[B! OpenSSL] ryskosnã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

ryskosn id:ryskosn

OpenSSLã«é–¢ã™ã‚‹ryskosnã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

SSLã®è¨å®š - LukeSilviaâ€™s diary
SSLã®è¨å®šã‚’å§‹ã‚ã¦ã‚„ã£ãŸã®ã§ãƒ¡ãƒ¢ã—ã¦ãŠãã¾ã™ã€‚ä»Šå›žã¯SSLã®è¨¼æ˜Žæ›¸ã¯ç‹¬è‡ªã§ä½œæˆã—ã¾ã™ã€‚ç‹¬è‡ªã§ã‚‚OKãªã®ã§ã™ãã€‚ OpenSSLã‚³ãƒžãƒ³ãƒ‰ã®ä½¿ã„æ–¹ æœ¬æ¥ã€ã‚»ã‚ãƒ¥ã‚¢ãªWebã‚µãƒ¼ãƒã‚’é‹ç”¨ã™ã‚‹ãŸã‚ã«ã¯ã€èªè¨¼å±€ã‹ã‚‰ã€ç½²åä»˜ãã®è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ã‚‚ã‚‰ã†å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚èªè¨¼å±€ã¨ã¯ã€CA(Certification Authority)ã¨ã‚‚å‘¼ã³ã€è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã‚‹ç¬¬ä¸‰è€…æ©Ÿé–¢ã®ã“ã¨ã§ã™ã€‚èªè¨¼å±€ã‚’åˆ©ç”¨ã—ãªã„ã§ã€ç‹¬è‡ªã§CAã®è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã€èªè¨¼ã™ã‚‹ã“ã¨ã‚‚ã§ãã¾ã™ã€‚ ã‚µãƒ¼ãƒãƒ¼ã¯lighttpdã§ã™ã€‚ä»¥ä¸‹ã®ä½œæ¥ã¯rootãƒ¦ãƒ¼ã‚¶ãƒ¼ã§è¡Œã„ã¾ã™ã€‚ $ su ã‚·ãƒ¼ãƒ‰ãƒ•ã‚¡ã‚¤ãƒ«ä½œæˆ ç§˜å¯†éµã‚’ä½œæˆã™ã‚‹éš›ã«ä½¿ã†ä¹±æ•°æƒ…å ±ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½œæˆã—ã¾ã™ã€‚opensslã®ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ãƒ€ã‚¤ã‚¸ã‚§ã‚¹ãƒˆæ©Ÿèƒ½ï¼ˆmd5ï¼‰ã‚’ä½¿ã£ã¦ä½œæˆã€‚ $ openssl md5 * > rand.dat ã“ã“ã§ã‚¨ãƒ©ãƒ¼ãŒã§ãŸã‚‰ ä»¥ä¸‹ã®ã‚ˆã†ãªã‚¨ãƒ©ãƒ¼ãŒã§ã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ Read E
ryskosn 2014/07/09
OpenSSL
ãƒªãƒ³ã‚¯
OpenSSL: The Open Source toolkit for SSL/TLS
Welcome to OpenSSL! The OpenSSL Project develops and maintains the OpenSSL software - a robust, commercial-grade, full-featured toolkit for general-purpose cryptography and secure communication. The projectâ€™s technical decision making is managed by the OpenSSL Technical Committee (OTC) and the project governance is managed by the OpenSSL Management Committee (OMC). The project operates under forma
ryskosn 2014/06/21
ADH-AES128-SHA

