[B! ssl] karumadoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

karumado id:karumado

sslã«é–¢ã™ã‚‹karumadoã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (21)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSLè¨¼æ˜Žæ›¸ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒã‚§ãƒƒã‚«ãƒ¼ | ã‚µã‚¤ãƒ•ã«ã‚„ã•ã—ã„SSLè¨¼æ˜Žæ›¸
SSLè¨¼æ˜Žæ›¸ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒã‚§ãƒƒã‚«ãƒ¼ Webã‚µã‚¤ãƒˆã¸ã®SSLè¨¼æ˜Žæ›¸ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãŒæ£ã—ã„ã‹ç¢ºèªã€‚æ®‹æ—¥æ•°ã‚„ä¸é–“è¨¼æ˜Žæ›¸ãªã©è¡¨ç¤ºã€‚ è©³ç´°ç¢ºèª ç¢ºèªå®Œäº†ã¾ã§æ•°åç§’ã‹ã‹ã‚Šã¾ã™ã€‚æœ‰åŠ¹æœŸé™ãƒ»ç™ºè¡Œå…ƒãƒ»ä¸é–“è¨¼æ˜Žæ›¸ãƒ»CTãƒã‚°ãƒ»SSL/TLSãƒãƒ¼ã‚¸ãƒ§ãƒ³ãªã©ã‚’ç¢ºèªã€‚ ä¸€æ‹¬ç¢ºèªï¼ˆé«˜é€Ÿï¼‰ æœ‰åŠ¹æœŸé™ãªã©ç°¡æ˜“æƒ…å ±ã‚’ä¸€æ‹¬ç¢ºèªã€‚1è¡Œã«ãƒ›ã‚¹ãƒˆåï¼ˆFQDNï¼‰ã‚’1ã¤å…¥åŠ›ãã ã•ã„ã€‚æœ€å¤§15ãƒ›ã‚¹ãƒˆã¾ã§åŒæ™‚ç¢ºèªã€‚ â€»å¼Šç¤¾ã‹ã‚‰è³¼å…¥å®Ÿç¸¾ã®ã‚ã‚‹ãŠå®¢æ§˜ã¯ã€æŽ¥ç¶šå…ƒIPã‚’ã”é€£çµ¡ã„ãŸã ã‘ã‚Œã°ã€Œæœ€å¤§15ãƒ›ã‚¹ãƒˆã¾ã§ã€ã®åˆ¶ç´„ã‚’å¤–ã™ã“ã¨ã‚‚å¯èƒ½ã§ã™ã€‚ CSVã§å‡ºåŠ› æ”¹ç‰ˆå±¥æ´ 2021å¹´02æœˆ10æ—¥ ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯è¨¼æ˜Žæ›¸ã®ãƒ‡ã‚¸ã‚µãƒ¼ãƒˆã¸ã®ç§»è¡Œã¯ã«ã™ã§ã«å®Œäº†ï¼ˆ2017ï½ž2018å¹´ï¼‰ã—ã¦ã„ã‚‹ãŸã‚ã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯è¨¼æ˜Žæ›¸ç¢ºèªæ©Ÿèƒ½ã®æä¾›ã‚’çµ‚äº†ã—ã¾ã—ãŸã€‚ 2019å¹´11æœˆ26æ—¥ TLS1.3ã‚µãƒãƒ¼ãƒˆã®åˆ¤å®šæ©Ÿèƒ½ã‚’è¿½åŠ ã—ã¾ã—ãŸã€‚ 2019å¹´11æœˆ24æ—¥ TLSãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®æŽ¨å¥¨åŸºæº–ã‚’ä¿®æ£ã—
karumado 2017/04/28
[tool]

ssl
ãƒªãƒ³ã‚¯
Google Chrome to Distrust Symantec SSLs for Mis-issuing 30,000 EV Certificates
Google announced its plans to punish Symantec by gradually distrusting its SSL certificates after the company was caught improperly issuing 30,000 Extended Validation (EV) certificates over the past few years. The Extended Validation (EV) status of all certificates issued by Symantec-owned certificate authorities will no longer be recognized by the Chrome browser for at least a year until Symantec
karumado 2017/03/27
ã‚ã¨ã§èªã‚€

Google

Chrome

ssl

symantec
ãƒªãƒ³ã‚¯
ELB ã§ SSL å¾©å·ã™ã‚‹ã¨ãã—ãªã„ã¨ãã®ãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯ - Qiita
sudo yum install npm --enablerepo=epel npm install express cat <<EOT >index.js var app = require('express')(); app.get('/*', function(req, res) { if (req.query.wait) { setTimeout(function() { res.write('OK'); res.end(); }, req.query.wait); } else { res.write('OK'); res.end(); } console.log('%s %s %s', new Date(), req.method, req.url); }); app.listen(10080); EOT node index.js $ ab -n 5000 -c 200 ht
karumado 2016/03/17
ssl

