[B! ssl] tyoro1210ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

tyoro1210 id:tyoro1210

sslã«é–¢ã™ã‚‹tyoro1210ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (24)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã®ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹ã€ŒMicrosoft Teamsã€ãŒã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’æ›´æ–°ã—å¿˜ã‚Œã€‚2æ™‚é–“ã®ã‚ã„ã ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã‚‹éšœå®³ç™ºç”Ÿ
ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã®ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹ã€ŒMicrosoft Teamsã€ãŒã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’æ›´æ–°ã—å¿˜ã‚Œã€‚2æ™‚é–“ã®ã‚ã„ã ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã‚‹éšœå®³ç™ºç”Ÿ ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆãŒãƒãƒ£ãƒƒãƒˆã‚µãƒ¼ãƒ“ã‚¹ã¨ã—ã¦æä¾›ã™ã‚‹ã€ŒMicrosoft Teamsã€ã¯ã€æ€¥é€Ÿã«äººæ°—ã‚’é«˜ã‚ã¦ã„ã‚‹Slackã«å¯¾æŠ—ã™ã‚‹ã¹ããƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆãŒåŠ›ã‚’å…¥ã‚Œã¦ã„ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã®ã²ã¨ã¤ã§ã™ã€‚ å…ˆæœˆã€1æœˆ9æ—¥ã«ã¯æ—¥æœ¬ã®æ°‘äº‹è¨´è¨Ÿæ‰‹ç¶šãã«ãŠã‘ã‚‹ITåŒ–ã‚’æŽ¨é€²ã™ã‚‹ãŸã‚ã€Webä¼šè°ã‚„ã‚³ãƒ©ãƒœãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ç”¨ãƒ„ãƒ¼ãƒ«ã¨ã—ã¦Microsoft TeamsãŒæŽ¡ç”¨ã•ã‚ŒãŸã¨ç™ºè¡¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ ãã®Microsoft TeamsãŒæ—¥æœ¬æ™‚é–“2æœˆ3æ—¥å¤œ11æ™‚19åˆ†ã‹ã‚‰ç¿Œ2æœˆ4æ—¥åˆå‰1æ™‚19åˆ†ã®å°‘ãªãã¨ã‚‚2æ™‚é–“ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‹ã‚‰ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã‚‹ã¨ã„ã†éšœå®³ã‚’èµ·ã“ã—ã¦ã„ã¾ã—ãŸã€‚ ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã«ã‚ˆã‚‹ã¨ã€ãã®åŽŸå› ã¯ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®æ›´æ–°ã—å¿˜ã‚Œã«ã‚ˆã‚‹æœŸé™åˆ‡ã‚Œã§ã‚ã‚‹ã“ã¨ãŒæ˜Žã‚‰ã‹ã«ãªã£ã¦ã„ã¾ã™ã€‚ SSL
tyoro1210 2020/02/06
microsoft

ssl
ãƒªãƒ³ã‚¯
certbot ã® renew hook ã«ã¤ã„ã¦ - @znz blog
certbot ã§è¨å®šã®å†èªã¿è¾¼ã¿ã«ã¯ post-hook ã‚ˆã‚Šã‚‚ renew-hook ã‚’ä½¿ã£ãŸæ–¹ãŒè‰¯ã•ãã†ã§ã—ãŸã€‚ å¯¾è±¡ãƒãƒ¼ã‚¸ãƒ§ãƒ³ Debian GNU/Linux 8.6 (jessie) certbot 0.9.3-1~bpo8+1 hook ã®æŒ‡å®šæ–¹æ³•ã«ã¤ã„ã¦ certbot renew --pre-hook "service nginx stop" --post-hook "service nginx start" ã®ã‚ˆã†ã« certbot ã‚³ãƒžãƒ³ãƒ‰ã®å¼•æ•°ã§ç›´æŽ¥æŒ‡å®šã™ã‚‹ã‹ã€ /etc/letsencrypt/cli.ini ã¾ãŸã¯ $XDG_CONFIG_HOME/letsencrypt/cli.ini ($XDG_CONFIG_HOME ãŒè¨å®šã•ã‚Œã¦ã„ãªã‘ã‚Œã° ~/.config/letsencrypt/cli.ini) ã« renew-hook = service ngin
tyoro1210 2018/05/11
ssl
ãƒªãƒ³ã‚¯
ã•ãã‚‰ã®ã‚¯ãƒ©ã‚¦ãƒ‰ ã‚¦ã‚§ãƒ–ã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿(CDN)ã§Let's Encryptã‚’ä½¿ã† - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
tyoro1210 2017/03/10
ã€ŽSSLè¨¼æ˜Žæ›¸è¨¼æ˜Žæ›¸ã®æ›´æ–°ã‚‚Let's Encryptï¼‹ã•ãã‚‰ã®ã‚¯ãƒ©ã‚¦ãƒ‰APIã‚’ä½¿ãˆã°ã€è‡ªå‹•ã§æ›´æ–°ã™ã‚‹ä»•çµ„ã¿ã€

