[B! è¨¼æ˜Žæ›¸] yassan0627ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yassan0627 id:yassan0627

è¨¼æ˜Žæ›¸ã«é–¢ã™ã‚‹yassan0627ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Chrome58ã§ã€HTTPSã®è‡ªå·±è¨¼æ˜Žæ›¸ãŒ NET::ERR_CERT_COMMON_NAME_INVALID ã«ãªã‚‹å ´åˆã®å¯¾å¿œ
Chrome58ã§ã€HTTPSã®è‡ªå·±è¨¼æ˜Žæ›¸ãŒ NET::ERR_CERT_COMMON_NAME_INVALID ã«ãªã‚‹å ´åˆã®å¯¾å¿œ Google Chrome ã‚’ãƒãƒ¼ã‚¸ãƒ§ãƒ³58 ã«ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã™ã‚‹ã¨ã€SSLè‡ªå·±è¨¼æ˜Žæ›¸ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚µã‚¤ãƒˆãŒè¦‹ã‚Œãªããªã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚ è‡ªå·±è¨¼æ˜Žæ›¸(ã‚ªãƒ¬ã‚ªãƒ¬è¨¼æ˜Žæ›¸)ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã« HTTPS ã§ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€ ã“ã®æŽ¥ç¶šã§ã¯ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãŒä¿è·ã•ã‚Œã¾ã›ã‚“ æ”»æ’ƒè€…ãŒã€tech.torico-corp.com ä¸Šã®ã‚ãªãŸã®æƒ…å ±ï¼ˆãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã€ã‚¯ãƒ¬ã‚¸ãƒƒãƒˆ ã‚«ãƒ¼ãƒ‰æƒ…å ±ãªã©ï¼‰ã‚’ ä¸æ£ã«å–å¾—ã—ã‚ˆã†ã¨ã—ã¦ã„ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ NET::ERR_CERT_COMMON_NAME_INVALID ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã«é–¢ã™ã‚‹äº‹è±¡ã«ã¤ã„ã¦ã®è©³ç´°ã‚’ Google ã«è‡ªå‹•é€ä¿¡ã™ã‚‹ã€‚ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ ãƒãƒªã‚·ãƒ¼ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã§ä¿è·ã•ã‚ŒãŸãƒšãƒ¼ã‚¸ã«æˆ»ã‚‹è©³ç´°æƒ…å ±ã‚’è¡¨ç¤ºã—ãªã„ ã“ã®ã‚µãƒ¼ãƒãƒ¼ãŒ
yassan0627 2018/03/09
è¨¼æ˜Žæ›¸

HTTPS
ãƒªãƒ³ã‚¯
å¸°ã£ã¦ããŸå¾’ç„¶è‹”
yassan0627 2018/03/08
openssl

è¨¼æ˜Žæ›¸

SSL
ãƒªãƒ³ã‚¯
Citrix Customer Service
LoadingÃ—Sorry to interruptCSS ErrorRefresh
yassan0627 2018/03/08
openssl

è¨¼æ˜Žæ›¸

SSL
ãƒªãƒ³ã‚¯
iOS ã¸ã®ãƒ«ãƒ¼ãƒˆ CA ã®ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«
yassan0627 2018/03/08
openssl

è¨¼æ˜Žæ›¸

SSL
ãƒªãƒ³ã‚¯
iOSã€iPadOSã€visionOS ã§æ‰‹å‹•ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸè¨¼æ˜Žæ›¸ãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä¿¡é ¼ã™ã‚‹ - Apple ã‚µãƒãƒ¼ãƒˆ (æ—¥æœ¬)
iOSã€iPadOSã€visionOS ã§æ‰‹å‹•ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸè¨¼æ˜Žæ›¸ãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä¿¡é ¼ã™ã‚‹ è¨¼æ˜Žæ›¸ãƒšã‚¤ãƒãƒ¼ãƒ‰ã‚’å«ã‚€ãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã‚’ iOSã€iPadOSã€visionOS ã§æ‰‹å‹•ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸå ´åˆã€ãã®è¨¼æ˜Žæ›¸ãŒ SSL è¨¼æ˜Žæ›¸ã¨ã—ã¦è‡ªå‹•çš„ã«ä¿¡é ¼ã•ã‚Œã‚‹ã“ã¨ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã—ãŸè¨¼æ˜Žæ›¸ãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ‰‹å‹•ã§ä¿¡é ¼ã™ã‚‹æ–¹æ³•ã‚’ã”èª¬æ˜Žã—ã¾ã™ã€‚ ãƒ¡ãƒ¼ãƒ«ã§é€ä¿¡ã•ã‚Œã¦ããŸãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã‚„ã€Web ã‚µã‚¤ãƒˆã‹ã‚‰ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã—ãŸãƒ—ãƒãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹éš›ã¯ã€SSLï¼TLS ã®è¨¼æ˜Žæ›¸ã¨ã—ã¦ä¿¡é ¼ã™ã‚‹ã‚ˆã†æ‰‹å‹•ã§è¨å®šã‚’æœ‰åŠ¹ã«ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ SSLï¼TLS è¨¼æ˜Žæ›¸ã¨ã—ã¦ã®ä¿¡é ¼è¨å®šã‚’æœ‰åŠ¹ã«ã™ã‚‹å ´åˆã¯ã€ã€Œè¨å®šã€ï¼žã€Œä¸€èˆ¬ã€ï¼žã€Œæƒ…å ±ã€ï¼žã€Œè¨¼æ˜Žæ›¸ä¿¡é ¼è¨å®šã€ã®é †ã«é¸æŠžã—ã¾ã™ã€‚ã€Œãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã‚’å…¨é¢çš„ã«ä¿¡é ¼ã™ã‚‹ã€ã§ã€è¨¼æ˜Žæ›¸ã«å¯¾ã™ã‚‹ä¿¡é ¼ã‚’æœ‰åŠ¹ã«ã—ã¾ã™ã€‚* Apple ã§ã¯ã€Apple Configurator ã¾ãŸã¯ãƒ¢ãƒ
yassan0627 2018/03/08
openssl