ãƒ™ãƒ³ãƒãƒžãƒ¼ã‚¯
ãƒªãƒ³ã‚¯
Webé–‹ç™ºè€…ãŒæã‚‰ãçŸ¥ã‚‰ãªã„ã€SSLã«ã¤ã„ã¦çŸ¥ã£ã¦ãŠãã¹ãã“ã¨ | POSTD
2015å¹´ã€Webé–‹ç™ºè€…ã¯ä»¥å‰ã‚ˆã‚Šã‚‚SSLã«é–¢ã™ã‚‹ç†è§£ã‚’æ·±ã‚ã¦ã„ã¾ã™ã€‚ãã†ã—ãŸWebé–‹ç™ºè€…ãŸã¡ãŒHacker Newsã‚’èªã‚€ãªã‚‰çŸ¥ã£ã¦ãŠãã¹ãã“ã¨ã‚’ä»¥ä¸‹ã«æŒ™ã’ã¦ã¿ã¾ã™ã€‚ ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ï¼ˆDVï¼‰è¨¼æ˜Žæ›¸ã¯ Letâ€™s Encrypt ã‹ã‚‰ç„¡æ–™ã§å–å¾—ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ æ‹¡å¼µèªè¨¼ï¼ˆEVï¼‰è¨¼æ˜Žæ›¸ ã¯ CertSimple ã‹ã„ãã¤ã‹ã®ãƒã‚§ãƒƒã‚¯ã®ã®ã¡ã®æ”¯æ‰•ã„ã§å–å¾—ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ã“ã‚ŒãŒæˆ‘ã€…ã®ã‚„ã‚Šæ–¹ã€‚ Mozilla SSL Config Generator ã‚’ä½¿ç”¨ã™ã‚Œã°ã€ã‚µãƒãƒ¼ãƒˆã—ãŸã„ãƒ–ãƒ©ã‚¦ã‚¶ã«å¯¾ã—ã¦ã€ã‚µãƒ¼ãƒã‚’å¯èƒ½ãªé™ã‚Šå®‰å…¨ã«è¨å®šã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ å®Œäº†å¾Œã« SSL Labs ã‚’ä½¿ã£ã¦å…¨ã¦ã‚’ãƒã‚§ãƒƒã‚¯ã—ã€Aè©•ä¾¡ç²å¾—ã‚’ç¢ºèªã—ã¾ã—ã‚‡ã†ã€‚ãã†ã§ãªã‘ã‚Œã°äººã«å°è¨€ã‚’è¨€ã‚ã‚Œã¾ã™ã€‚ ãã®ä»–ã¯ã©ã†ã§ã—ã‚‡ã†ã‹ã€‚æˆ‘ã€…ã®é¡§å®¢ã‹ã‚‰å¯„ã›ã‚‰ã‚Œã‚‹æœ€ã‚‚å¤šã„è³ªå•ã«ã¤ã„ã¦ã€å›žç”ã‚’ç´¹ä»‹ã—ã¦ã„ãã¾ã—ã‚‡ã†ã€‚ 1. Chromeã§â€å¤ã„æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆâ€ã‚’
karumado 2016/01/26
poketstar

ssl
ãƒªãƒ³ã‚¯
Let's Encryptã®è¨¼æ˜Žæ›¸ã‚’GoogleAppEngineã«è¨å®šã—ã¦ç‹¬è‡ªãƒ‰ãƒ¡ã‚¤ãƒ³ã§é‹ç”¨ã™ã‚‹(Public beta)
å¾…ã¡ã«å¾…ã£ãŸLet's Encryptã®Public betaãŒ12æœˆ4æ—¥ã«æ¥ã¾ã—ãŸï¼ï¼ æ€¥é½æ›¸ãäºˆå®šã ã£ãŸã‚‚ã®ã‚’å¤‰æ›´ã—ã¦Google App Engineã«ç‹¬è‡ªãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’è¨å®šã™ã‚‹ã¨ã“ã‚ã‹ã‚‰CustomSSLã‚’è¨å®šã™ã‚‹ã¾ã§ã‚’æ›¸ã“ã†ã¨æ€ã„ã¾ã™ï¼ GoogleAppEngineã¨Let's Encryptã¨ã¯ GoogleAppEngine(ä»¥å¾Œ GAE)ã¯GoogleãŒæä¾›ã—ã¦ã„ã‚‹PaaSã§ Google.comã‚„Gmailã¨åŒã˜ã‚¤ãƒ³ãƒ•ãƒ©ã§å‹•ã‹ã›ã‚‹ã¨ã„ã†ã®ãŒç‰¹å¾´ã§ã™ã€‚ ãªã‚“ã§åŒã˜ã‚¤ãƒ³ãƒ•ãƒ©ã§å‹•ã‹ã›ã‚‹ã®ã‹ã¨ã„ã†èª¬æ˜Žã¯å‰²æ„›ã—ã¾ã™ãŒ ã¤ã¾ã‚ŠGoogle.comãŒè½ã¡ãªã‘ã‚Œã°è½ã¡ãªã„ã‚µãƒ¼ãƒãƒ¼ã‚’ä½¿ãˆã‚‹ã¨ã„ã†ã“ã¨ã§ã™ã€‚ ãã—ã¦GAEã¯è‡ªå‹•ã§ã‚¹ã‚±ãƒ¼ãƒ«ã™ã‚‹ä»•çµ„ã¿ãŒã‚ã‚‹ã®ã§çªç„¶ã®å¤§é‡ã‚¢ã‚¯ã‚»ã‚¹ã‚‚äºˆç®—å†…ã§ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ãŒå¢—ãˆã¦ ã‚¢ã‚¯ã‚»ã‚¹ãŒè½ã¡ç€ã‘ã°ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ã®æ•°ã¯æ¸›ã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ãã—ã¦GAEã¯ç„¡æ–™æž ãŒã‚ã‚‹ã®ã§
karumado 2015/12/08
poketstar