ssl

cdn
ãƒªãƒ³ã‚¯
Let's Encrypt ç·åˆãƒãƒ¼ã‚¿ãƒ«
Let's Encrypt æœ€æ–°æƒ…å ± ãƒ»ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã¨ ACME v2 ã¸å¯¾å¿œãŒå®Œäº†ã—ã¾ã—ãŸï¼ˆ2018å¹´03æœˆ15æ—¥ æ›´æ–°ï¼‰ â€»æŠ€è¡“çš„ãªè©³ç´°ã«ã¤ã„ã¦ã¯ ACME v2 ã¨ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã®æŠ€è¡“æƒ…å ± ã‚’ã”è¦§ãã ã•ã„ã€‚ â€»ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã®å–å¾—ã«ã¯ã€ACME v2 ãƒ—ãƒãƒˆã‚³ãƒ«ã«å¯¾å¿œã—ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã¨ DNS ã«ã‚ˆã‚‹èªè¨¼ãŒå¿…è¦ã§ã™ã€‚è¨¼æ˜Žæ›¸ã®å–å¾—ãƒ»æ›´æ–°ã®éš›ã«ã€DNS ã®ã€ŒTXT ãƒ¬ã‚³ãƒ¼ãƒ‰ã€ã«ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç™»éŒ²ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ â€»ã‚µãƒ–ã‚¸ã‚§ã‚¯ãƒˆã®ä»£æ›¿åï¼ˆSAN : Subject Alternative Nameï¼‰ã‚’ä½¿ç”¨ã—ãŸ è¤‡æ•°ã®ãƒ‰ãƒ¡ã‚¤ãƒ³åãƒ»ã‚µãƒ–ãƒ‰ãƒ¡ã‚¤ãƒ³åã«å¯¾ã—ã¦æœ‰åŠ¹ãªè¨¼æ˜Žæ›¸ ã‚‚å¼•ãç¶šãå–å¾—å¯èƒ½ã§ã™ã€‚ Let's Encrypt ã«ã¤ã„ã¦ Let's Encrypt ã¯ã€èªè¨¼å±€ï¼ˆCAï¼‰ã¨ã—ã¦ã€ŒSSL/TLSã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã€ã‚’ç„¡æ–™ã§ç™ºè¡Œã™ã‚‹ã¨ã¨ã‚‚ã«ã€è¨¼æ˜Žæ›¸ã®ç™ºè¡Œãƒ»ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ãƒ»
tyoro1210 2017/03/10
æƒ…å ±ã¯ã‚ã‚ŠãŒãŸã„ã‘ã©ã€ã“ã®ã‚µã‚¤ãƒˆã®ç«‹ã¡ä½ç½®ã¯ã©ã“ãªã‚“ã

ssl
ãƒªãƒ³ã‚¯
ã€apacheã€‘SNIï¼ˆServer Name Indicationï¼‰ã§SSLã‚’Virtual Hostsã§ã‚‚ at softelãƒ¡ãƒ¢
SNIï¼ˆServer Name Indication RFC 4366ï¼‰ã‚’ä½¿ãˆã°ã€ä¸€ã¤ã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ã§è¤‡æ•°ã®ã‚µã‚¤ãƒˆã®SSLã‚’å®Ÿç¾ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚‹ã€‚åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§SSLã‚’ä½¿ãˆã‚‹ã‚ˆã†ã«ã™ã‚‹æŠ€è¡“ã€‚ SNIãŒä½¿ãˆã‚‹æ¡ä»¶ ã¾ãšã€ApacheãŒ2.2.12ä»¥é™ã§ã‚ã‚‹ã“ã¨ã€‚SSLStrictSNIVHostCheck ãƒ‡ã‚£ãƒ¬ã‚¯ãƒ†ã‚£ãƒ–ã¯2.2.12ä»¥é™ã§ä½¿ãˆã‚‹ã€‚ ä»–ã“ã¾ã‹ã„ã¨ã“ã‚ã€‚ OpenSSL 0.9.8fä»¥é™ã€‚ OpenSSLãŒTLSæ‹¡å¼µã‚ªãƒ—ã‚·ãƒ§ãƒ³ã‚ã‚Šã§ãƒ“ãƒ«ãƒ‰ã•ã‚Œã¦ã„ã‚‹ã“ã¨(enable-tlsext)ã€‚OpenSSL 0.9.8kä»¥é™ã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§æœ‰åŠ¹ã€‚ ApacheãŒOpenSSLä»˜ãã§ãƒ“ãƒ«ãƒ‰ã—ã¦ã‚ã‚‹ã“ã¨(./configure â€“with-ssl=/path/to/your/openssl)ã€‚ã“ã‚Œã§mod_sslã¯SNIå¯¾å¿œã«ã€‚ ApacheãŒOpenSSLãƒ©ã‚¤ãƒ–ãƒ©ãƒªã‚’åˆ©ç”¨
tyoro1210 2015/06/04
ssl

