[B! SSL] rryuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

rryu id:rryu

SSLã«é–¢ã™ã‚‹rryuã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (10)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

[Managed PKI for SSL] Google Chrome57 ã®ãƒã‚°ã«ã‚ˆã‚Š EV SSL è¨¼æ˜Žæ›¸ã®çµ„ç¹”åãŒã‚°ãƒªãƒ¼ãƒ³è¡¨ç¤ºã•ã‚Œãªã„äº‹è±¡ã«ã¤ã„ã¦
Description [2017å¹´4æœˆ20æ—¥æ›´æ–°]Â Google Chrome 58 ã«ã¦ã€ãƒã‚°ãŒæ”¹ä¿®ã•ã‚ŒãŸã“ã¨ã‚’ç¢ºèªã„ãŸã—ã¾ã—ãŸã€‚ ã€æ¦‚è¦ã€‘ Google Chrome ã®æœ€æ–°ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 57 ã«ãŠã„ã¦ã€Managed PKI for SSL ã‹ã‚‰ç™ºè¡Œã•ã‚ŒãŸ EV SSLè¨¼æ˜Žæ›¸ã‚’ã”åˆ©ç”¨ã„ãŸã ã„ã¦ã„ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšã‚¢ãƒ‰ãƒ¬ã‚¹ãƒãƒ¼ã«çµ„ç¹”åãŒè¡¨ç¤ºã•ã‚Œãªã„ãƒã‚°ãŒç™ºç”Ÿã—ã¾ã—ãŸã€‚ ã“ã®å•é¡Œã¯ Google Chrome 57 ã«ãŠã„ã¦ã®ã¿ç™ºç”Ÿã—ã¦ã„ã¾ã™ã€‚ ã€å½±éŸ¿ã€‘ Google Chrome 57 ã§ã€ä»¥ä¸‹ã®ç™ºç”ŸåŽŸå› ã«è©²å½“ã™ã‚‹é †åºã§è¨¼æ˜Žæ›¸ãƒãƒªã‚·ãƒ¼ãŒè¨˜è¼‰ã•ã‚ŒãŸEV SSLè¨¼æ˜Žæ›¸ã®ã‚µã‚¤ãƒˆã¸ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸå ´åˆã€ã‚¢ãƒ‰ãƒ¬ã‚¹ãƒãƒ¼ã®å·¦å´ã«çµ„ç¹”åãŒè¡¨ç¤ºã•ã‚Œãšã€ã€Œä¿è·ã•ã‚ŒãŸé€šä¿¡ã€ã¨ã„ã†æ–‡è¨€ã®ã¿è¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ ã€ç™ºç”ŸåŽŸå› ã€‘ Google Chrome 57 ã§ã¯ã€è¨¼æ˜Žæ›¸ãƒãƒªã‚·ãƒ¼ï¼ˆOID 2.5.29.32ï¼‰ ãŒæ¬¡ã®é †åºã§
rryu 2017/03/28