ssl
ãƒªãƒ³ã‚¯
Letâ€™s Encrypt: ãªãœè¨¼æ˜Žæ›¸ãŒ90æ—¥é–“ãªã®ã§ã™ã‹ï¼Ÿ
karumado 2015/12/08
poketstar

ssl
ãƒªãƒ³ã‚¯
Let's Encrypt ã§ãŠæ‰‹è»½ã«SSLè¨¼æ˜Žæ›¸ã‚’å–å¾—ã™ã‚‹ ( AMIMOTO Advent Calendar 2015 5æ—¥ç›® ) - dogmap.jp
karumado 2015/12/08
poketstar

ssl
ãƒªãƒ³ã‚¯
ã€ŒSHA-1ã®å»ƒæ¢å‰å€’ã—ã‚’ã€ã€€å°‚é–€å®¶ãƒãƒ¼ãƒ ãŒæè¨€
SHA-1ãŒã“ã‚Œã¾ã§è€ƒãˆã‚‰ã‚Œã¦ã„ãŸã‚ˆã‚Šã‚‚å¤§å¹…ã«å®‰ã„ã‚³ã‚¹ãƒˆã§ç ´ã‚Œã‚‹ã“ã¨ãŒåˆ†ã‹ã‚Šã€çŠ¯ç½ªé›†å›£ã«æ‚ªç”¨ã•ã‚Œã‚‹å±é™ºãŒè¿«ã£ãŸã¨æŒ‡æ‘˜ã—ã¦ã„ã‚‹ã€‚ Webã‚µã‚¤ãƒˆã§ã®èªè¨¼ã‚„ãƒ‡ã‚¸ã‚¿ãƒ«ç½²åã«ä½¿ã‚ã‚Œã‚‹ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã®ã€ŒSHA-1ã€ã«ã¤ã„ã¦ã€æš—å·è§£èªã®å›½éš›å°‚é–€å®¶ãƒãƒ¼ãƒ ãŒ10æœˆ8æ—¥ã€å»ƒæ¢ã®æ™‚æœŸã‚’ç¾åœ¨ã®ã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚ˆã‚Šã‚‚å‰å€’ã—ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã¨å‹§å‘Šã—ãŸã€‚SHA-1ãŒã“ã‚Œã¾ã§è€ƒãˆã‚‰ã‚Œã¦ã„ãŸã‚ˆã‚Šã‚‚å¤§å¹…ã«å®‰ã„ã‚³ã‚¹ãƒˆã§ç ´ã‚Œã‚‹ã“ã¨ãŒåˆ†ã‹ã‚Šã€çŠ¯ç½ªé›†å›£ã«æ‚ªç”¨ã•ã‚Œã‚‹å±é™ºãŒè¿«ã£ãŸã¨æŒ‡æ‘˜ã—ã¦ã„ã‚‹ã€‚ SHA-1ã¯ä»¥å‰ã‹ã‚‰è„†å¼±æ€§ãŒæŒ‡æ‘˜ã•ã‚Œã€Microsoftã‚„Googleãªã©ä¸»è¦ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¡ãƒ¼ã‚«ãƒ¼ã‚„é›»åè¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ©Ÿé–¢ãŒæ®µéšŽçš„ãªå»ƒæ¢ã«å‘ã‘ãŸã‚¹ã‚±ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’å…¬è¡¨ã—ã¦ã„ã‚‹ã€‚ ã—ã‹ã—ç¾åœ¨ã®è¨ˆç”»ã§ã¯ã€SHA-1ã‚’ä½¿ã£ãŸè¨¼æ˜Žæ›¸ãŒä¸»è¦ãƒ–ãƒ©ã‚¦ã‚¶ã§å®‰å…¨ã¨èªè˜ã•ã‚Œãªããªã‚‹ã®ã¯2017å¹´1æœˆä»¥é™ã€‚ã“ã‚Œã«å¯¾ã—ã¦ã‚ªãƒ©ãƒ³ãƒ€ã€ãƒ•ãƒ©ãƒ³ã‚¹ã€ã‚·ãƒ³ã‚¬ãƒãƒ¼ãƒ«ã®ç ”ç©¶ãƒãƒ¼ãƒ ã¯ã€SHA-1ã«å¯¾ã™ã‚‹
karumado 2015/10/09
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