sni
ãƒªãƒ³ã‚¯
ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§SSLé€šä¿¡ã§ããŸã£ã½ã„ - ã‚ˆã—ã â€™s diary
ä¸–é–“ã§ã¯ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§ã¯SSLã¯ä½¿ãˆãªã„ã€ã¨ã„ã†è©±ã€‚ ã§ã‚‚ãƒãƒ¼ãƒ ãƒ™ãƒ¼ã‚¹ã§ã‚‚ã„ã‘ã‚‹ï¼ã¨ã€â†“ãã‚Œã‚‰ã—ãäº‹ãŒæ›¸ã„ã¦ã‚ã£ã¦ã€å‡ºæ¥ãŸã£ã½ã„ã€‚ NameVirtualHost *:80 NameVirtualHost *:443 ãƒ»hostAãƒ» ãƒ»hostAãƒ» ãƒ»hostBãƒ» ãƒ»hostBãƒ» Aã¨Bã§åŒã˜è¨¼æ˜Žæ›¸ã‚’æŒ‡å®šã™ã‚‹ ãƒ†ãƒ‹ã‚¹æœç·´, SSLã§åå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆ, æ¿€é ç—›ã„ - ã„ã—ãªãŠ!(2007-02-22) ä»Šå›žã®ç›®çš„ 443ãƒãƒ¼ãƒˆã§è¤‡æ•°ã®DocumentRootã‚’æŒã¤è‡ªå·±ç½²åè¨¼æ˜Žæ›¸ã‚’ä½¿ã£ãŸSSLé€šä¿¡ã‚’å‡ºæ¥ã‚‹ã‚ˆã†ã«ã™ã‚‹ã€‚ è¨¼æ˜Žæ›¸ã¯1ã‚»ãƒƒãƒˆã ã‘ä½œã£ã¦å…¨ã¦ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã§ä½¿ã„ã¾ã‚ã™ã€‚ SSLã®äº‹ã‚’ã‚ã¾ã‚ŠçŸ¥ã‚‰ãªã„ã‹ã‚‰ã€ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸ã®å±é™ºæ€§ã‚‚ã‚ã¾ã‚ŠçŸ¥ã‚‰ãªã„ã€‚ ã¨ã‚Šã‚ãˆãšã€ã€Œã“ã„ã¤ãå®‰å…¨ã ï¼ã€ã¨å¤ªé¼“åˆ¤ã‚’æŠ¼ã™ä»–äººæ§˜ãŒã„ã‚‹ã‹ã„ãªã„ã‹ã®é•ã„ã‚‰ã—ã„ã€‚ ã¾ãhttpã§é€šä¿¡ã™ã‚‹ã‚ˆã‚Šå®‰
tyoro1210 2015/06/04
SSL

security

openssl
ãƒªãƒ³ã‚¯
SNIã§1å°ã®ã‚µãƒ¼ãƒä¸Šã«è¤‡æ•°ã®SSLã‚µã‚¤ãƒˆã‚’é‹ç”¨ â€“ å‰ç·¨ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
ã”ç„¡æ²™æ±°ã—ã¦ãŠã‚Šã¾ã™ã€‚ç´°ç¾½ã§ã™ã€‚ æ˜¨å¹´ã€Androidã«ãŠã‘ã‚‹SNIå¯¾å¿œçŠ¶æ³ã¨ã„ã†è¨˜äº‹ã§ã€SSL/TLSã®æ‹¡å¼µä»•æ§˜ã§ã‚ã‚‹SNI(Server Name Indication)ã«ã¤ã„ã¦è§¦ã‚Œã¾ã—ãŸã€‚ å°‘ã—ãƒ‹ãƒƒãƒãªãƒ†ãƒ¼ãƒžã ã¨æ€ã£ã¦ã„ã¾ã—ãŸãŒã€ã¤ã„å…ˆæ—¥ã€ã•ãã‚‰ã®ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã§SNI SSLã‚’æä¾›é–‹å§‹ã¨ã„ã†ãƒ—ãƒ¬ã‚¹ãƒªãƒªãƒ¼ã‚¹ãŒç™ºè¡¨ã•ã‚Œã¾ã—ãŸã€‚åºƒã„ã‚µãƒ¼ãƒ“ã‚¹ã§SSL/TLSå°Žå…¥ã¸ã®éœ€è¦ãŒé«˜ã¾ã£ã¦ã„ã‚‹ä»Šã€ã“ã®ã‚ˆã†ãªäº‹ä¾‹ã¯ä»Šå¾Œå¢—ãˆã¦ã„ãã‚‚ã®ã¨è€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ ãã“ã§æœ¬è¨˜äº‹ã§ã¯ã€é‡è¦åº¦ãŒé«˜ã¾ã£ã¦ã„ã‚‹SNIã«ã¤ã„ã¦ã€ãã®æŠ€è¡“ã®æ¦‚è¦ã‚’æ”¹ã‚ã¦ç†è§£ã—ã€å®Ÿéš›ã®é‹ç”¨ã«å½¹ç«‹ã¦ã‚‰ã‚Œã‚‹ã‚ˆã†ã«æ•´ç†ã‚’ã—ãŸã„ã¨æ€ã„ã¾ã™ã€‚ çŸ¥è˜ã®æ•´ç†ã‚’ç›®çš„ã«ã—ãŸå‰ç·¨ã¨ã€å®Ÿè·µã‚’ç›®çš„ã«ã—ãŸå¾Œç·¨ã®2éƒ¨æ§‹æˆã§ãŠå±Šã‘ã—ã¾ã™ã€‚ ä»¥ä¸‹ãŒå‰ç·¨ã®å†…å®¹ã§ã™ã€‚ SNIã§ä½•ãŒå‡ºæ¥ã‚‹ã‚ˆã†ã«ãªã‚‹ã®ã‹ SNIã§è¤‡æ•°ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒé‹ç”¨å¯èƒ½ã«ãªã‚‹ã¾ã§ SNIãŒé‡è¦ã«ãªã‚Šã¤ã¤ã‚ã‚‹èƒŒæ™¯ SSLé‹
tyoro1210 2015/06/04
ssl