ã“ã®ãƒã‚°ã«ã²ã£ã‹ã‹ã£ãŸã®ãŒã“ã®CAã ã‘ã¨ã„ã†ã“ã¨ã¯ã€è©²å½“ãƒãƒªã‚·ãƒ¼ã®é †åºã¯ã‹ãªã‚Šçã—ã„ã¨ã„ã†ã“ã¨ãªã®ã ã‚ã†ã‹ã€‚ä½•ã§ãã†ã—ãŸã‚“ã ã‚ã†ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL
ãƒªãƒ³ã‚¯
Webã‚µãƒ¼ãƒ“ã‚¹ã‚’å¸¸æ™‚SSLåŒ–ã—ã‚ˆã†ã¨ã—ã¦è«¦ã‚ãŸè©±
å¼Šç¤¾ã®æ–°è¦äº‹æ¥ã§Webã‚µãƒ¼ãƒ“ã‚¹ã‚’ä½œã£ã¦ã„ã¦ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒˆãƒ¬ãƒ³ãƒ‰ã®å¸¸æ™‚SSLã£ã¦ã‚„ã¤ã‚’ã‚„ã£ã¦ã¿ã‚ˆã†ã¨æ€ã£ãŸã€‚ ä¸–ã®Webã‚µãƒ¼ãƒ“ã‚¹ã‚’è¦‹ã¦ã¿ã‚‹ã¨ã‚„ã£ã¦ã„ã‚‹æ‰€ãŒä½•æ•…ã‹ã»ã¨ã‚“ã©ãªãã€mixiã‚„ãƒ‹ã‚³ãƒ‹ã‚³ãªã©ã®å¤§æ‰‹ã‚‚ã‚„ã£ã¦ãªã„ã‚ˆã†ã ã€‚ãƒ‹ã‚³ãƒ‹ã‚³ã®URLã‚’è©¦ã—ã«httpsã«ã—ã¦ã¿ãŸã‚‰ç¹‹ãŒã‚‰ãšã€mixiã¯httpã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã•ã‚Œã‚‹ã€‚ ã†ã¡ã¯æ–°è¦ã ã‹ã‚‰æœ€åˆã‹ã‚‰httpsåŒ–ã™ã‚‹ã“ã¨ã§ç‰¹ã«ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã¯ãªã„ã¨åˆ¤æ–ã€å®‰ã„SSLè¨¼æ˜Žæ›¸ã‚’è²·ã£ã¦httpã‚’httpsã«ãƒªãƒ€ã‚¤ãƒ¬ã‚¯ãƒˆã™ã‚‹ã‚ˆã†ã«ã—ãŸã€‚æŠ€è¡“çš„ãªé›£æ‰€ã¯ã¾ã£ãŸããªã„ã®ã§å•é¡Œãªãå®Ÿè£…å®Œäº†ã—ã€ã“ã‚Œã§å®‰å¿ƒåº¦ãŒã¡ã‚‡ã£ã¨ä¸ŠãŒã£ãŸã¨æ€ã£ã¦ã„ãŸã®ã ãŒâ€¦ã€‚ ã¤ã¥ãã€‚ ç¶šãã€‚ å¼Šã‚µãƒ¼ãƒ“ã‚¹ã§ã¯ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒYouTubeãªã©ã®å‹•ç”»ã‚’è²¼ã‚Šä»˜ã‘ã‚‹æ©Ÿèƒ½ãŒé‡è¦ãªã®ã ãŒã€ãƒ†ã‚¹ãƒˆã—ã¦ã¿ã‚‹ã¨ãƒ‹ã‚³ãƒ‹ã‚³å‹•ç”»ã®åŸ‹ã‚è¾¼ã¿ãŒå‹•ä½œã—ãªããªã£ã¦ã„ãŸã€‚èª¿ã¹ã¦ã¿ã‚‹ã¨ãƒ‹ã‚³å‹•ã®åŸ‹ã‚è¾¼ã¿ã‚³ãƒ¼ãƒ‰ãŒhttpãªã›ã„ã§ã€ã•ã‚‰ã«æœ€è¿‘ã®ãƒ–
rryu 2015/11/26
CMSã®ãƒ—ãƒ¬ãƒ“ãƒ¥ãƒ¼ã¨ã‹ç¢ºèªç”¨ã®ç’°å¢ƒãŒhttpsã§åŸ‹ã‚è¾¼ã¿ã‚³ãƒ³ãƒ†ãƒ³ãƒ„ãŒå…¨æ»…ã—ã¦ç¢ºèªã§ããªã„ã¨ã‹ã‚ˆãã‚ã‚‹ã€‚

