[B! OpenSSL] papiroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

papiro id:papiro

OpenSSLã«é–¢ã™ã‚‹papiroã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (11)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã²ãŸã™ã‚‰Macã‚’é‡ãã™ã‚‹ã€Œã‚¹ãƒˆãƒ¬ã‚¹ãƒ†ã‚¹ãƒˆã€ã‚’ãŠæ‰‹è»½ã« - æ–°ãƒ»OS X ãƒãƒƒã‚ãƒ³ã‚°!(248)
Macã§ã€Œã‚¹ãƒˆãƒ¬ã‚¹ãƒ†ã‚¹ãƒˆã€ãŒå¿…è¦ã«ãªã£ãŸã“ã¨ã¯ãªã„ã ã‚ã†ã‹? ã‚¹ãƒˆãƒ¬ã‚¹ãƒ†ã‚¹ãƒˆã¨ã¯ã€é€šå¸¸ä»¥ä¸Šã®è² è·ã‚’ã‹ã‘ã¦ã‚‚æ£å¸¸å‹•ä½œã™ã‚‹ã‹ã€å¼±ç‚¹ã‚„ä¸å…·åˆã¯ãªã„ã‹ã‚’èª¿ã¹ã‚‹ã‚‚ã®ã§ã€ã„ã‚ã„ã‚ãªã‚·ãƒãƒ¥ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ã§åˆ©ç”¨ã•ã‚Œã‚‹ã€‚ã‚¢ãƒ—ãƒªé–‹ç™ºè€…ã‚„ã‚¤ãƒ³ãƒ•ãƒ©ç³»ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã¯ã„ã–çŸ¥ã‚‰ãšã€ä¸€èˆ¬ã®Macãƒ¦ãƒ¼ã‚¶ã«ã¯é–¢ä¿‚ãªã„ã¨ã„ã‚ã‚Œãã†ã ãŒã€ä½¿ã†æ©Ÿä¼šã¯æ„å¤–ã«å¤šã„ã€‚ ãŸã¨ãˆã°ã€Macã®å†…è”µãƒãƒƒãƒ†ãƒªãƒ¼ãŒã©ã®ç¨‹åº¦æŒã¤ã®ã‹çŸ¥ã‚ŠãŸã„ã¨ãã€‚Intelãƒ—ãƒã‚»ãƒƒã‚µã®ã€ŒTurbo Boostã€ã«ã‚ˆã‚Šã€ã©ã®ã‚ˆã†ã«ã‚¯ãƒãƒƒã‚¯ãŒå¤‰å‹•ã™ã‚‹ã‹ç¢ºèªã—ã¦ã¿ãŸã„ã¨ãã€‚è¤‡æ•°ã‚ã‚‹CPUã‚³ã‚¢ã®ã†ã¡1åŸºã ã‘ãƒ•ãƒ«å›žè»¢ã•ã›ãŸã„ã€ã©ã†ã›ãªã‚‰å…¨åŸºãƒ•ãƒ«å›žè»¢ã•ã›ãŸã„ã€ã¨ã„ã£ãŸå ´é¢ã‚‚ã‚ã‚‹ã ã‚ã†ã€‚ãã‚“ãªã¨ãã€ã•ãã£ã¨ã‚¹ãƒˆãƒ¬ã‚¹ãƒ†ã‚¹ãƒˆã§ãã‚Œã°ã†ã‚Œã—ã„ã¯ãšã€‚ ã‚‚ã£ã¨ã‚‚ã€ã‚¹ãƒˆãƒ¬ã‚¹ãƒ†ã‚¹ãƒˆã¨ã„ã£ã¦ã‚‚CPU/ã‚³ã‚¢ã«è² è·ã‚’ã‹ã‘ã‚‹ã“ã¨ãŒç›®çš„ã§ã‚ã‚Šã€å¤§ã’ã•ãªä»•æŽ›ã‘ã¯å¿…è¦ãªã„ã€‚ç‰¹æ®Šãªã‚¿ã‚¤ãƒŸãƒ³ã‚°ã§ã‚¹ãƒˆãƒ¬ã‚¹ã‚’ã‹ã‘ã‚‹å ´åˆã¯ã¨
papiro 2021/05/04
mac