sni
ãƒªãƒ³ã‚¯
Redirect to sslh
This URL is obsolete, you should be soon redirected to the actual sslh page.
tyoro1210 2011/11/17
ssh

ssl
ãƒªãƒ³ã‚¯
gitã‚„curlã‚„wgetã§GitHubã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨certification errorã«ãªã‚‹åŽŸå› ã‚’èª¿ã¹ã¦ã¿ãŸ - ã“ã®ãƒ–ãƒã‚°ã¯URLãŒå¤‰æ›´ã«ãªã‚Šã¾ã—ãŸ
ä¸ã®äººã«è£ã‚’å–ã£ãŸã‚ã‘ã§ã¯ãªãç§ã®æŽ¨æ¸¬ã§ã™ã€‚é–“é•ã£ã¦ã„ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ã€‚ 2010å¹´11æœˆã‹ã‚‰2011å¹´5æœˆæœ«ã¾ã§ã®çŠ¶æ³(gitã‚„wgetã§certification error) 2010å¹´11æœˆé ƒã€GitHubã§ã¯ã™ã¹ã¦ã®ã‚¢ã‚¯ã‚»ã‚¹ã«SSLã‚’ä½¿ã†ã‚ˆã†ä»•æ§˜ãŒå¤‰ã‚ã£ãŸã€‚ ã“ã®æ™‚ã€SSLè¨¼æ˜Žæ›¸ã«ã¯ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸(*.github.com)ãŒä½¿ã‚ã‚Œã¦ã„ãŸã€‚ *.github.comã®ãƒ¯ã‚¤ãƒ«ãƒ‰ã‚«ãƒ¼ãƒ‰è¨¼æ˜Žæ›¸ã«github.comã¯å«ã¾ã‚Œãªã„ã®ã ãŒã€SSLè¨¼æ˜Žæ›¸ã«ã¯X509v3 Subject Alternative Name(subjectAltName)ãŒè¨å®šã•ã‚Œã¦ã„ã‚‹*1ãŸã‚ã€subjectAltNameã«å¯¾å¿œã—ãŸã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã§ã‚ã‚Œã°å•é¡Œãªã„ã€‚ ã—ã‹ã—ã€wgetã®æœ€æ–°ç‰ˆ1.12ã¯subjectAltNameã«æœªå¯¾å¿œ*2ã€‚wgetã§ã¯certification errorãŒå‡ºã¦ã„ãŸã€‚ å‚è€ƒ
tyoro1210 2011/07/08
ssl