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
Check your SSL/TLS certificate installation
Check your CSR Remove cross certificates View browser warnings Check certificate installation Search certificate logs Check your SSL/TLS certificate installation Enter the URL of the server that you want to check.
rryu 2015/06/10
SSLè¨¼æ˜Žæ›¸ç¢ºèªãƒ„ãƒ¼ãƒ«ã€‚SSLå‘¨ã‚Šã®è„†å¼±æ€§ç¢ºèªæ©Ÿèƒ½ã‚‚ä»˜ã„ã¦ã„ã¦ä¾¿åˆ©ã€‚

SSL

webã‚µãƒ¼ãƒ“ã‚¹
ãƒªãƒ³ã‚¯
ç´°ã‹ã™ãŽã¦ä¼ã‚ã‚‰ãªã„SSL/TLS
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2023å¹´10æœˆ1æ—¥ã«LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã«ãªã‚Šã¾ã—ãŸã€‚LINEãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã®æ–°ã—ã„ãƒ–ãƒã‚°ã¯ã“ã¡ã‚‰ã§ã™ã€‚LINEãƒ¤ãƒ•ãƒ¼ Tech Blog ã€Œç´°ã‹ã„ã¨è¨€ã†ã‚ˆã‚Šé•·ã„ã‚ˆãã€ ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€‚ATS ã®è„†å¼±æ€§ã‚’ç™ºè¦‹ã—ãŸå°æŸ´ã•ã‚“ã‚„ ATS ã« HTTP/2 ã®å®Ÿè£…ã‚’è¡Œã£ã¦ã„ã‚‹å¤§ä¹…ä¿ã•ã‚“ã¨åŒã˜ãƒãƒ¼ãƒ ã®ä¸€å¹´ç›®ã€åŒ¿åç¤¾å“¡M ã•ã‚“ã‹ã‚‰ã„ã˜ã‚‰ã‚Œã¦ã„ã‚‹æ–°äººã§ã™ã€‚ä»Šå›žã‚ã‚ŠãŒãŸã„äº‹ã«ã€ã“ã†ã„ã£ãŸã™ã”ã„æ–¹ã€…ã‚’å«ã‚ãƒ¢ãƒ’ã‚«ãƒ³è«¸å…ˆè¼©æ–¹ã‚ˆã‚Šã€Œä½•ã‹æ›¸ã‹ãªã„ã®ï¼Ÿã€ã€Œã„ã¤æ›¸ãã®ï¼Ÿã€ã¨ã„ã†æ•°ã€…ã®ãƒ—ãƒ¬ãƒƒã‚·ãƒ£ãƒ¼ãŠè¨€è‘‰ã‚’ã„ãŸã ãã¾ã—ãŸã€‚ ã¨ã„ã†ã‚ã‘ã§ã€SSL/TLS ã® Session å†é–‹æ©Ÿèƒ½ã«é–¢ã—ã¦æ›¸ã„ã¦ã„ã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ SSL/TLS ã¯æ©Ÿå¯†æ€§ã€å®Œå…¨æ€§ãã—ã¦çœŸæ£æ€§ã«å¯¾ã—ã¦å®‰å…¨ãªé€šä¿¡ã‚’è¡Œã†ãŸã‚ã®ä»•çµ„ã¿ã§ã™ã€‚ã—ã‹ã—ã€ã“ã®ä»•çµ„ã¿ã¯æš—å·æŠ€è¡“ã‚’å¤šç”¨ã—ç‰¹ã«æŽ¥ç¶šã«ãŠã„ã¦è¤‡é›‘ãªãƒ—ãƒãƒˆã‚³ãƒ«ã‚’ç”¨ã„ã€Client, Se
rryu 2015/01/21
session cacheã¨session ticketã ã‘ã§ã“ã‚Œã ã‘æ›¸ãã¨ã¯ã€‚

