[B! ssl] gologo13ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

gologo13 id:gologo13

sslã«é–¢ã™ã‚‹gologo13ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (35)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ãƒªã‚½ãƒ¼ã‚¹ | Entrust
gologo13 2016/08/22
security

saml

sso

ssl

pki
ãƒªãƒ³ã‚¯
èªè¨¼å±€ã‚’ç«‹ã¦ã¦ã¼ã‚ã‚‚ã†ã‘ã—ãŸã„ã‚“ã§ã™ãŒï¼žç„¡ç†ãªç†ç”±ã‚’ç†è§£ã—ã‚ˆã† - Qiita
SSLã®èªè¨¼å±€ã¨ã‹è¨¼æ˜Žæ›¸ã¨ã‹å‹‰å¼·ã—å§‹ã‚ã¯ãƒ›ãƒ³ãƒˆé›£ã„ã‚ˆã ã“ã®ã¸ã‚“ã®SSL/TLSã®ä»•çµ„ã¿ã£ã¦å‹‰å¼·ã—å§‹ã‚ã®é ƒã¯å‡„ãé›£ã—ãæ„Ÿã˜ã‚‹ã®ã‚ˆãã€‚åˆ†ã‹ã‚Šã‚„ã™ãè§£èª¬ã—ã¦ãã‚Œã¦ã‚‹ã‚µã‚¤ãƒˆã£ã¦ã‚ã‚“ã¾è¦‹ãŸã“ã¨ç„¡ã„ã—ã€‚ ã‚“ã§ã€ >>300,304 ã¿ãŸã„ãªã“ã¨ã¯åƒ•ã‚‚æ˜”è€ƒãˆãŸã“ã¨ã‚ã£ãŸã‚ãƒ¼ã€ã¨æ‡ã‹ã—ã¿ã‚’è¦šãˆãŸã®ã§ãƒ¬ã‚¹ã£ã¦ã¿ãŸã€‚ è¨¼æ˜Žæ›¸ã‚’ç™ºè¡Œã§ãã‚‹ã‹ã©ã†ã‹ã¯è¨¼æ˜Žæ›¸ã®ãƒ•ãƒ©ã‚°ã§æ±ºã¾ã£ã¦ã„ã‚‹ã€ã¨ã„ã† >>303 ã®æŒ‡æ‘˜ã‚‚é‡è¦ã‚ˆãã€‚ ä»¥ä¸‹2chã‚¹ãƒ¬ã‚ˆã‚Šå¼•ç”¨ ä¸å¯§éŽãŽã‚‹ã¨è©•åˆ¤ã®ãƒ¬ã‚¹ã‚’ã—ã¦ã‚‹ID:UyEJo1f2ãŒåƒ•ãªã‚ã‘ã ãŒï½—ã€€2chã ã¨ãã®ã†ã¡å€‰åº«ã«è¡Œã£ã¡ã‚ƒã†ã‹ã‚‚ã—ã‚Œãªã„ã®ã§ã“ã“ã«ãƒ¡ãƒ¢ã€‚ ã€èªè¨¼å±€ã€‘SSLã«é–¢ã™ã‚‹ã‚¹ãƒ¬ 2æžšç›®ã€ã¼ã‚å„²ã‘ã€‘ http://hayabusa6.2ch.net/test/read.cgi/mysv/1286532904/298-309 298 ï¼šDNSæœªç™»éŒ²ã•ã‚“ï¼š2013/05/31(é‡‘) 13:31
gologo13 2015/05/16
security

