$30 off During Our Annual Pro Sale. View Details »

高集積マルチテナントWebサーバの大規模証明書管理 / Large-scale Certificate Management on Highly-integrated Multi-tenant Web Servers

高集積マルチテナントWebサーバの大規模証明書管理 / Large-scale Certificate Management on Highly-integrated Multi-tenant Web Servers

HTTP/2と常時HTTPS時代のWebサーバの効率的なTLS証明書の設定と管理

MATSUMOTO Ryosuke
PRO

May 25, 2017
Tweet

More Decks by MATSUMOTO Ryosuke

Other Decks in Technology

Transcript

  1. )551ͱৗ࣌)5514࣌୅ͷ8FCαʔόͷޮ཰తͳ5-4ূ໌ॻͷઃఆͱ؅ཧ
    দຊ྄հɺࡾ୐༔հɺྗ෢݈࣍ɺ܀ྛ݈ଠ࿠ϖύϘݚڀॴྗ෢݈ٕ࣍ज़࢜ࣄ຿ॴ
    ୈճ৘ใॲཧֶձΠϯλʔωοτͱӡ༻ٕज़ݚڀձ
    ߴूੵϚϧνςφϯτ8FCαʔό
    ͷେن໛ূ໌ॻ؅ཧ

    View Slide

  2. ໨࣍
    wৗ࣌)5514Խͷഎܠͱຊݚڀͷ໨త
    wैདྷͷ8FCαʔόͷূ໌ॻઃఆͷ՝୊
    wߴूੵϚϧνςφϯτ8FCαʔόͷେن໛ূ໌ॻ؅ཧ
    w࣮ݧͱߟ࡯
    w·ͱΊ

    View Slide

  3. ৗ࣌)5514Խͷഎܠͱຊݚڀͷ໨త

    View Slide

  4. ݚڀͷഎܠ
    w)551ͷ3'$࠾୒ͱ࣮༻ԽͷऔΓ૊Έ
    w(PPHMFʹΑΔৗ࣌)5514Խͷਪਐ
    w-FU`T&ODSZQUʹΑΔແྉͷ%7ূ໌ॻͷఏڙ
    wاۀ͚ͩͰͳ͘ݸਓͷ8FCαΠτͷ)5514Խ΋ඞਢ

    View Slide

  5. ߴूੵϚϧνςφϯτํࣜͷ8FCαʔό
    wݸਓͷ8FCαΠτΛϗεςΟϯά͍ͯ͠Δ௿Ձ֨8FC
    ϗεςΟϯάαʔϏεͰ࠾༻͞ΕΔ͜ͱͷଟ͍ํࣜ
    w୯Ұͷ8FCαʔόʹߴूੵʹϗετΛऩ༰
    wϗετ਺ͱϓϩηε਺͕ґଘ͠ͳ͍ΞʔΩςΫνϟ
    w)5514ରԠ΋ਐΊΔඞཁ͕͋Δ

    View Slide

  6. ैདྷͷ8FCαʔόͷূ໌ॻઃఆͱ՝୊
    w8FCαʔόϓϩηεىಈ࣌ʹূ໌ॻΛશͯಡΈࠐΉ
    wূ໌ॻͷ਺͕গͳ͍৔߹͸໰୊ʹͳΒͳ͍
    wߴूੵϚϧνςφϯτ8FCαʔό͸ূ໌ॻ਺͕๲େ
    wϓϩηεͷϝϞϦ࢖༻ྔ͕ϗετ਺ʹඥͮ͘ূ໌ॻ
    ਺ʹґଘ͠ɺੑೳ໘ͱӡ༻໘Ͱ՝୊͕ੜ͡Δ

    View Slide

  7. ຊݚڀͷ໨త
    ߴूੵϚϧνςφϯτ8FCαʔόͷେن໛ূ໌ॻ؅
    ཧΞʔΩςΫνϟͷఏҊ
    wূ໌ॻ਺͕ϓϩηεͷϦιʔε࢖༻ྔʹґଘ͠ͳ͍
    wੑೳ໘ͱӡ༻໘ͷ՝୊Λղܾ➜ޙड़