security
ãƒªãƒ³ã‚¯
Bridge Word
This shop will be powered by Are you the store owner? Log in here
tyoro1210 2011/07/08
ssl
ãƒªãƒ³ã‚¯
Notice to all StartCom subscribers
StartCom CA is closed since Jan. 1st, 2018, it doesn't issue any new certificate from StartCom name roots. If you want to buy trusted SSL certificate and code signing certificate, please visit https://store.wotrus.com. If you want to apply free em ail certificate, please visit https://www.mesign.com to download MeSign APP to get free em ail certificate automatically and send encrypted em ail automati
tyoro1210 2011/05/17
ssl
ãƒªãƒ³ã‚¯
ç„¡æ–™ã®SSLè¨¼æ˜Žæ›¸ STARTSSLã§æ±ºã¾ã‚Š - ã²ã£ãã‚Šã¨ã€‚ãã—ã¦é™ã‹ã«ä¸–ç•Œã‚’å¤‰ãˆã‚‹ã€‚
ç„¡æ–™ã®ï¼³ï¼³ï¼¬ã‚’æŽ¢ã—ã¦ã„ãŸãŒã€STARTSSLã«æ±ºã¾ã£ãŸã€‚ ã¾ãšç„¡æ–™ ï¼‘å¹´æ¯Žã«æ›´æ–°ãŒå¿…è¦ ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’å–å¾—ã—ã¦ã„ã‚‹ã“ã¨ã€‚ IE, FOREFOXèªå®šã•ã‚Œã¦ã„ã‚‹ã€‚ è¦ã™ã‚‹ã«ï¼³ï¼´ï¼¡ï¼²ï¼´ï¼³ï¼³ï¼¬ã§ç”³ã—åˆ†ãªã„ã€‚ ä»¥ä¸‹ã¯å‚è€ƒãƒªãƒ³ã‚¯ http://futuremix.org/2009/02/startssl http://blog.le-coeur.net/archives/403 http://www.insaneworks.co.jp/kota/ssl%E8%A8%BC%E6%98%8E%E6%9B%B8%E3%82%92%E7%84%A1%E6%96%99%E3%81%A7%E5%8F%96%E5%BE%97 http://bl.oov.ch/2011/02/nginx-startssl-ssl.html apacheã§ã¯ãªãã¦ã€nginxã§ã‚‚åˆ©ç”¨ã§ãã‚‹ã€‚
tyoro1210 2011/05/17
ssl
ãƒªãƒ³ã‚¯
ã‚¨ãƒ©ãƒ¼: "Unable to configure RSA server private key"è¨¼æ˜Žæ›¸ã«ã¯æ£ã—ã„ç§˜å¯†éµã‚’æŒ‡å®šã—ã¦ãã ã•ã„ã€‚ è¨¼æ˜Žæ›¸ã®ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã‚’ç§˜å¯†éµã®ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã¨æ¯”è¼ƒã—ã¦ã€2ã¤ãŒä¸€è‡´ã™ã‚‹ã‹ã©ã†ã‹ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¦ãã ã•ã„ã€‚ä»¥ä¸‹ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ è¨¼æ˜Žæ›¸ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã‚’è¡¨ç¤ºã™ã‚‹ã«ã¯ openssl x509 -noout -text -in certfile -modulusç§˜å¯†éµã®ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã‚’è¡¨ç¤ºã™ã‚‹ã«ã¯ openssl rsa -noout -text -in keyfile -mod
" ã‚¨ãƒ©ãƒ¼: â€œUnable to configure RSA server private keyâ€ è¨¼æ˜Žæ›¸ã«ã¯æ£ã—ã„ç§˜å¯†éµã‚’æŒ‡å®šã—ã¦ãã ã•ã„ã€‚ è¨¼æ˜Žæ›¸ã®ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã‚’ç§˜å¯†éµã®ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã¨æ¯”è¼ƒã—ã¦ã€2ã¤ãŒä¸€è‡´ã™ã‚‹ã‹ã©ã†ã‹ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¦ãã ã•ã„ã€‚ä»¥ä¸‹ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ç”¨ã—ã¾ã™ã€‚ è¨¼æ˜Žæ›¸ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã‚’è¡¨ç¤ºã™ã‚‹ã«ã¯ openssl x509 -noout -text -in certfile -modulus ç§˜å¯†éµã®ãƒ¢ã‚¸ãƒ¥ãƒ©ã‚¹ã‚’è¡¨ç¤ºã™ã‚‹ã«ã¯ openssl rsa -noout -text -in keyfile -modulus è¨¼æ˜Žæ›¸ã¨ç§˜å¯†éµã‚’notepadã«ä¿å˜ã—ã€çµ‚äº†ç©ºç™½ãŒãªã„ã“ã¨ã‚’ãƒã‚§ãƒƒã‚¯ã—ã¾ã™ã€‚ ç§˜å¯†éµå†…ã¨è¨¼æ˜Žæ›¸å†…ã«ã‚ã‚‹ â€œmodulusâ€ éƒ¨åˆ†ã¨ â€œpublic exponentâ€ éƒ¨åˆ†ã¯å®Œå…¨ã«ä¸€è‡´ã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ ã‚¨ãƒ©ãƒ¼: â€œOpenSSL:error:0B080074:x50
tyoro1210 2011/04/28
ssl
ãƒªãƒ³ã‚¯
[Apache-Users 2666] Re: DoCoMoç«¯æœ«ã§ã® SSL ã®ãƒˆãƒ©ãƒ–ãƒ«
tyoro1210 2011/04/14
ssl