TLS

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
ã€Žè¨¼æ˜Žæ›¸ã‚’ç„¡æ–™ã§ç™ºè¡Œã€HTTPSã®å°Žå…¥ã‚’æ”¯æ´ã™ã‚‹ã€ŒLet's Encryptã€ã€ã¯ä½•ã«ä½¿ãˆã€ä½•ã«ä½¿ãˆãªã„ã®ã‹ - ã„ã‚ã„ã‚ã‚„ã£ã¦ã¿ã‚‹ã«ã£ã
ã‚„ã£ã¨ã€ã¤ã„ã«ã€èª°ã‚‚ãŒç„¡æ–™ã§HTTPSã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ãªã‚‹ï¼â€¦Mozillaã‚„EFFãŒå…±åŒãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã‚’ç«‹ã¡ä¸Šã’ - TechCrunchã ãŒã€ãƒ–ã‚³ãƒ¡æ¬„ã§ã€Œãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°ã‚µã‚¤ãƒˆãŒè¦‹åˆ†ã‘ã‚‰ã‚Œãªããªã‚‹ã€ã¨å‹˜é•ã„ã—ã¦ã„ã‚‹å‘ããŒã‚ã‚‹ã‚ˆã†ãªã®ã§ã€ã¡ã‚‡ã£ã¨æ›¸ã„ã¦ãŠãã€‚ ã“ã®Let's Encryptã ãŒã€Letâ€™s Encrypt: Delivering SSL/TLS Everywhereã«èª¬æ˜ŽãŒæ›¸ã‹ã‚Œã¦ã„ã‚‹ã€‚ãã‚‚ãã‚‚ä¸Šã®TechCrunchã®è¨˜äº‹ã§ã¯Let's EncryptãŒã©ã†ã„ã†ã‚‚ã®ã‹åˆ†ã‹ã‚‰ãªã„ã€‚ã“ã®è¨˜äº‹ã§ã¯ä½•ãŒã§ãã¦ä½•ãŒã§ããªã„ã‹ã‚’æ›¸ã„ã¦ã„ãªã„ã—ã€‚ TechCrunchã®è¨˜äº‹ã¯ã‚ªãƒ¬ãŒè¦‹ãŸæ™‚ç‚¹(2014/11/20 5:00)ã§ã™ã”ã„ãƒ–ã‚¯ãƒžæ•°(792ãƒ¦ãƒ¼ã‚¶)ãªã‚“ã ã‘ã©ã€æœ¬ä½“ã®èª¬æ˜Žã®ãƒ–ã‚¯ãƒžæ•°ã¯4ãƒ¦ãƒ¼ã‚¶ã€ã‚ªãƒ¬ãŒãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã—ãŸã®ã§5ãƒ¦ãƒ¼ã‚¶ã§ã‚ã‚‹ã€‚ã¡ã‚‡ã£ã¨èª¿ã¹ã¦ã‹ã‚‰ã‚³ãƒ¡ãƒ³ãƒˆã™ã‚Œã°ã„ã„ã®ã«ã€‚ ä¸‹è¨˜ã®ã»ã†
rryu 2014/11/21
DVã¨OVã®è¨¼æ˜Žæ›¸ã®åŒºåˆ¥ãŒä»˜ã‘ã¥ã‚‰ã„ç¾çŠ¶ã§å§‹ã‚ã‚‹ã®ã¯æ··ä¹±ã®å…ƒãªæ°—ãŒã™ã‚‹ã€‚