ãƒ†ã‚¹ãƒˆ

OpenSSL

CPU

cpu
ãƒªãƒ³ã‚¯
ã€ŽOpenSSLã‚¯ãƒƒã‚¯ãƒ–ãƒƒã‚¯ã€æä¾›é–‹å§‹ã®ãŠçŸ¥ã‚‰ã›
ã”æ¥åº—ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ æœ¬æ—¥ã‚ˆã‚Šã€ã€Žãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«SSL/TLSã€ï¼ˆ2017å¹´3æœˆç™ºè¡Œï¼‰ã‹ã‚‰ã‚¹ãƒ”ãƒ³ã‚ªãƒ•ã—ãŸãƒŸãƒ‹ãƒ–ãƒƒã‚¯ã€ŽOpenSSLã‚¯ãƒƒã‚¯ãƒ–ãƒƒã‚¯ã€ã®æä¾›ã‚’é–‹å§‹ã—ã¾ã—ãŸã€‚è³¼å…¥ãƒšãƒ¼ã‚¸ã‹ã‚‰ã‚«ãƒ¼ãƒˆã«è¿½åŠ ã—ã¦ã„ãŸã ãã“ã¨ã§ã€ã©ãªãŸã§ã‚‚ç„¡å„Ÿã§ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ãŒå¯èƒ½ã§ã™ï¼ˆã‚¯ãƒ¬ã‚¸ãƒƒãƒˆã‚«ãƒ¼ãƒ‰æƒ…å ±ã¯ä¸è¦ã§ã™ãŒã€ç›´è²©ã‚µã‚¤ãƒˆã®è³¼å…¥ãƒ•ãƒãƒ¼ã‚’çµŒç”±ã™ã‚‹é–¢ä¿‚ã§ã€ãŠåå‰ã®æ¬„ã¨ä½æ‰€ã®æ¬„ã¸ã®å…¥åŠ›ã¯ãŠé¡˜ã„ã„ãŸã—ã¾ã™ï¼‰ã€‚ åŒæ›¸ã¯ã€Žãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«SSL/TLSã€ã®åŽŸæ›¸ã§ã‚ã‚‹â€ŸBulletproof SSL and TLSâ€ã‹ã‚‰OpenSSLã«é–¢ã™ã‚‹ç« ã‚’æŠœãå‡ºã—ã¦å†ç·¨ã•ã‚ŒãŸâ€ŸOpenSSL Cookbookâ€ã®ç¿»è¨³ã«ç›¸å½“ã—ã€ã€Žãƒ—ãƒãƒ•ã‚§ãƒƒã‚·ãƒ§ãƒŠãƒ«SSL/TLSã€ã®ã€Œç¬¬11ç« OpenSSLã€ã¨ã€Œç¬¬12ç« OpenSSLã«ã‚ˆã‚‹ãƒ†ã‚¹ãƒˆã€åŠ ãˆã€SSL Labsã§å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ â€ŸSSL/TLS Deployment Best Pra
papiro 2018/02/07
OpenSSLã®æƒ…å ±ãŒã¾ã¨ã¾ã£ã¦ã‚‹ã®ã‹ãªï¼Ÿ

TLS

SSL

OpenSSL
ãƒªãƒ³ã‚¯
openssl ã‚³ãƒžãƒ³ãƒ‰ã§ãŠæ‰‹è»½ã«SSLè¨¼æ˜Žæ›¸ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹
å‹¤ã‚å…ˆã®ä¸Šå¸ã‹ã‚‰ã‚¹ãƒ†ã‚ãªã‚³ãƒžãƒ³ãƒ‰ã‚’æ•™ãˆã¦ã„ãŸã ã„ãŸã®ã§ãƒ¡ãƒ¢ SSLè¨¼æ˜Žæ›¸ã®ç¢ºèªã®ãŸã‚ã« Webã‚µãƒ¼ãƒãƒ¼ã‚’ç«‹ã¦ãªãã¦ã‚‚ã€openssl ã® s_server ã‚’ä½¿ã†ã¨ç°¡å˜ã«ã§ãã¾ã™ã€‚ $ openssl s_server -accept 10443 -cert example.com.crt -key example.com.key -CAfile example.com.ica -WWW å„ã‚ªãƒ—ã‚·ãƒ§ãƒ³ã®æ„å‘³ã¯æ¬¡ã®ã¨ãŠã‚Š -accept å¾…ã¡å—ã‘ãƒãƒ¼ãƒˆï¼ˆãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã¯ 4433ï¼‰ -cert filename ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ãƒ•ã‚¡ã‚¤ãƒ«åï¼ˆãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã¯ server.pemï¼‰ -key filename ç§˜å¯†éµã®ãƒ•ã‚¡ã‚¤ãƒ«åï¼ˆæŒ‡å®šã—ãªã„å ´åˆã¯ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŒç”¨ã„ã‚‰ã‚Œã‚‹ï¼‰ -CAfile filename ä¸é–“è¨¼æ˜Žæ›¸ã®ãƒ•ã‚¡ã‚¤ãƒ«å -WWW å˜ç´”ãª Web ã‚µãƒ¼ãƒã‚’ã‚¨ãƒŸãƒ¥ãƒ¬ãƒ¼ãƒˆã™ã‚‹ã€‚ URL ã®ãƒ‘ã‚¹éƒ¨åˆ†ã‚’
papiro 2017/06/28
server