OpenSSL
ãƒªãƒ³ã‚¯
DeNA Engineering - DeNAã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆ
æŠ€è¡“ã‚’æ´»ã‹ã—ã€æ–°ã—ã„ä¾¡å€¤ã‚’å‰µé€ ã™ã‚‹ DeNAã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã¯ã€æƒ³åƒã‚’è¶…ãˆã‚‹Delightã‚’å±Šã‘ã‚‹ãŸã‚ã«ä½•ãŒã§ãã‚‹ã‹ã‚’è€ƒãˆã€æŠ€è¡“åŠ›ã¨ç™ºæƒ³åŠ›ã§æ–°ã—ã„ä¾¡å€¤ã‚’ç”Ÿã¿å‡ºã—ã¦ã„ã¾ã™ã€‚ å¤šæ§˜ãªå°‚é–€æ€§ã‚’æŒã£ãŸã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŒåˆ‡ç£‹ç¢ç£¨ã—ã€äº’ã„ã«åˆºæ¿€ã—åˆãˆã‚‹ç’°å¢ƒã‚„åˆ¶åº¦ãŒã•ã‚‰ãªã‚‹æˆé•·ã¸ã¨ã¤ãªã’ã¾ã™ã€‚
ryskosn 2014/04/21
OpenSSL
ãƒªãƒ³ã‚¯
CVE-2014-0160 OpenSSL Heartbleed è„†å¼±æ€§ã¾ã¨ã‚ - ã‚ã‚‚ãŠãã°
å¿…è¦ãªæƒ…å ±ã¯ http://heartbleed.com/ ã«ã¾ã¨ã¾ã£ã¦ã„ã‚‹ã®ã§ã™ãŒã€è‹±èªžã ã—é•·ã„ã—ã£ã¦äººã®ãŸã‚ã«æ‰‹çŸã«ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ ã©ã†ã™ã‚Œã°ã„ã„ã®ã‹ OpenSSL 1.0.1ã€œ1.0.1fã‚’ä½¿ã£ã¦ã„ãªã‘ã‚Œã°ã‚»ãƒ¼ãƒ• ã‚ã¦ã¯ã¾ã‚‹å ´åˆã«ã¯ã€ä¸€åˆ»ã‚‚æ—©ããƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚¢ãƒƒãƒ—ã—ã¦ã€ã‚µãƒ¼ãƒã”ã¨å†èµ·å‹•(ã‚ã‹ã‚‹ã²ã¨ã¯ã‚µãƒ¼ãƒ“ã‚¹å˜ä½ã§ã‚‚OKã€ãŸã ã—reloadã§ã¯ã ã‚ãªã“ã¨ã‚‚) SSLè¨¼æ˜Žæ›¸ã§ã‚µãƒ¼ãƒã‚’å…¬é–‹ã—ã¦ã„ã‚‹ãªã‚‰ã€ç§˜å¯†éµã‹ã‚‰ä½œã‚Šç›´ã—ã¦è¨¼æ˜Žæ›¸ã‚’å†ç™ºè¡Œã—ã€éŽåŽ»ã®è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã•ã›ã‚‹(æœ«å°¾ã«é–¢é€£ãƒªãƒ³ã‚¯ã‚ã‚Š)ã€‚ ã‚µãƒ¼ãƒã‚’å…¬é–‹ã—ã¦ã„ãªã„å ´åˆã‚‚ã€å¤–éƒ¨ã¸ã®SSLé€šä¿¡ãŒã‚ã‚Œã°å½±éŸ¿ã‚’å—ã‘ã‚‹ã®ã§ã€è©³ã—ãç²¾æŸ»ã™ã‚‹ã€‚ PFS(perfect forward secrecy)ã‚’åˆ©ç”¨ã—ã¦ã„ãªã„å ´åˆã€éŽåŽ»ã®é€šä¿¡å†…å®¹ã‚‚å¾©å·ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ãŸã‚ã€è©³ã—ãç²¾æŸ»ã™ã‚‹ã€‚ æ¼æ´©ã™ã‚‹æƒ…å ±ã®å…·ä½“ä¾‹ã¯ã€OpenSSLã®è„†å¼±æ€§ã§æƒ³å®šã•ã‚Œã‚‹ãƒªã‚¹ã‚¯ã¨ã—ã¦
ryskosn 2014/04/13
Heartbleed

