[B! ssl] yutamotyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yutamoty id:yutamoty

sslã«é–¢ã™ã‚‹yutamotyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (43)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

2020å¹´9æœˆã‚ˆã‚ŠAppleãŒSSLè¨¼æ˜Žæ›¸ã®æœ‰åŠ¹æœŸé–“ã‚’13ã‹æœˆã«çŸç¸®ï¼è©³ç´°ã‚„å¯¾ç–ã¨ã¯ï¼Ÿ | ã•ãã‚‰ã®SSL
ä»Šå¾ŒSafariã§èµ·ãã‚‹ã“ã¨ Safariã¨ã¯ã€Appleã§é–‹ç™ºã•ã‚Œã¦ã„ã‚‹Webãƒ–ãƒ©ã‚¦ã‚¶ã§ã‚ã‚Šã€ãƒ‘ã‚½ã‚³ãƒ³ã§ã‚ã‚‹Macã®ä»–ã«iPhoneã‚„iPadã€Apple TVã€Apple Watchãªã©ã®ç«¯æœ«ã«æ¨™æº–ã§æè¼‰ã•ã‚Œã¦ã„ã¾ã™ã€‚ ã“ã®Safariã«ãŠã„ã¦ã€2020å¹´9æœˆ1æ—¥ä»¥é™ã«ç™ºè¡Œã•ã‚ŒãŸã€Œæœ‰åŠ¹æœŸé–“ãŒ399æ—¥ä»¥ä¸Šã€ã®SSLã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ï¼ˆä»¥ä¸‹ã€SSLè¨¼æ˜Žæ›¸ï¼‰ãŒä¿¡é ¼ã•ã‚Œãªã„ã“ã¨ã«ãªã‚Šã¾ã™ã€‚ å…·ä½“çš„ãªã‚¨ãƒ©ãƒ¼ç”»é¢ã®ä»•æ§˜ãªã©ã¯æ˜Žã‚‰ã‹ã«ã•ã‚Œã¦ã„ã¾ã›ã‚“ãŒã€Appleã®ç™ºè¡¨ã«ã€ŒThis might cause network and app failures and prevent websites from loading.ã€ã¨æ›¸ã‹ã‚Œã¦ã„ã‚‹ã“ã¨ã‹ã‚‰ã€å¤±åŠ¹ã—ãŸSSLè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸæ™‚ã®ã‚ˆã†ã«ã€å…¨ç”»é¢ã§ã‚¨ãƒ©ãƒ¼ãŒè¡¨ç¤ºã•ã‚Œã¦ã‚µã‚¤ãƒˆã¸ã¯ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ã¦ã—ã¾ã†ã“ã¨ãŒè€ƒãˆã‚‰ã‚Œã¾ã™ã€‚ è³¼å…¥æ¸ˆã¿
yutamoty 2020/05/08
security

ssl
ãƒªãƒ³ã‚¯
Redirecting to ssl-config.mozilla.org...
Mozilla SSL Configuration Generator Redirecting to the updated SSL Configuration Generatorâ€¦
yutamoty 2017/12/28
ã‚ã£ã¡ã‚ƒä¾¿åˆ©ã§ã¯

mozilla

ssl

security
ãƒªãƒ³ã‚¯
x.com
yutamoty 2017/10/12
SSL

Let'sEncrypt
ãƒªãƒ³ã‚¯
ã‚¢ãƒ¡ãƒ–ãƒ2017 - å¤§è¦æ¨¡ã‚µãƒ¼ãƒ“ã‚¹httpsåŒ– ~ All Greenã‚’ç›®æŒ‡ã—ã¦ ~
ã“ã‚“ã«ã¡ã¯ã€ã‚¢ãƒ¡ãƒ–ãƒã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ã¨ãã§ã™ã€‚ ã‚¢ãƒ¡ãƒ–ãƒã§ã¯2017å¹´4æœˆã«ã€PC/SPãƒ–ãƒ©ã‚¦ã‚¶ã®é–²è¦§é¢ã®httpsåŒ–å¯¾å¿œã‚’è¡Œã„ã¾ã—ãŸã€‚ ä»Šå›žã¯ã€å¤§è¦æ¨¡ã‚µãƒ¼ãƒ“ã‚¹ã«ãŠã‘ã‚‹httpsåŒ–ã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã®å¯¾å¿œã«ã¤ã„ã¦ãŠè©±ã—ã•ã›ã¦ã„ãŸã ãã¾ã™ã€‚ â€»ç¾åœ¨ã¯ã€httpsã€httpã©ã¡ã‚‰ã‹ã‚‰ã§ã‚‚ã‚¢ã‚¯ã‚»ã‚¹ãŒã§ãã‚‹çŠ¶æ…‹ã§ã€å¾ã€…ã«httpsä¸€æœ¬ã«ç§»è¡Œã—ã€ã€Œå¸¸æ™‚httpsåŒ–ã€ã‚’ç›®æ¨™ã¨ã—ã¦ã„ã¾ã™ã€‚ httpsåŒ–ã£ã¦ä½•ãŒã„ã„ã®ï¼Ÿ ã¾ãšã€æ—¢å˜ã®ã‚µãƒ¼ãƒ“ã‚¹ã‚’httpsåŒ–ã™ã‚‹ã“ã¨ã§ã€ã‚µãƒ¼ãƒ“ã‚¹ã‚„ãƒ¦ãƒ¼ã‚¶ã«ã¯ã©ã†ã„ã£ãŸå½±éŸ¿ãŒã‚ã‚‹ã®ã§ã—ã‚‡ã†ã‹ã€‚ ãƒ¡ãƒªãƒƒãƒˆã¨ãƒ‡ãƒ¡ãƒªãƒƒãƒˆã‚’ã‹ã„ã¤ã¾ã‚“ã§ã”èª¬æ˜Žã—ã¾ã™ã€‚ ãƒ¡ãƒªãƒƒãƒˆ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ã€ä¿¡é ¼æ€§ã‚¢ãƒ”ãƒ¼ãƒ« SEOå‘ä¸Š æœ€æ–°ã®æŠ€è¡“ã‚’å–ã‚Šå…¥ã‚Œã‚‹ã“ã¨ãŒã§ãã‚‹ã‚ˆã†ã«ãªã‚‹ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ã€ä¿¡é ¼æ€§ã‚¢ãƒ”ãƒ¼ãƒ« ç›´æŽ¥çš„ãªãƒ¡ãƒªãƒƒãƒˆã¨ã—ã¦ã¯ã‚„ã¯ã‚Šã€HTTPSé€šä¿¡ã®ã¿ã§ã‚µã‚¤ãƒˆã‚’é…ä¿¡ã™ã‚‹ã“ã¨ã«ã‚ˆã‚‹ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
yutamoty 2017/06/14
cyberagent