OpenSSL

ã‚µãƒ¼ãƒ

SSL
ãƒªãƒ³ã‚¯
ãƒŸãƒ©ãƒ¼â€“ãƒ©ãƒ“ãƒ³ç´ æ•°åˆ¤å®šæ³• - Wikipedia
ãƒŸãƒ©ãƒ¼â€“ãƒ©ãƒ“ãƒ³ç´ æ•°åˆ¤å®šæ³•ï¼ˆè‹±: Millerâ€“Rabin primality testï¼‰ã¾ãŸã¯ãƒ©ãƒ“ãƒ³â€“ãƒŸãƒ©ãƒ¼ç´ æ•°åˆ¤å®šæ³•ï¼ˆè‹±: Rabinâ€“Miller primality testï¼‰ã¯ã€ä¸Žãˆã‚‰ã‚ŒãŸæ•°ãŒç´ æ•°ã‹ã©ã†ã‹ã‚’åˆ¤å®šã™ã‚‹ç´ æ•°åˆ¤å®šã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®ä¸€ç¨®ã€‚ãƒ•ã‚§ãƒ«ãƒžãƒ¼ã®ç´ æ•°åˆ¤å®šæ³•ã‚„ ã‚½ãƒãƒ™ã‚¤â€“ã‚·ãƒ¥ãƒˆãƒ©ãƒƒã‚»ãƒ³ç´ æ•°åˆ¤å®šæ³•ã¨åŒã˜ãã€ä¹±æŠžã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®ä¸€ç¨®ã§ã‚ã‚‹ã€‚Gary L. Miller ãŒæœ€åˆã«é–‹ç™ºã—ãŸMillerãƒ†ã‚¹ãƒˆã¯æœªã è¨¼æ˜Žã•ã‚Œã¦ã„ãªã„æ‹¡å¼µãƒªãƒ¼ãƒžãƒ³äºˆæƒ³ã«åŸºã¥ã„ãŸæ±ºå®šçš„ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã ã£ãŸãŒã€ãƒžã‚¤ã‚±ãƒ«ãƒ»ãƒ©ãƒ“ãƒ³ãŒã“ã‚Œã‚’ç„¡æ¡ä»¶ã®ç¢ºçŽ‡çš„ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã«ä¿®æ£ã—ãŸã€‚ ãƒ•ã‚§ãƒ«ãƒžãƒ¼ã‚„ã‚½ãƒãƒ™ã‚¤â€“ã‚·ãƒ¥ãƒˆãƒ©ãƒƒã‚»ãƒ³ã®ç´ æ•°åˆ¤å®šæ³•ã¨åŒæ§˜ã€ãƒŸãƒ©ãƒ¼â€“ãƒ©ãƒ“ãƒ³ç´ æ•°åˆ¤å®šæ³•ã‚‚ç´ æ•°ã«é–¢ã—ã¦æˆã‚Šç«‹ã¤ç‰å¼ã«åŸºã¥ã„ã¦ãŠã‚Šã€ä¸Žãˆã‚‰ã‚ŒãŸæ•°ã«ã¤ã„ã¦ãã‚Œã‚‰ç‰å¼ãŒæˆã‚Šç«‹ã¤ã‹ã©ã†ã‹ã§åˆ¤å®šã‚’è¡Œã†ã€‚ ã¾ãšã€æœ‰é™ä½“ ã®å˜ä½å…ƒã®å¹³æ–¹æ ¹ã«ã¤ã„ã¦ã®è£œé¡Œã‚’è€ƒãˆã‚‹ã€‚ã“ã“ã§
papiro 2016/12/30
ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ

ãƒªãƒ¼ãƒžãƒ³äºˆæƒ³

prime

ç´ æ•°

openssl
ãƒªãƒ³ã‚¯
OpenSSL command line Root and Intermediate CA including OCSP, CRL and revocation - Raymii.org
OpenSSL command line Root and Intermediate CA including OCSP, CRL and revocation Published: 03-03-2015 | Last update: 17-12-2018 | Author: Remy van Elst | Text only version of this article â— This post is over four years old. It may no longer be up to date. Opinions may have changed. These are quick and dirty notes on generating a certificate authority (CA), intermediate certificate authorities and
papiro 2015/04/12
OpenSSL
ãƒªãƒ³ã‚¯
bashã§ç´ æ•°Ã—ç´ æ•°ã®ç”Ÿæˆ(openssl/factor) - labunix ã® ãƒ©ãƒœã‚†ã«ã£ãã™
â– opensslã¯16é€²æ•°ã§ç´ æ•°ã‚’è¿”ã™ã€‚ $ openssl prime "10" A is not prime $ openssl prime "13" D is prime â– opensslã‚’ä½¿ã£ãŸ1ã‹ã‚‰100ã¾ã§ã®ç´ æ•°ã®ç”Ÿæˆ $ for n in `seq 1 100`;do \ echo $((0x`openssl prime "$n" | awk '($3!="not"){print $1}'`)) ; \ done | grep -v "^0\$" | xargs echo 2 3 5 7 11 13 17 19 23 29 31 37 41 43 47 53 59 61 67 71 73 79 83 89 97 â– opensslã‚’ä½¿ã£ãŸ1ã‹ã‚‰100ã¾ã§ã®ç´ æ•°ã®è‡ªä¹—ã®ç”Ÿæˆ $ for n in `seq 1 100`;do \ echo $((0x`openssl prime
papiro 2015/01/02
OpenSSL

shell

ShellScript
ãƒªãƒ³ã‚¯
ãƒãƒ¼ãƒˆãƒ–ãƒªãƒ¼ãƒ‰ã€åŽŸå› ã¯é–‹ç™ºè€…ã®ãƒŸã‚¹â€•ã€ŒOpenSSLã€ã¯å°‘æ•°ã®ãƒœãƒ©ãƒ³ãƒ†ã‚£ã‚¢ã«ä¾å˜
This copy is for your personal, non-commercial use only. Distribution and use of this material are governed by our Subscriber Agreement and by copyright law. For non-personal use or to order multiple copies, please contact Dow Jones Reprints at 1-800-843-0008 or visit www.djreprints.com. http://jp.wsj.com/article/SB10001424052702303433504579501080000871574.html
papiro 2014/12/06
OpenSSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
è‡ªå®…ã‚µãƒ¼ãƒã®æ¶ˆè²»é›»åŠ›ã¨é›»æ°—ä»£ â€“ ã±ã‚‰ã‚ã§ãƒã†ã™
ç¯€é›»ç¯€é›»ã¨ã„ã†è©±ã‚‚ã‚ã‚Šã¾ã™ãŒã€ãã‚Œã¯ã¨ã‚‚ã‹ãå®¶ã§å‹•ã„ã¦ã„ã‚‹PCã®æ¶ˆè²»é›»åŠ›ã‚’æŠŠæ¡ã—ã¦ãŠãã®ã¯æ‚ªã„è©±ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ç‰¹ã«ã€24æ™‚é–“ç¨¼åƒã•ã›ã‚‹è‡ªå®…ã‚µãƒ¼ãƒ(å®¶é¯–)ãŒã‚ã‚‹å ´åˆã€é›»æ°—æ–™é‡‘ã®äº‹ã‚’è€ƒãˆã‚‹ä¸Šã§ã‚‚éžå¸¸ã«æœ‰æ„ç¾©ã§ã—ã‚‡ã†ã€‚ã—ã‹ã—ã€å®Ÿéš›ã«ãã®PCãŒã©ã®ç¨‹åº¦é›»åŠ›ã‚’æ¶ˆè²»ã—ã¦ã„ã‚‹ã‹èª¿ã¹ã‚‹ã®ã¯å‰²ã¨ã‚ã‚“ã©ãã•ã„ã‚‚ã®ã§ã™ã€‚(ä»¥ä¸‹ã€è‡ªå®…ã‚µãƒ¼ãƒã®è©±ã—ã«ãƒ•ã‚©ãƒ¼ã‚«ã‚¹ã—ã¦ã„ã¾ã™ãŒã€ãƒ‡ã‚¹ã‚¯ãƒˆãƒƒãƒ—PCã§ã‚‚è©±ã—ã¯å¤§ä½“åŒã˜ã§ã™) ã‚µãƒ¼ãƒã®ä»•æ§˜æ›¸ã«ã¯ã€Œ500Wé›»æºæè¼‰ã€ã¨ã‹ã€Œæœ€å¤§æ¶ˆè²»é›»åŠ›380Wã€ã¨ã‹æ›¸ã„ã¦ã‚ã‚‹ã®ã§ãã‚Œã‚’å‚è€ƒã«ã™ã‚‹ã¨è¨€ã†æ–¹æ³•ã‚‚ã‚ã‚Šã¾ã™ãŒã€æ®‹å¿µãªãŒã‚‰ã“ã‚Œã¯ã€Œãã®æ©Ÿå™¨ã®è¨è¨ˆä¸Šä¾›çµ¦å¯èƒ½ãªé›»æºå®¹é‡ã€ã ã£ãŸã‚Šã€Œã‚µãƒ¼ãƒã«ç´”æ£ã‚ªãƒ—ã‚·ãƒ§ãƒ³ãƒ‘ãƒ¼ãƒ„ã‚’ãƒ•ãƒ«å®Ÿè£…ã—ãŸå ´åˆã®æœ€å¤§æ¶ˆè²»é›»åŠ›ã€ã ã£ãŸã‚Šã—ã¾ã™ã€‚ã“ã‚Œã‚‰ã¯ã‚ã‚‹ç¨‹åº¦ä½™è£•ã‚’æŒã£ã¦è¨å®šã•ã‚Œã¦ã„ã¾ã™ã®ã§ã€å®Ÿéš›ã«ã“ã‚Œã ã‘ã®é›»åŠ›æ¶ˆè²»ãŒç™ºç”Ÿã™ã‚‹ã“ã¨ã¯ã»ã¨ã‚“ã©ã‚ã‚Šã¾ã›ã‚“ã€‚ PCã®æ¶ˆè²»é›»åŠ›ã‚’æ¤œè¨Žã™ã‚‹ä¸Šã§
papiro 2014/10/30
ç°¡å˜ãªè² è·ãƒ†ã‚¹ãƒˆã«ã¯openssl speedã‚³ãƒžãƒ³ãƒ‰

