[B! SSL][Apache] kiyoshi1211ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

kiyoshi1211 id:kiyoshi1211

SSLã¨Apacheã«é–¢ã™ã‚‹kiyoshi1211ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Apache2-SSLã‚’æœ‰åŠ¹ã«ã™ã‚‹ã«ã¯
ã“ã“ã§ã¯ä¸ç‰¹å®šå¤šæ•°ã«å…¬é–‹ã™ã‚‹ WEB ã‚µãƒ¼ãƒãƒ¼ã‚’å¯¾è±¡ã¨ã—ã¦ãŠã‚Šã¾ã›ã‚“ã€‚ç‹¬è‡ªCA ã«ã‚ˆã‚‹ WEBã‚µã‚¤ãƒˆã®æš—å·åŒ–ã¯é™ã‚‰ã‚ŒãŸç”¨é€”ã®ã¿ã«é™å®šã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ åŸºæœ¬çš„ã«1.3ç³»ã¨å†…å®¹ã¯å¤‰ã‚ã‚Šã¾ã›ã‚“ã€‚ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ã®è©•ä¾¡åŸºæº–ã«å¤‰æ›´ãŒã‚ã‚Šã¾ã™ã€‚CA(èªè¨¼å±€)ã¨SSLã‚µãƒ¼ãƒãƒ¼ã«å¿…è¦ãªã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã¨ç§˜å¯†éµãŒæº–å‚™ã§ãã¦ã„ã‚‹äº‹ãŒå‰æã§ã™ã€‚ã“ã¡ã‚‰ã§è§£èª¬ã—ã¦ã„ã¾ã™ã®ã§å‚è€ƒã«ã—ã¦ä¸‹ã•ã„ã€‚ Apache2ç³»çµ±ã§SSLå¯¾å¿œã«ã™ã‚‹ã«ã¯ã€/etc/httpd/conf.d/ssl.conf ã‚’ä¿®æ£ã—ã¾ã™ã€‚ãƒ‘ã‚¹ã¯é©å®œèªã¿æ›¿ãˆã¦ãã ã•ã„ã€‚ https://www.mydomain.net ã‚’æœ‰åŠ¹ã«ã™ã‚‹å ´åˆ # ã‚³ãƒ¡ãƒ³ãƒˆã‚’è§£é™¤ã—ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’æŒ‡å®šã—ã¾ã™ã€‚ DocumentRoot "/var/www/pub/html" #ServerName www.example.com:443 ServerName www.mydomai
kiyoshi1211 2011/12/26
Apache

SSL
ãƒªãƒ³ã‚¯
Installing mod_ssl on Apache on CentOS 5 | The Electric Toolbox Blog
kiyoshi1211 2011/12/26
Apache

SSL
ãƒªãƒ³ã‚¯
httpdã®è¨å®šï¼ˆssl.confï¼‰
httpdã®è¨å®šï¼ˆssl.confï¼‰ [ã‚µãƒ¼ãƒã®å®Ÿé¨“å®¤ Slackware] ä½œæˆ : 2003/11/02 "ã‚µãƒ¼ãƒã®å®Ÿé¨“å®¤"ã®æ¤œç´¢ SSL ã®è¨å®š SSL ã®è¨å®šã¯ httpd.conf ã«æ›¸ã„ã¦ã‚‚ã‚ˆã„ãŒã€åˆ¥ã®ãƒ•ã‚¡ã‚¤ãƒ«ã« SSL é–¢é€£ã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ã¾ã¨ã‚ã¦è¨˜è¿°ã—ã€httpd.conf ã‹ã‚‰ Include ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’ä½¿ç”¨ã—ã¦ãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿è¾¼ã‚€ã“ã¨ã‚‚ã§ãã‚‹ã€‚ Include conf/ssl.conf ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã® ssl.conf ã«è¨˜è¿°ã•ã‚Œã¦ã„ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã«ã¤ã„ã¦ã€é †ã«è¦‹ã¦ã„ãã€‚ ï¼ˆé‡è¤‡ã™ã‚‹ã‚‚ã®ã¯çœç•¥ï¼‰ ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã® ssl.conf <IfDefine> ã€œ </IfDefine> [core ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«] httpd ã‚’èµ·å‹•ã™ã‚‹ã¨ã -D ã§ãƒ‘ãƒ©ãƒ¡ãƒ¼ã‚¿ãŒæŒ‡å®šã•ã‚Œã¦ã„ã‚Œã°ã€<IfDefine> ã¨ </IfDefine> ã§å›²ã¾ã‚ŒãŸãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã‚’æœ‰åŠ¹ã«ã™ã‚‹ã€‚ æ¬¡ã®ä¾‹
kiyoshi1211 2011/12/26
Apache

