[B! ssl] kei2100ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kei2100 id:kei2100

sslã«é–¢ã™ã‚‹kei2100ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ZeroSSL ãªã‚‰IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŒå–å¾—ã§ãã‚‹ - ASnoKaze blog
IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŒæ¬²ã—ã„å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ãã†ã™ã‚Œã°ã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’å–å¾—ã›ãšã¨ã‚‚ã‚µãƒ¼ãƒã¨HTTPSé€šä¿¡ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ ãã®ä»–ã«ã‚‚ä¾‹ãˆã°DNS over HTTPSã§ã¯IPã‚¢ãƒ‰ãƒ¬ã‚¹ã§ã‚¢ã‚¯ã‚»ã‚¹å‡ºæ¥ã‚‹ã‚ˆã†ã«ã€æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ãŒã‚»ãƒƒãƒˆã•ã‚Œã¦ã„ãŸã‚Šã—ã¾ã™ã€‚ https://1.1.1.1 https://8.8.8.8 ã—ã‹ã—ã€Let's Encryptã§ã¯ã€IPã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯å–å¾—ã§ãã¾ã›ã‚“ ~$ sudo certbot certonly --nginx -d 160.16.124.39 Requested name 160.16.124.39 is an IP address. The Let's Encrypt certificateauthority will not issue certificates for a bare IP address.ZeroSSLã§ã¯å‡ºæ¥
kei2100 2021/01/19
ip address

zerossl

ssl

tls
ãƒªãƒ³ã‚¯
ç„¡æ–™ã® SSL è¨¼æ˜Žæ›¸ãŒå¾—ã‚‰ã‚Œã‚‹ ZeroSSL ã‚’ä½¿ã£ã¦ã¿ãŸ
ã¯ã˜ã‚ã« çš†ã•ã‚“ã¯ ZeroSSL ã‚’çŸ¥ã£ã¦ã„ã¾ã™ã‹ï¼Ÿå€‹äººã§ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã‚’é‹å–¶ã—ã¦ã„ã‚‹çš†ã•ã‚“ã§ã‚ã‚Œã°ã€å¤šãã®æ–¹ã¯ Let's Encrypt ã‚’åˆ©ç”¨ã•ã‚Œã¦ã„ã‚‹ã¨æ€ã„ã¾ã™ã€‚ https://letsencrypt.org/ja/ ã‚‚ã¡ã‚ã‚“åƒ•ã‚‚ä½¿ã£ã¦ã„ã¾ã™ã€‚åƒ•ã®æ§˜ãªã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®æ–¹ã§ã‚ã‚Œã° SSL ã®ä»•çµ„ã¿ã‚‚ãŠãŠã‚ˆãç†è§£ã‚‚ã—ã¦ã„ã‚‹ã—ã€ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã®å®Ÿè¡Œæ–¹æ³•ã‚‚çŸ¥ã£ã¦ãŠã‚‰ã‚Œã‚‹ã®ã§ã‚¦ã‚§ãƒ–ã‚µã‚¤ãƒˆã® SSL è¨¼æ˜Žæ›¸ã‚’å–å¾—ã™ã‚‹äº‹ã‚‚ãã‚Œã»ã©é›£ã—ã„äº‹ã§ã¯ãªã„ã§ã—ã‚‡ã†ã€‚ ã—ã‹ã—ãã‚Œã»ã©è©³ã—ããªã„æ–¹ãŒ certbot ã®æ§˜ãªã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã£ã¦ SSL è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹ã®ã¯å‰²ã¨é›£ã—ã„äº‹ã§ã™ã€‚ãã“ã§ã”ç´¹ä»‹ã—ãŸã„ã®ãŒ ZeroSSL ã§ã™ã€‚ https://zerossl.com/ ZeroSSL ã¨ã¯ ZeroSSL ã‚‚ã¾ã ã‚ã¾ã‚Šåå‰ãŒçŸ¥ã‚‰ã‚Œã¦ã„ãªã„ã›ã„ã‹ã€Google æ¤œç´¢ã§ã€ŒZeroSSLã€ã‚’æ¤œç´¢ã™ã‚‹ã¨ã€ŒZeroS
kei2100 2020/12/05
ssl

