·åŒ–æŽ¥ç¶šã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€‚ä»Šå›žã¯ï¼ŒMySQL 5.0ã‚’ä½¿ç”¨ã—ãŸï¼ŒSSLã«ã‚ˆã‚‹æš—å·åŒ–æŽ¥ç¶šã®è¨å®šæ–¹æ³•ã‚’ç´¹ä»‹ã™ã‚‹ã€‚ ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã®ç›—è´ã«ã‚ˆã‚‹æƒ…å ±æµå‡º MySQLã‚’ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®çŠ¶æ…‹ã§ä½¿ç”¨ã™ã‚‹ã¨ã‚µãƒ¼ãƒãƒ¼ã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã®é€šä¿¡ã¯ï¼Œæš—å·åŒ–ã•ã‚Œãšã«é€å—ä¿¡ã•ã‚Œã‚‹ã€‚ã“ã‚Œã‚‰ã®ãƒ‘ã‚±ãƒƒãƒˆã¯ï¼Œãƒ‘ã‚±ãƒƒãƒˆãƒ»ã‚ãƒ£ãƒ—ãƒãƒ£ãƒ»ã‚½ãƒ•ãƒˆã‚’ä½¿ç”¨ã™ã‚Œã°ï¼Œç°¡å˜ã«å‚ç…§ã™ã‚‹ã“ã¨ãŒã§ãã‚‹ã€‚ä¾‹ãˆã°ï¼Œãƒªã‚¹ãƒˆ1ã®ã‚ˆã†ãªå‡¦ç†ã‚’ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§å®Ÿè¡Œã—ãŸã¨ã™ã‚‹ã€‚ ãƒªã‚¹ãƒˆ1â—ãƒ†ãƒ¼ãƒ–ãƒ«ã€Œmemberã€ã®å†…å®¹å‚ç…§ mysql> select * from member; +----+-------+------------------+------
justoneplanet 2010/08/24
mysql

ssl

èªè¨¼

è¨¼æ˜Žæ›¸

openssl
ãƒªãƒ³ã‚¯
1