[B! OpenSSL] niseissaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

niseissa id:niseissa

OpenSSLã«é–¢ã™ã‚‹niseissaã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSLã®è„†å¼±æ€§ã§æ—¥æœ¬ã®å¤§æ‰‹ã‚µã‚¤ãƒˆã‚’å«ã‚€å…¨ä¸–ç•Œ1100ä¸‡ä»¥ä¸Šã®HTTPSã‚µã‚¤ãƒˆãŒæ”»æ’ƒã‚’å—ã‘å¾—ã‚‹ã¨åˆ¤æ˜Ž
SSL/TLSã«ã‚ˆã£ã¦é€šä¿¡ã‚’æš—å·åŒ–ã—ã¦ã„ã‚‹HTTPSã‚µã‚¤ãƒˆã«ç°¡å˜ã«æ”»æ’ƒã•ã‚Œã‚‹è„†å¼±æ€§ãŒã‚ã‚‹ã“ã¨ãŒã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ç ”ç©¶è€…ã«ã‚ˆã£ã¦ç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚ã“ã®è„†å¼±æ€§ã‚’ã¤ã„ãŸæ”»æ’ƒã€ŒDROWNã€ã‚’å—ã‘ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã‚µã‚¤ãƒˆã«ã¯ã€æ¯Žæ—¥æ–°èžã€ä»»å¤©å ‚ã€ã¯ã¦ãªã€LINEãªã©ã®æ—¥æœ¬ã®å¤§æ‰‹ã‚µã‚¤ãƒˆã‚‚å«ã¾ã‚Œã¦ã„ã¾ã™ã€‚ DROWN: Breaking TLS using SSLv2.pdf (PDFãƒ•ã‚¡ã‚¤ãƒ«)https://drownattack.com/drown-attack-paper.pdf DROWN Attack https://drownattack.com/ ã€ŒDecrypting RSA with Obsolete and Weakened eNcryption(DROWN)ã€ã¯SSLv2ã«å«ã¾ã‚Œã‚‹è„†å¼±æ€§ã§ã€ã“ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã•ã‚Œã‚‹ã¨ã‚¯ãƒã‚¹ãƒ—ãƒãƒˆã‚³ãƒ«æ”»æ’ƒã«ã‚ˆã£ã¦TLSã‚»ãƒƒã‚·ãƒ§ãƒ³ã®æš—å·åŒ–ãŒè§£é™¤(å¾©å·)ã•ã‚Œã¦é€šä¿¡ãŒå‚å—
niseissa 2016/03/02
openssl

ã‚ã¨ã§èªã‚€

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã²ã¿ã¤ãƒ¡ãƒ¢å¸³
ã€Œã²ã¿ã¤ãƒ¡ãƒ¢å¸³ã€ã¯ã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æš—å·åŒ–ã—ã¦ä¿å˜ã™ã‚‹ãƒ†ã‚ã‚¹ãƒˆã‚¨ãƒ‡ã‚£ã‚¿ã§ã™ã€‚Windows ã«æ¨™æº–ã§æè¼‰ã•ã‚Œã¦ã„ã‚‹ã€Œãƒ¡ãƒ¢å¸³ã€ã¨åŒç‰ã®ç·¨é›†æ©Ÿèƒ½ãŒã‚ã‚Šã¾ã™ï¼ˆå°åˆ·æ©Ÿèƒ½ã¯ã‚ã‚Šã¾ã›ã‚“ï¼‰ã€‚Mac ç‰ˆã‚‚ã”ç”¨æ„ã—ã¾ã—ãŸã€‚ å‹•ä½œç’°å¢ƒ ä½¿ã„æ–¹ ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ Mac ç‰ˆã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã«ã¤ã„ã¦ æŠ€è¡“æƒ…å ± è¬è¾ž æ›´æ–°å±¥æ´ åˆ©ç”¨è¦ç¨‹ãƒ»å…è²¬äº‹é … å‹•ä½œç’°å¢ƒ Windows ç‰ˆ Microsoft Windows XP/Vista/7/8 Mac ç‰ˆ Mac OS X 10.6 (Snow Leopard) ä»¥é™ ä½¿ã„æ–¹ èµ·å‹•ã™ã‚‹ã¨æ–°ã—ã„ç©ºã®æ–‡æ›¸ãŒé–‹ãã¾ã™ã€‚ãƒ¡ãƒ¢å¸³ã¨åŒã˜ã‚ˆã†ã«ä½¿ã£ã¦ãã ã•ã„ã€‚ ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ–°ãŸã«ä¿å˜ã™ã‚‹æ™‚ã¨ã€ã™ã§ã«ä¿å˜ã—ã¦ã‚ã‚‹ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é–‹ãæ™‚ã«ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®å…¥åŠ›ã‚’æ±‚ã‚ã‚‰ã‚Œã¾ã™ã€‚ãƒ•ã‚¡ã‚¤ãƒ«ãŒä¿å˜ã•ã‚ŒãŸæ™‚ã«è¨å®šã•ã‚ŒãŸãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã¨åŒã˜ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã—ãªã‘ã‚Œã°ã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚’é–‹ãã“ã¨ã¯ã§ãã¾ã›ã‚“ã€‚ ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ ã²ã¿ã¤ãƒ¡ãƒ¢å¸³
niseissa 2014/01/12
OpenSSL