ssl
ãƒªãƒ³ã‚¯
pixivã‚’å¸¸æ™‚HTTPSåŒ–ã™ã‚‹ã¾ã§ã®é“ã®ã‚Šï¼ˆå‰ç·¨ï¼‰ - pixiv inside
ãƒ”ã‚¯ã‚·ãƒ–æ ªå¼ä¼šç¤¾ã§é–‹ç™ºåŸºç›¤ãƒãƒ¼ãƒ ã¨ã—ã¦åƒã„ã¦ã„ã‚‹ @catatsuy ã§ã™ã€‚ä¸»ã«pixivã®æŠ€è¡“çš„ãªæ”¹å–„ã‚’ã—ã¦ã„ã¾ã™ãŒã€åºƒå‘Šãƒãƒ¼ãƒ ã‚‚å…¼ä»»ã—ã¦ã„ã‚‹ã®ã§åºƒå‘Šå‘¨ã‚Šã®é–‹ç™ºã‚‚ã—ã¦ã„ã¾ã™ã€‚ ä»Šå›žpixivã®å¸¸æ™‚HTTPSåŒ–ã‚’æ‹…å½“ã—ãŸã®ã§ã‚„ã£ãŸã“ã¨ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ pixivã‚’HTTPSåŒ–ã—ãŸç†ç”± ç¾åœ¨ã®ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå…¨ä½“ã®æµã‚Œã¨ã—ã¦å¸¸æ™‚HTTPSåŒ–ãŒé€²ã‚“ã§ã„ã¾ã™ã€‚ã‚¨ãƒ‰ãƒ¯ãƒ¼ãƒ‰ãƒ»ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³ - WikipediaãŒæš´éœ²ã—ãŸNSAã®äº‹ä»¶ç™ºè¦šã‚„ å…¬è¡†ç„¡ç·šLANã®åˆ©ç”¨æ‹¡å¤§ã«ã‚ˆã‚Šã€é€šä¿¡çµŒè·¯ä¸Šã§ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®å€‹äººæƒ…å ±ã‚’ä¿è·ã™ã‚‹ã“ã¨ãŒã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆå…¨ä½“ã¨ã—ã¦éžå¸¸ã«é‡è¦ã«ãªã£ã¦ãã¾ã—ãŸã€‚GoogleãŒè¡Œã£ã¦ã„ã‚‹èª¿æŸ»ã«ã‚ˆã‚‹ã¨ã€HTTPSãƒšãƒ¼ã‚¸ã®é–²è¦§æ™‚é–“ã¯ã‚¦ã‚§ãƒ–å…¨ä½“ã®åˆ©ç”¨æ™‚é–“ã®3åˆ†ã®2ã«ã‚‚åŠã³ã¾ã™ã€‚ ãã‚Œã ã‘ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ãƒ–ãƒ©ã‚¦ã‚¶ã«æ–°ã—ãè¿½åŠ ã•ã‚Œã‚‹APIã‚„æ©Ÿèƒ½ï¼ˆHTTP2/WebRTC/ServiceWorkerãªã©ï¼‰ã¯HTT
yutamoty 2017/06/13
pixiv