mobile
ãƒªãƒ³ã‚¯
ç„¡åˆ©æ¯æœŸé–“ã¨ã¯
ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚°ã‚’åˆ©ç”¨ã™ã‚‹å ´åˆã€ç„¡åˆ©æ¯æœŸé–“ãŒåœ¨ã‚‹é‡‘èžä¼šç¤¾ã‚’é¸ã¶äº‹ã§ä¸€å®šæœŸé–“åˆ©æ¯ãŒæŽ›ã‹ã‚‰ãšã‚ãƒ£ãƒƒã‚·ãƒ³ã‚°ãŒåˆ©ç”¨ã§ãã‚‹ã®ã§ãŠå¾—ã§ã™ã€‚ã“ã®ç„¡åˆ©æ¯æœŸé–“ã¨è¨€ã†ã®ã¯ã€ä¸€å®šæœŸé–“ã«ã‹ã‹ã‚‹åˆ©æ¯ãŒã‚¼ãƒã«ãªã‚‹ã¨è¨€ã†ã‚‚ã®ã§ã€ä¸€å®šæœŸé–“ãŒéŽãŽã¦ã—ã¾ã†ã¨ã€é€šå¸¸ã®åˆ©æ¯ã‚’æ”¯æ‰•ã†äº‹ã«ãªã‚Šã¾ã™ã€‚å› ã¿ã«ã€åˆ©æ¯ã¨ã„ã†ã®ã¯å€Ÿå…¥æ®‹é«˜Ã—å¹´åˆ©Ã·ï¼“ï¼–ï¼•æ—¥ï¼ˆã†ã‚‹ã†å¹´ã®å ´åˆã¯ï¼“ï¼–ï¼–æ—¥ï¼‰Ã—å€Ÿå…¥æœŸé–“ã§è¨ˆç®—ãŒå‡ºæ¥ã¾ã™ã€‚å°šã€é‡‘èžä¼šç¤¾ã«ã‚ˆã‚Šãƒ«ãƒ¼ãƒ«ã¯æ§˜ã€…ã§ã¯ã‚ã‚Šã¾ã™ãŒã€å¤§æ‰‹ã®æ¶ˆè²»è€…é‡‘èžãªã©ã®å ´åˆã¯ã€åˆã‚ã¦ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚°ã‚’åˆ©ç”¨ã™ã‚‹äººã®å ´åˆã€å€Ÿå…¥ã‚’å§‹ã‚ã¦ã‹ã‚‰ï¼“ï¼æ—¥é–“ã¯åˆ©æ¯ãŒé©ç”¨ã•ã‚Œãšã€ï¼“ï¼‘æ—¥ç›®ã‹ã‚‰æ¬¡å›žã®è¿”æ¸ˆæœŸæ—¥ã¾ã§ã®é–“ã¯é€šå¸¸ã®åˆ©æ¯ãŒæŽ›ã‹ã‚‹ã¨è¨€ã†ä»•çµ„ã¿ã«ãªã£ã¦ã„ã¾ã™ã€‚ä¾‹ãˆã°ã€ï¼‘ï¼ä¸‡å††ã®ã‚ãƒ£ãƒƒã‚·ãƒ³ã‚°ã‚’åˆ©ç”¨ã—ãŸå ´åˆã€å¹´åˆ©ãŒï¼‘ï¼˜ï¼…ã®å ´åˆã§ã‚ã‚Œã°ã€10ä¸‡å††Ã—0.18Ã·365æ—¥ã¨ãªã‚Šã€ï¼‘æ—¥ã‚ãŸã‚Šï¼”ï¼™å††ã®åˆ©æ¯ãŒã‹ã‹ã‚Šã¾ã™ã€‚ï¼“ï¼æ—¥é–“ã®ç„¡åˆ©æ¯ã®å ´åˆã¯ã€ã“ã‚Œã®ï¼“ï¼æ—¥åˆ†ã¨ãªã‚‹ï¼‘ï¼”ï¼—ï¼å††ãŒã‚¼
tyoro1210 2011/04/14
mobile

ssl
ãƒªãƒ³ã‚¯
Mobile Creation | ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯
Mobile Crationã¯2024å¹´4æœˆ15æ—¥ã‚’ã‚‚ã£ã¦çµ‚äº†ã„ãŸã—ã¾ã—ãŸã€‚ SoftBank ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ ã«ãŠã‘ã‚‹æŠ€è¡“æƒ…å ±ã«ã¤ãã¾ã—ã¦ã¯ SoftBank ã‚¹ãƒžãƒ¼ãƒˆãƒ•ã‚©ãƒ³ ã‚µãƒ¼ãƒ“ã‚¹é–‹ç™ºæ”¯æ´ã‚µã‚¤ãƒˆã‚’ã”åˆ©ç”¨ãã ã•ã„ã€‚
tyoro1210 2010/12/17
ssl

security

softbank
ãƒªãƒ³ã‚¯
SSLãƒ—ãƒã‚ã‚·ã®æŒ™å‹•ã«ã¤ã„ã¦ã‚½ãƒ•ãƒˆãƒãƒ³ã‚¯ãƒ¢ãƒã‚¤ãƒ« å®®å·CTOã«ä½•ã¨ã‹ã—ã¦ã¨é ¼ã‚“ã ã‚‰ã™ãã«ä½•ã¨ã‹ãªã£ãŸè©±
ã»ã‚“ã®1æ™‚é–“å‰ã¾ã§å…¨è²Œã‚’æŠŠæ¡ã—ã¦ãªã‹ã£ãŸã®ã§æ°—ãŒå¼•ã‘ãŸã‘ã©ã€ã“ã‚Œã‚‚ã¡ã‚ƒã‚“ã¨ã¾ã¨ã‚ãªã„ã¨ä¸å…¬å¹³ã¨æ„Ÿã˜ãŸã®ã§ã¾ã¨ã‚ã¾ã—ãŸã€‚ å…¨ä½“æŠŠæ¡ã§ãã¦ã„ãªã„ã¨æ€ã†ã®ã§è¶³ã‚Šãªã„éƒ¨åˆ†ã‚ã‚Šã¾ã—ãŸã‚‰è£œè¶³ã‚’ãŠé¡˜ã„ã—ã¾ã™ã€‚ å‚è€ƒ: OpenPNE 3.5.3 ã§ã®ã€Œã‹ã‚“ãŸã‚“ãƒã‚°ã‚¤ãƒ³ã€ã®ç«¯æœ«å›ºæœ‰IDã‹ã‚‰ã®ï¼ˆéƒ¨åˆ†çš„ï¼‰è„±å´ã§å›°ã£ãŸç‚¹ | co3k.org http://bit.ly/au5BfJ ç¶šãã‚’èªã‚€
tyoro1210 2010/12/17
softbank

