/bin/bash based SSL/TLS tester: testssl.sh
Key features Clear output: you can tell easily whether anything is good or bad Ease of installation: Works for Linux, Mac OSX, FreeBSD, NetBSD and WSL/MSYS2/Cygwin out of the box: no need to install or configure something, no gems, CPAN, pip or the like. OpenBSD only needs bash to be postinstalled. Alternatively a Dockerfile is provided or you can just use docker run --rm -ti drwetter/testssl.sh F
Let's Encrypt を支ãˆã‚‹ ACME プãƒãƒˆã‚³ãƒ« - Block Rockin’ Codes
Intro 先日 #http2study 㧠mozilla ã® Richard Barnes ㌠Let's Encrypt ã«ã¤ã„ã¦è©±ã—ã¦ãã‚Œã¾ã—ãŸã€‚ 資料: Let's Encrypt Overview ã“ã®è³‡æ–™ã®ç¿»è¨³ ã¯ã—ãŸã®ã§ã™ãŒã€ã„らãªããªã£ã¦ã—ã¾ã£ãŸã®ã§ä¾›é¤Šã‚‚ã‹ãã¦ã“ã®ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ãƒ¢ãƒãƒ™ãƒ¼ã‚·ãƒ§ãƒ³ã¨ã€ Web ã§ãŠã“ã£ã¦ã„ã‚‹ HTTPS 推進ã®ãŸã©ã‚‹é“ã«ã¤ã„ã¦ã€è³‡æ–™ã‚’補足ã—ã¤ã¤ç´¹ä»‹ã—ã¾ã™ã€‚ çµè«–ã‹ã‚‰è¨€ã†ã¨ Let's Encrypt ã¯ã‚‚ã¡ã‚ã‚“ ACME プãƒãƒˆã‚³ãƒ« ã«ã¤ã„ã¦ã‚‚是éžçŸ¥ã£ã¦ãŠãã¨è‰¯ã„ã¨æ€ã„ã¾ã™ã€‚ HTTPS ã®å•é¡Œ ã™ã§ã«ã“ã®ãƒ–ãƒã‚°ã§ã‚‚紹介ã—ã¦ã„るよã†ã«ã€ Web ã«ãŠã‘ã‚‹ HTTPS ã®é‡è¦æ€§ã¯å¢—ã—ã€ãã‚Œã®æ™®åŠã‚’後押ã—ã™ã‚‹æ´»å‹•ãŒå„所ã§é€²ã‚られã¦ã„ã¾ã™ã€‚ HTTPS 化ã™ã‚‹ Web ã‚’ã©ã†è€ƒãˆã‚‹ã‹ よã言ã‚れる盗è´é˜²æ¢ã‚’始ã‚ã€æš—å·åŒ–ã‚’è¡Œã†ã“ã¨ã§é˜²ã’ã‚‹å•é¡Œã¯å¤šãã‚
Certbot
A command line is a way of interacting with a computer by typing text-based commands to it and receiving text-based replies. Certbot is run from a command-line interface, usually on a Unix-like server. In order to use Certbot for most purposes, you’ll need to be able to install and run it on the command line of your web server, which is usually accessed over SSH.
Let’s Encryptã¨Nginx : ã‚»ã‚ュアãªWebデプãƒã‚¤ãƒ¡ãƒ³ãƒˆã®ç¾çŠ¶ | POSTD