ã‚µãƒ¼ãƒ

é›»åŠ›

PC

é‹ç”¨

OpenSSL
ãƒªãƒ³ã‚¯
ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã«è©³ã—ããªã„äººã¸ã€‚ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå²ä¸Šæœ€æ‚ªã®OpenSSLã®è„†å¼±æ€§ã®ãƒ‹ãƒ¥ãƒ¼ã‚¹ã‚’ã‚ã‹ã‚Šã‚„ã™ãæ›¸ã„ã¦ã¿ã¾ã—ãŸã€‚ã»ã¨ã‚“ã©ã™ã¹ã¦ã®äººã«å½±éŸ¿ã—ã¾ã™ã€‚ - éžå¤©ãƒžã‚¶ãƒ¼ by B-CHAN
ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã§ä½¿ã‚ã‚Œã‚‹éµï¼ˆã‚«ã‚®ï¼‰ ã¿ãªã•ã‚“ã€ã“ã‚“ã«ã¡ã¯ï¼ ã“ã‚“ãªãƒ‹ãƒ¥ãƒ¼ã‚¹ãŒç™ºè¡¨ã•ã‚Œã€ä¸–ç•Œã«è¡æ’ƒã‚’ä¸Žãˆã¦ã„ã¾ã™ã€‚ â†“ Gmailã€YouTubeã«ã‚‚å½±éŸ¿ã€‚å£Šæ»…çš„ãªOpenSSLã®è„†å¼±æ€§ã€ã€ŒHeartbleedã€å•é¡Œã¨ã¯ Â« WIRED.jp ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿é–¢ä¿‚è€…ã¯å¤§é¨’ãŽã§ã™ãŒã€ãƒœã‚¯ãŸã¡ä¸€èˆ¬äººã¯ã©ã†ã™ã‚Œã°ã„ã„ã®ã§ã—ã‚‡ã†ã‹ï¼Ÿ ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã«è©³ã—ããªã„äººã«ã€ãªã‚‹ã¹ãã‚ã‹ã‚Šã‚„ã™ãæ›¸ã„ã¦ã¿ã¾ã™ã€‚ ã¾ãšã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã®ã„ã‚ã‚“ãªã‚µãƒ¼ãƒ“ã‚¹ã‚’åˆ©ç”¨ã™ã‚‹ã«ã¯IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒå¿…è¦ã§ã™ã‚ˆãã€‚ ä¾‹ãˆã°ã€Amazonã‚„æ¥½å¤©å¸‚å ´ã§è²·ç‰©ã‚’ã™ã‚‹ã«ã¯ã€Amazonã‚„æ¥½å¤©å¸‚å ´ã®IDã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’å…¥åŠ›ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ ã©ã¡ã‚‰ã‹ãŒæ¬ ã‘ã¦ã‚‚è²·ã„ç‰©ã¯ã§ãã¾ã›ã‚“ã€‚ ã‚ãªãŸä»¥å¤–ã®ç¬¬ä¸‰è€…ãŒã‚ãªãŸã®IDã‚’çŸ¥ã£ãŸã¨ã—ã¦ã‚‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒã‚ã‹ã‚‰ãªã‘ã‚Œã°ã€ã‚ãªãŸã®åå‰ã§å‹æ‰‹ã«è²·ã„ç‰©ã‚’ã™ã‚‹ã“ã¨ã¯ã§ããªã„ã‚ã‘ã§ã™ã€‚ ã“ã‚Œã«ã‚ˆã£ã¦å®‰å…¨ãŒå®ˆã‚‰ã‚Œã¦ã„ã‚‹ã‚ã‘ã§
papiro 2014/10/26
OpenSSL