TLS

SSL

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
SSLv3ã§å•é¡Œã«ãªã‚‹ãƒ•ã‚£ãƒ¼ãƒãƒ£ãƒ¼ãƒ•ã‚©ãƒ³ã®å¯¾å¿œ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
rryu 2014/11/05
10æœˆ4æ—¥ç™ºå£²ã®ã€Œdocomoã‚‰ãã‚‰ããƒ›ãƒ³ãƒ™ãƒ¼ã‚·ãƒƒã‚¯4ã€ãŒTLSæœªå¯¾å¿œã¨ã„ã†ã®ã¯ã¤ã‚‰ã„ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : POODLEæ”»æ’ƒã«ã¤ã„ã¦æœ¬å½“ã«TLSv1.0ãªã‚‰å®‰å…¨ãªã®ã‹ï¼Ÿ - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
åŸºæœ¬ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆãè¶£å‘³ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKIãƒ»ç½²åãƒ»èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚æ—…å¥½ãã€‚ãƒ†ãƒ¬ãƒ“å¥½ãã§èŠ¸èƒ½é€š POODLEæ”»æ’ƒã¯ã€é‹ç”¨æ³£ã‹ã›ã¨ã„ã†ã‹ã€SSLv3ã®ã‚µãƒãƒ¼ãƒˆã‚’æœ¬å½“ã«åˆ‡ã£ã¡ã‚ƒã£ã¦ã„ã„ã®ã‹ã€ãƒ¬ã‚¬ã‚·ãƒ¼ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã«ã¤ã„ã¦å¯¾å¿œã™ã‚‹ã®ãŒã„ã„ã®ã‹ã€æ‚©ã‚€æ‰€ã§ã™ã‚ˆãã€‚ShellShocké¨’ãŽã•ãˆã¾ã ã†ã¡ã§ã¯åŽæŸã—ã¦ã„ãªã„ã®ã«ãƒ»ãƒ»ãƒ» POODLEæ”»æ’ƒã¯ã€ã€ŒSSLv3ã®å•é¡Œã§ã‚ã£ã¦TLSv1.0ä»¥ä¸Šã§ã¯(ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã®æ–¹æ³•ãŒé•ã†ã®ã§)å½±éŸ¿ãŒç„¡ã„ã€ã¨ã•ã‚Œã¦ã„ã¾ã™ãŒã€nahiã•ã‚“ã‹ã‚‰ã‚³ãƒ¡ãƒ³ãƒˆã‚‚ã‚‰ã£ã¦ã€Œå®Ÿè£…ä¾å˜ã ã‘ã©TLSv1.0ã§ã‚‚å±é™ºãªå®Ÿè£…ãŒã‚ã‚‹ã‚“ã˜ã‚ƒãªã„ã®ï¼Ÿã€ã¨ã„ã†ã“ã¨ã§ã€ãã®äº‹ã‚’æ›¸ã„ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ä»Šå›žã®POODLEæ”»æ’ƒã«ã¤ã„ã¦ã¯ã€ä½•ãŒå•é¡Œã§ã©ã®ã‚ˆã†ã«ã™ã‚Œã°æ”»æ’ƒã§ãã‚‹ã®ã‹ã¨ã„ã†ã€è©³ã—ã„å›³å…¥ã‚Šã®ç´ æ™´ã‚‰ã—ãåˆ¤ã‚Šã‚„ã™ã„è§£èª¬ã‚’ãƒ¢ãƒã‚²ãƒ¼ã•ã‚“ãŒ ã€ŒSSL v3.
rryu 2014/10/26
TLSv1.0ã§ã¯ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°ã¯ãƒ‘ãƒ‡ã‚£ãƒ³ã‚°é•·ã¨åŒã˜å€¤ã§åŸ‹ã‚ãªã‘ã‚Œã°ãªã‚‰ãªã„ãŒãã‚Œã®ãƒã‚§ãƒƒã‚¯ã¯ä»•æ§˜ä¸Šå¿…é ˆã¨ã•ã‚Œã¦ã„ãªã„ã®ã§ã€ãƒã‚§ãƒƒã‚¯ã—ã¦ã„ãªã„å®Ÿè£…ãŒã‚ã£ãŸã‚‰Padding OracleãŒåŠ¹ã„ã¦ã—ã¾ã†ã¨ã„ã†è©±ã€‚