ssl
ãƒªãƒ³ã‚¯
è¨¼æ˜Žæ›¸ã‚’ç„¡æ–™ã§ç™ºè¡Œã€HTTPSã®å°Žå…¥ã‚’æ”¯æ´ã™ã‚‹ã€ŒLet's Encryptã€2015å¹´å¤é–‹å§‹ã€€EFFã‚„Mozillaãªã©ãŒå‚åŠ
yutamoty 2014/11/20
ã„ã„ã¨æ€ã†ã‘ã©ã€ãã¡ã‚“ã¨ä¿¡é ¼æ€§ã®ã‚ã‚‹è¨¼æ˜Žæ›¸ã‹ç„¡æ–™ç™ºè¡Œã®è¨¼æ˜Žæ›¸ã‹ã®åŒºåˆ¥ãŒä¸€ç›®ã§ã‚ã‹ã‚‹ã‚ˆã†ã«ã—ãªã„ã¨ã„ã‘ãªã„ã‚ˆãªãƒ¼ã“ã‚Œã€‚EV SSL è¨¼æ˜Žæ›¸ãŒã¯ã‚„ã‚‹ã€‚

internet

ssl
ãƒªãƒ³ã‚¯
httpsã ã‹ã‚‰ã¨ã„ã†ã ã‘ã§å®‰å…¨ï¼Ÿèª¿ã¹ãŸã‚‰æ€–ããªã£ã¦ããŸSSLã®è©±!ï¼Ÿ - Qiita
Deleted articles cannot be recovered. Draft of this article would be also deleted. Are you sure you want to delete this article?
yutamoty 2014/03/16
nginx

ssl

security
ãƒªãƒ³ã‚¯
Y!J API ãŒæ¢ã¾ã£ãŸæ—¥ - GlobalSign ã® Root è¨¼æ˜Žæ›¸åˆ‡ã‚Œã‹ã‚‰å¦ã‚“ã ã“ã¨ - OAuth.jp
æ˜¨æ—¥ã‚ãŸã‚Šã‹ã‚‰ã€Yahoo! Wallet ã‚„ YConnect ã¨ã„ã£ãŸã€Yahoo! Japan ã® API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ãŸã£ã¦äººã€ã¡ã‚‰ã»ã‚‰ã„ã‚‹ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãã€‚ åƒ•ã‚‚ã¡ã‚‡ã£ã¨ãã†ã„ã†ã‚±ãƒ¼ã‚¹è¦‹ã‹ã‘ã¾ã—ãŸã€‚ ãªã‚“ã‹ Yahoo! Japan ãŒãƒã‚«ã—ã¡ã‚ƒã£ãŸã®ï¼Ÿã¨ã‹ã€ã¾ãæ˜¨æ—¥ã¾ã§å¥åº·ã«å‹•ã„ã¦ãŸã‚·ã‚¹ãƒ†ãƒ ãŒçªç„¶ Yahoo! Japan ã® API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ã¡ã‚ƒã£ãŸã‚“ã ã—ã€ãã‚‰ãã†æ€ã†ã®ã‚‚ãƒ ãƒªã¯ãªã„ã€‚ ãŒã€ä»Šå›žã®ã‚±ãƒ¼ã‚¹ã€Yahoo! ã¯å…¨ãæ‚ªããªã„ï¼ ãƒ—ãƒ©ã‚¤ãƒã‚·ãƒ¼ãƒ•ãƒªãƒ¼ã‚¯ã¯ã©ã†ã‹ã¨æ€ã†ãŒãªï¼ï¼ ã§ã¯æ—©é€Ÿã€ä»Šå›žèµ·ã“ã£ãŸã“ã¨ã‚’ã€æŒ¯ã‚Šè¿”ã£ã¦ã¿ã¾ã—ã‚‡ã†ã€‚ Yahoo! API ã«ã‚¢ã‚¯ã‚»ã‚¹ã§ããªããªã£ãŸ Yahoo! Japan ã¯ã€yahoo.co.jp ä»¥å¤–ã«ã‚‚ã€CDN ç”¨ã‚„ API ç”¨ãªã©ã€ç”¨é€”ã”ã¨ã«ã„ãã¤ã‹ã®ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’æŒã£ã¦ã¾ã™ã€‚ ä»Šå›žæ¢ã¾ã£ãŸã®ã¯ã€ãã®ä¸ã® API ç”¨
yutamoty 2014/01/30
yahoo