SSL
ãƒªãƒ³ã‚¯
apache+mod_sslã§SSL
SHA2ã®è¨¼æ˜Žæ›¸ä½œæˆã«ã¤ã„ã¦ 2015.10.10è¿½è¨˜ SSLè¨¼æ˜Žæ›¸ã®æš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒSHA-1ã‹ã‚‰SHA-2ï¼ˆsha256ï¼‰ã¸å¤‰æ›´ã•ã‚Œã¦ã„ã‚‹ã¨ã“ã‚ã§ã™ã€‚ SHA-2ã‚’ä½¿ç”¨ã—ã¦ã®ã‚ªãƒ¬ã‚ªãƒ¬ï¼ˆè‡ªå·±è¨¼æ˜Žï¼‰è¨¼æ˜Žæ›¸ä½œæˆæ‰‹é †ã‚’ã“ã¡ã‚‰ã®ãƒšãƒ¼ã‚¸ã§èª¬æ˜Žã—ã¦ã¾ã™ã€‚ æ¤œè¨¼ç’°å¢ƒ OS:CentOS 4.4 httpd: 2.0.52-28.ent.centos4 mod_ssl-2.0.52-28.ent.centos4 openssl-0.9.7a-43.10 apache+mod_sslã«ã‚ˆã‚‹SSLè¨å®š apache+mod_sslã®SSLå¯¾å¿œè¨å®šã§ã™ã€‚ apacheã¯rpmã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ç’°å¢ƒã§æ¤œè¨¼ã—ã¦ã„ã¾ã™ã€‚ ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã®ç¢ºèª SSLã®è¨å®šã«å¿…è¦ãªmod_sslã¨opensslãŒã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã‹ç¢ºèªã—ã¾ã™ã€‚ mod_sslã®ç¢ºèª # rpm -qa | grep mod_ssl m
kiyoshi1211 2011/12/26
Apache

SSL
ãƒªãƒ³ã‚¯
AKIBE - ã•ãã‚‰ã®VPS CentOSã§ã‚µãƒ¼ãƒæ§‹ç¯‰ 20 â€“ SSL
ã•ãã‚‰ã®VPS CentOSã§ã‚µãƒ¼ãƒæ§‹ç¯‰ ä½œæ¥ãƒŽãƒ¼ãƒˆ20å›žç›®ã€‚ ä»Šå›žã¯SSLã‚’è¨å®šã—ã¾ã™ã€‚ VirtualHostã®è¨å®š ã¾ã§ã®ä½œæ¥ãŒå‰æã¨ãªã‚Šã¾ã™ã€‚ åŸºæœ¬çš„ãªæµã‚Œ èªè¨¼å±€ã‹ã‚‰è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ã‚‚ã‚‰ã†å ´åˆ mod_sslã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« èªè¨¼å±€ã®ä»•æ§˜ã«åˆã£ãŸç§˜å¯†éµ(.key)ãƒ•ã‚¡ã‚¤ãƒ«ã®ä½œæˆ è¨¼æ˜Žæ›¸ç™ºè¡Œè¦æ±‚(.csr)ãƒ•ã‚¡ã‚¤ãƒ«ã®ä½œæˆ èªè¨¼å±€ã¸è¨¼æ˜Žæ›¸ç™ºè¡Œè¦æ±‚(.csr)ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é€ã‚‹ èªè¨¼å±€ã‹ã‚‰é€ã‚‰ã‚Œã¦ãã‚‹è¨¼æ˜Žæ›¸(.crt)ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚µãƒ¼ãƒã«ç½®ã Apache(mod_ssl)ã§SSLè¨å®šã‚’ã™ã‚‹ ãƒ†ã‚¹ãƒˆç”¨ã«è‡ªåˆ†ã§è¨¼æ˜Žæ›¸ã‚’ä½œæˆã™ã‚‹å ´åˆï¼ˆã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ï¼‰ mod_sslã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« Makefileã§è¨¼æ˜Žæ›¸(.crt)ãƒ•ã‚¡ã‚¤ãƒ«ã®ä½œæˆ Apache(mod_ssl)ã§SSLè¨å®šã‚’ã™ã‚‹ mod_sslã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ« mod_sslã‚’yumã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ã¾ã™ã€‚ [root@ ~]# yum -y in
kiyoshi1211 2011/12/26
Apache

SSL
ãƒªãƒ³ã‚¯
Apache+mod_sslã§SSLã‚µãƒ¼ãƒã®ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ— - ã‚ãã‚ãæŠ€è¡“ãƒ©ãƒ³ãƒ‰
kiyoshi1211 2011/12/03
SSL

Apache

Linux
ãƒªãƒ³ã‚¯
1