twitter

mobile

security

ssl
ãƒªãƒ³ã‚¯
Google Maps API ã‚’ SSL ã§ä½¿ãˆã‚‹ã‚ˆã†ã«ã—ã¦ã¿ã‚‹ã€‚ (tonextone.com/type/)
2008/03 : /maps?file=api ã‚’æ›¸ãæ›ãˆã‚‹ãŸã‚ã®æ£è¦è¡¨ç¾ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’å¾®èª¿æ•´ã—ã¾ã—ãŸã€‚ 2008/05/15 : é€šã‚Šã™ãŒã‚Šã•ã‚“ã®å ±å‘Šã‚’å—ã‘ã¦ã€æ£è¦è¡¨ç¾ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’ã•ã‚‰ã«å¾®èª¿æ•´ã—ã¾ã—ãŸã€‚ 2008/07/25 : Google å´ã®ã‚³ãƒ¼ãƒ‰ã«å¤‰æ›´ãŒã‚ã£ãŸã‚ˆã†ã§ã€æ©Ÿèƒ½ã—ãªããªã£ãŸã®ã§ã€ æ£è¦è¡¨ç¾ã®ãƒ‘ã‚¿ãƒ¼ãƒ³ã‚’ç·©ã‚ã«èª¿æ•´ã—ã¾ã—ãŸã€‚ 2009/07/19 : kobuchi ã•ã‚“ã®å ±å‘Šã‚’å—ã‘ã¦ã€ä¿®æ£ã—ã¾ã—ãŸã€‚ Google å´ã®ã‚³ãƒ¼ãƒ‰ã®å¤‰æ›´ã«ã‚ˆã‚Š /maps?file=api ã ã‘ã§ã¯ãªãã€ãã“ã‹ã‚‰å…ˆã§å‹•çš„ã«ãƒãƒ¼ãƒ‰ã•ã‚Œã‚‹ JS ãƒ•ã‚¡ã‚¤ãƒ«ã®å†…éƒ¨ã‚‚æ›¸ãæ›ãˆã‚‹ã“ã¨ãŒå¿…è¦ã«ãªã£ãŸã®ã§ã€ãã®ã‚ˆã†ã«å¤‰æ›´ã—ã¾ã—ãŸã€‚ Google Maps API ã¯ HTTPS ã§ã¯æä¾›ã•ã‚Œã¦ã„ãªã„ã‚‰ã—ã„ã€‚ (Google Analytics ã«ã¯ HTTPS ç‰ˆã‚‚ã‚ã‚‹ã€‚ã¨ã„ã†ã®ã¯å…ˆæ—¥çŸ¥ã‚Šã¾ã—ãŸã€‚) ã—ã‹ã—ã€H
tyoro1210 2010/03/25
server

proxy

ssl

google
ãƒªãƒ³ã‚¯
ä»™çŸ³æµ©æ˜Žã®æ—¥è¨˜: stone 2.3c ã®ãƒã‚° (select ç‰ˆã® make æ–¹æ³•)
stone 2.3c epoll ç‰ˆ (ã¤ã¾ã‚Š -DUSE_EPOLL ã‚’ã¤ã‘ã¦ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«) ã«ãŠã„ã¦ã€ proxy æ©Ÿèƒ½ã«ãƒã‚°ã‚’è¦‹ã¤ã‘ãŸã€‚ stone ã‚’ http proxy ã¨ã—ã¦ä½¿ç”¨ã—ã¦ã€ åŒã˜ã‚»ãƒƒã‚·ãƒ§ãƒ³å†…ã§ç•°ãªã‚‹ãƒ›ã‚¹ãƒˆ (IP ã‚¢ãƒ‰ãƒ¬ã‚¹ãŒç•°ãªã‚‹) ã¸ ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨æŽ¥ç¶šã§ããšã«ã‚¿ã‚¤ãƒ ã‚¢ã‚¦ãƒˆã™ã‚‹ã€‚ ãƒ–ãƒ©ã‚¦ã‚¶ã§ã€Œå†èªã¿è¾¼ã¿ã€æ“ä½œã‚’è¡Œãªãˆã°ã€ ãƒ–ãƒ©ã‚¦ã‚¶ãŒæ–°è¦ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’å¼µã‚‹ã®ã§æŽ¥ç¶šã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ã€‚ stone.c 2.2.4.7 ã«ã¦ä¿®æ£æ¸ˆã¿ã€‚ åŒä¸€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã«ã¦ç•°ãªã‚‹ãƒ›ã‚¹ãƒˆã¸æŽ¥ç¶šã—ã‚ˆã†ã¨ã—ãŸã¨ãã€ stone ã¯æ—§ã‚½ã‚±ãƒƒãƒˆã‚’ã‚¯ãƒãƒ¼ã‚ºã—ã¦æ–°ã—ã„ã‚½ã‚±ãƒƒãƒˆã‚’ã‚ªãƒ¼ãƒ—ãƒ³ã™ã‚‹ã®ã ãŒã€ ã“ã®ã¨ã EPOLL_CTL_ADD ã™ã‚‹ã®ã‚’å¿˜ã‚Œã¦ã„ãŸã€‚ select ç‰ˆã§ã¯æ–°ã‚½ã‚±ãƒƒãƒˆã§ FD_SET ã™ã‚‹ã®ã§å•é¡Œã¯ãªã„ã€‚ ãªãŠã€epoll ç‰ˆã¯ Linux ã‚«ãƒ¼ãƒãƒ«ãŠã‚ˆã³ glibc ã«ã¦ epoll
tyoro1210 2010/01/26
Linux