ssl
ãƒªãƒ³ã‚¯
Redirecting to ssl-config.mozilla.org...
Mozilla SSL Configuration Generator Redirecting to the updated SSL Configuration Generatorâ€¦
karumado 2015/08/14
ssl

mozilla

generator
ãƒªãƒ³ã‚¯
æµ·å¤–ã®æ ¼å®‰SSLäº‹æ¥è€…çµŒç”±ã§è³¼å…¥ã—ãŸRapidSSLãŒâ€.jpâ€ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã¿ã‚µãƒãƒ¼ãƒˆã—ãªããªã£ã¦ã„ãŸ
ã‚µãƒ¼ãƒãƒ¼ç”¨ã®SSLã‚’è³¼å…¥ã™ã‚‹æ™‚ã«ã€æµ·å¤–ã®SSLäº‹æ¥è€…çµŒç”±ã§æ³¨æ–‡ã™ã‚‹ã¨ã€ã¨ã¦ã‚‚å®‰ä¾¡ã«è³¼å…¥ã§ãã‚‹ã®ã ã‘ã©ã€ ã¤ã„å…ˆæ—¥ã€SSLs.comï¼ˆæ—§CheapSSLï¼‰ã§æ–°è¦ã«SSLã‚’ç™ºæ³¨ã—ãŸã¨ã“ã‚ã€CSR keyã‚’ç™»éŒ²ã™ã‚‹æ‰‹é †ã§ä½•åº¦ã‚„ã£ã¦ã‚‚ã‚¨ãƒ©ãƒ¼ã«ãªã£ã¦å›°ã£ãŸã€‚ *ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ SSL activation failed: {-2034}Valid contract not found" ã“ã®ä»¶ã‚’ã‚µãƒãƒ¼ãƒˆã«å•ã„åˆã‚ã›ãŸã¨ã“ã‚ã€ æœ€è¿‘ã€ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ãŒæ—¥æœ¬å‘ã‘ã®ä¾¡æ ¼ãƒãƒªã‚·ãƒ¼ã‚’æ›´æ–°ã—ãŸç‚ºã€GeoTrustã®SSLã¯".jp"ãƒ‰ãƒ¡ã‚¤ãƒ³ã®SSLã‚ãƒ¼ç™»éŒ²ãŒã§ããªããªã£ãŸã®ã ãã†ã ã€‚ Due to a special Symantec pricing policy for Japan, SSLs.com does not support issuance of any GeoTrust, RapidSSL, Th
karumado 2015/06/25
ãŠã¾å›½ï¼Ÿ

ssl
ãƒªãƒ³ã‚¯
æ ¼å®‰SSLè¨¼æ˜Žæ›¸ã‚µãƒ¼ãƒ“ã‚¹ã®SSLãƒœãƒƒã‚¯ã‚¹ï½œã‚µã‚¤ãƒˆã‚·ãƒ¼ãƒ«ä»˜ãSSLãŒ1,650å††(ç¨Žè¾¼)
SSLãƒœãƒƒã‚¯ã‚¹ã§ã¯ã€èªè¨¼ãƒ¬ãƒ™ãƒ«ã®é•ã†3ã¤ã®ç¨®é¡žï¼ˆEVãƒ»ä¼æ¥èªè¨¼ãƒ»ãƒ‰ãƒ¡ã‚¤ãƒ³èªè¨¼ï¼‰ã®è¨¼æ˜Žæ›¸ã‚’å–ã‚Šæ‰±ã£ã¦ãŠã‚Šã€è¨¼æ˜Žæ›¸ã«æ±‚ã‚ã‚‹èªè¨¼ãƒ¬ãƒ™ãƒ«(ä¿¡é ¼æ€§)ã‚„ã€ã”åˆ©ç”¨ç”¨é€”ã«åˆã‚ã›ã¦ãŠé¸ã³ã„ãŸã ã‘ã¾ã™ã€‚ï¼ˆSSLã‚„ãã®ç¨®é¡žã«ã¤ã„ã¦ã¯ã€ŒSSLã¨ã¯ã€ã‚’ã”å‚ç…§ãã ã•ã„ã€‚ï¼‰ ä½Žä¾¡æ ¼ãƒ»çŸæ™‚é–“ã§è¨¼æ˜Žæ›¸ã‚’å–å¾—ã—ãŸã„
karumado 2015/06/15
ã‹ãªã‚Šã‚„ã™ã„SSLè¨¼æ˜Žæ›¸ã€‚201506ã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ã§å¹´990å††ã ã€‚