tls

zerossl
ãƒªãƒ³ã‚¯
ç„¡æ–™ã®è¨¼æ˜Žæ›¸ç™ºè¡Œã‚’ã€ŒLetâ€™s Encryptã ã‘ã«é ¼ã‚‹ã®ã¯å•é¡Œã€ã¨ã®æŒ‡æ‘˜ã€ã©ã‚“ãªä»£æ›¿ã‚µãƒ¼ãƒ“ã‚¹ãŒã‚ã‚‹ã®ã‹ï¼Ÿ
SSLè¨¼æ˜Žæ›¸ã‚’ç„¡æ–™ã§ç™ºè¡Œã—ã¦ãã‚Œã‚‹èªè¨¼æ©Ÿé–¢ã€ŒLetâ€™s Encryptã€ã¯ã€2014å¹´ã®è¨ç«‹ã‹ã‚‰å®‰å…¨ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®åˆ©ç”¨ã«å¤§ããè²¢çŒ®ã—ã¦ã„ã¾ã™ã€‚ã—ã‹ã—ã€ãƒãƒƒã‚«ãƒ¼ã§ã‚ã‚Šç ”ç©¶è€…ã§ã‚‚ã‚ã‚‹Scott Helmeæ°ã¯ã€ç„¡æ–™ã®è¨¼æ˜Žæ›¸ç™ºè¡Œã‚’Letâ€™s Encryptã®ã¿ã«é ¼ã£ã¦ã„ã‚‹ç¾çŠ¶ã‚’å•é¡Œã¨ã—ã¦å–ã‚Šä¸Šã’ã€Letâ€™s Encryptã®ä»£æ›¿ã¨ãªã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’ç´¹ä»‹ã—ã¦ã„ã¾ã™ã€‚ Introducing another free CA as an alternative to Let's Encrypt https://scotthelme.co.uk/introducing-another-free-ca-as-an-alternative-to-lets-encrypt/ Free SSL Certificates and SSL Tools - ZeroSSL https://zerossl.com/ L
kei2100 2020/11/27
acme

tls

ssl
ãƒªãƒ³ã‚¯
ç†è§£ã—ã¦ã‚‹ã¤ã‚‚ã‚Šã® SSL/TLS ã§ã‚‚ã€ã‚‚ã£ã¨ç†è§£ã—ãŸã‚‰é¢ç™½ã‹ã£ãŸè©± Â· ã‘ã‚“ã”ã®ãŠå±‹æ•·
apache ã‚„ nginx ã®è¨å®šã‚’ã—ãŸã“ã¨ãŒã‚ã‚Œã°ä»¥ä¸‹ã®æ§˜ãªè¡Œã‚’è¦‹ãŸã“ã¨ãŒã‚ã‚‹äººã‚‚å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚(â€» ä¸‹è¨˜ã¯ nginx ã®è¨å®šã€‚apache ã®å ´åˆã¯ SSLCipherSuite ã§ã™ã€‚) ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; ã“ã‚ŒãŒæš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã‚’æŒ‡å®šã—ã¦ã„ã‚‹ç®‡æ‰€ã§ã™ã€‚ãã—ã¦ã“ã®éƒ¨åˆ†ã€ã‚ã‘ã®ã‚ã‹ã‚‰ãªã„æ–‡å—åˆ—ã®ç¾…åˆ—ãªã®ã§ã™ã”ãå–ã£ã¤ãã«ããã¦ä½•ã‚’æŒ‡å®šã—ãŸã‚‰ã„ã„ã‹ã‚ã‹ã‚‰ãªã„ã®ã§ã€ã‚³ãƒ”ãƒšã—ã¦ã—ã¾ã†äººã‚‚å¤šã„ã‚“ã˜ã‚ƒãªã„ã§ã—ã‚‡ã†ã‹ã€‚ã‹ãã„ã†ç§ã‚‚æ•°å¹´å‰ã«è¶£å‘³ã§ TLS å¯¾å¿œã® Web ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä½œã£ãŸæ™‚ã¯ã‚³ãƒ”ãƒšã§æ¸ˆã¾ã›ã¦ã„ã¾ã—ãŸã€‚ã“ã®æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãª OpenSSL ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã£ã¦å¯¾å¿œã—ã¦ã„ã‚‹ä¸€è¦§ã‚’è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ $ openssl ciphers -v AES128-SH
kei2100 2017/08/16
tls