ssl

dns

pki
ãƒªãƒ³ã‚¯
Nginxã§HTTPS : ã‚¼ãƒã‹ã‚‰å§‹ã‚ã¦SSLã®è©•ä¾¡ã‚’A+ã«ã™ã‚‹ã¾ã§ Part 1 | POSTD
æ•°å¹´å‰ã€Webã¯å…¨ä½“çš„ã«æš—å·åŒ–ã•ã‚Œã¦ã„ã¾ã›ã‚“ã§ã—ãŸã€‚HTTPSã¯Webãƒšãƒ¼ã‚¸ã®æœ€ã‚‚é‡è¦ãªéƒ¨åˆ†ã ã‘ã®ãŸã‚ã«ç¢ºä¿ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚æš—å·åŒ–ãŒå¿…è¦ãªã®ã¯å¤§åˆ‡ãªãƒ¦ãƒ¼ã‚¶ãƒ‡ãƒ¼ã‚¿ã ã‘ã§ã€Webãƒšãƒ¼ã‚¸ã®å…¬é–‹ã•ã‚Œã‚‹éƒ¨åˆ†ã¯æš—å·åŒ–ã›ãšã«é€ã£ã¦ã‚‚ã„ã„ã¨ã„ã†ã“ã¨ã§æ„è¦‹ãŒä¸€è‡´ã—ã¦ã„ã¾ã—ãŸã€‚ ã—ã‹ã—ã€ ä»Šã¯ çŠ¶æ³ ãŒ é•ã„ã¾ã™ ã€‚ç¾åœ¨ã§ã¯ã€ã©ã‚“ãªWebãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã§ã‚‚æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„ã®ã¯è‰¯ããªã„ã¨ã„ã†ã“ã¨ãŒåˆ†ã‹ã£ã¦ã„ã‚‹ã®ã§ã€Webã‚µã‚¤ãƒˆã‚’é‹å–¶ã™ã‚‹èª°ã‚‚ãŒã‚³ãƒ³ãƒ†ãƒ³ãƒ„ã«é–¢ä¿‚ãªãå¼·å›ºãªHTTPSã‚’è¨å®šã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ ãŠæ¥ãšã‹ã—ã„è©±ã§ã™ãŒã€ç§è‡ªèº«ã®Webã‚µã‚¤ãƒˆã¯2å¹´è¿‘ãã‚‚å…¨ãHTTPSã‚’ã‚µãƒãƒ¼ãƒˆã—ã¦ã„ã¾ã›ã‚“ã§ã—ãŸ ^(1) ã€‚ Eric Mill ã® ä»Šã™ãç„¡æ–™ã§HTTPSã«åˆ‡ã‚Šæ›¿ãˆã‚ˆã† ã¨ã„ã†ç´ æ™´ã‚‰ã—ã„è¨˜äº‹ãŒæœ€çµ‚çš„ã«ç§ã«å–ã‚’å…¥ã‚Œã¦ãã‚Œã¾ã—ãŸã€‚ç§ã¯ä¼‘æš‡ä¸ã€HTTPSã‚’ã‚»ãƒƒãƒˆã‚¢ãƒƒãƒ—ã—ã¦ Qualys SSL Report ã§
gologo13 2015/03/22
SSL

Nginx

security
ãƒªãƒ³ã‚¯
Superfish/eDellRootãŒå±é™ºãªç†ç”± - ã‚ã‚‚ãŠãã°
Lenovoè£½ã®PCã®ä¸€éƒ¨ã«Superfishã¨ã„ã†ãƒžãƒ«ã‚¦ã‚§ã‚¢ãŒæ¨™æº–ã§ã‚¤ãƒ³ã‚¹ãƒˆãƒ¼ãƒ«ã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒç¢ºèªã•ã‚Œã€å¤§ããªå•é¡Œã¨ãªã£ã¦ã„ã¾ã™ã€‚ [2015-11-24è¿½è¨˜] DELLè£½ã®PCã«ã‚‚ã€ã€ŒeDellRootã€ã¨ã•ã‚Œã‚‹Superfishã¨åŒæ§˜ã®å•é¡Œã‚’æŒã¤ãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ãŒå°Žå…¥ã•ã‚Œã¦ã„ã‚‹ã‚ˆã†ã§ã™ã€‚ Dellã®PCã«ä¸å¯©ãªãƒ«ãƒ¼ãƒˆè¨¼æ˜Žæ›¸ã€Lenovoã®Superfishã¨åŒã˜å•é¡Œã‹ - ITmedia ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚º Dude, You Got Dellâ€™d: Publishing Your Privates - Blog - Duo Security Joe Nord personal blog: New Dell computer comes with a eDellRoot trusted root certificate https://t.co/chURwV7eNE eDellRootã§
gologo13 2015/02/20
javascript