ã‚ã¨ã§èªã‚€

ssl
ãƒªãƒ³ã‚¯
Varnishã§443ãƒãƒ¼ãƒˆã‚‚ãƒªãƒƒã‚¹ãƒ³ã™ã‚‹ - dai-yamashitaã®æ—¥è¨˜
ãªã‚“ã ã‹ã‚“ã ã§ã€ã¡ã‚‡ã‚ã¡ã‚‡ã‚ã¨Varnishã•ã‚“ã‚’è§¦ã£ã¦ã„ã¾ã™ã€‚ Varnishã•ã‚“ã§SSLé–¢é€£ãŒè§¦ã‚Œãªã„ã®ã¯ã€çš†ã•ã‚“å‘¨çŸ¥ã®äº‹å®Ÿã ã¨æ€ã„ã¾ã™ãŒã€ ãªã«ã‚‚ã—ãªãã¦ã„ã„ã‹ã‚‰ã€ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰ã«ãã®ã¾ã¾æµã—ã¦ãã‚Œã¨ã€(ãƒãƒƒã‚¯ã‚¨ãƒ³ãƒ‰å´ã§SSLç´è§£ã‘ã°ï¼‰ã¨ã„ã†ã®ã‚’ã‚„ã£ã¦ã¿ãŸã‹ã£ãŸã®ã§ã€è©¦ã—ãŸæ‰€ã€ ç¿Œã€…è€ƒãˆãŸã‚‰ã€80ãƒãƒ¼ãƒˆã—ã‹ãƒªãƒƒã‚¹ãƒ³ã•ã›ã¦ãªã‹ã£ãŸã®ã§ï¼ˆæ°—ã¥ãã®ã«ã¡ã‚‡ã£ã¨æ™‚é–“ã‹ã‹ã£ãŸï½—ï¼‰æœªæ¥ã®è‡ªåˆ†ã¸ã®å‚™å¿˜éŒ²ã€‚ (ã‚¿ãƒ€ã®æ¥ã•ã‚‰ã—ã®è¨˜éŒ²ã§ã™ããƒ¼( ï¾Ÿ Ï ï¾Ÿ )ï¼‰ â– ç’°å¢ƒ Scientific Linux â– Varnish 3.0.4 (rpmãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã‚’ä½œã£ã¦ã€å°Žå…¥ã—ã¦ã„ã¾ã™ã€‚ç†ç”±ã¯ã€ã¾ãŸæ¬¡ã®æ©Ÿä¼šã«ã§ã‚‚ã€‚ã€‚ã€‚ï¼‰ yumç‰ã§å°Žå…¥ã—ãŸå ´åˆã€ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«å…¥ã£ã¦ã„ã‚‹initscriptã¯ã€/etc/sysconfig/varnishã€€ã®å†…å®¹ã‚’èªã‚“ã§ã„ã‚‹ã“ã¨ãŒç¢ºèªã§ãã¾ã™ã€‚ ã‚“ã§ã€æœ€åˆã®çŠ¶æ³ãŒã“ã‚Œã€‚ãƒªãƒƒã‚¹ãƒ³ãƒãƒ¼ãƒˆã‚’8
karumado 2015/05/12
ã‚ã¨ã§èªã‚€

Varnish

ssl
ãƒªãƒ³ã‚¯
SSL è¨¼æ˜Žæ›¸ ValueSSL
SSLè¨¼æ˜Žæ›¸ SSLè¨¼æ˜Žæ›¸ã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³æ³¨æ–‡(ç”³è«‹)ã¯24æ™‚é–“å—ä»˜(å¹´ä¸ç„¡ä¼‘) ValueSSLã®ã‚ªãƒ³ãƒ©ã‚¤ãƒ³æ³¨æ–‡ã¯ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ã§èªè¨¼å±€ã®ã‚·ã‚¹ãƒ†ãƒ ã«é€ä¿¡ã—ã¾ã™ã€‚ æ”¯æ‰•ã¯å®‰å¿ƒãªå®Œå…¨å¾Œæ‰•ã„ã§ã™ã€‚ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã¾ã—ãŸã‚‰ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¦å‹•ä½œç¢ºèªå¾Œã«ãŠæ”¯æ‰•ä¸‹ã•ã„ã€‚ å‹•ä½œç¢ºèªã®çµæžœã«ã”æº€è¶³ã„ãŸã ã‘ãªã„å ´åˆã¯ã‚ãƒ£ãƒ³ã‚»ãƒ«ã§ãã¾ã™ï¼ˆSSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ—¥ã‹ã‚‰14æ—¥é–“è¿”å“ä¿è¨¼ï¼‰ COMODO SSLè¨¼æ˜Žæ›¸ SSLè¨¼æ˜Žæ›¸ç¨®é¡ž SSLä¾¡æ ¼ æ‰€è¦æ™‚é–“ ä»Šã™ãæ³¨æ–‡
karumado 2015/03/17
2015/03/17 ä»Šã®ã¨ã“ã‚ã“ã“ãŒä¸€ç•ªå®‰ãã†ã€‚