ssl
ãƒªãƒ³ã‚¯
openssl ã‚³ãƒžãƒ³ãƒ‰ã§ SSL/TLS ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’æŒ‡å®šã—ãŸ HTTPS æŽ¥ç¶šãƒ†ã‚¹ãƒˆã‚’å®Ÿæ–½ã™ã‚‹ - ã‚‰ããŒãã¡ã‚‡ã†
openssl ã‚³ãƒžãƒ³ãƒ‰ã¯æ§˜ã€…ãªã“ã¨ãŒå®Ÿè¡Œã§ãã¾ã™ãŒã€HTTPS ã®æŽ¥ç¶šãƒ†ã‚¹ãƒˆã«ä½¿ã†ã“ã¨ã‚‚å‡ºæ¥ã¾ã™ã€‚ä»Šå›žã¯ openssl ã‚’ä½¿ã£ã¦ SSL/TLS ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’æ˜Žç¤ºçš„ã«æŒ‡å®šã—ãŸæŽ¥ç¶šãƒ†ã‚¹ãƒˆã®æ–¹æ³•ã‚’ãƒ¡ãƒ¢ã—ã¾ã™ã€‚ ç›®æ¬¡ ç›®æ¬¡ Apache ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§æœ‰åŠ¹ã«ãªã£ã¦ã„ã‚‹ SSL/TLS ãƒãƒ¼ã‚¸ãƒ§ãƒ³ OpenSSL ã‚’ä½¿ã£ãŸ HTTPS æŽ¥ç¶šãƒ†ã‚¹ãƒˆ SSL/TLS ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’æŒ‡å®šã—ãŸæŽ¥ç¶šãƒ†ã‚¹ãƒˆ SSL 1.0 SSL 2.0 SSL 3.0 TLS 1.0 TLS 1.1 TLS 1.2 å®Ÿè¡Œçµæžœ SSL/TLS ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒä¸€è‡´ã›ãšã€æŽ¥ç¶šã«å¤±æ•—ã—ãŸã‚±ãƒ¼ã‚¹ SSL/TLS ãƒãƒ¼ã‚¸ãƒ§ãƒ³ãŒä¸€è‡´ã—ã€æŽ¥ç¶šã«æˆåŠŸã—ãŸã‚±ãƒ¼ã‚¹ Apache ã§ SSL 3.0 ã‚’ç„¡åŠ¹ã«ã—ã¦ã¿ã‚‹ å¤‰æ›´å‰ å¤‰æ›´å¾Œ SSL 3.0 ã§æŽ¥ç¶šå‡ºæ¥ãªããªã£ãŸã“ã¨ã‚’ç¢ºèªã™ã‚‹ Apache ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« ãƒ†ã‚¹ãƒˆç”¨ã®ã‚µãƒ¼ãƒã¯
kei2100 2017/08/15
ssl

tls
ãƒªãƒ³ã‚¯
OpenSSLã‚’SSL/TLSã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ã—ã¦ä½¿ã£ã¦ã¿ã‚‹
$ openssl s_client -connect servername:443 ã§ SSL æŽ¥ç¶š HTTP ã®æŽ¥ç¶šã‚’ç¢ºèªã—ãŸãã¦ telnet ã‚’ä½¿ã†ã“ã¨ãŒã‚ã‚‹ã€‚ ãŸã¨ãˆã°ã€ telnet ã§ http://www.google.com:80/ ã« GET ã™ã‚‹ã«ã¯ä»¥ä¸‹ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ã€‚ $ telnet www.google.com 80 Trying 173.194.117.145... Connected to www.google.com. Escape character is '^]'. GET / HTTP/1.1 host: www.google.com HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=UTF-8 Location: http://www.goog
kei2100 2017/07/24
linux