Windows

ã‚½ãƒ•ãƒˆ

ãƒ•ãƒªãƒ¼ã‚½ãƒ•ãƒˆ

ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢
ãƒªãƒ³ã‚¯
OpenSSL::Cipher ã¯ Ruby ã¨ JRuby (Java) ã§å®Ÿè¡ŒçµæžœãŒç•°ãªã‚‹ (å ´åˆãŒã‚ã‚‹) - äº¬ã®è·¯
Ruby OpenSSL ã¯ JRuby OpenSSL ã¨ã¯å®Ÿè£…ãŒé•ã†ã®ã§ã€åŒã˜ã‚³ãƒ¼ãƒ‰ã§ã‚‚çµæžœãŒç•°ãªã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ æ˜¨æ—¥ OpenSSL::Cipher ã‚’åˆ©ç”¨ã—ã¦ã„ã¦ãã‚“ãªçŠ¶æ³ã«éé‡ã—ãŸã®ã§ã€ãƒ¡ãƒ¢ãƒ¡ãƒ¢ã€‚ ä»¥ä¸‹ã®ã‚³ãƒ¼ãƒ‰ã¯ã€Ruby ã¨ JRuby (or Java) ã§å®Ÿè¡ŒçµæžœãŒç•°ãªã‚Šã¾ã™ã€‚ã¤ã¾ã‚Šã€Ruby ã§æš—å·åŒ–ã—ãŸãƒ‡ãƒ¼ã‚¿ã‚’ JRuby (or Java) ã§è¤‡åˆåŒ–ã§ãã¾ã›ã‚“ã€‚ã€‚ã€‚ require 'openssl' def display_bytes(bytes) bytes.each_byte do |byte| print byte, ":" end end plain_text = "some plain text is here" key = "1234567890abcdef" # 16 bytes iv = "abcdef1234567890" # 16 bytes
niseissa 2009/12/04
jruby