security

ssl
ãƒªãƒ³ã‚¯
è¤‡æ•°ã®Webã‚µãƒ¼ãƒã§SSLã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚ãƒ£ãƒƒã‚·ãƒ¥ã‚’å…±æœ‰ã—ã¦SSLå‡¦ç†ã‚’é«˜é€ŸåŒ–(Apache + mod_ssl + mod_socache_memcache) - å…ƒRX-7ä¹—ã‚Šã®é©å½“ãªæ—¥ã€…
HTTPS(SSLåˆ©ç”¨)ã‚µã‚¤ãƒˆãŒSEOçš„ã«å„ªé‡ã•ã‚Œã‚‹ãƒˆãƒ¬ãƒ³ãƒ‰ã§ã€ä¸–é–“çš„ã«ã‚‚HTTPSæŽ¥ç¶šã§ã‚µã‚¤ãƒˆé‹ç”¨ã™ã‚‹ã‚µãƒ¼ãƒ“ã‚¹ãŒå¢—ãˆã¦ãã¦ã„ã¾ã™ã€‚ ã“ã‚ŒãŒã€ãƒã‚¤ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚µã‚¤ãƒˆã«ãªã£ã¦ãã‚‹ã¨ã€ã“ã®ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ã§SSLå‡¦ç†ã•ã›ã‚‹ã“ã¨ãŒè² è·çš„ã«ã‚‚ãªã‹ãªã‹è¾›ã„ã®ã§ã™ã€‚ ã§ã€Apache 2.3ä»¥é™ã§ã¯ã€Shared Object Cache Providerã¨ã—ã¦ã€memcachedãŒé¸æŠžã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ ã“ã®ä»•çµ„ã¿ã‚’åˆ©ç”¨ã—ã¦ã€Apacheã¨memcachedã‚’ä¸¦ã¹ã‚‹ã“ã¨ã§ã€å„ã‚µãƒ¼ãƒã§ãƒ¦ãƒ¼ã‚¶ã®SSL Session Cacheã‚’å…±æœ‰ã—ãªãŒã‚‰HTTPSãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’è² è·åˆ†æ•£ã§ãã‚‹æ§‹æˆã‚’ä½œã£ã¦ã¿ã¾ã—ãŸã€‚ Webã‚µãƒ¼ãƒã§SSLã‚ªãƒ•ãƒãƒ¼ãƒ‰ å¸¸æ™‚SSLã‚’åˆ©ç”¨ã—ãŸWebã‚µã‚¤ãƒˆã‚’é‹ç”¨ã™ã‚‹ãŸã‚ã«ã€SSLã‚¢ã‚¯ã‚»ãƒ©ãƒ¬ãƒ¼ã‚¿ã¨ã„ã£ãŸã‚¢ãƒ—ãƒ©ã‚¤ã‚¢ãƒ³ã‚¹è£½å“ã ã¨ã‹ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã ã¨Apacheã‚„Nginxã®SSLãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚’ä½¿ã†
gologo13 2014/12/06
apache+memcacheã§SSLã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’å†åˆ©ç”¨ã—ã¦ã€SSLã‚ªãƒ•ãƒãƒ¼ãƒ‰ã®è² è·è»½æ¸›ã«æˆåŠŸã—ãŸã¨ã„ã†è©±ã€‚node.js+redisã§ä¼¼ãŸã‚ˆã†ãªã“ã¨ã§ããã†ã€‚

