SSl と仲良くなるやり方

ࡾπ໦ݡҰ(.01&1"#0JOD ϖύϘςοΫΧϯϑΝϨϯε 44-ͱ஥ྑ͘ͳΔ΍Γํ

ΠϯϑϥΤϯδχΞ ࡾπ໦ݡҰ!NJDLFZ ٕज़෦Πϯϑϥάϧʔϓ

Χϥʔϛʔγϣοϓ

44-ͬͯͳΜͩΖ͏ʁ

44-Λར༻͢Δͱ

৘ใͷվ͟Μ

৘ใͷ౪Έݟ

Λ๷͙ࣄ͕Ͱ͖·͢

͜ΕΛͲ͏΍࣮ͬͯݱͨ͠ͷ͔ʁ

࣮૷ͷঢ়گ wαϒυϝΠϯͷৗ࣌44-Խ wATIPQQSPKQAυϝΠϯ ͨͱ͑͹ɼFYBNQMFTIPQ QSPKQ౳ ͷৗ࣌44-ԽΛߦ͍·͢ wಠࣗυϝΠϯ FYBNQMFDPN౳ ͷৗ࣌44-Խ wಠࣗυϝΠϯ
FYBNQMFDPN౳ ͷৗ࣌44-Խ

શମͷߏ੒

ߏ੒ Ҏલͷߏ੒ ࠓͷߏ੒ -PBE#BMBODFS "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS -PBE#BMBODFS 3FWFSTF
1SPYZ 3FWFSTF 1SPYZ "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS

-PBE#BMBODFS 3FWFSTF 1SPYZ 3FWFSTF 1SPYZ "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS ಛ௃
-PBE#BMBODFS 3FWFSTF 1SPYZ 3FWFSTF 1SPYZ "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS

1SPYZΛஔ͍ͨཧ༝ wେྔͷূ໌ॻΛ؅ཧͨ࣌͠ɼϝϞϦফඅྔ͕૿͑ͯ͠·͏ wେྔʹূ໌ॻΛಡΈࠐΉͷͰɼ̍ͭͷϓϩηε͋ͨΓ ͷϝϞϦফඅྔ͕૿͑·͢ ϓϩηε .BOBHFS ϓϩηε ϓϩηε

1SPYZΛஔ͍ͨཧ༝ w"QBDIF͸ϦΫΤετ͝ͱʹɼϓϩηε͕૿͑·͢ wͳͷͰɼϓϩηε͕ଠ͍ͬͯΔͱશମͱͯ͠ϝϞϦফඅ ྔ͕૿͑·͢ ϓϩηε .BOBHFS ϓϩηε ϓϩηε

1SPYZΛஔ͍ͨཧ༝ wOHJOYͩͱɼ୯ҰͷϓϩηεͰϦΫΤετΛॲཧ͢Δํ ࣜͷͳͷͰɼϝϞϦফඅྔ͕૿͑·ͤΜ w·ͨɼࠓޙɼಠࣗυϝΠϯͷৗ࣌44-ରԠͰɼ OHY@NSVCZΛ༻͍ͨಈతͳূ໌ॻͷಡΈࠐΈΛߦ͍ͨ ͔͔ͬͨΒͰ͢

ͭͷ೰Έ͕͋Γ·ͨ͠

ύϑΥʔϚϯε

ύϑΥʔϚϯε΁ͷݒ೦ w1SPYZͷΦʔόʔϔου w1SPYZͱ"QQMJDBUJPOαʔόʔͷ௨৴͕༨ܭʹൃੜ͢Δࣄ ʹΑΔϨΠςϯγͷ૿Ճ w44-Խʹͱ΋ͳ͏Φʔόʔϔου w҉߸Խͱ෮߸ʹϦιʔεΛফඅ͢ΔࣄʹΑΔεϧʔϓοτͷ ௿Լ w44-ͷηογϣϯͷཱ֬ʹΑΔϨΠςϯγͷ૿Ճ

ҰͭҰͭݕূ͍͖ͯ͠·ͨ͠

ݕূํ๏ wෛՙࢼݧΛ࣮ࢪ͠ɼεϧʔϓοτͱϨΠςϯγΛௐࠪ͠·ͨ͠ wෳ਺ͷαʔόʔ͔ΒෛՙΛ͔͚ΔͨΊɼ-0$645 IUUQ MPDVTUJP ͱ͍͏πʔϧΛ༻͍·ͨ͠

1SPYZʹΑΔΦʔόʔϔου w ݕূͨ݁͠Ռɼ΄ͱΜͲѱԽ ͠·ͤΜͰͨ͠ w 1SPYZͱ"QQMJDBUJPO4FSWFS ͕ಉ͡%$ʹ͔͋ͬͨΒͰ͢ -PBE#BMBODFS 3FWFSTF 1SPYZ
3FWFSTF 1SPYZ "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS %BUB$FOUFS

҉߸Խ෮߸ԽʹΑΔΦʔόʔϔου wௐࠪͨ͠ͱ͜Ζɼ҉߸Խͱ෮߸Խʹ͙Β͍$16ར༻཰ ͕૿Ճ͢Δͱ͍͏͜ͱͰͨ͠ w࣮ࡍʹෛՙࢼݧΛͯ͠Έͨͱ͜Ζɼ1SPYZࣗମͷෛՙ͕େ ͖͘ͳΔ͜ͱ͸͋Γ·ͤΜͰͨ͠ IUUQTXXXJNQFSJBMWJPMFUPSHPWFSDMPDLJOHTTMIUNM