è¨¼æ˜Žæ›¸

SSL
ãƒªãƒ³ã‚¯
è‡ªå·±ç½²åè¨¼æ˜Žæ›¸ã§nginxã‚’SSLåŒ– - Qiita
ãƒãƒƒãƒˆä¸Šã«ã¯è‡ªå·±ç½²åè¨¼æ˜Žæ›¸ã‚’ä½¿ã£ãŸ SSL åŒ–ã®è¨˜äº‹ã¯ãŸãã•ã‚“ã‚ã‚‹ã‘ã‚Œã©ã‚‚ã€ å®Ÿéš›ã«è‡ªåˆ†ã§è©¦ã—ã¦ã¿ã‚‹ã¨æ„å¤–ã¨ãƒãƒžã£ãŸã®ã§ãƒ¡ãƒ¢ã€‚ ã‚„ã‚ã†ã¨ã—ãŸã“ã¨ã¯ä»¥ä¸‹ã®é€šã‚Šã€‚ (ã‚ªãƒ¬ã‚ªãƒ¬)è¨¼æ˜Žå±€ã®è¨¼æ˜Žæ›¸ã¨ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯åˆ†ã‘ã‚‹ (å‹‰å¼·ã®ãŸã‚ã«) OpenSSL ã®ã‚¹ã‚¯ãƒªãƒ—ãƒˆã«é ¼ã‚‰ãšã€ã‚³ãƒžãƒ³ãƒ‰ã§å¿…è¦ãªãƒ•ã‚¡ã‚¤ãƒ«ã‚’ä½œã£ã¦ã„ã ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã®ã¿ã§å®Œçµã•ã›ã‚‹(openssl.cnf ã«ã¯é ¼ã‚‰ãªã„) ã¾ãŸã€å…ˆã« RSAéµã€è¨¼æ˜Žæ›¸ã®ãƒ•ã‚¡ã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«ã¤ã„ã¦ ã«ç›®ã‚’é€šã—ã¦ãŠãã¨è©±ã‚’ç†è§£ã—ã‚„ã™ã„ã¨æ€ã†ã€‚ ã‚„ã‚‹ã“ã¨ã®æµã‚Œ CA ã®ç§˜å¯†éµã‚’ä½œã‚‹ â‘ ã®ç§˜å¯†éµã‹ã‚‰ CA ã®è¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ç”¨ã®ç§˜å¯†éµã‚’ä½œã‚‹ â‘¢ã®ç§˜å¯†éµã‹ã‚‰ç½²åè¦æ±‚ã‚’ä½œã‚‹ â‘£ã®ç½²åè¦æ±‚ã« CA ã®ç§˜å¯†éµ & è¨¼æ˜Žæ›¸ã§ç½²åã—ã€ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’ä½œã‚‹ nginx ã®è¨å®šå¤‰æ›´ æ‰‹é † 1. CA ã®ç§˜å¯†éµã‚’ä½œã‚‹
yassan0627 2018/03/08
openssl