https

apache

memcached

nginx

ssl

TLS

performance
ãƒªãƒ³ã‚¯
ã„ã„åŠ æ¸›ã€<script src="http://..ã€€ã¨æ›¸ãã®ã¯ã‚„ã‚ã¾ã—ã‚‡ã† - DQNEOèµ·æ¥æ—¥è¨˜
å¤–éƒ¨ã‚µã‚¤ãƒˆã®JSãƒ•ã‚¡ã‚¤ãƒ«ã‚’èªã¿è¾¼ã‚€ã¨ãã«ã€ã“ã†ã„ã†æ›¸ãæ–¹ã™ã‚‹ã®ã¯ã‚„ã‚ã¾ã—ã‚‡ã†ã€‚ <script src="http://example.com/js/jquery.js"></script> ç†ç”± ã‚ãªãŸã®ã‚µã‚¤ãƒˆãŒã€ã„ã¤ã®æ—¥ã‹SSLã«å¯¾å¿œã™ã‚‹ã“ã¨ã«ãªã£ãŸã¨ãã€ãã®scriptã‚¿ã‚°ãŒãƒã‚°ã®åŽŸå› ã«ãªã‚Šã¾ã™ã€‚ ã”è¦§ã®ã¨ãŠã‚Šã€HTTPSãƒšãƒ¼ã‚¸ã®ä¸ã§HTTPè¦ç´ ã‚’èªã¿è¾¼ã‚‚ã†ã¨ã™ã‚‹ã¨ã€ãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚ˆã£ã¦ã¯å®‰å…¨è£…ç½®ãŒåƒã„ã¦èªã¿è¾¼ã‚“ã§ãã‚Œãªã„ã®ã§ã™ã€‚ ä¸Šã®ä¾‹ã§ã¯jQueryã®èªã¿è¾¼ã¿ã«å¤±æ•—ã—ã¦ã„ã¾ã™ãŒã€ã‚¨ãƒ©ãƒ¼ãƒ¡ãƒƒã‚»ãƒ¼ã‚¸ã€ŒUncaught ReferenceError: jQuery is not defined ã€ã‚’è¦‹ã¦ã‚‚HTTPS/HTTPã®ãƒ—ãƒãƒˆã‚³ãƒ«ãŒåŽŸå› ã ã¨ã¯ã™ãæ°—ã¥ã‹ãªã„ã®ã§ã€ã‚ã‹ã‚Šã«ãã„ãƒã‚°ã«ãªã£ã¦ã—ã¾ã„ã¾ã™ã€‚ çµè«– JSãƒ•ã‚¡ã‚¤ãƒ«(ã¨ã‹CSSã¨ã‹ç”»åƒã¨ã‹)ã‚’èªã¿è¾¼ã‚€ã¨ãã¯ã€"http:"ã®éƒ¨åˆ†ã‚’çœ
gologo13 2014/12/05
URLã®ãƒ—ãƒãƒˆã‚³ãƒ«ã‚’æ„è˜ã—ãªãã¦ã„ã„ã¨ã„ã†ãƒ¡ãƒªãƒƒãƒˆãŒæœ‰ã‚‹

HTML

javascript

ssl
ãƒªãƒ³ã‚¯
Making TLS Fast(er)
WebRTC Is TLS Fast Yet? It can be. Making TLS fast(er)... the nuts and bolts. TLS all the tubes! +Ilya Grigorik @igrigorik
gologo13 2014/11/24
security

ssl

tls

performance

google
ãƒªãƒ³ã‚¯
ImperialViolet - Overclocking SSL
(This is a write up of the talk that I gave at Velocity 2010 last Thursday. This is a joint work of myself, Nagendra Modadugu and Wan-Teh Chang.) The â€˜Sâ€™ in HTTPS stands for â€˜secureâ€™ and the security is provided by SSL/TLS. SSL/TLS is a standard network protocol which is implemented in every browser and web server to provide confidentiality and integrity for HTTPS traffic. If there's one point tha
gologo13 2014/11/23
security

tls

ssl

performance

google
ãƒªãƒ³ã‚¯
Making HTTPS Fast(er) - nginx.conf
WebRTC Making HTTPS fast(er) delivering secure, fast, and efficient websites with Nginx +Ilya Grigorik @igrigorik
gologo13 2014/11/20
network

performance

ssl

tls

nginx
ãƒªãƒ³ã‚¯
Is TLS Fast Yet?
TLS has exactly one performance probl em: it is not used widely enough. Everything else can be optimized. Data delivered over an unencrypted channel is insecure, untrustworthy, and trivially intercepted. We owe it to our users to protect the security, privacy, and integrity of their data â€” all data must be encrypted while in flight and at rest. Historically, concerns over performance have been the
gologo13 2014/11/20
ssl

tls

security

performance
ãƒªãƒ³ã‚¯
Deploying TLS the hard way - Configuring HTTPS for your domain(s)
gologo13 2014/11/20
ssl

security

tls
ãƒªãƒ³ã‚¯
TechCrunch | Startup and Technology News
TechCrunch Daily News Every weekday and Sunday, you can get the best of TechCrunchâ€™s coverage. Startups Weekly Startups are the core of TechCrunch, so get our best coverage delivered weekly.
gologo13 2014/11/19
ã‚»ã‚ãƒ¥ã‚¢ãªã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆãŒã‚„ã£ã¦ãã‚‹

https

SSL

security
ãƒªãƒ³ã‚¯
OCSP Stapling: How CloudFlare Just Made SSL 30% Faster
OCSP Stapling: How CloudFlare Just Made SSL 30% Faster2012-10-29 CC BY-SA 3.0 image by Yathin sk This week CloudFlare is announcing several things we're doing to significantly improve the performance of SSL. Too few sites are secured with SSL. One of the reasons sites don't implement SSL is that it can slow down web performance. One of the less frequently discussed, but most significant, performan
gologo13 2014/11/19
OCSP Staplingã§ã“ã‚“ãªæ—©ããªã‚‹ã®ã‹