java

ruby

OpenSSL
ãƒªãƒ³ã‚¯
mixi Engineersâ€™ Blog Â» OpenSSLã®æš—å·æ–‡ã‚’Java/Perl/Rubyã§é–‹ã
ç§˜å¯†éµã‚„ãƒ—ãƒ©ã‚¤ãƒ™ãƒ¼ãƒˆãªæƒ…å ±ãªã©ã‚’ç§˜åŒ¿ã™ã‚‹ãŸã‚ã«ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒ‡ãƒ¼ã‚¿ã‚’æš—å·åŒ–ãƒ»å¾©å·ã—ãŸã„å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ã“ã®ã¨ãã€æš—å·åŒ–ã¨å¾©å·ã™ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒåŒã˜ã§ã‚ã‚Œã°ç°¡å˜ã§ã™ãŒã€ä¾‹ãˆã°Cã§æš—å·åŒ–ã—ã¦Javaã€Perlã€Rubyã§å¾©å·ã™ã‚‹ã¨ã„ã£ãŸé¢¨ã«ç•°ãªã‚‹ãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã§æš—å·ãƒ‡ãƒ¼ã‚¿ã‚’ã‚„ã‚Šã¨ã‚Šã™ã‚‹å ´åˆã«ã¯ã€ã„ãã¤ã‹æ°— ã‚’ã¤ã‘ãªã‘ã‚Œã°ã„ã‘ãªã„ãƒã‚¤ãƒ³ãƒˆãŒã‚ã‚Šã¾ã™ã€‚ OpenSSLã«ã‚ˆã‚‹æš—å·åŒ– OpenSSLã¯Webã‚µãƒ¼ãƒã®SSL/TLSã‚µãƒãƒ¼ãƒˆã«åˆ©ç”¨ã•ã‚Œã¾ã™ãŒã€ãã®ä»–ã«ã‚‚ä»˜å±žã—ã¦ã„ã‚‹opensslã‚³ãƒžãƒ³ãƒ‰ã‹ã‚‰åŸºæœ¬çš„ãªæš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’åˆ©ç”¨ã§ãã¾ã™ã€‚æ¬¡ã®ã‚ˆã†ãªç°¡å˜ãªã‚³ãƒžãƒ³ãƒ‰ã§ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã£ã¦ãƒ‡ãƒ¼ã‚¿ã‚’æš—å·åŒ–ã—ãŸã‚Šå¾©å·ã—ãŸã‚Šã™ã‚‹ã“ã¨ãŒã§ãã¾ã™: $ echo 'Hello World!' | openssl enc -e -aes-128-cbc > cipher.txt enter aes-128-cbc
niseissa 2009/12/04
java

OpenSSL

security

ssl

æš—å·
ãƒªãƒ³ã‚¯
http://www.tietew.jp/articles/2007/01/30/how-to-setup-ca-using-openssl
niseissa 2009/04/22
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

OpenSSL
ãƒªãƒ³ã‚¯
OpenSSLã«ã¤ã„ã¦
OpenSSLã‚³ãƒžãƒ³ãƒ‰ç°¡æ˜“ãƒžãƒ‹ãƒ¥ã‚¢ãƒ« OpenSSLã‚³ãƒžãƒ³ãƒ‰ã¯ã€è¨¼æ˜Žæ›¸ã®ä½œæˆã®ãŸã‚ã®ã‚³ãƒžãƒ³ãƒ‰ã§ã™ã€‚ opensslã«ã¯ã€ã‚µãƒ–ã‚³ãƒžãƒ³ãƒ‰ãŒã‚ã‚Šã€ä½¿ç”¨æ–¹æ³•ã¯ã€å„ã‚µãƒ–ã‚³ãƒžãƒ³ãƒ‰æ¯Žã«ç•°ãªã‚Šã¾ã™ã€‚ ã¾ãŸã€ç°¡æ˜“ãƒžãƒ‹ãƒ¥ã‚¢ãƒ«ã§ã™ã®ã§ã€ã‚ˆãä½¿ã†ã‚³ãƒžãƒ³ãƒ‰ã‚„ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã®ã¿è¨˜è¿°ã—ã¦ã„ã¾ã™ã€‚ è©³ç´°ãªã‚ªãƒ—ã‚·ãƒ§ãƒ³ã¯ã€manãªã©ã§èª¿ã¹ã¦ãã ã•ã„ã€‚ openssl å½¢å¼ openssl ã‚µãƒ–ã‚³ãƒžãƒ³ãƒ‰ ã‚ªãƒ—ã‚·ãƒ§ãƒ³ æ©Ÿèƒ½ OpenSSLã®ã‚µãƒ–ã‚³ãƒžãƒ³ãƒ‰ã‚’å®Ÿè¡Œã™ã‚‹ æ©Ÿèƒ½ã‚„ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã¯ã€ã‚µãƒ–ã‚³ãƒžãƒ³ãƒ‰ã«ã‚ˆã£ã¦ç•°ãªã‚‹ ã‚µãƒ–ã‚³ãƒžãƒ³ãƒ‰ version OpenSSLã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³æƒ…å ±ã®è¡¨ç¤º dgst ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆã®è¨ˆç®— genrsa RSAå½¢å¼ã®ç§˜å¯†éµã®ä½œæˆ req è¨¼æ˜Žæ›¸ã®ç½²åè¦æ±‚ï¼ˆCSRï¼‰ã®ä½œæˆ x509 X.509è¨¼æ˜Žæ›¸ãƒ‡ãƒ¼ã‚¿ã®ä½œæˆ asn1parse ASN.1å½¢å¼ã®è¨¼æ˜Žæ›¸ã®å†…å®¹ã®è¡¨ç¤º
niseissa 2009/04/22
ã‚³ãƒžãƒ³ãƒ‰

