[B! openssl] karumadoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

karumado id:karumado

opensslã«é–¢ã™ã‚‹karumadoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (5)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OpenSSLã«æ–°ãŸãªè„†å¼±æ€§ã€ã‚»ã‚ãƒ¥ã‚¢é€šä¿¡ã‚’å‚å—ã•ã‚Œã‚‹ãŠãã‚Œ - Symantec
ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ã¯7æœˆ10æ—¥ã€OpenSSLã§æ–°ãŸãªè„†å¼±æ€§ãŒè¦‹ã¤ã‹ã£ãŸã¨ã€åŒç¤¾ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ–ãƒã‚°ã§æ˜Žã‹ã—ãŸã€‚ ä»Šå›žã®è„†å¼±æ€§ã¯ã€æ”»æ’ƒè€…ãŒOpenSSLã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã™ã‚‹ã¨ã€å½ã®ãƒ‡ã‚¸ã‚¿ãƒ«è¨¼æ˜Žæ›¸ã‚’æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ã¨ã—ã¦å—ã‘å…¥ã‚Œã‚‹ã‚ˆã†ã«æ¨™çš„ã®ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ãƒ¼ã‚’èª˜å°Žã—ã€ã‚»ã‚ãƒ¥ã‚¢é€šä¿¡ã‚’å‚å—ã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã¨ã„ã†ã‚‚ã®ã€‚ã•ã‚‰ã«ã€ä¸é–“è€…(MTM)æ”»æ’ƒã‚‚å®Ÿè¡Œã§ãã‚‹ã¨ã„ã†ã€‚ ãã‚‚ãã‚‚OpenSSLã¯ã€æš—å·ãƒ—ãƒãƒˆã‚³ãƒ« SSLã¨TLSã«ãŠã„ã¦æ™®åŠçŽ‡ãŒé«˜ã„ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹å®Ÿè£…ã€‚ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æŽ¥ç¶šã™ã‚‹ãƒ‡ãƒã‚¤ã‚¹ã§åºƒãä½¿ã‚ã‚Œã¦ãŠã‚Šã€ç‰¹ã«Webã‚µãƒ¼ãƒã§ã¯ç‰¹ã«æ™®åŠçŽ‡ãŒé«˜ãã€å…¨ä½“ã®3åˆ†ã®2ç¨‹åº¦ãŒOpenSSLã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã€‚ è„†å¼±æ€§ã¯ã€ŒAlternative Chains Certificate Forgery Vulnerability(ä»£æ›¿ãƒã‚§ãƒ¼ãƒ³ã«ã‚ˆã‚‹è¨¼æ˜Žæ›¸å½é€ ã®è„†å¼±æ€§)ã€ã¨å‘¼ã°ã‚Œã¦ã„ã‚‹ã‚‚ã®ã§ã€OpenSSLã«ãŠã‘ã‚‹è¨¼æ˜Žæ›¸ã®æ¤œè¨¼ãƒ—
karumado 2015/07/14
ã‚ã¨ã§èªã‚€

openssl

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
ã€ŒOpenSSLã€ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒå…¬é–‹--TLSã®è„†å¼±æ€§ã€ŒLogjamã€ã«å¯¾å‡¦
ã‚¦ã‚§ãƒ–é–¢é€£ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ©ã‚¤ãƒ–ãƒ©ãƒªã§æœ€ã‚‚é‡è¦ã ã¨è¨€ã£ã¦ã‚‚ã‚ˆã„ã€ŒOpenSSLã€ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒã€ç±³å›½æ™‚é–“6æœˆ11æ—¥ã«å…¬é–‹ã•ã‚ŒãŸã€‚OpenSSLã¯SSLï¼ˆSecure Socket Layerï¼‰ã¨TLSï¼ˆTransport Layer Securityï¼‰ã‚’å®Ÿè£…ã—ã¦ã„ã‚‹ã€‚ ä»Šå›žã®ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã«å«ã¾ã‚Œã¦ã„ã‚‹7ä»¶ã®ä¿®æ£ã®ã†ã¡ã€æœ€ã‚‚é‡è¦ãªã‚‚ã®ãŒã€ŒLogjamã€ã¨å‘¼ã°ã‚Œã‚‹è„†å¼±æ€§ã¸ã®å¯¾å‡¦ã ã€‚Logjamã¯ã€Œãƒ‡ã‚£ãƒ•ã‚£ãƒ¼ãƒ˜ãƒ«ãƒžãƒ³éµå…±æœ‰ï¼ˆDHæ³•ï¼‰ã€ã«å˜åœ¨ã™ã‚‹å•é¡Œã«ç«¯ã‚’ç™ºã—ã¦ã„ã‚‹ã€‚DHæ³•ã¯ã€ã‚»ã‚ãƒ¥ã‚¢ãªæŽ¥ç¶šã‚’ç¢ºç«‹ã™ã‚‹éš›ã®æš—å·éµã®å…±æœ‰ã«ç”¨ã„ã‚‰ã‚Œã‚‹ä¸€èˆ¬çš„ãªã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã§ã‚ã‚Šã€SSLã‚„TLSã§æŽ¡ç”¨ã•ã‚Œã¦ã„ã‚‹ã€‚ç†è«–çš„ã«è¨€ãˆã°ã€æ”»æ’ƒè€…ã¯Logjamã‚’æ‚ªç”¨ã—ãŸä¸é–“è€…æ”»æ’ƒï¼ˆMitMæ”»æ’ƒï¼‰ã‚’ä»•æŽ›ã‘ã€TLSæŽ¥ç¶šã§ä½¿ç”¨ã•ã‚Œã‚‹æš—å·ã‚’è¼¸å‡ºã‚°ãƒ¬ãƒ¼ãƒ‰ã®512ãƒ“ãƒƒãƒˆã¨ã„ã†æ”»æ’ƒå¯èƒ½ãªãƒ¬ãƒ™ãƒ«ã«ãƒ€ã‚¦ãƒ³ã‚°ãƒ¬ãƒ¼ãƒ‰ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚‹ã€‚ãŸã ã€
karumado 2015/06/12
openssl