ssl

GlobalSign
ãƒªãƒ³ã‚¯
RHEL5/CentOS5ã§GlobalSignã®ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ãŒæœ‰åŠ¹æœŸé™åˆ‡ã‚Œã§å¤§é¨’ãŽ
ã“ã‚“ã«ã¡ã¯ã€‚CTOã®é¦¬å ´ã§ã™ã€‚ æ˜¨æ™©1/28 21:00JSTã«RHEL5/CentOS5ã«ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã®ã†ã¡ã€GlobalSignã®æœ‰åŠ¹æœŸé™ãŒåˆ‡ã‚Œã¾ã—ãŸã€‚ ä¼´ã£ã¦REHL5/CentOS5ã‹ã‚‰ã®HTTPS(SSL)æŽ¥ç¶šã«ã¦GlobalSignã®è¨¼æ˜Žæ›¸ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚µã‚¤ãƒˆã¸ã®æŽ¥ç¶šãŒã‚¨ãƒ©ãƒ¼ã«ãªã‚‹ã‚ˆã†ã«ãªã‚Šã¾ã—ãŸã€‚ ç§ã®ç¢ºèªã—ã¦ã„ã‚‹ç¯„å›²ã§ã¯ã€ curlã‚³ãƒžãƒ³ãƒ‰ã‚„PHPã®curlãƒ©ã‚¤ãƒ–ãƒ©ãƒªãªã©ã§ã®æŽ¥ç¶šæ™‚ã«æŽ¥ç¶šã‚¨ãƒ©ãƒ¼ã¨ãªã‚‹ã“ã¨ã«èµ·å› ã—ã¦ä»¥ä¸‹ã®ã‚ˆã†ãªå½±éŸ¿ãŒå‡ºã¦ã„ã¾ã™ã€‚ â€»æŽ¥ç¶šã•ã‚Œã‚‹å´ã§ã¯ãªãã¦ã€æŽ¥ç¶šã™ã‚‹å´ã§ã®å•é¡Œã§ã™â€» oauthãªã©ã®å¤–éƒ¨èªè¨¼ãŒä¸å¯ æ±ºæ¸ˆãªã©ã®å¤–éƒ¨é€£æºãŒä¸å¯ å¯¾ç– RHEL5ã®å ´åˆã€errataãŒå…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã®ã§updateã—ã¾ã—ã‚‡ã†ã€‚ Red Hat Customer Portal https://rhn.redhat.com/errata/RHEA-201
yutamoty 2014/01/29
redhat

centos

ssl
ãƒªãƒ³ã‚¯
DMM inside
ãƒ¬ãƒ“ãƒ¥ãƒ¼è‡ªå‹•æ‰¿èªåŒ–ã¨ç²¾åº¦100%ã‚’ç›®æŒ‡ã—ã¦ã€‚ã„ã¡æ—©ãç”ŸæˆAIã®å°Žå…¥ã«è¸ã¿å‡ºã—ãŸã€Œãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ¬ãƒ“ãƒ¥ãƒ¼åŸºç›¤ã€ã®å–ã‚Šçµ„ã¿
yutamoty 2013/09/02
ssl

hardware
ãƒªãƒ³ã‚¯
Googleãƒ‰ãƒ¡ã‚¤ãƒ³å‘ã‘ã®ä¸æ£è¨¼æ˜Žæ›¸ã€ä¸»è¦ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¡ãƒ¼ã‚«ãƒ¼ãŒå¤±åŠ¹æŽªç½®
ã€Œ*.google.comã€ã®ãƒ‰ãƒ¡ã‚¤ãƒ³å‘ã‘ã«æ‰‹é•ã„ã§ä¸æ£ãªè¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã¦æ”»æ’ƒãŒç™ºç”Ÿã€‚Googleã€Microsoftã€Mozillaã¯å•é¡Œã®è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã•ã›ã‚‹æŽªç½®ã‚’è¬›ã˜ãŸã€‚ ã€Œ*.google.comã€ã®ãƒ‰ãƒ¡ã‚¤ãƒ³å‘ã‘ã«ä¸æ£ãªè¨¼æ˜Žæ›¸ãŒç™ºåŠ¹ã•ã‚Œã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã‚Šã€ä¸»è¦ãƒ–ãƒ©ã‚¦ã‚¶ãƒ¡ãƒ¼ã‚«ãƒ¼ãŒå•é¡Œã®è¨¼æ˜Žæ›¸ã‚’å¤±åŠ¹ã•ã›ã‚‹æŽªç½®ã‚’è¬›ã˜ã¦ã„ã‚‹ã€‚ ç±³Googleã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ–ãƒã‚°ã«1æœˆ3æ—¥ä»˜ã§æŽ²è¼‰ã•ã‚ŒãŸæƒ…å ±ã«ã‚ˆã‚‹ã¨ã€Google ChromeãŒ12æœˆ24æ—¥ã«ä¸æ£ãªãƒ‡ã‚¸ã‚¿ãƒ«è¨¼æ˜Žæ›¸ã‚’æ¤œå‡ºã—ã¦é®æ–ã€‚èª¿ã¹ãŸã¨ã“ã‚ã€å•é¡Œã®è¨¼æ˜Žæ›¸ã¯ãƒˆãƒ«ã‚³ã®èªè¨¼å±€TURKTRUSTã®å‚˜ä¸‹ã®ä¸é–“èªè¨¼å±€ï¼ˆCAï¼‰ãŒç™ºè¡Œã—ã¦ã„ãŸã“ã¨ãŒåˆ¤æ˜Žã—ãŸã€‚ TURKTRUSTã®èª¬æ˜Žã«ã‚ˆã‚Œã°ã€2011å¹´8æœˆã«2çµ„ç¹”ã«å¯¾ã—ã¦é€šå¸¸ã®SSLè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã™ã¹ãã¨ã“ã‚ã‚’ã€æ‰‹é•ã„ã§ä¸é–“CAè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ã¦ã„ãŸã“ã¨ãŒåˆ†ã‹ã£ãŸã¨ã„ã†ã€‚ã“ã®ãŸã‚Googleã¯12æœˆ25æ—¥ã‹ã‚‰2
yutamoty 2013/01/10
ssl