࢒Γ͸ηογϣϯཱ֬ͷΦʔόʔϔου

ηογϣϯཱ֬ͷΦʔόʔϔου )551 44- )5514 GET / Client Server HTTP 3FTQPODF
Client Hello TLS/SSL Session Establish Client Server Server Hello Certiﬁcate Server Key Exchange Server Hello Done Client Key Exchange Change Cipher Spec Finished Change Cipher Spec Finished GET / HTTP 3FTQPODF

ͲͷΑ͏ʹղফͨ͠ͷ͔

4FTTJPO3FTVNQUJPO wҰ౓ཱ֬ͨ͠ηογϣϯΛ࠶ར༻͢ΔͨΊͷ࢓૊ΈͰ͢ wҎԼͷछྨ͕͋Γ·͢ wαʔόʔଆͰηογϣϯ৘ใΛ֮͑Δํࣜ w4FTTJPO$BDIF wΫϥΠΞϯτଆͰηογϣϯ৘ใΛ֮͑Δํࣜ w4FTTJPO5JDLFU

4FTTJPO$BDIF w44-ͷηογϣϯͷཱ֬ʹඞཁͳ৘ใΛ$BDIF͢Δ ΋ͷͰ͢ wෳ਺ͷαʔόʔΛར༻͢ΔͳΒɼԿΒ͔ͷํ๏Ͱ $BDIFΛڞ༗͢Δඞཁ͕͋Γ·͢ w/HJOYͰ͸ɼ͜ͷڞ༗ͷͨΊͷ࢓૊ʹରԠ͍ͯ͠· ͤΜ

4FTTJPO5JDLFU w 4FSWFS͕อଘ͢Δηογϣϯ৘ใΛ ҉߸Խͯ͠ɼΫϥΠΞϯτʹૹΓɼΫ ϥΠΞϯτ͕ηογϣϯΛΩϟογϡ ͢Δͱ͍͏࢓૊ΈͰ͢ Client Hello TLS/SSL Session
Establish Client Server Server Hello Finished Finished New Session Ticket

4FTTJPO5JDLFU w࠶։͢Δ࣌͸ɼ w$MJFOU͕$MJFOU)FMMPͱͱ ΋ʹ4FTTJPO5JDLFUΛ 4FSWFSʹૹΔ wͦͷޙɼෳ߹ͱݕূʹ੒ޭ͢ Ε͹ηογϣϯΛ࠶։͢Δ Client Hello TLS/SSL
Session Establish Client Server Server Hello Change Cipher Spec Finished Change Cipher Spec Finished Session Ticket

4FTTJPO5JDLFULFZͷఆظతͳߋ৽ w4FTTJPO5JDLFULFZ͕࿙Ӯ͢Δͱɼ44-௨৴͕ղಡͰ͖ͯ͠· ͍·͢ w͜ͷͨΊɼ4FTTJPO5JDLFULFZ͸ɼ೔ఔ౓Ͱߋ৽͢Δ͜ͱ͕ਪ ঑͞Ε͍ͯ·͢ wגࣜձࣾϝϧΧϦͷ$POTVMΛར༻ͨ͠ࣄྫΛࢀߟʹ̍೔ຖʹߋ ৽͍ͯ͠·͢ IUUQUFDINFSDBSJDPNFOUSZ

ৗ࣌44-Խ͍ͯ͠ͳ͍αʔό ৗ࣌44-Խͨ͠αʔό ݱ࣮ͷύϑΥʔϚϯε w44-Խ͢Δલͱಉ౳ͱϨΠςϯγʹͳΓ·ͨ͠

44-ͷධՁ w44-Λ҆શੑͳͲͰධՁͨ͠ͱ͜Ζɼ" Ͱͨ͠

·ͱΊ

·ͱΊ w44-ͱ஥ྑ͘͢Δʹ͸͍͔ͭ͘ͷίπ͕ඞ༻Ͱ͢ w͜ͷൃදͰ͸ɼେྔͷূ໌ॻΛѻ͏ͳΒɼOHJOYΛར༻ͨ͠΄͏͕ྑ͍͜ ͱ w·ͨɼOHY@NSVCZΛར༻͢Ε͹ɼಈతʹূ໌ॻΛಡΈࠐΊΔ͜ͱ wύϑΥʔϚϯεΛམͱ͞ͳ͍ͨΊʹ4FTTJPO5DJLFU౳Λར༻ͨ͠΄͏͕ྑ ͍ wʹ͍ͭͯ঺հ͠·ͨ͠

ࠓޙ͸ wಠࣗυϝΠϯʹ͓͚Δৗ࣌44-ͷఏڙʹ޲͚ɼ։ൃΛਐΊ ͍͖ͯ·͢ w·ͨɼͲ͔͜ͰɼಠࣗυϝΠϯͷ࣌ͷ޻෉Λ঺հͰ͖ͨΒͱ ࢥ͍·͢

SSl と仲良くなるやり方

SSl と仲良くなるやり方

More Decks by mickey

Other Decks in Technology

Featured

Transcript