security

ssl
ãƒªãƒ³ã‚¯
Node-v0.12ã®TLSã‚’256å€ä½¿ã„ã“ãªã™æ–¹æ³•
ãã†ã ã£ãŸã®ã‹ï¼ ã‚ˆãã‚ã‹ã‚‹ process.nextTick() node.jsã®ã‚¤ãƒ™ãƒ³ãƒˆãƒ«ãƒ¼ãƒ—ã‚’ç†è§£ã™ã‚‹
gologo13 2014/11/15
node.js

security

ssl
ãƒªãƒ³ã‚¯
SSL Labs - Projects / Public SSL Server Database - SSL Server Test
This free online service performs a deep analysis of the configuration of any SSL web server on the public Internet. Please note that the information you submit here is used only to provide you the service. We don't use the domain names or the test results, and we never will.
gologo13 2014/11/15
https

ssl

security
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ†ã‚¹ãƒˆãƒ„ãƒ¼ãƒ«ã€Œnogotofailã€ã‚’å…¬é–‹--TLS/SSLã®æ£ã—ã„å®Ÿè£…ã‚’ä¿ƒé€²
Googleã¯ã€ã‚ˆãã‚ã‚‹è¨å®šãƒŸã‚¹ã‚„æ—¢çŸ¥ã®ãƒã‚°ã«ã‚ˆã£ã¦HTTPSæŽ¥ç¶šã®å®‰å…¨æ€§ãŒæãªã‚ã‚Œã‚‹ã“ã¨ã‚’é˜²ããŸã‚ã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãƒ†ã‚¹ãƒˆãƒ„ãƒ¼ãƒ«ã‚’ãƒªãƒªãƒ¼ã‚¹ã—ãŸã€‚ã€Œnogotofailã€ã¨ã„ã†ã€2014å¹´ã«å…¥ã£ã¦ã€ŒMacã€ã¨ã€ŒiOSã€ã«å½±éŸ¿ã‚’ä¸ŽãˆãŸã€Œgoto failã€ãƒã‚°ã«ã¡ãªã‚“ã§åä»˜ã‘ã‚‰ã‚ŒãŸã‚‰ã—ã„åŒãƒ„ãƒ¼ãƒ«ã¯ã€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æŽ¥ç¶šã•ã‚ŒãŸç«¯æœ«ã‚„ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ãŒã€æ—¢çŸ¥ã®ãƒã‚°ã‚„è¨å®šãƒŸã‚¹ã¨ã„ã£ãŸã€TLSï¼ˆTransport Layer Securityï¼‰ã‚„SSLï¼ˆSecure Socket Layerï¼‰ã®æš—å·åŒ–ã®å•é¡Œã«ã•ã‚‰ã•ã‚Œã¦ã„ãªã„ã“ã¨ã‚’ç¢ºèªã™ã‚‹ãŸã‚ã®æ‰‹æ®µã‚’æä¾›ã™ã‚‹ã€‚ nogotofailã®ãƒªãƒªãƒ¼ã‚¹ã«å…ˆç«‹ã¡ã€TLS/SSLãƒ—ãƒãƒˆã‚³ãƒ«ã«ã¯æœ€è¿‘ã€è¤‡æ•°ã®è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚Œã¦ã„ãŸã€‚ä¾‹ãˆã°ã€SSL 3.0ã§æœ€è¿‘ç™ºè¦‹ã•ã‚ŒãŸã€ŒPOODLEã€ã‚„ã€OpenSSLã®ã€ŒHeartbleedã€ã ã€‚ã©ã¡ã‚‰ã‚‚ã‚µãƒ¼ãƒã‚’æ·±åˆ»ãªæ”»æ’ƒã«ã•ã‚‰ã—ã€æ¥ç•Œ
gologo13 2014/11/07
security