最近ã¾ã§ã€SSLæš—å·åŒ–通信ã¯ã€Œã‚ã‚‹ã¨å¥½ã¾ã—ã„機能ã€ã¨ã„ã†ç¨‹åº¦ã«ã—ã‹è€ƒãˆã‚‰ã‚Œã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚ãã®ãŸã‚ã€å®‰å…¨ãªã®ã¯ã‚¢ãƒ—リã®ãƒã‚°ã‚¤ãƒ³ãƒšãƒ¼ã‚¸ã ã‘ã¨ã„ã†ã‚µãƒ¼ãƒ“スãŒæ•°å¤šãå˜åœ¨ã—ã¦ã„ã¾ã—ãŸã€‚ ã—ã‹ã—ã€çŠ¶æ³ã¯è‰¯ã„æ–¹å‘ã¸ã¨å¤‰åŒ–ã—ã¦ã„ã¾ã™ã€‚ç¾åœ¨ã§ã¯æš—å·åŒ–ã¯å¿…é ˆã¨è€ƒãˆã‚‰ã‚Œã€ã»ã¨ã‚“ã©ã®é–‹ç™ºè€…ãŒå°Žå…¥ã‚’義務付ã‘ã¦ã„ã¾ã™ã€‚ã¾ãŸã€å·¨å¤§æ¤œç´¢ã‚¨ãƒ³ã‚¸ãƒ³Googleã§ã¯ã€SSLã®å°Žå…¥ãŒæ¤œç´¢çµæžœã®é †ä½ã‚’決定ã™ã‚‹è¦å› ã«ã•ãˆãªã£ã¦ã„ã¾ã™ã€‚ ã—ã‹ã—ã€SSLãŒåºƒç¯„ã«æ™®åŠã—ã¦ã„ã‚‹ã«ã‚‚é–¢ã‚らãšã€ã‚»ã‚ュアãªWebサービスを構築ã™ã‚‹ã“ã¨ã¯ã€æœªã ã«é¢å€’ã§ã€æ™‚é–“ãŒã‹ã‹ã‚Šã€ã‚¨ãƒ©ãƒ¼ã®åŽŸå› ã«ãªã‚Šã‚„ã™ã„ã¨è€ƒãˆã‚‰ã‚Œã¦ã„ã¾ã™ã€‚ 最近ã“ã®åˆ†é‡Žã§ã¯ã€ Let’s Encrypt ãŒã€SSL証明書をより広ãæ™®åŠã•ã›ã€Webサイトã®ã‚»ã‚ュリティç¶æŒã«ä¿‚るワークフãƒãƒ¼ã‚’大幅ã«ç°¡ç•¥åŒ–ã—よã†ã¨å–り組んã§ã„ã¾ã™ã€‚ 強力ãªWebサーãƒNginxã‚„ã€ä»–ã®ãƒãƒ¼ãƒ‰ãƒ‹ãƒ³ã‚°æ–¹æ³•ã¨çµ„ã¿åˆã‚
Web開発者ãŒæらã知らãªã„ã€SSLã«ã¤ã„ã¦çŸ¥ã£ã¦ãŠãã¹ãã“㨠| POSTD
2015å¹´ã€Web開発者ã¯ä»¥å‰ã‚ˆã‚Šã‚‚SSLã«é–¢ã™ã‚‹ç†è§£ã‚’æ·±ã‚ã¦ã„ã¾ã™ã€‚ãã†ã—ãŸWeb開発者ãŸã¡ãŒHacker Newsã‚’èªã‚€ãªã‚‰çŸ¥ã£ã¦ãŠãã¹ãã“ã¨ã‚’以下ã«æŒ™ã’ã¦ã¿ã¾ã™ã€‚ ドメインèªè¨¼ï¼ˆDV）証明書㯠Let’s Encrypt ã‹ã‚‰ç„¡æ–™ã§å–å¾—ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ æ‹¡å¼µèªè¨¼ï¼ˆEV）証明書 㯠CertSimple ã‹ã„ãã¤ã‹ã®ãƒã‚§ãƒƒã‚¯ã®ã®ã¡ã®æ”¯æ‰•ã„ã§å–å¾—ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ã“ã‚ŒãŒæˆ‘々ã®ã‚„り方。 Mozilla SSL Config Generator を使用ã™ã‚Œã°ã€ã‚µãƒãƒ¼ãƒˆã—ãŸã„ブラウザã«å¯¾ã—ã¦ã€ã‚µãƒ¼ãƒã‚’å¯èƒ½ãªé™ã‚Šå®‰å…¨ã«è¨å®šã™ã‚‹ã“ã¨ãŒå¯èƒ½ã€‚ 完了後㫠SSL Labs を使ã£ã¦å…¨ã¦ã‚’ãƒã‚§ãƒƒã‚¯ã—ã€A評価ç²å¾—を確èªã—ã¾ã—ょã†ã€‚ãã†ã§ãªã‘ã‚Œã°äººã«å°è¨€ã‚’言ã‚ã‚Œã¾ã™ã€‚ ãã®ä»–ã¯ã©ã†ã§ã—ょã†ã‹ã€‚我々ã®é¡§å®¢ã‹ã‚‰å¯„ã›ã‚‰ã‚Œã‚‹æœ€ã‚‚多ã„質å•ã«ã¤ã„ã¦ã€å›žç”を紹介ã—ã¦ã„ãã¾ã—ょã†ã€‚ 1. Chromeã§â€å¤ã„æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆâ€ã‚’
nginx 㧠ssl è¨å®šã‚’ã™ã‚‹ : dogmap.jp