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

OpenSSL
ãƒªãƒ³ã‚¯
SSLç”¨è¨¼æ˜Žæ›¸ã®ä½œæˆ(Windowsç·¨)
Windowsç’°å¢ƒã§opensslã«ã‚ˆã‚‹å„ç¨®ã®éµã‚„è¨¼æ˜Žæ›¸ã®ç™ºè¡Œã«ã¤ã„ã¦æ•´ç†ã—ã¾ã—ãŸã€‚ã€€Linuxç³»ã¯çµæ§‹ã„ã‚ã„ã‚ãªã‚µã‚¤ãƒˆã§ç´¹ä»‹ã•ã‚Œã¦ã„ã¾ã™ãŒã€Windowsã«ã¤ã„ã¦ã¯ç’°å¢ƒãŒç•°ãªã‚‹ã“ã¨ã‹ã‚‰ãªã‹ãªã‹ãã®ã¾ã¾ã§ã¯ã†ã¾ãã„ãã¾ã›ã‚“ã€‚ãŠã‚„ã˜ã‚‚ä½•åº¦ã‹ãƒˆãƒ©ã‚¤ã—ã¦ã¯å¤±æ•—ã—ã¦ããŸã®ã§ã€ã“ã“ã§æ•´ç†ã—ã¦ãŠãã“ã¨ã«ã—ã¾ã—ãŸã€‚ä»Šå›žã¯ã€ãŸã¾ãŸã¾BBSã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã«é–¢ã™ã‚‹è©±é¡Œã‚‚ã‚ãŒã£ã¦ã„ãŸã®ã§ã€ãã‚Œã«ã¤ã„ã¦ã‚‚æ•´ç†ã—ã¾ã—ãŸã€‚ ãã®å¾Œã€åˆã‚ã«æ•´ç†ã—ãŸæ–¹æ³•ã§ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆãŒInternetExploreã§ã¯å•é¡Œãªã„ãŒã€Netscape ã§ã¯ã†ã¾ãã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã§ããªã„ã“ã¨ãŒåˆ¤æ˜Žã—ã¾ã—ãŸã€‚ã¾ãŸã€ä¸‡ãŒä¸€ã®å ´åˆã®è¨¼æ˜Žæ›¸ã®å¤±åŠ¹å‡¦ç†ã‚‚é…å¸ƒã•ã‚Œã¦ã„ã‚‹opensslã®ãƒã‚¤ãƒŠãƒªã«ãƒã‚°ãŒã‚ã‚Šã€index.txtãŒå£Šã‚Œã‚‹ã¨ã„ã†å•é¡ŒãŒã‚ã‚Šã†ã¾ãã§ããªã„ã“ã¨ãŒåˆ¤æ˜Žã—ã¾ã—ãŸã€‚ã„ã‚ã„ã‚æŽ¢ã—å›žã£ãŸã®ã§ã™ãŒã€æœ€æ–°ã®ãƒã‚¤ãƒŠãƒªãŒã©ã†ã—ã¦ã‚‚è¦‹ã¤ã‹ã‚‰ãªã‹ã£ãŸ
niseissa 2009/04/03
apache

PKI

è¨¼æ˜Žæ›¸

OpenSSL

ä½œã‚Šæ–¹

windows
ãƒªãƒ³ã‚¯
1