ssl

tls
ãƒªãƒ³ã‚¯
Googleã«ã‚ˆã‚‹OpenSSLã®forkã€BoringSSLã‚’è©¦ã™ã€‚ - ã¼ã¡ã¼ã¡æ—¥è¨˜
1. ã¯ã˜ã‚ã«ã€ å…ˆæ—¥ã€Chrome ã§ ã€ŒIssue 401153002: Switch to BoringSSL. (Closed)ã€ ã¨ã„ã†å¤‰æ›´ãŒè¡Œã‚ã‚Œã¾ã—ãŸã€‚ã“ã‚Œã¯ã€å¾“æ¥ã® Androidå‘ã‘ Chrome ã§ã¯ OpenSSL ã‚’åˆ©ç”¨ã—ã¦ã„ãŸã®ã§ã™ãŒã€ä»Šå›žã“ã‚Œã‚’GoogleãŒOpenSSLã‚’forkã—ãŸBoringSSLã«åˆ‡ã‚Šæ›¿ãˆãŸã“ã¨ã«ãªã‚Šã¾ã™ã€‚ BoringSSLã®ç™ºè¡¨ã‹ã‚‰ã‚ãšã‹1ã‹æœˆãã‚‰ã„ã§ã™ãŒã€ä½•å›žã‹ Revert ã•ã‚ŒãŸæœ«ã‚ˆã†ã‚„ãåˆ‡ã‚Šæ›¿ãˆãŒæˆåŠŸã—ãŸã‚ˆã†ã§ã™ã€‚ ä»Šå›ž BoringSSL ã‚’è©¦ã—ã«å°‘ã—ä½¿ã£ã¦ã¿ã¾ã—ãŸã®ã§ã€ãã®ãƒ¬ãƒãƒ¼ãƒˆã—ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ 2. BoringSSLã¨ã¯ä½•ã‹ BoreingSSLãŒã©ã†ã„ã†ã‚‚ã®ã§ã€ãªãœOpenSSLã‚’forkã—ãŸã‹ã¯ã€Googleã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£Expert agl ã•ã‚“ã®ãƒ–ãƒã‚°ã€ŒImperialViolet - BoringSS
gologo13 2014/11/03
BoringSSL

openssl

google

ssl

security
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã€OpenSSLã®æ–°ãŸãªforkã¨ã—ã¦ã€ŒBoringSSLã€ç™ºè¡¨
ã‚°ãƒ¼ã‚°ãƒ«ãŒOpenSSLã®forkã‚’ç™ºè¡¨ã€ç‹¬è‡ªã®å®Ÿè£…ã«OpenSSLå´ã®å¤‰æ›´ã‚’ãƒžãƒ¼ã‚¸ã™ã‚‹ä½“åˆ¶ã‚’æŽ¡ã‚‹ã€‚OSSã§ã®å±•é–‹ã¯ã—ãªã„æ–¹é‡ã ã¨ã„ã†ã€‚ ç±³ã‚°ãƒ¼ã‚°ãƒ«ãŒã€ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®SSL/TLSå®Ÿè£…ã€ŒOpenSSLã€ã‹ã‚‰æ–°ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ã€ŒBoringSSLã€ã‚’æ´¾ç”Ÿã•ã›ãŸã€‚åŒç¤¾ã®ç ”ç©¶è€…ã‚¢ãƒ€ãƒ ãƒ»ãƒ©ãƒ³ã‚°ãƒªãƒ¼æ°ãŒ2014å¹´6æœˆ20æ—¥ã€è‡ªèº«ã®ãƒ–ãƒã‚°ã€ŒImperialVioletã€ã§æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ ãƒ©ãƒ³ã‚°ãƒªãƒ¼æ°ã«ã‚ˆã‚‹ã¨ã€ã‚°ãƒ¼ã‚°ãƒ«ã§ã¯ã€ŒHeartbleedã€ã¨å‘¼ã°ã‚Œã‚‹é‡å¤§ãªè„†å¼±æ€§ãŒç™ºè¦šã™ã‚‹ä»¥å‰ã‹ã‚‰OpenSSLã®ã‚³ãƒ¼ãƒ‰ã‚’æ¤œè¨¼ã—ã€ä½•å¹´ã«ã‚‚ã‚ãŸã£ã¦å¤šæ•°ã®ãƒ‘ãƒƒãƒã‚’ä½¿ç”¨ã—ã¦ããŸã€‚ã“ã®ä¸ã«ã¯OpenSSLã®ãƒ¡ã‚¤ãƒ³ãƒ¬ãƒã‚¸ãƒˆãƒªã«æŽ¡ç”¨ã•ã‚ŒãŸã‚‚ã®ã‚‚ã‚ã‚‹ä¸€æ–¹ã§ã€OpenSSLãŒä¿è¨¼ã™ã‚‹APIã‚„ABIã®å®‰å®šæ€§ã¨ã‹ã¿åˆã‚ãªã„ã‚‚ã®ã‚„ã€ã‚„ã‚„å®Ÿé¨“çš„éŽãŽã‚‹ã‚‚ã®ã‚‚å¤šã‹ã£ãŸã¨ã„ã†ã€‚ ã—ã‹ã—ã€Androidã‚„Chromeãªã©ã®è£½å“ã§ãã†ã—ãŸãƒ‘ãƒƒãƒã®ã‚µãƒ–
gologo13 2014/11/03
openssl