ssl

tls
ãƒªãƒ³ã‚¯
é›»åè¨¼æ˜Žæ›¸ã®ç¨®é¡žï¼sslã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã®ä»•çµ„ã¿
Webã‚µã‚¤ãƒˆ2016.02.08 2019.12.27 é›»åè¨¼æ˜Žæ›¸ã®ç¨®é¡žï¼sslã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã®ä»•çµ„ã¿ è¿‘å¹´ã€IDãƒ»ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã ã‘ã§èªè¨¼ã™ã‚‹WEBã‚µã‚¤ãƒˆã«å¯¾ã—ã¦ã®ã€ãªã‚Šã™ã¾ã—è¢«å®³ãŒæ€¥å¢—ã—ã¦ã„ã¾ã™ã€‚å€‹äººå‘ã‘ã®WEBã‚µã‚¤ãƒˆã®ã¿ãªã‚‰ãšã€ä¼æ¥ãŒå¾“æ¥å“¡å‘ã‘ã§ç”¨æ„ã—ã¦ã„ã‚‹ãƒªãƒ¢ãƒ¼ãƒˆã‚¢ã‚¯ã‚»ã‚¹ç’°å¢ƒã«ã‚‚è¢«å®³ãŒæ‹¡å¤§ä¸ã§ã™ã€‚ ãã®ã‚ˆã†ãªè¢«å®³ã‚’é˜²ããŸã‚ã«ã€é›»åè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã™ã‚‹ä¼æ¥ãŒå¢—ãˆã¦ãã¦ã„ã¾ã™ã€‚é›»åè¨¼æ˜Žæ›¸ã®ä»£è¡¨çš„ãªç¨®é¡žã¨ã—ã¦ã€sslã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ãŒã‚ã‚Šã¾ã™ã€‚ ã“ã“ã§ã¯é›»åè¨¼æ˜Žæ›¸ãŒã©ã†ã„ã†ä»•çµ„ã¿ã®ã‚‚ã®ãªã®ã‹ã‚’èª¬æ˜Žã—ã¦ã„ãã¾ã™ã€‚ SSLã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼é›»åè¨¼æ˜Žæ›¸ã‚’ç”¨ã„ãŸèªè¨¼ã¨ã„ã†ã¨ã€ã‚ˆãçŸ¥ã‚‰ã‚Œã¦ã„ã‚‹ã®ã¯SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ã‚µãƒ¼ãƒãƒ¼èªè¨¼ã§ã™ã€‚ã‚µãƒ¼ãƒãƒ¼èªè¨¼ã¯ã€WEBã‚µã‚¤ãƒˆã¸ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒã€æ£è¦ã®WEBã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã„ã‚‹ã‹ã‚’ç¢ºèªã™ã‚‹ãŸã‚ã®èªè¨¼ã§ã™ã€‚ SSLã‚¯ãƒ©ã‚¤ã‚¢ãƒ³
kei2100 2017/07/13
ssl

tls
ãƒªãƒ³ã‚¯
Eric Chiang | TLS with Go
NOTE: For an updated version of this post, see the GopherCon 2019 talk â€œPKI for Gopherâ€. (Video, Slides) For a long time my knowledge of TLS was Googling â€œhow to configure nginx as an HTTPS proxy.â€ Okay, the cert goes here and the key goes here, thatâ€™s my job done. But with more and more pushes for things HTTPS and HTTP/2 (which defaults to using TLS), it sometimes helps to understand this a littl
kei2100 2017/07/13
ssl

tls

golang
ãƒªãƒ³ã‚¯
OpenSSLã‚³ãƒžãƒ³ãƒ‰ã®å‚™å¿˜éŒ² - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
kei2100 2017/07/10
ssl
ãƒªãƒ³ã‚¯
ã‚¬ãƒ©ã‚±ãƒ¼Ã—SSL é–‹ç™ºTips
16. SSLã ã¨ https://hoge.jp â†’ https://hoge.jp/ â†’ http://hoge.jp/ â†’ http://hoge.jp/m/ â†’ http://hoge.jp/m/mypage â†’ https://hoge.jp/m/mypage ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆ5å›žâ†’ã‚¢ã‚¦ãƒˆ
kei2100 2012/10/18
ssl

programming
ãƒªãƒ³ã‚¯
1