{"id":2384,"date":"2014-11-02T18:34:56","date_gmt":"2014-11-02T09:34:56","guid":{"rendered":"http:\/\/www.hits-net.com\/blog\/?p=2384"},"modified":"2014-11-02T18:35:08","modified_gmt":"2014-11-02T09:35:08","slug":"%e3%81%be%e3%81%9f%e3%81%be%e3%81%9fssl%e8%a8%bc%e6%98%8e%e6%9b%b8%e3%81%af%e8%a9%b1","status":"publish","type":"post","link":"https:\/\/www.hits-net.com\/blog\/?p=2384","title":{"rendered":"\u307e\u305f\u307e\u305fSSL\u8a3c\u660e\u66f8\u306a\u8a71"},"content":{"rendered":"

\u3069\u3082\u3002\u3053\u3093\u306b\u3061\u306f\u3002<\/p>\n

\u307e\u305f\u307e\u305fSSL\u8a3c\u660e\u66f8\u306a\u8a71\u3067\u3059\u3002<\/p>\n

\u5148\u65e5\u4f5c\u308a\u306a\u304a\u3057\u305f\u3070\u304b\u308a<\/a>\u3067\u3059\u304c\u3001\u3084\u3063\u3071\u308asha256\u5bfe\u5fdc\u306b\u3057\u305f\u3044\u306a\u3068\u601d\u3063\u3066\u4f5c\u308a\u306a\u304a\u3059\u3053\u3068\u306b\u3057\u307e\u3057\u305f\u3002<\/p>\n

\u305d\u306e\u307e\u3048\u306b\u3001\u3068\u308a\u3042\u3048\u305aPOODLE\u5bfe\u7b56\u306bSSLv3\u3092\u7121\u52b9\u5316\u3057\u3066\u304a\u304d\u307e\u3059(\u5fd8\u308c\u305d\u3046\u306a\u306e\u3067\u3002)<\/p>\n

SSLProtocol all -SSLv2 -SSLv3<\/p>\n

\u2191\u3053\u3093\u306a\u611f\u3058\u3067\u3001conf.d\/ssl.conf\u3092\u5909\u66f4\u3002\u3046\u3061\u306f\u3082\u3068\u3082\u3068-SSLv2\u306e\u307f\u3067\u3057\u305f\u3002<\/p>\n

\u3055\u3066\u3001\u8a3c\u660e\u66f8\u306e\u4f5c\u308a\u76f4\u3057\u3068\u884c\u304d\u305f\u3044\u3068\u3053\u308d\u3067\u3059\u304c\u3001\u3046\u3061\u306e\u8a8d\u8a3c\u6a5f\u95a2(\u30a8\u30f3\u30bf\u30fc\u30d7\u30e9\u30a4\u30baCA\uff1fAD CS\uff1f\u3063\u3066\u3044\u3046\u306e\u304b\u306a\uff1f)\u306f\u3001\u6697\u53f7\u5316\u30b5\u30fc\u30d3\u30b9\u30d7\u30ed\u30d0\u30a4\u30c0(CSP)\u306fsha1\u3067\u4f5c\u3063\u3066\u307e\u3057\u305f\u306d\u3002\u3002\u3002
\n\u203bMicrosoft RSA\/Schannel Cryptographic Provider\u3063\u3066\u3084\u3064\u3067\u3059\u306d\u3002<\/p>\n

\u3042\u3001\u3061\u306a\u307f\u306b\u3046\u3061\u306eDC\u306fWindows Server 2008 R2 Service Pack 1\u3067\u3059\u3002<\/p>\n

\u3053\u3044\u3064\u3092sha256\u306b\u3057\u306a\u3044\u3068\u30fb\u30fb\u30fb<\/p>\n