    View Slide

  8. ैདྷͷ8FCαʔόͷূ໌ॻઃఆͷ໰୊

    View Slide

  9. ैདྷͷ8FCαʔόͷূ໌ॻઃఆ
    wαʔόϓϩηεىಈ࣌ʹূ໌ॻΛϝϞϦʹࣄલಡΈࠐΈ
    wߴूੵϚϧνςφϯτͷ৔߹ূ໌ॻ਺͕૿େ
    wূ໌ॻಡΈࠐΈ਺૿େʹ൐͏ىಈ࣌ؒͱઃఆߦ਺ͷ૿େ
    wϓϩηεͷϝϞϦ࢖༻ྔ૿ՃʹΑΔγεςϜίʔϧͷੑ
    ೳྼԽ

    View Slide

  10. ੑೳ໘ͷ՝୊ɿϓϩηεͷϝϞϦ࢖༻ྔ૿
    ՃʹΑΔγεςϜίʔϧͷੑೳྼԽ

    View Slide

  11. $(*ϓϩάϥϜ࣮ߦ࣌ͷॲཧ
    w8FCϗεςΟϯάͰґવར༻͞ΕΔ$(*
    w-JOVYͰ͸DMPOF
    ͱFYFDWF
    ͕࣮ߦ͞ΕΔ
    wDMPOF
    ͸$PQZPO8SJUFʹΑΓϝϞϦσʔλʹมߋ
    ͕ͳ͍ݶΓϝϞϦίϐʔ͸ੜ͡ͳ͍
    w෺ཧɾ࿦ཧΞυϨεͷରԠ 15&
    ͷίϐʔ͸ඞਢ

    View Slide

  12. $(*࣮ߦํࣜ
    $(*QSPDFTT QIQDHJJOEFYQIQ
    $(*QSPDFTT
    DMPOF

    $P8ʴ15&ͷSBOHFίϐʔ
    UFSNJOBUFQSPDFTT
    FYFDWF

    15&ͷSBOHF࡟আ
    1BSFOUIUUQEQSPDFTT
    PXOFSSPPU

    $IJMEIUUQEQSPDFTT
    PXOFSBQBDIF


    15&ʢ1BHF5BCMF&OUSZ
    ɿϖʔδαΠζ୯ҐͰ΋ͭΤϯτϦɻϓ
    ϩηεͷϝϞϦ࢖༻ྔʹൺྫͯ͠ΤϯτϦ਺΋૿Ճ͢ΔɻϝϞϦ࢖༻
    ྔ͕,#ZUFTͷ৔߹-JOVYͷϖʔδαΠζ͸௨ৗ,CZUFͳͷ
    ͰɺΤϯτϦ਺͸ݸʹͳΔɻ

    View Slide

  13. 15&ͷίϐʔͱ࡟আͷॲཧίετ૿େ
    wϓϩηεͷϝϞϦ࢖༻ྔ૿େˠ15&ͷ਺͕૿େ
    wDMPOF
    ͷ15&ίϐʔॲཧ DPQZ@QUF@SBOHF
    ίετ૿େ
    wFYFDWF
    ͷ15&࡟আॲཧ [BQ@QUF@SBOHF
    ίετ૿େ
    wγεςϜ$16͕$16ϦιʔεΛ઎༗͢Δ
    ➜࣮ݧͷষͰݕূ

    View Slide

  14. ӡ༻໘ͷ՝୊ɿূ໌ॻಡΈࠐΈ਺૿େ
    ʹ൐͏ىಈ࣌ؒͱઃఆߦ਺ͷ૿େ

    View Slide

  15. 8FCαʔόͷઃఆϑΝΠϧߦ਺૿େ
    wϗετ୯ҐͰରԠ͢Δূ໌ॻͷϑΝΠϧΛهड़
    wߴूੵԽʹ൐͍ઃఆϑΝΠϧαΠζͷ૿େ
    wαʔόϓϩηε࠶ىಈ͕࣌ؒϗετ͓Αͼূ໌ॻ਺ʹ
    ґଘͯ͠௕͘ͳΔ
    ➜࣮ݧͷষͰݕূ