è„†å¼±æ€§

ssl

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

security
ãƒªãƒ³ã‚¯
SSLå…¬é–‹éµã¨ç§˜å¯†éµãƒšã‚¢ã®ç¢ºèªæ–¹æ³• | ãƒ¡ãƒ¢ï¼ ã‚¹ãƒŠã‚¬ãƒ©ãƒœ
SSLã®ç§˜å¯†éµãƒ»å…¬é–‹éµãƒšã‚¢ç¢ºèªã®æ–¹æ³• $ openssl x509 -in public.crt -noout -modulus $ openssl rsa -in private.key -noout -modulus ãŒä¸€è‡´ã™ã‚Œã°OKã€‚
papiro 2014/08/13
modulusã®æ¯”è¼ƒãŒä¸€ç•ªç°¡å˜ã‹

OpenSSL

SSL

PKI
ãƒªãƒ³ã‚¯
homebrewã§OpenSSLã®è„†å¼±æ€§å¯¾ç–ç‰ˆã‚’å…¥ã‚ŒãŸã®ã§Rubyã‚‚æ›´æ–°ã•ã›ã‚‹ - åˆ¥é¤¨ ååååååï¼ˆãã“ã®ã“ã“ãã“ï¼‰ã¯ã¦ãƒ–ãƒéƒ¨
OpenSSLè„†å¼±æ€§ ã”å˜ã˜ã ã¨æ€ã„ã¾ã™ãŒã€4/8ã«OpenSSLã®è„†å¼±æ€§ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚ JVNVU#94401838: OpenSSL ã® heartbeat æ‹¡å¼µã«æƒ…å ±æ¼ãˆã„ã®è„†å¼±æ€§ è§£èª¬ã‚„å¯¾ç–ã¯ã“ã¡ã‚‰ã«ã¾ã¨ã‚ã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ CVE-2014-0160 OpenSSL Heartbleed è„†å¼±æ€§ã¾ã¨ã‚ - ã‚ã‚‚ãŠãã° homebrewã¨rbenvã§ã®å¯¾ç– homebrewã§OpenSSLæ›´æ–° ä¸Šè¨˜ã¾ã¨ã‚ã‚µã‚¤ãƒˆã®ã‚³ãƒ¡ãƒ³ãƒˆæ¬„ã§ã‚³ãƒ¡ãƒ³ãƒˆã—ã¾ã—ãŸãŒ $ brew update $ brew upgrade openssl ã§1.0.1gã«æ›´æ–°ã•ã‚Œã¾ã™ã€‚ å¿µã®ãŸã‚ $ brew link openssl --force ã§homebrewå´ã«ãƒªãƒ³ã‚¯ã— $ which openssl ã§ /usr/local/bin/openssl ã§ã‚ã‚‹ã“ã¨ã‚’ç¢ºèªã€‚ CVE-2014-0160 OpenS
papiro 2014/07/06
mac

Ruby

homebrew

OpenSSL
ãƒªãƒ³ã‚¯
1