security
ãƒªãƒ³ã‚¯
ãƒˆãƒ«ã‚³ã®èªè¨¼å±€ã€æ‰‹é•ã„ã§ä¸é–“CAè¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã€‚æ—©é€Ÿæ”»æ’ƒã«ä½¿ã‚ã‚Œã‚‹ | ã‚¹ãƒ©ãƒ‰ ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ã©ã“ãžã§ã®é–¢é€£ã¾ã¨ã‚ã‹ã‚‰è»¢è¼‰ï¼ˆæ–‡ä¸ã®ä¿ºã¨ã¯åˆ¥äººã§ã™ï¼‰ Android 2.x ã®ã¿æ£è¦æ‰‹é †ã§å¯¾ç–æ³•ãªã—ã€ãã‚Œä»¥å¤–ã§ã¯å¯¾ç–æ¸ˆã¿ã‹æ‰‹å‹•ã§ã®å¯¾ç–æ³•ãŒã‚ã‚‹æ¨¡æ§˜ iOSã¯ã“ã®ã¾ã¨ã‚ã ã¨å®‰å…¨ãªã“ã¨ã«ãªã£ã¦ã‚‹ã‘ã©å¤šåˆ†ãƒ€ãƒ¡ã§ã€ç¥ˆã‚‹ã—ã‹ãªã„ ã‚¬ãƒ©ã‚±ãƒ¼ã•ã‚“ã¯â€¦ãã®ã€‚ã€‚ã€‚ ã‚¢ãƒ•ã‚£ã‚µã‚¤ãƒˆã˜ã‚ƒãªã„ã‹ã‚‰è»¢è¼‰ã—ã¦ã‚‚ã„ã„ã‚ˆããƒ»ãƒ»ãƒ» 569 ï¼šç•ªçµ„ã®é€”ä¸ã§ã™ãŒã‚¢ãƒ•ã‚£ã‚µã‚¤ãƒˆã¸ã®è»¢è¼‰ã¯ç¦æ¢ã§ã™ï¼š2013/01/09(æ°´) 15:27:24.81 ID:MEAnCo7+0 â–¼å¯¾ç–ã—ãŸã„äººã¯ - PC ï¼ˆã‚½ãƒ¼ã‚¹ã¯å…¨ä½“çš„ã«ä¿ºã ã‹ã‚‰ä¿è¨¼ã—ãªã„ï¼‰ â—‹OSã«é–¢ã‚ã‚‰ãš Operaã€€ â†’ æ—¢ã«å¯¾ç–æ¸ˆã¿ãƒãƒ¼ã‚¸ãƒ§ãƒ³é…å¸ƒä¸ Firefoxã€€â†’ 18.0 / ESR 10.0.12 / ESR 17.0.2 ã§å¯¾å¿œ ï¼ˆç®¡ç†è€…ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§èµ·å‹•ã—ã¦ã„ã‚‹ãªã‚‰è‡ªå‹•çš„ã«ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã•ã‚Œã‚‹ã¯ãšï¼‰ æ‰‹å‹•ã§ã‚¢ãƒƒãƒ—ãƒ‡ãƒ¼ãƒˆã™ã‚‹å ´åˆã¯ å·¦ä¸Šã®Firefoxãƒ¡ãƒ‹ãƒ¥ãƒ¼ > ãƒ˜
yutamoty 2013/01/10
ssl

security
ãƒªãƒ³ã‚¯
ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹SSL/TLSã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã®ç¢ºèªæ–¹æ³•
SSL 2.0ã«ã¯ã„ãã¤ã‹ã®è„†å¼±æ€§ãŒã‚ã‚‹ãŸã‚ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’è¦æ±‚ã•ã‚Œã‚‹é€šä¿¡ã® ãƒ—ãƒãƒˆã‚³ãƒ«ã¨ã—ã¦ä½¿ã‚ã‚Œã¦ã„ã‚‹ã“ã¨ã¯ãªããªã£ã¦ãã¦ã„ã‚‹ã€ã¯ãšã€‚ ã‚µãƒ¼ãƒ“ã‚¹ãŒ"SSL2.0"ã€"SSL3,0"ã€"TLS1.0"ã®ã©ã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«å¯¾å¿œã—ã¦ã„ã‚‹ã‹ã€ ç¢ºèªã™ã‚‹æ–¹æ³•ã‚’ãƒ¡ãƒ¢ã—ã¦ãŠãã€‚ SoftBankã®Em ail(i)ã®imap sslã‚’è©¦é¨“ã«ä½¿ã‚ã›ã¦ã‚‚ã‚‰ã„ã¾ã™ã€‚ â—† SSL2.0 ãŒã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ã‹ç¢ºèª $ openssl s_client -ssl2 -connect imap.softbank.jp:993SSL2.0 ãŒã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ãªã„å ´åˆä¸‹è¨˜ã®ã‚ˆã†ã«ãªã‚‹ CONNECTED(00000003) write:errno=104 â—† SSL3.0 ãŒã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹ã‹ç¢ºèª $ openssl s_client -ssl3 -connect imap.softbank.jp:993SSL3.0
yutamoty 2012/06/26
linux