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
OpenSSLã®æ›´æ–°ç‰ˆå…¬é–‹ã€ã€ŒLogjamã€å¯¾ç–ã‚’å®Ÿè£…
ã€ŒLogjamã€ã¨å‘¼ã°ã‚Œã‚‹TLSãƒ—ãƒãƒˆã‚³ãƒ«ã®è„†å¼±æ€§ã®æ‚ªç”¨ã‚’é˜²ãå¯¾ç–ã‚’å®Ÿè£…ã—ãŸã»ã‹ã€6ä»¶ã®è„†å¼±æ€§ãŒä¿®æ£ã•ã‚ŒãŸã€‚ OpenSSLã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆãŒ6æœˆ11æ—¥ä»˜ã§å…¬é–‹ã•ã‚ŒãŸã€‚ã€ŒLogjamã€ã¨å‘¼ã°ã‚Œã‚‹TLSãƒ—ãƒãƒˆã‚³ãƒ«ã®è„†å¼±æ€§ã®æ‚ªç”¨ã‚’é˜²ãå¯¾ç–ãªã©ãŒç››ã‚Šè¾¼ã¾ã‚Œã¦ã„ã‚‹ã€‚ Logjamã¯éŽåŽ»ã®ç±³æ”¿åºœã®æš—å·è¼¸å‡ºè¦åˆ¶ã«èµ·å› ã™ã‚‹è„†å¼±æ€§ã§ã€æ”»æ’ƒè€…ãŒä¸é–“è€…æ”»æ’ƒã‚’ä»•æŽ›ã‘ã¦TLSæŽ¥ç¶šã®æš—å·åŒ–æ–¹å¼ã‚’æ ¼ä¸‹ã’ã•ã›ã€é€šä¿¡ã®å†…å®¹ã‚’å‚å—ã—ãŸã‚Šã€æ”¹ã–ã‚“ã—ãŸã‚Šã§ãã‚‹å¯èƒ½æ€§ãŒæŒ‡æ‘˜ã•ã‚Œã¦ã„ã‚‹ã€‚OpenSSLã®æ›´æ–°ç‰ˆï¼ˆ1.0.2bãŠã‚ˆã³1.0.1nï¼‰ã§ã¯ã“ã®è„†å¼±æ€§ã‚’çªãæ”»æ’ƒã‚’é˜²ããŸã‚ã®ä»•çµ„ã¿ã‚’è¿½åŠ ã—ãŸã€‚ ä»–ã«ã‚‚6ä»¶ã®è„†å¼±æ€§ãŒä¿®æ£ã•ã‚Œã¦ãŠã‚Šã€å±é™ºåº¦ã¯ã„ãšã‚Œã‚‚ä¸ï½žä½Žãƒ¬ãƒ™ãƒ«ã¨è©•ä¾¡ã•ã‚Œã¦ã„ã‚‹ã€‚è„†å¼±æ€§ãŒå˜åœ¨ã™ã‚‹ã®ã¯OpenSSL 1.0.2ã€1.0.1ã€1.0.0ã€0.9.8ã®å„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã€‚ãã‚Œãžã‚Œ1.0.2bã€1.0.1nã€1.0.0s
karumado 2015/06/12
openssl

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
[openssl-announce] Forthcoming OpenSSL releases
Matt Caswell matt at openssl.org Mon Jun 8 19:32:47 UTC 2015 Next message: [openssl-announce] OpenSSL version 0.9.8zg released Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Forthcoming OpenSSL releases ============================ The OpenSSL project team would like to announce the forthcoming release of OpenSSL versions 1.0.2b, 1.0.1n
karumado 2015/06/10
ã‚ã¨ã§èªã‚€

openssl
ãƒªãƒ³ã‚¯
ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’opensslã§ä½œã‚‹ï¼ˆè©³ç´°ç‰ˆï¼‰ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
å‰å›žã®opensslã§RSAæš—å·ã¨éŠã¶ã§RSAæš—å·ã‚„ç§˜å¯†éµã«ã¤ã„ã¦ä¸èº«ã‚’è‰²ã€…ã¨ã„ã˜ã£ã¦ã¿ãŸã€‚ç¶šã„ã¦ä»Šå›žã¯ã€Apacheã§ä½¿ã†ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã£ã¦ã¿ã‚‹ã€‚ ç´°ã‹ã„ã“ã¨ã¯ã„ã„ã‹ã‚‰ã€ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ã‚³ãƒžãƒ³ãƒ‰ã ã‘çŸ¥ã‚ŠãŸã„ ãŠæ€¥ãŽã®æ–¹ã¯ã€ä»¥ä¸‹3ã¤ã ã‘ã‚„ã‚Œã°è‰¯ã„ã€‚ã“ã‚Œã§10å¹´é–“(3650æ—¥)æœ‰åŠ¹ãªã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ãŒã§ãã‚ãŒã‚‹ã€‚ $ openssl genrsa 2048 > server.key $ openssl req -new -key server.key > server.csr $ openssl x509 -days 3650 -req -signkey server.key < server.csr > server.crtã§ãã‚ãŒã£ãŸserver.crtã¨server.keyã‚’ã€ä¾‹ãˆã°/etc/httpd/conf/ é…ä¸‹ã®ssl.crt/ ã¨ ssl.key/ ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªã«è¨ç½®
karumado 2014/12/02
apache

httpd

openssl

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
1