\u3046\u30fc\u3093\u3002\u4f5c\u308a\u76f4\u3057\uff1f\u306a\u306e\u304b\u306a\u30fc\u3002\u3068\u601d\u3063\u3066\u8abf\u3079\u3066\u307f\u305f\u3089\u3001\u30b3\u30de\u30f3\u30c9\u3067\u3067\u304d\u308b\u6a21\u69d8\uff1f
\n#\u3066\u304bM$\u3055\u3093\u3082\u3001\u81ea\u5206\u3068\u3053\u3068Google\u3067sha1\u3084\u3081\u308b\u307d\u3088\u7684\u306a\u4e8b\u8a00\u3044\u306a\u304c\u3089\u3061\u3087\u3044\u3068\u4e0d\u89aa\u5207\u3058\u3083\u306a\u3044\u3063\u3059\u304b\u306d\u3002\u3002\u3002<\/p>\n

Upgrade Certification Authority to SHA256
\nhttp:\/\/blogs.technet.com\/b\/pki\/archive\/2013\/09\/19\/upgrade-certification-authority-to-sha256.aspx<\/a><\/p>\n

certutil -setreg ca\\csp\\CNGHashAlgorithm SHA256
\nnet stop certsvc
\nnet start certsvc<\/p><\/blockquote>\n

\u3084\u3063\u3066\u307f\u307e\u3059\u305f\u3002<\/p>\n

\u3042\u308c\u3001\u4f55\u3082\u8003\u3048\u305a\u306bCA\u8a3c\u660e\u66f8\u306e\u66f8\u304d\u63db\u3048\u3084\u3063\u3061\u3083\u3063\u305f\u3051\u3069\u3001\u81ea\u52d5\u3067\u51fa\u6765\u3066\u305f\u3063\u307d\u3044\uff1f\uff1f\u3093\u3093\u3002\u3002\u3002<\/p>\n

\u306a\u3093\u304b\u8272\u3005\u3057\u3066\u305f\u3089CA \u8a3c\u660e\u304c\u3044\u3063\u3071\u3044\u306b\u306a\u3063\u305f\u3002\u3002\u3002<\/p>\n

\u3068\u308a\u3042\u3048\u305a\u306a\u3093\u304b\u75b2\u308c\u305f\u306e\u3067\u9069\u5f53\u306b\u3084\u3063\u305f\u3089\u51fa\u6765\u307e\u3057\u305f\u3002<\/p>\n

\u307e\u3060\u307e\u3060\u52c9\u5f37\u4e0d\u8db3\u3067\u3059\u306d\u3048\u3002<\/p>\n

\u3067\u306f\u3067\u306f\u3002\u307e\u305f\u306e\u6a5f\u4f1a\u306b\u3002<\/p>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

\u3069\u3082\u3002\u3053\u3093\u306b\u3061\u306f\u3002 \u307e\u305f\u307e\u305fSSL\u8a3c\u660e\u66f8\u306a\u8a71\u3067\u3059\u3002 \u5148\u65e5\u4f5c\u308a\u306a\u304a\u3057\u305f\u3070\u304b\u308a\u3067\u3059\u304c\u3001\u3084\u3063\u3071\u308asha256\u5bfe\u5fdc\u306b\u3057\u305f\u3044\u306a\u3068\u601d\u3063\u3066\u4f5c\u308a\u306a\u304a\u3059\u3053\u3068\u306b\u3057\u307e\u3057\u305f\u3002 \u305d\u306e\u307e\u3048\u306b\u3001\u3068\u308a\u3042\u3048\u305aPOODLE\u5bfe\u7b56\u306bSSLv3\u3092\u7121\u52b9\u5316\u3057\u3066\u304a\u304d\u307e … \u7d9a\u304d\u3092\u8aad\u3080 \u307e\u305f\u307e\u305fSSL\u8a3c\u660e\u66f8\u306a\u8a71<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[20,5,42,3,44,4,29],"tags":[],"class_list":["post-2384","post","type-post","status-publish","format-standard","hentry","category-it","category-linux","category-windows","category-3","category-44","category-4","category-29"],"jetpack_publicize_connections":[],"jetpack_shortlink":"https:\/\/wp.me\/p4WH5i-Cs","jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2384"}],"version-history":[{"count":3,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2384\/revisions"}],"predecessor-version":[{"id":2388,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/2384\/revisions\/2388"}],"wp:attachment":[{"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2384"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hits-net.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}