ssl
ãƒªãƒ³ã‚¯
make-ssl-cert ã§SSLè¨¼æ˜Žæ›¸ã‚’ä¸€ç™ºä½œæˆ | ãƒ—ãƒ©ã‚¹ã‚¿ãƒ¼æ¥å‹™æ—¥è¨˜
Ubuntu ã§SSLè¨¼æ˜Žæ›¸ã‚’ä½œæˆã§ã¯ã‹ãªã‚Šã®æ‰‹é †ã‚’è¸ã‚“ã§SSLè¨¼æ˜Žæ›¸ã‚’ä½œæˆã—ã¾ã„ãŸãŒã€ç…©ã‚ã—ã„ä½œæ¥ä¸€åˆ‡ç„¡ã„ã§SSLè¨¼æ˜Žæ›¸ã‚’ä½œã£ã¦ãã‚Œã‚‹ä¾¿åˆ©ãª make-ssl-cert ã‚³ãƒžãƒ³ãƒ‰ãŒç”¨æ„ã•ã‚Œã¦ã„ã¾ã™ã€‚ é€šå¸¸ã®ä½œæ¥ã®æµã‚Œ èªè¨¼å±€(CA)ä½œæˆ ã‚µãƒ¼ãƒç§˜å¯†éµã®ä½œæˆ è¨¼æ˜Žæ›¸ç½²åè¦æ±‚(CSR)ã®ä½œæˆ èªè¨¼å±€(CA)ã«ã‚ˆã‚‹ç½²å ãƒ›ã‚¹ãƒˆåã‚’å…¥åŠ›ã—ã¦ ã‚’æŠ¼ã™ã¨SSLè¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã¾ã™ã€‚ SSLè¨¼æ˜Žæ›¸ã®ç¢ºèª SSLè¨¼æ˜Žæ›¸ã®ä¸ã‚’ç¢ºèªã™ã‚‹ã¨è¨¼æ˜Žæ›¸ã¨ç§˜å¯†éµãŒåŒæ¢±ã•ã‚Œã¦ã„ã¾ã™ã€‚ å°‘ãªãã¨ã‚‚å…¬é–‹ã‚µãƒ¼ãƒã§ä½¿ç”¨ã§ãã‚‹SSLè¨¼æ˜Žæ›¸ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ $ sudo openssl x509 -in ssl-cert-plustar.pem -text Certificate: Data: Version: 1 (0x0) Serial Number: 92:26:78:2a:ba:e6:e4:d9 Signature A
yutamoty 2012/06/14
Apache

ssl
ãƒªãƒ³ã‚¯
Webã‚µãƒ¼ãƒå‹‰å¼·ä¼š#5ã«å‚åŠ ã—ã¦ãã¾ã—ãŸã‚ˆ - What Iâ€™ve found has never been enough@Hatena
@oranieã•ã‚“ä¸»å‚¬ã® Webã‚µãƒ¼ãƒå‹‰å¼·ä¼š#5ã«å‚åŠ ã—ã¦ãã¾ã—ãŸã‚ˆã€‚è´ãã ã‘ã®äººã¯å‚åŠ NGã€å‚åŠ è€…ã¯ Apache2.4 ã‹ Varnish ã‹ Fluentd ã®è©±ã‚’ã™ã‚‹ã¹ã—ã€ã¨ã„ã†ãƒ«ãƒ¼ãƒ«ãªã®ã§ã€è‡ªåˆ†ã‚‚ç™ºè¡¨ã—ã¦ãã¾ã—ãŸã€‚å¾—æ„ãªSSLã¾ã‚ã‚Šã®è©±ã§ã€‚ã¨ã‚Šã‚ãˆãšã“ã“ã«ã‚¹ãƒ©ã‚¤ãƒ‰è²¼ã£ã¦ãŠãã¾ã™ã: Apache 2.4 æ–°æ©Ÿèƒ½ â€œSSLç·¨â€ View more PowerPoint from nappa_zzz (ã„ãŸã ã„ãŸè³ªå•ã‚‚å«ã‚ã¦ã‚‚ã†ã„ã¡ã©ã¡ã‚ƒã‚“ã¨ã¾ã¨ã‚ã‚ˆã†ã¨æ€ã„ã¾ã™ã€‚ãã®ã†ã¡ã€‚) ä»Šå›žå‚åŠ ã—ã¦ã¿ã¦ã€ã»ã‚“ã¨ã†ã«â€¦â€¦ãªã‚“ã¨ã„ã†ã‹â€¦â€¦å‚åŠ è€…ã®ã¿ãªã•ã¾ãŒã€çœ©ã—ã‹ã£ãŸã§ã™ã€‚ãªã‚“ã¨ã„ã†ã‹ã€Œå¤§è¦æ¨¡Webã‚µã‚¤ãƒˆã‚„ã£ã¦ã‚‹ãœã€æ„ŸãŒã€‚ç™ºè¡¨ã®å†…å®¹ãã®ã‚‚ã®ã‚ˆã‚Šã‚‚ã€ãã®ç©ºæ°—ã‚’å¸åŽã§ããŸã®ãŒä»Šå›žã„ã¡ã°ã‚“ã®åŽç©«ã ã£ãŸã¨æ€ã„ã¾ã™ã€‚ä¸»å‚¬è€…ã®oranieã•ã‚“ã€å‚åŠ è€…ã®ã¿ãªã•ã‚“ã€ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ã¾ãŸãƒãƒ£ãƒ³ã‚¹ãŒã‚ã‚Œã°å‚åŠ
yutamoty 2012/03/31
Apache