TLS

SSL

POODLE
ãƒªãƒ³ã‚¯
SSL 3.0ã«æ·±åˆ»ãªè„†å¼±æ€§ã€ŒPOODLEã€è¦‹ã¤ã‹ã‚‹ã€€GoogleãŒå¯¾ç–ã‚’èª¬æ˜Ž
ç±³Googleã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒãƒ¼ãƒ ã¯10æœˆ14æ—¥ï¼ˆç¾åœ°æ™‚é–“ï¼‰ã€SSL 3.0ã®æ·±åˆ»ãªè„†å¼±æ€§ã€ŒPOODLEã€ï¼ˆPadding Oracle On Downgraded Legacy Encryptionã®ç•¥ã§ãƒ—ãƒ¼ãƒ‰ãƒ«ã¨èªã‚€ï¼‰ã®ç™ºè¦‹ã¨ãã®å¯¾ç–ã«ã¤ã„ã¦ç™ºè¡¨ã—ãŸã€‚ åŒç¤¾ã¯POODLEã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚¢ãƒ‰ãƒã‚¤ã‚¶ãƒªãƒ¼ã‚‚PDFã§å…¬é–‹ã—ãŸã€‚ SSL 3.0ã¯15å¹´å‰ã®å¤ã„ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã§ã¯ã‚ã‚‹ãŒã€ã„ã¾ã ã«ã“ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚’ä½¿ã£ã¦ã„ã‚‹Webã‚µã‚¤ãƒˆãŒå¤šæ•°ã‚ã‚‹ã¨ã„ã†ã€‚ã¾ãŸã€Webãƒ–ãƒ©ã‚¦ã‚¶ã®ã»ã¨ã‚“ã©ã¯ã€HTTPSã‚µãƒ¼ãƒã®ãƒã‚°ã«ã‚ˆã‚Šãƒšãƒ¼ã‚¸ã«æŽ¥ç¶šã§ããªã„å ´åˆã€SSL 3.0ã‚’å«ã‚€æ—§ç‰ˆã®ãƒ—ãƒãƒˆã‚³ãƒ«ã§ãƒªãƒˆãƒ©ã‚¤ã™ã‚‹ã¨ã„ã†å½¢ã§SSL 3.0ã‚‚ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã‚‹ã€‚ ã“ã®è„†å¼±æ€§ã‚’æ‚ªç”¨ã™ã‚‹ã¨ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚„ã‚¯ãƒƒã‚ãƒ¼ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ãã€Webã‚µã‚¤ãƒˆä¸Šã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å€‹äººæƒ…å ±ã‚’ç›—ã‚ã‚‹ã‚ˆã†ã«ãªã£ã¦ã—ã¾ã†ã¨ã„ã†ã€‚ Googleã¯ã‚·ã‚¹ãƒ†ãƒ ç®¡ç†è€…ã¯Webã‚µã‚¤ãƒˆã®
rryu 2014/10/15
åå‰ã‹ã‚‰ã™ã‚‹ã¨SSL 3.0ã«Padding OracleãŒæ™®é€šã«åŠ¹ãã¨ã„ã†æ„Ÿã˜ãªã®ã ã‚ã†ã‹ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL
ãƒªãƒ³ã‚¯
ä¸æ£ãªSSLè¨¼æ˜Žæ›¸ã‚’è¦‹ç ´ã‚‹Public Key Pinningã‚’è©¦ã™ - ã¼ã¡ã¼ã¡æ—¥è¨˜
å…ˆæ—¥ã®ã‚¨ãƒ³ãƒˆãƒªãƒ¼ ã€ŒTLSã¨SPDYã®é–“ã§Google ChromeãŒãƒãƒžã£ãŸè„†å¼±æ€§(CVE-2014-3166ã®è§£èª¬)ã€ã§äºˆå‘Šã—ãŸé€šã‚Šã€ä»Šå›žä¸æ£ãªSSLè¨¼æ˜Žæ›¸ã‚’è¦‹ç ´ã‚‹ Public Key Pinningã®æ©Ÿèƒ½ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã™ã€‚ Public Key Pinning ã¯2ç¨®é¡žã®æ–¹æ³•ãŒã‚ã‚Šã¾ã™ã€‚ã‚ã‚‰ã‹ã˜ã‚ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã®ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ã«å…¬é–‹éµæƒ…å ±ã‚’åŸ‹ã‚è¾¼ã‚€ Pre-loaded public key pinning ã¨ã€ã‚µãƒ¼ãƒã‹ã‚‰HTTPãƒ˜ãƒƒãƒ€ã§ãƒ–ãƒ©ã‚¦ã‚¶ã«å…¬é–‹éµæƒ…å ±ã‚’é€šçŸ¥ã™ã‚‹HTTP-based public key pinning (HPKP)ã®ï¼’ã¤ã§ã™ã€‚ Chromeã¯æ—¢ã«ä¸¡è€…ã®æ©Ÿèƒ½ã‚’å®Ÿè£…æ¸ˆã§ã™ãŒã€ã¡ã‚‡ã†ã©è¿‘æ—¥ãƒªãƒªãƒ¼ã‚¹ã•ã‚Œã‚‹ Firefox 32 ã® Stable ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‹ã‚‰ Pre-loaded public key pinning ãŒå®Ÿè£…ã•ã‚Œã¾ã—ãŸã€‚Firefox32ãƒªãƒªãƒ¼ã‚¹è¨˜å¿µã¨
rryu 2014/09/03
ãƒ¡ã‚¸ãƒ£ãƒ¼ãªã‚µãƒ¼ãƒ“ã‚¹ã«æˆé•·ã—ãŸã‚‰ã“ã®è¾ºã‚‚å¯¾å¿œã—ãªã„ã¨ã„ã‘ãªããªã‚‹ã®ã‹ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL
ãƒªãƒ³ã‚¯
è‡ªç¤¾ã‚µãƒ¼ãƒã¨äº¤ä¿¡ã™ã‚‹ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã«ãŠã‘ã‚‹ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ‰‹æ³•ã«ã¤ã„ã¦ï¼ˆSSL Pinningã¨ç‹¬è‡ªCAå†è€ƒï¼‰
â– èƒŒæ™¯ è‡ªç¤¾ã®ã‚µãƒ¼ãƒã¨é€šä¿¡ã™ã‚‹è‡ªç¤¾ã‚¢ãƒ—ãƒªã«ã¤ã„ã¦ã€æœ¬æ¥ä¸è¦ã§ã‚ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšä»–ç¤¾ã§ã‚ã‚‹CAã«èªè¨¼æƒ…å ±ã®ç®¡ç†ã‚’å§”è¨—ã™ã‚‹ã“ã¨ãŒå¤šã„ã‚ã‘ã§ã™ãŒã€CAãŒè¨¼æ˜Žæ›¸ã‚’èª¤ç™ºè¡Œã—ãŸçµæžœæƒ…å ±æ¼æ´©ãŒç™ºç”Ÿã—ãŸã¨ã—ã¦ã€ãã®è²¬ä»»ã¯è‡ªç¤¾ã«ã¯ãªã„ã¨ä¸»å¼µã§ãã‚‹ã®ã‹ã€ã‚‚ã†ä¸€åº¦è€ƒãˆãªãŠã—ãŸã»ã†ãŒã„ã„ã‚“ã˜ã‚ƒãªã„ã‹ã¨æ€ã†ã‚“ã§ã™ â€” Kazuho Oku (@kazuho) July 15, 2014 .@ockeghem @smbd @ando_Tw ã‚¹ãƒžãƒ›ã‚¢ãƒ—ãƒªã®æä¾›ã«ãŠã„ã¦ã¯ã‚³ãƒ¼ãƒ‰ã®ç½²åéµã‚’å®‰å…¨ã«ç®¡ç†ã™ã‚‹ã“ã¨ãŒæ±‚ã‚ã‚‰ã‚Œã¾ã™ãŒã€ãã®å‰æã«ãŠã„ã¦é€šä¿¡ç›¸æ‰‹ã®èªè¨¼ç®¡ç†ã‚’CAã«å§”è¨—ã™ã‚‹ã“ã¨ã«ã©ã‚Œã»ã©ã®æ„å‘³ãŒã‚ã‚‹ã‚“ã§ã—ã‚‡ã† â€” Kazuho Oku (@kazuho) July 14, 2014 â– ä»–ç¤¾CAã¯ä¿¡é ¼ã§ãã‚‹ã®ã‹ ç‰¹å®šã®CAã«pinningã™ã‚‹ã®ã¯ã—ãªã„ã‚ˆã‚Šå®‰å…¨ã ã‘ã©ã€ãã‚‚ãã‚‚èª¤ç™ºè¡Œã—ãªã„CAãªã‚“ã¦ã‚ã‚‹ã®ã‹ã¨ã„ã†è°è«–ã¯é‡è¦ã€‚è¦‹çŸ¥
rryu 2014/07/17
è¨¼æ˜Žæ›¸è‡ªä½“ã‚’pinningã™ã‚‹ãªã‚‰è‡ªå·±ç½²åè¨¼æ˜Žæ›¸ã§ã„ã„ã®ã§è‡ªç¤¾CAã‚‚ã„ã‚‰ãªã„ã¨æ€ã†ã€‚

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

SSL
ãƒªãƒ³ã‚¯
1