ssl
ãƒªãƒ³ã‚¯
SSL/TLSã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸-ä¿¡é ¼ã®å›½ç”£CAãªã‚‰æ ¼å®‰ã®ã‚¢ãƒ«ãƒ•ã‚¡SSLï¼ˆå…¬å¼ã‚µã‚¤ãƒˆï¼‰
ã‚¢ãƒ«ãƒ•ã‚¡SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ç‰¹é•·: ã‚¢ãƒ«ãƒ•ã‚¡SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯æœ€å¤§256bitã®æš—å·åŒ–é€šä¿¡ã‚’å®Ÿç¾ã™ã‚‹SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã§ã™ã€‚ ã‚ªãƒ³ãƒ©ã‚¤ãƒ³å¯©æŸ»ã«ã‚ˆã‚Šæœ€çŸï¼’åˆ†ã§ç™ºè¡Œã€ã‚³ã‚¹ãƒˆå‰Šæ¸›ã¨ç…©é›‘ãªæ‰‹ç¶šãã®è§£æ¶ˆã‚’å®Ÿç¾ã—ã¾ã—ãŸã€‚ å€‹äººäº‹æ¥ä¸»æ§˜ã‚„å€‹äººã®æ–¹ã«ã‚‚å¯¾å¿œã—ã¦ãŠã‚Šã€ã‚ˆã‚Šå¤šãã®æ–¹ã«æ‰‹è»½ã«ã€SSL/TLSã‚’æ ¼å®‰ã§ã€å®‰å¿ƒã—ã¦ã”åˆ©ç”¨ã„ãŸã ã‘ã¾ã™ã€‚ã•ã‚‰ã«ã€ã‚¢ãƒ«ãƒ•ã‚¡SSLã®å ´åˆãƒ‡ãƒ¦ã‚¢ãƒ«ã‚¢ã‚¯ã‚»ã‚¹å¯¾å¿œã«ã‚ˆã‚Šã€ã€Œwww.ï¼‹ãƒ‰ãƒ¡ã‚¤ãƒ³åã€ã®è¨¼æ˜Žæ›¸ã®å ´åˆã€ã€Œï½—ï½—ï½—ã€ã‚ã‚Šã€ã€Œwwwã€ç„¡ã—ã®ä¸¡æ–¹ã§ã”åˆ©ç”¨ã§ãã¾ã™ã€‚(â€»æ‰¿èªæ¡ä»¶ã‚ã‚Š)èªè¨¼æ–¹å¼ã‚‚ã€ãƒ¡ãƒ¼ãƒ«èªè¨¼ ã€‘ã¨ã€ã€ãƒšãƒ¼ã‚¸èªè¨¼ã€‘ã€ã€DNSèªè¨¼ã€‘ã®3ã¤ã‹ã‚‰é¸æŠžå¯èƒ½ã€‚Â ä¸–ç•Œè¦æ ¼ã«æº–æ‹ ã—ãŸã€ä¿¡é ¼ã®å›½ç”£CAã€‚ã€€99%ä»¥ä¸Šã®ãƒ–ãƒ©ã‚¦ã‚¶ã‚’ã‚«ãƒ¼ãƒãƒ¼ã—ã¦ã„ã‚‹ã®ã§ã€ãƒ›ãƒ¼ãƒ ãƒšãƒ¼ã‚¸ã®å…¨ä½“ã‚’SSLåŒ–ã™ã‚‹å¸¸æ™‚SSLã«ã‚‚å®‰å¿ƒã—ã¦ã”åˆ©ç”¨ã„ãŸã ã‘ã¾ã™ã€‚
karumado 2015/02/13
ssl

è¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
5åˆ†ã§ã‚ã‹ã‚‹æ£ã—ã„ Web ã‚µã‚¤ãƒˆå¸¸æ™‚ SSL åŒ–ã®ãŸã‚ã®åŸºç¤ŽçŸ¥è˜
Web ã‚µã‚¤ãƒˆã‚’å¸¸æ™‚ SSL åŒ–ã™ã‚‹å ´åˆã«ã€æœ€ä½Žé™çŸ¥ã£ã¦ãŠã‹ãªã‘ã‚Œã°ãªã‚‰ãªã„çŸ¥è˜ã‚„ã€æ³¨æ„ç‚¹ã€å®Ÿéš›ã®è¨å®šæ–¹æ³•ã¾ã§ã€ã²ã¨é€šã‚Šã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ãƒ¡ãƒªãƒƒãƒˆã‚„ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã€è¨¼æ˜Žæ›¸ã®ç¨®åˆ¥ã‹ã‚‰ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆè¨å®šãªã©ã«ã¤ã„ã¦ã‚‚è§£èª¬ã—ã¦ã„ã¾ã™ã€‚ HTTPS ã‚’ãƒ©ãƒ³ã‚ãƒ³ã‚°ã‚·ã‚°ãƒŠãƒ«ã«ä½¿ç”¨ã—ã¾ã™ã¨ Google ãŒå…¬å¼ã«ç™ºè¡¨ã—ãŸã‚ãŸã‚Šã‹ã‚‰ã€Web ã‚µã‚¤ãƒˆã® SSL å¯¾å¿œã€ç‰¹ã« Google ãŒæŽ¨å¥¨ã—ã¦ã„ã‚‹ Web ã‚µã‚¤ãƒˆã‚’ã™ã¹ã¦ HTTPS ã§é…ä¿¡ã™ã‚‹ã€æ‰€è¬‚ ã€Œå¸¸æ™‚ SSL åŒ–ã€ ã«ã¤ã„ã¦ã®è©±ã‚’èžã„ãŸã‚Šã€å®Ÿéš›ã«ãŠå®¢æ§˜ã‹ã‚‰ç›¸è«‡ã•ã‚ŒãŸã‚Šã™ã‚‹ã‚±ãƒ¼ã‚¹ãŒå¢—ãˆã¦ãã¾ã—ãŸã€‚ ãã“ã§ã€ã„ã„æ©Ÿä¼šã ã—ãã®è¾ºã«é–¢ã™ã‚‹æƒ…å ±ã‚’ã¾ã¨ã‚ã¦ãŠã“ã†ã‹ãªï½ž ã¨æ€ã£ã¦æ›¸ã„ã¦ã¿ãŸã€æ’ä¾‹ã® ï¼ˆï¼Ÿï¼‰ 5åˆ†ã§ã‚ã‹ã‚‹ã‚·ãƒªãƒ¼ã‚ºã€‚æ›¸ãçµ‚ã‚ã£ã¦è¦‹ãŸã¨ã“ã‚çµ¶å¯¾ã« 5åˆ†ã˜ã‚ƒç„¡ç†ã£ã¦ã„ã†æ–‡ç« é‡ã«ãªã£ã¦ã¦ã©ã†ã—ã‚ˆã†ã‹ãªãã¨ã‚‚æ€ã£ãŸã‚“ã§ã™ãŒã€æ°—ã«ã›ãšå…¬é–‹ã—ã¦ã¿ã¾ã™ã€‚ å¸¸æ™‚ SSL
karumado 2015/01/22
ssl
ãƒªãƒ³ã‚¯
SSLv3è„†å¼±æ€§ã€ŒPOODLEã€ã€TLSã«ã‚‚å½±éŸ¿--ã‚°ãƒ¼ã‚°ãƒ«ã®å°‚é–€å®¶ãŒæŒ‡æ‘˜
Googleã«æ‰€å±žã™ã‚‹SSLå°‚é–€å®¶ã®Adam Langleyæ°ã¯ç±³å›½æ™‚é–“12æœˆ8æ—¥ã€è‡ªèº«ã®ãƒ–ãƒã‚°ã§å¤šãã®TLSå®Ÿè£…ã«å¯¾ã—ã¦è¦å‘Šã‚’å‡ºã—ãŸã€‚ä»¥å‰æ˜Žã‚‰ã‹ã«ãªã£ãŸã€SSLãƒãƒ¼ã‚¸ãƒ§ãƒ³3ï¼ˆSSLv3ï¼‰ã«å½±éŸ¿ã™ã‚‹ã€ŒPOODLEï¼ˆPadding Oracle On Downgraded Legacy Encryptionï¼‰ã€æ”»æ’ƒã¨åŒã˜ã‚ˆã†ãªæ”»æ’ƒã«ã¤ãªãŒã‚‹è„†å¼±æ€§ã‚’å«ã‚“ã§ã„ã‚‹ã¨ã„ã†ã€‚ SSLv3ã¯ã€CBCãƒ¢ãƒ¼ãƒ‰ã®æš—å·ã§ãƒ‡ãƒ¼ã‚¿ã®ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã‚’åŠ¹æžœçš„ã«ç‰¹å®šã—ãªã„ã€‚ãã®ãŸã‚ã€ãƒ–ãƒãƒƒã‚¯æš—å·ã®æ•´åˆæ€§ã‚’ãã¡ã‚“ã¨ç¢ºèªã§ããšã€ã€Œãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã‚ªãƒ©ã‚¯ãƒ«æ”»æ’ƒã€ã‚’å¯èƒ½ã«ã—ã¦ã—ã¾ã†ã€‚SSLv3ã®å¾Œã€ä»•æ§˜ã¯TLSã¨æ”¹åã•ã‚Œã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³1ã«ãªã£ãŸã€‚TLSv1ã®å¤‰æ›´ç‚¹ã®1ã¤ã¨ã—ã¦ã€ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã‚ªãƒ©ã‚¯ãƒ«æ”»æ’ƒã‚’é˜²ããŸã‚ã®ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°å‡¦ç†ã‚’æ”¹å–„ã—ãŸã€‚ ã ãŒã€TLSå®Ÿè£…ã§ã‚‚ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ãƒã‚¤ãƒˆã®ãƒã‚§ãƒƒã‚¯ã¯å®Œå…¨ã§ã¯ãªã„ã¨ã„ã†ã€‚å¤šãã®TLSå®Ÿè£…ãŒSSLv3ã‚½ãƒ•ãƒˆã‚¦
karumado 2014/12/10
POODLE