ssl
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : JPCERTã®EVè¨¼æ˜Žæ›¸ã¨Androidã®ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶ã«ã¤ã„ã¦(è§£æ±ºæ¸ˆ) - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
åŸºæœ¬ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆãè¶£å‘³ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKIãƒ»ç½²åãƒ»èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚æ—…å¥½ãã€‚ãƒ†ãƒ¬ãƒ“å¥½ãã§èŠ¸èƒ½é€š æœ¬ãƒ–ãƒã‚°ã§è¿°ã¹ã‚‰ã‚Œã¦ã„ã‚‹å•é¡Œã¯JPCERTæ§˜ã«è¿…é€Ÿã«å¯¾å¿œé ‚ãã€æ—¢ã«2011å¹´1æœˆ7æ—¥ãŠæ˜¼é ƒã«ã¯è§£æ±ºã—ã€Androidã§ã‚‚å•é¡Œãªãhttps://www.jpcert.or.jp/ã®ã‚µã‚¤ãƒˆãŒé–²è¦§ã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ãŠã‚Šã¾ã™ã€‚é–¢ä¿‚è€…ã®çš†æ§˜ã€ã”å¯¾å¿œèª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã—ãŸã€‚ ã¡ã‚‡ã£ã¨å‰ã®è©±ã§ã™ãŒTLã‚’è¦‹ã¦ãŸã‚‰ã€JPCERTã‚„IPAãªã©ã€æ—¥æœ¬ã®æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ç‰½å¼•ã™ã‚‹çµ„ç¹”ãŒEV SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’ä½¿ã£ã¦ã‚‹ã¨çŸ¥ã‚Šã€ã•ã™ãŒã ãªãã€ã€ã€ã¨æ€ã£ãŸã‚ã‘ã§ã™ãŒã€ã•ã‚‰ã«TLã‚’è¿½ã£ã¦ã¿ã‚‹ã¨ã€ŒXperiaã§ã¯ãƒ«ãƒ¼ãƒˆãŒæè¼‰ã•ã‚Œã¦ãªã„ãŸã‚è¦å‘ŠãŒå‡ºã‚‹ã€ã¨ã„ã†ã®ã‚’è¦‹ã¤ã‘ãŸã‚“ã§ã™ã€‚ã»ã‚“ã¾ã‹ã„ãªï¼Ÿã¨æ€ã£ã¦ã¡ã‚‡ã£ã¨èª¿ã¹ã¦ã¿ã¾ã—ãŸã€‚ JPCERTã€JVNã€IPAã‚’FireFoxã§
yutamoty 2011/12/16
android

ssl
ãƒªãƒ³ã‚¯
å½SSLè¨¼æ˜Žæ›¸ã§ç ´ç”£ã®DigiNotarã€è² å‚µã¯3300ï½ž4800ä¸‡ãƒ‰ãƒ« | ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º | ãƒžã‚¤ã‚³ãƒŸã‚¸ãƒ£ãƒ¼ãƒŠãƒ«
DigiNotarã‹ã‚‰å½ã®SSLè¨¼æ˜Žæ›¸ãŒç™ºè¡Œã•ã‚Œã¦ã—ã¾ã£ãŸå•é¡Œã§ã€DigiNotarã®è¦ªä¼šç¤¾ã§ã‚ã‚‹VASCO Data Security Internationalã¯ã€ŒDigiNotarã€ã®ç ´ç”£ã‚’ç”³è«‹ã—ãŸã€‚ç ´ç”£ç”³è«‹ã¯ã™ã§ã«ã‚ªãƒ©ãƒ³ãƒ€å½“å±€ã«ã‚ˆã£ã¦å—ç†ã•ã‚Œã¦ã„ã‚‹ã€‚ç™ºè¡¨ã•ã‚ŒãŸå†…å®¹ã«ã‚ˆã‚Œã°ã€DigiNotarã®ç ´ç”£ã«é–¢é€£ã—ã¦VASCOãŒè¢«ã‚‹è² å‚µã¯3300ä¸‡ãƒ‰ãƒ«ã‹ã‚‰4800ä¸‡ãƒ‰ãƒ«ã»ã©ã«ãªã‚‹ã¨è©¦ç®—ã•ã‚Œã‚‹ã¨ã„ã†ã€‚ã“ã®è©¦ç®—ã«ã¯ä»Šå¾ŒåŒç¤¾ã«å¯¾ã—ã¦è«‹æ±‚ã•ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹é–¢é€£è²»ç”¨ã«é–¢ã—ã¦ã¯å«ã¾ã‚Œã¦ã„ãªã„ã¨ã‚‚èª¬æ˜ŽãŒã‚ã‚‹ã€‚ èªè¨¼å±€ãŒç¬¬3è€…ã®ä¸æ£ä¾µå…¥ãŠã‚ˆã³ä¸æ£åˆ©ç”¨ã‚’å—ã‘ã¦ã—ã¾ã„ã€å½ã®è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã—ãŸäº‹ä¾‹ã¯ã“ã‚Œã¾ã§ã«ã‚‚ã»ã‹ã«å ±å‘Šã•ã‚Œã¦ã„ã‚‹ã€‚ã“ã†ã—ãŸäº‹ä¾‹ã¨æ¯”è¼ƒã—ä»Šå›žã®DigiNotarã®äº‹ä¾‹ã¯ã€ãƒ–ãƒ©ã‚¦ã‚¶ãƒ™ãƒ³ãƒ€ãªã©å ±å‘Šã™ã¹ãæ©Ÿé–¢ã¸ã®é€£çµ¡ãŒé…ã‹ã£ãŸã¨ã„ã†å•é¡ŒãŒã‚ã‚‹ã€‚ã—ã‹ã‚‚äº‹æ…‹ã®ç™ºè¦šãŒãƒ¦ãƒ¼ã‚¶ã‹ã‚‰ä¸æ£è¨¼æ˜Žæ›¸ã®æŒ‡æ‘˜ã‚’å—ã‘ã¦ã‹ã‚‰ã ã£ãŸã“
yutamoty 2011/10/12
ssl