nginx 㧠SSL è¨å®šã‚’ã™ã‚‹ã®ã¯ã€ã‚¹ã‚´ã‚¤ç°¡å˜ã§ã™ã€‚ サーãƒè¨¼æ˜Žæ›¸ã¨ç§˜å¯†éµãŒã™ã§ã«ã‚ã‚‹ãªã‚‰ã€/etc/nginx/nginx.conf ã«ä»¥ä¸‹ã®è¨å®šã‚’è¿½åŠ ã™ã‚‹ã ã‘ã§ãŠã£ã‘。 server { : listen 443 default ssl; ssl on; # サーãƒè¨¼æ˜Žæ›¸ï¼ˆã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã«ä¸é–“CA証明書を連çµã—ãŸã‚‚ã®ï¼‰ ssl_certificate /usr/local/nginx/conf/cert.pem; # ç§˜å¯†éµ ssl_certificate_key /usr/local/nginx/conf/cert.key; : } via. HttpSslModule サーãƒè¨¼æ˜Žæ›¸ã‚’æŒã£ã¦ãªãã¦ã€ã¨ã‚Šã‚ãˆãšã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã‚’作æˆã—ãŸã„å ´åˆã¯ä»¥ä¸‹ã®ã‚ˆã†ã«ã—ã¦ä½œã‚Šã¾ã—ょã†ã€‚ $ cd /usr/local/nginx/conf $ openssl genrsa -des3 -out s
[改訂版] iPhoneアプリã®SSL接続をパケットã‚ャプãƒãƒ£ã™ã‚‹æ–¹æ³• | [ bROOM.LOG ! ]
ã¯ã˜ã‚ã¾ã—ã¦ã€‚ã“ã®åº¦ã“ã®ãƒšãƒ¼ã‚¸ã®æƒ…å ±ã‚’å‚考ã«iPhoneã§ãƒ‘ケットã‚ャプãƒãƒ£ã‚’やらã›ã¦ã„ãŸã ã„ãŸã«ã‚ƒã‚“ã“ã¨ç”³ã—ã¾ã™ã€‚ 掲載ã•ã‚Œã¦ã„ãŸæƒ…å ±é€šã‚Šã«é€²ã‚ã‚‹ã¨ã€ä½•ç‚¹ã‹ä¸æ˜Žç‚¹ãŒã‚ã£ãŸã®ã§ã€å½¹ç«‹ã¤ã‹ï¼Ÿå½“ãŸã‚Šå‰ãªã®ã‹ï¼Ÿåˆ†ã‹ã‚Šã¾ã›ã‚“ãŒè£œè¶³ã•ã›ã¦ã„ãŸã ãã¾ã™ã€‚ â‘ ã¾ãšä½¿ç”¨ã™ã‚‹burpsuiteã§ã™ãŒã€ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã‚ˆã£ã¦ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ã‚¤ã‚¹ãŒç•°ãªã£ã¦ã„ã¾ã™ã€‚ Ver1.1ãªã‚‰è¨˜è¼‰ã•ã‚Œã¦ã„る通り『[proxy]タブ – [option]　→　「loopback onlyã€ãŒãƒã‚§ãƒƒã‚¯ã•ã‚Œã¦ã„ã‚‹ã®ã§ã“れを外ã—ã¾ã™ã€‚ã€ã§ã‚ã£ã¦ã„ã¾ã™ã€‚ Ver1.5（2013/5/12）ã§ã¯[proxy]タブ – [option]　ã«ã¯ã€ã€Œloopback onlyã€ã¨ã„ã†é …ç›®ãŒã‚ã‚Šã¾ã›ã‚“。 ã“ã®å ´åˆã¯ã€ã¿ã†ã•ã‚“ã®ã‚³ãƒ¡ãƒ³ãƒˆã«ã‚る通り（以下転記）ã«ãªã‚Šã¾ã™ã€‚ >>Burp suiteã§ã®è¨å®šã§ã™ãŒã€Proxy→Optionsã¨è¾¿ã‚Šã€Prox
![[改訂版] iPhoneアプリã®SSL接続をパケットã‚ャプãƒãƒ£ã™ã‚‹æ–¹æ³• | [ bROOM.LOG ! ]](https://cdn-ak-scissors.b.st-hatena.com/image/square/aade9e21ce05ad2ed7895ccdfb10acc358475d21/height=288;version=1;width=512/https%3A%2F%2Fblog.rocaz.net%2Fuploads%2F2011%2F02%2FiPhoneApp_Capture2.png)
1
障害
ランã‚ング
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
nginxã®server_nameã¨SSLã®è¨å®šã«ã¤ã„ã¦ã®ãƒ¡ãƒ¢
{{#tags}}- {{label}}
{{/tags}}