è¨¼æ˜Žæ›¸

SSL
ãƒªãƒ³ã‚¯
iPhone/iPadç‰iOSã«è‡ªå·±ç½²åã‚ªãƒ¬ã‚ªãƒ¬CAè¨¼æ˜Žæ›¸ã‹ã‚‰ã‚µãƒ¼ãƒãƒ¼/ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’ç½²åã—ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹(2017/4/29æ›´æ–°)
iPhone/iPadç‰iOSã«è‡ªå·±ç½²åã‚ªãƒ¬ã‚ªãƒ¬CAè¨¼æ˜Žæ›¸ã‹ã‚‰ã‚µãƒ¼ãƒãƒ¼/ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã‚’ç½²åã—ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹(2017/4/29æ›´æ–°) è‡ªç¤¾ã‚µãƒ¼ãƒãƒ¼ã«Webã‚µãƒ¼ãƒ“ã‚¹ã‚’é‹ç”¨ã—ç¤¾å“¡ã«ã—ã‹ã‚¢ã‚¯ã‚»ã‚¹ã•ã›ãŸããªã„å ´åˆãªã©HTTPS/SSLã‚’ä½¿ã†å ´åˆãŒå¤šã„ã§ã™ã€‚ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãƒã‚°ã‚¤ãƒ³ã®å ´åˆã¯ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãŒæ¼ã‚ŒãŸã‚‰ã©ã®ãƒ‡ãƒã‚¤ã‚¹ã‹ã‚‰ã§ã‚‚ã‚¢ã‚¯ã‚»ã‚¹ã§ãã¦ã—ã¾ã„ã¾ã™ãŒã€ã“ã®ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žã‚’ãƒ‡ãƒã‚¤ã‚¹ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã™ã‚‹æ–¹æ³•ã ã¨ãã®ãƒ‡ãƒã‚¤ã‚¹ã‹ã‚‰ã—ã‹ã‚¢ã‚¯ã‚»ã‚¹ã§ããªã„ä¸Šã«ã€ãã®æœŸé™ã‚‚æŒ‡å®šã§ãã‚‹ã®ã§ä¸‡ãŒä¸€ãƒ‡ãƒã‚¤ã‚¹ã‚’ç´›å¤±ã—ã¦ã‚‚å¤§ä¸ˆå¤«ã¨ã„ã†ãƒ¡ãƒªãƒƒãƒˆãŒã‚ã‚Šã¾ã™ã€‚ ã“ã“ã§ã¯å…¸åž‹çš„ãªè‡ªç¤¾CAè¨¼æ˜Žæ›¸ä½œæˆã‹ã‚‰ãã®CAãŒèªè¨¼ã—ãŸã‚µãƒ¼ãƒãƒ¼/ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã®opensslã§ã®ä½œæˆä¾‹ã‚’è¨˜è¿°ã—ã¾ã™ã€‚ CAè‡ªå·±ç½²åè¨¼æ˜Žæ›¸ã®ä½œæˆ CAç”¨ã®ç§˜å¯†éµã‚’ä½œæˆã€‚ openssl genrsa -out exampleca-privatekey.pem C
yassan0627 2018/03/08
SSL

è¨¼æ˜Žæ›¸

openssl
ãƒªãƒ³ã‚¯
RSAéµã€è¨¼æ˜Žæ›¸ã®ãƒ•ã‚¡ã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«ã¤ã„ã¦ - Qiita
RSAã®å…¬é–‹éµæš—å·æŠ€è¡“ã‚’åˆ©ç”¨ã™ã‚‹ãŸã‚ã«ã¯ã€éµã‚„è¨¼æ˜Žæ›¸ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æ‰±ã†å¿…è¦ãŒã‚ã‚‹ãŸã‚ã€ãã®ãƒ•ã‚¡ã‚¤ãƒ«ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã«ã¤ã„ã¦ç†è§£ã—ã¦ãŠãå¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ å®Ÿéš›ã€ã„ã‚ã‚“ãªæ‹¡å¼µåãŒç™»å ´ã™ã‚‹ã®ã§ã€ãã‚Œãžã‚Œã®æ„å‘³ã‚’ç†è§£ã—ã¦ã„ãªã„ã¨ã™ãã«ã‚ã‘ãŒã‚ã‹ã‚‰ãªããªã‚Šã¾ã™ã€‚ãã‚“ãªã¨ãã®ãŸã‚ã«å‚™å¿˜éŒ²ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ ãƒ•ã‚¡ã‚¤ãƒ«ã®æ‹¡å¼µåã®æ³¨æ„ç‚¹ .DERã¨ .PEMã¨ã„ã†æ‹¡å¼µåã¯éµã®ä¸èº«ã˜ã‚ƒãªãã¦ã€ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ãƒ³ã‚°ã‚’è¡¨ã—ã¦ã„ã‚‹ ãƒ‡ã‚¸ã‚¿ãƒ«æš—å·åŒ–éµã‚„ãƒ‡ã‚¸ã‚¿ãƒ«è¨¼æ˜Žæ›¸ã¯ãƒã‚¤ãƒŠãƒªãƒ‡ãƒ¼ã‚¿ãªã®ã§ã™ãŒã€MD5ã®ãƒãƒƒã‚·ãƒ¥å€¤ã®ã‚ˆã†ãªå˜ãªã‚‹ å€¤ ã§ã¯ãªãã€ãƒ‡ãƒ¼ã‚¿æ§‹é€ ã‚’ã‚‚ã£ã¦ã„ã¾ã™ã€‚.DERã‚„ .PEMã¯ãã®ãƒ‡ãƒ¼ã‚¿æ§‹é€ ã‚’ã©ã†ã„ã†ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã§ã‚¨ãƒ³ã‚³ãƒ¼ãƒ‰ã—ã¦ã„ã‚‹ã‹ã‚’è¡¨ã—ã¦ã„ã¾ã™ã€‚ãã®ãŸã‚ã€.DERã‚„.PEMã¨ã„ã†æ‹¡å¼µåã‹ã‚‰ãã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒä½•ã‚’è¡¨ã—ã¦ã„ã‚‹ã®ã‹ã¯ã‚ã‹ã‚Šã¾ã›ã‚“ã€‚æš—å·åŒ–éµã®å ´åˆã‚‚ã‚ã‚‹ã—ã€è¨¼æ˜Žæ›¸ã®å ´åˆã‚‚ã‚ã‚Šã¾ã™ã€‚ .DER éµã‚„è¨¼æ˜Žæ›¸ã‚’AS
yassan0627 2018/03/08
openssl