security
ãƒªãƒ³ã‚¯
http://jp.globalsign.com/service/ssl/feature/toku.html
yutamoty 2011/10/05
ssl

SANs
ãƒªãƒ³ã‚¯
æ—¥æœ¬ãƒ™ãƒªã‚µã‚¤ãƒ³ - Enterprise & Internet Security Solutions
yutamoty 2011/10/05
ssl

SANs
ãƒªãƒ³ã‚¯
ã‚ˆãã‚ã‚‹è³ªå• | SSLã‚»ã‚ãƒ¥ã‚¢
ãŠå•åˆã›ã®å¤šã„è³ªå•ã«ã¤ã„ã¦ãŠç”ãˆã„ãŸã—ã¾ã™ã€‚ â–¼ SSLã«ã¤ã„ã¦ ãƒ» æš—å·ã‚’ä½¿ã„ãŸã„ã ã‘ãªã®ã§ã€ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯ä¸è¦ãªã®ã§ã™ãŒã€‚ ãƒ» ãªãœã€è‡ªç¤¾ã®ä¿¡ç”¨ã‚’è¨¼æ˜Žã—ã¦ã‚‚ã‚‰ã†å¿…è¦ãŒã‚ã‚‹ã®ã§ã—ã‚‡ã†ã‹ã€‚ â–¼ å°Žå…¥ã«ã¤ã„ã¦ ãƒ» ã‚³ãƒ¢ãƒ³ãƒãƒ¼ãƒ ã¨ã¯ãªã‚“ã§ã™ã‹ã€‚ ãƒ» ã„ã¾åˆ©ç”¨ã—ã¦ã„ã‚‹ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒã‚µãƒ¼ãƒ“ã‚¹ã§åˆ©ç”¨ã§ãã¾ã™ã‹ã€‚ ãƒ» å…±ç”¨åž‹ãƒ¬ãƒ³ã‚¿ãƒ«ã‚µãƒ¼ãƒãªã©ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆç’°å¢ƒã§åˆ©ç”¨ã§ãã¾ã™ã‹ã€‚ ãƒ» ãªãœã€Œåå‰ãƒ™ãƒ¼ã‚¹ã®ãƒãƒ¼ãƒãƒ£ãƒ«ãƒ›ã‚¹ãƒˆã€ã§ã¯SSLã‚’åˆ©ç”¨ã§ããªã„ã®ã§ã—ã‚‡ã†ã‹ã€‚ ãƒ» SMTP/POP over SSL ã‚„ FTP over SSLã«ã‚‚ä½¿ãˆã¾ã™ã‹ã€‚ ãƒ» ã‚µãƒ¼ãƒã‚’ç§»è»¢ã™ã‚‹ã“ã¨ã«ãªã‚Šã¾ã—ãŸã€‚ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯ç§»è»¢ã§ãã¾ã™ã‹ã€‚ ãƒ» ã‚µãƒ¼ãƒã®IPã‚¢ãƒ‰ãƒ¬ã‚¹ãŒå¤‰æ›´ã«ãªã‚Šã¾ã™ã€‚ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯ã©ã†ãªã‚Šã¾ã™ã‹ã€‚ ãƒ» ãƒ›ã‚¹ãƒˆåãŒå¤‰æ›´ã«ãªã‚‹å ´åˆã€ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯ã©ã†ãªã‚Šã¾ã™ã‹ã€‚ ãƒ» åŒã˜ã‚µãƒ¼ãƒã®åˆ¥ãƒ‰ãƒ¡ã‚¤ãƒ³ã®ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã™ã‚‹ã“ã¨
yutamoty 2011/10/05
ssl

SANs
ãƒªãƒ³ã‚¯
1 2 3 æ¬¡ã®ãƒšãƒ¼ã‚¸