BoringSSL

google

SSL
ãƒªãƒ³ã‚¯
DeNA Engineering - DeNAã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã®ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆ
æŠ€è¡“ã‚’æ´»ã‹ã—ã€æ–°ã—ã„ä¾¡å€¤ã‚’å‰µé€ ã™ã‚‹ DeNAã®ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ã¯ã€æƒ³åƒã‚’è¶…ãˆã‚‹Delightã‚’å±Šã‘ã‚‹ãŸã‚ã«ä½•ãŒã§ãã‚‹ã‹ã‚’è€ƒãˆã€æŠ€è¡“åŠ›ã¨ç™ºæƒ³åŠ›ã§æ–°ã—ã„ä¾¡å€¤ã‚’ç”Ÿã¿å‡ºã—ã¦ã„ã¾ã™ã€‚ å¤šæ§˜ãªå°‚é–€æ€§ã‚’æŒã£ãŸã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŒåˆ‡ç£‹ç¢ç£¨ã—ã€äº’ã„ã«åˆºæ¿€ã—åˆãˆã‚‹ç’°å¢ƒã‚„åˆ¶åº¦ãŒã•ã‚‰ãªã‚‹æˆé•·ã¸ã¨ã¤ãªã’ã¾ã™ã€‚
gologo13 2014/10/26
security

ssl
ãƒªãƒ³ã‚¯
è‡ªå •è½ãªæŠ€è¡“è€…ã®æ—¥è¨˜ : æ§˜ã€…ãªã‚µãƒ¼ãƒãƒ¼ã®POODLE SSLv3è„†å¼±æ€§(CVE-2014-3566)å¯¾ç–ã®ã¾ã¨ã‚(æ›´æ–°3) - livedoor Blogï¼ˆãƒ–ãƒã‚°ï¼‰
åŸºæœ¬ã¯å–°ã£ã¦ã‚‹ã‹é£²ã‚“ã§ã‚‹ã‹ã§ã™ãŒã€ã‚ˆãè¶£å‘³ã§ã‚«ãƒ©ã‚ªã‚±ãƒ»PKIãƒ»ç½²åãƒ»èªè¨¼ãƒ»ãƒ—ãƒã‚°ãƒ©ãƒŸãƒ³ã‚°ãƒ»æƒ…å ±ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’ã‚„ã£ã¦ã„ã¾ã™ã€‚æ—…å¥½ãã€‚ãƒ†ãƒ¬ãƒ“å¥½ãã§èŠ¸èƒ½é€š ã‚‚ãã˜ 1. ã¯ã˜ã‚ã« 2. SSLv3ã‚’ç„¡åŠ¹åŒ–ã§ãã‚‹å ´åˆã®ã‚µãƒ¼ãƒãƒ¼å¯¾ç– 2.1. Apache HTTPD Server + mod_ssl 2.2. Apache HTTPD Server + mod_nss 2.3. nginx 2.4. lighttpd 2.5. Microsoft IIS 2.6. (è¨‚æ£)Apache Tomcat (Java JSSE) 2.7. Node.js 2.8. IBM HTTP Server 2.9. Amazon Web Services 2.10. ãã®ä»–ã®ã‚µãƒ¼ãƒãƒ¼ 2.11. SSLv3 ã‚’ç„¡åŠ¹åŒ–ã™ã‚‹ãƒªã‚¹ã‚¯ 2.12. OpenLDAP 3. è«¸èˆ¬ã®äº‹æƒ…ã§ SSLv3 ã‚’æœ‰åŠ¹ã«ã›ã–ã‚‹ã‚’å¾—ãªã„å ´
gologo13 2014/10/24
security

ssl

https
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