è¨¼æ˜Žæ›¸

SSL
ãƒªãƒ³ã‚¯
Certbotã§DNSã«ã‚ˆã‚‹èªè¨¼(DNS-01)ã§ç„¡æ–™ã®SSL/TLSè¨¼æ˜Žæ›¸ã‚’å–å¾—ã™ã‚‹ - æœ¬æ—¥ã‚‚ä¹™
[toc] Certbot(æ—§Let's Encrypt)ã¯ç„¡æ–™ã§SSL/TLSè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã§ãã‚‹èªè¨¼å±€(CA)ã§ã™ã€‚æœ‰åŠ¹æœŸé™ãŒ90æ—¥(ç´„3ãƒ¶æœˆ)ã¨çŸã„ã§ã™ãŒã€ã‚³ãƒžãƒ³ãƒ‰ã«ã‚ˆã‚‹è‡ªå‹•åŒ–ãŒå¯èƒ½ã§å®šæœŸçš„ã«å®Ÿè¡Œã™ã‚‹ã“ã¨ã§å¸¸ã«è¨¼æ˜Žæ›¸ã‚’æ›´æ–°ã—ç¶šã‘ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ è¨¼æ˜Žæ›¸ã‚’å–å¾—ã™ã‚‹ã«ã‚ãŸã‚Šã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’è‡ªåˆ†ã§ç®¡ç†ã—ã¦ã„ã‚‹ã‹ã®èªè¨¼æ–¹å¼ãŒä»¥ä¸‹ã®ä¸‰ã¤ãŒã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã¾ã™ã€‚ HTTP-01 Let's Encryptã®èªè¨¼å±€ã‹ã‚‰ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã‚’ç™ºè¡Œã—ã¦ã‚‚ã‚‰ã„ã€Webã‚µãƒ¼ãƒã«èªè¨¼ç”¨ãƒ•ã‚¡ã‚¤ãƒ«ã‚’è¨ç½®ã™ã‚‹ã€‚ èªè¨¼å±€ã‹ã‚‰HTTP(80ç•ªãƒãƒ¼ãƒˆ)ã§ã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ã‚‚ã‚‰ã„ã€ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã¨èªè¨¼ç”¨ãƒ•ã‚¡ã‚¤ãƒ«ã¨ã®å¦¥å½“æ€§ã‚’æ¤œè¨¼ã™ã‚‹ã€‚ TLS-SNI-01 HTTP-01ã¨åŒã˜æ–¹æ³•ã ãŒã€HTTPS(443ãƒãƒ¼ãƒˆ)ã‚’ä½¿ç”¨ã™ã‚‹ã€‚ DNS-01 Let's Encryptã®èªè¨¼å±€ã‹ã‚‰ç™ºè¡Œã—ã¦ã‚‚ã‚‰ã£ãŸãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒˆãƒ¼ã‚¯ãƒ³ã‚’å¯¾è±¡ãƒ‰ãƒ¡ã‚¤ãƒ³ã®TX
yassan0627 2017/09/11
HTTPS

è¨¼æ˜Žæ›¸

letsencrypt

certbot
ãƒªãƒ³ã‚¯
1