OpenSSL

security
ãƒªãƒ³ã‚¯
Heartbleedè„†å¼±æ€§æ¤œæŸ»
Heartbleedè„†å¼±æ€§(CVE-2014-0160)ã‚’å®¹æ˜“ã«æ¤œæŸ»ã§ãã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’ç„¡å„Ÿã§æä¾›è‡´ã—ã¾ã™ã€‚ ä»¥ä¸‹ãƒ•ã‚©ãƒ¼ãƒ ã«ã€æ¤œæŸ»å¯¾è±¡ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å…¥åŠ›ã—ã€æ¤œæŸ»ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ å…¥åŠ›ä¾‹ï¼šssl.netagent.co.jp ã“ã®è„†å¼±æ€§ã¯ã©ã®ã‚ˆã†ãªã‚‚ã®ã§ã€ã©ã®ã‚ˆã†ãªå½±éŸ¿ãŒã‚ã‚‹ã®ã§ã™ã‹ï¼Ÿ æš—å·åŒ–é€šä¿¡ã‚’ã—ã¦ã„ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ å†…ã®ãƒ¡ãƒ¢ãƒªãŒèªã‚ã¦ã—ã¾ã†è„†å¼±æ€§ã§ã™ã€‚ æš—å·åŒ–é€šä¿¡ã§é‡è¦ãªã€Œç§˜å¯†éµã€ãŒç›—ã¿å‡ºã•ã‚Œã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚ã‚Šã€éŽåŽ»ã«æš—å·åŒ–ã—ã¦é€šä¿¡ã—ãŸå†…å®¹ãŒè§£èªã§ãã¦ã—ã¾ã„ã¾ã™ã€‚ ã¾ãŸã€ã“ã®è„†å¼±æ€§ã§ã€ãã®æ™‚åˆ©ç”¨ã—ã¦ã„ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æš—å·åŒ–é€šä¿¡ã®å†…å®¹ãŒã€æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„çŠ¶æ…‹ã§è¦‹ã‚‰ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ å®Ÿéš›ã«å…¬é–‹ã•ã‚Œã¦ã„ã‚‹äº‹ä¾‹ã¨ã—ã¦ã¯ã€ ç±³å›½ã®å¤§æ‰‹ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆã®ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®IDãƒ»ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã©ãŒç›—ã¾ã‚ŒãŸã‚ˆã†ã§ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¸ã®å½±éŸ¿ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ è„†å¼±æ€§ã‚’åˆ©ç”¨ã•ã‚Œã¦ç§˜å¯†éµã‚’æŒã¡ã ã•ã‚Œã€éŽåŽ»ã®é€š
ryskosn 2014/04/13
OpenSSL

security
ãƒªãƒ³ã‚¯
OpenSSL - Wikipedia
OpenSSLï¼ˆã‚ªãƒ¼ãƒ—ãƒ³ãƒ»ã‚¨ã‚¹ã‚¨ã‚¹ã‚¨ãƒ«ï¼‰ã¯ã€TLSãƒ—ãƒãƒˆã‚³ãƒ«ãƒ»SSLãƒ—ãƒãƒˆã‚³ãƒ«ã®ã€ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã§é–‹ç™ºãƒ»æä¾›ã•ã‚Œã‚‹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã‚ã‚‹ã€‚ä¸å¿ƒã¨ãªã£ã¦ã„ã‚‹ãƒ©ã‚¤ãƒ–ãƒ©ãƒªï¼ˆCè¨€èªžã§æ›¸ã‹ã‚Œã¦ã„ã‚‹ï¼‰ã¯åŸºæœ¬çš„ãªæš—å·åŒ–é–¢æ•°ã¨æ§˜ã€…ãªãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£é–¢æ•°ã‚’å®Ÿè£…ã—ã¦ã„ã‚‹ã€‚æ§˜ã€…ãªã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿è¨€èªžã§OpenSSLãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’åˆ©ç”¨ã§ãã‚‹ã‚ˆã†ã«ã™ã‚‹ãƒ©ãƒƒãƒ‘ãƒ¼ã‚‚ã‚ã‚‹ã€‚OpenSSLã¯Eric A. Youngã¨Tim Hudsonã«ã‚ˆã‚‹SSLeayï¼ˆ1998å¹´12æœˆã«é–‹ç™ºè€…ãŒRSA Securityã«ç•°å‹•ã—ãŸãŸã‚é–‹ç™ºã¯çµ‚äº†ã•ã‚Œã¦ã„ã‚‹ï¼‰ã‚’åŸºã«ã—ã¦ã„ã‚‹ã€‚ OpenSSLãŒåˆ©ç”¨å¯èƒ½ãªãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ã¯ã€ã»ã¼å…¨ã¦ã®Unixç³»ï¼ˆSolarisã‚„Linuxã€macOSã€BSDã‚’å«ã‚€ï¼‰ã€OpenVMSã€ãã—ã¦Windowsã§ã‚ã‚‹ã€‚IBMã«ã‚ˆã£ã¦System i (iSeries/AS400) ã«ç§»æ¤ã•ã‚ŒãŸãƒãƒ¼ã‚¸ãƒ§ãƒ³ã‚‚ã‚ã‚‹ã€‚
ryskosn 2014/04/13
OpenSSL
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/04/09/20140408what-is-heartbleed-the-video/
ryskosn 2014/04/13
OpenSSL

OpenSSL

Heartbleed
ãƒªãƒ³ã‚¯
1