è„†å¼±æ€§

TLS

ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Qualys SSL Labs
HOW WELL DO YOU KNOW SSL? If you want to learn more about the techno logy that protects the Internet, youâ€™ve come to the right place. Books Bulletproof SSL and TLS is a complete guide to deploying secure servers and web applications. This book, which provides comprehensive coverage of the ever-changing field of SSL/TLS and Web PKI, is intended for IT security professionals, system administrators, a
karumado 2014/10/20
ssl

checker
ãƒªãƒ³ã‚¯
æ›´æ–°ï¼šSSL 3.0 ã®è„†å¼±æ€§å¯¾ç–ã«ã¤ã„ã¦(CVE-2014-3566)ï¼šIPA ç‹¬ç«‹è¡Œæ”¿æ³•äºº æƒ…å ±å‡¦ç†æŽ¨é€²æ©Ÿæ§‹
SSL 3.0 ãƒ—ãƒãƒˆã‚³ãƒ«ã«ã¯ã€é€šä¿¡ã®ä¸€éƒ¨ãŒç¬¬ä¸‰è€…ã«è§£èªå¯èƒ½ãªè„†å¼±æ€§ãŒå˜åœ¨ã—ã¾ã™ã€‚ã‚µãƒ¼ãƒã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆé–“ã®é€šä¿¡ã«ãŠã„ã¦ã€SSL 3.0 ã‚’ä½¿ç”¨ã—ã¦ã„ã‚‹å ´åˆã€é€šä¿¡ã®ä¸€éƒ¨ãŒç¬¬ä¸‰è€…ã«æ¼ãˆã„ã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ãŸã ã—ã€æ”»æ’ƒã«ã¯è¤‡æ•°ã®æ¡ä»¶ãŒå¿…è¦ã§ã€ä¾‹ãˆã°ã€ä¸é–“è€…æ”»æ’ƒã‚„ã€æ”»æ’ƒå¯¾è±¡ã«å¤§é‡ã®é€šä¿¡ã‚’ç™ºç”Ÿã•ã›ã‚‹ãªã©ä¸€å®šã®æ¡ä»¶ãŒå¿…è¦ã«ãªã‚Šã¾ã™ã€‚ãã®ãŸã‚ãŸã ã¡ã«æ‚ªç”¨å¯èƒ½ãªè„†å¼±æ€§ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ ã‚µãƒ¼ãƒç®¡ç†è€…ãŠã‚ˆã³åˆ©ç”¨è€…ã¯å¯¾ç–ã®è¦å¦ã‚’æ¤œè¨Žã—ã€å¿…è¦ã«å¿œã˜ã¦å¾Œè¿°ã®å¯¾ç–ã‚’å®Ÿæ–½ã—ã¦ãã ã•ã„ã€‚ å›³ï¼šè„†å¼±æ€§ã‚’æ‚ªç”¨ã—ãŸæ”»æ’ƒã®ã‚¤ãƒ¡ãƒ¼ã‚¸ ã‚µãƒ¼ãƒã‚‚ã—ãã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã©ã¡ã‚‰ã‹ä¸€æ–¹ã§ã€SSL 3.0 ã‚’ç„¡åŠ¹åŒ–ã™ã‚‹ã“ã¨ã§å¯¾ç–ã§ãã¾ã™ã€‚ ãªãŠã€SSL 3.0 ã‚’ç„¡åŠ¹åŒ–ã™ã‚‹ã“ã¨ã§æ¬¡ã®å½±éŸ¿ã‚’å—ã‘ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ã‚µãƒ¼ãƒå´ã§ SSL 3.0 ã‚’ç„¡åŠ¹ã«ã—ãŸå ´åˆ ä¸€éƒ¨ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‹ã‚‰æŽ¥ç¶šãŒã§ããªããªã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´ã§ S
karumado 2014/10/17
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

POODLE

ssl

SSL-3.0
ãƒªãƒ³ã‚¯
Resolution for POODLE SSLv3.0 vulnerability (CVE-2014-3566) in httpd - Red Hat Customer Portal
Environment Red Hat Enterprise Linux 5, 6, 7 Red Hat JBoss Enterprise Application Platform (EAP) 5, 6 JBoss Enterprise Web Server (EWS) 1, 2 Inktank Ceph Enterprise (ICE) 1 Red Hat Storage Console Red Hat Enterprise Virtualization Issue How do I avoid impact to httpd from CVE-2014-3566? How do I disable SSL 3.0 in httpd (using mod_ssl or mod_nss)? To avoid this vulnerability, Red Hat recommends di
karumado 2014/10/16
POODLE

ssl

è„†å¼±æ€§
ãƒªãƒ³ã‚¯
POODLE: SSLv3 vulnerability (CVE-2014-3566) - Red Hat Customer Portal
Red Hat Product Security has been made aware of a vulnerability in the SSLv3 protocol, which has been assigned CVE-2014-3566 and commonly referred to as 'POODLE'. All implementations of SSLv3 are affected. Background Information POODLE stands for Padding Oracle On Downgraded Legacy Encryption. This vulnerability allows a man-in-the-middle attacker to decrypt ciphertext using a padding oracle side-
karumado 2014/10/16
è„†å¼±æ€§

POODLE

SSL
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