ssl

proxy
ãƒªãƒ³ã‚¯
IRC ã‚’ SSL ã§å®‰å…¨ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã‚’ - lql.be::hateda
IRC ã¨ã„ã†ã®ã¯æ—¥å¸¸ã«ãŠã„ã¦é‡è¦ãªãƒ•ã‚¡ã‚¯ã‚¿ãƒ¼ã‚’å ã‚ã¦ã„ã‚‹ã«ã‚‚é–¢ã‚ã‚‰ãšå¹³æ–‡ã§ã‚„ã‚Šå–ã‚Šã—ã¦ã„ã‚‹ã¨ã„ã†æ—¥ã€…ã«å®‰æ¯ã¯ã‚ã‚Šã¾ã›ã‚“ã§ã—ãŸã€‚ ã¨ã„ã†ã“ã¨ã‚’å”çªã«æ€ã£ãŸã®ã§ãªã‚“ã‹ SSL é€šä¿¡ã—ãŸã„ãªãƒ¼ã¨æ€ã£ãŸã‚“ã ã‘ã© Tiarra ã¯ SSLå¯¾å¿œã—ã¦ãªã„ã—ãªãƒ¼ã¨æ‚©ã‚“ã§ãŸã¨ã“ã‚ stone ã§æ¥½ãƒãƒ³ã« IRC ã‚’ SSL åŒ–ã§ãã‚‹ã‚‰ã—ã„ã®ã§ã‚„ã£ã¦ã¿ã¾ã—ãŸã€‚ stone ã¨ã„ã†ã®ã¯ãƒˆãƒ³ãƒãƒ«ã‚½ãƒ•ãƒˆã§ã‚µãƒ¼ãƒå†…ã§ãƒãƒ¼ãƒˆã‹ã‚‰ãƒãƒ¼ãƒˆã¸ãƒ‘ã‚±ãƒƒãƒˆã‚’é€šã™ã¨ã„ã†ã“ã¨ãŒã§ãã¦çµæ§‹ port 22 ãŒç©ºã„ã¦ãªã„ã¨ãã« stone ã§åˆ¥ã®ãƒãƒ¼ãƒˆã‹ã‚‰é€šã™ãªã‚“ã¦ã“ã¨ã‚’ã™ã‚‹ã‚“ã ã‘ã© stone è‡ªä½“ãŒSSLé€šä¿¡ã‚’è¡Œãªãˆã‚‹ãŸã‚ tiarra ã¨ stone ã‚’é€šã—ã¦ãƒ‘ã‚±ãƒƒãƒˆã®ã‚„ã‚Šå–ã‚ŠãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã™ã€‚ã“ã‚Œã‚’åˆ©ç”¨ã—ã¦ Tiarra ã‚’ SSL ã«å¯¾å¿œã•ã›ã¾ã™ã€‚ æ‰‹é † Simple Repeater `stone' å…¬å¼ã‹ã‚‰ã‚½ãƒ¼ã‚¹ã‚’æŒ
tyoro1210 2010/01/22
tiarraã®å…ˆã¯å¹³æ–‡ã‹ãˆã©ã€å…¨ä½“æš—å·åŒ–ã—ãŸã„ã‚“ã˜ã‚ƒãªãã¦ã€ç¤¾å†…ã‹ã‚‰ç¹‹ã„ã§ã‚‹æ™‚ã«ä¼šç¤¾ã‹ã‚‰è¦‹ã‚‰ã‚ŒãŸããªã„(å¾Œã‚ã‚ãŸã„ã®ã‹ï¼ï¼‰ã¨ã„ã£ãŸéœ€è¦ã«ãƒ”ãƒƒã‚¿ãƒªï¼ï¼ï¼

tiarra

irc

ssl

server

tips
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