    View Slide

  16. ߴूੵϚϧνςφϯτ8FCαʔό
    ͷେن໛ূ໌ॻ؅ཧΞʔΩςΫνϟ

    View Slide

  17. ఏҊख๏
    w4/* 4FSWFS/BNF*OEJDBUJPO
    ֦ுΛར༻
    wαʔόϓϩηεىಈ࣌ʹূ໌ॻ͸ಡΈࠐ·ͳ͍
    wαʔόϓϩηεͷ࠶ىಈ࣌ؒΛ଎͘͢Δ
    w44-5-4ϋϯυγΣΠΫ࣌ʹূ໌ॻΛಈతಡΈࠐΈ
    wϝϞϦ࢖༻ྔΛ௿ݮͤ͞ੑೳྼԽΛ๷͙

    View Slide

  18. 'JMF,74
    IUUQE

    QSPDFTT
    $MJFOU
    4/*ʹΑͬͯTFSWFSOBNF͕FYBNQMFKQͷ
    υϝΠϯʹର͢Δ5-4ϋϯυγΣΠΫ͕։࢝
    5-4ϋϯυγΣΠΫ࣌ʹυϝΠϯFYBNQMFKQʹඥͮ͘
    ূ໌ॻͱൿີ伴ΛϑΝΠϧ΍,FZ7BMVF4UPSF ,74

    ͔ΒಈతʹಡΈࠐΜͰ͔ΒΫϥΠΞϯτͱॲཧܧଓ

    View Slide

  19. 'JMF,74
    IUUQE

    QSPDFTT
    $MJFOU
    0QFO44-όʔδϣϯҎ߱
    44-@$59@TFU@DFSU@DC
    ͱ͍͏5-4ϋϯυγΣΠΫ࣌
    ʹ೚ҙͷؔ਺ΛίʔϧόοΫ͢Δػೳ͕௥Ճ
    ίʔϧόοΫؔ਺ͷதͰυϝΠϯͱඥͮ͘αʔόূ໌ॻ
    ͱൿີ伴ΛಡΈࠐΈޙϋϯυγΣΠΫΛܧଓͯ͠ॲཧ

    View Slide

  20. ࣮૷
    wOHY@NSVCZʹ5-4ϋϯυγΣΠΫϑοΫΛ௥Ճ
    w5-4ϋϯυγΣΠΫ࣌ʹ3VCZͷίʔυ͕࣮ߦ
    w3VCZϝιουͱ0QFO44-ͷίʔϧόοΫΛCJOEJOH
    wαʔόূ໌ॻ౳͸ىಈ࣌ʹ͸ಡΈࠐ·ͳ͍

    View Slide

  21. ϦΫΤετ͞ΕͨυϝΠϯ͔Βಈతʹূ໌ॻΛ
    ಡΈସ͑Δ͜ͱʹΑΓ୯Ұͷઃఆʹू໿Մೳ
    ϑΝΠϧϕʔεͷಈతূ໌ॻಡΈࠐΈྫ
    3VCZͰϓϩάϥϚϒϧʹهड़Մೳ

    View Slide

  22. ϦΫΤετ͞ΕͨυϝΠϯ͔Βಈతʹূ໌ॻΛ
    ಡΈସ͑Δ͜ͱʹΑΓ୯Ұͷઃఆʹू໿Մೳ
    ,74ϕʔεͷಈతূ໌ॻಡΈࠐΈྫ

    View Slide

  23. ࣮ݧͱߟ࡯

    View Slide

  24. ࣮ݧͱධՁ
    wैདྷख๏ͷϝϞϦ࢖༻ྔͱىಈ࣌ؒͷݕূ
    wैདྷख๏ͷϝϞϦ࢖༻ྔͱੑೳͷݕূ
    wఏҊख๏ͷੑೳධՁ
    wಈతಡΈࠐΈͷΦʔόʔϔου͸ʁ

    View Slide

  25. ࣮ݧ؀ڥ
    ࢓༷
    $16 *OUFM9FPO&W()[DPSF
    .FNPSZ (CZUFT
    4FSWFS /&$&YQSFTT3G&
    04 $FOU04-JOVY,FSOFM

    View Slide

  26. ैདྷͷϝϞϦ࢖༻ྔͱىಈ࣌ؒͷݕূ
    wສϗετ෼ͷCJUTͷ伴௕ͷൿີ伴ͱαʔόূ
    ໌ॻΛOHJOYόʔδϣϯͰಡΈࠐΈ
    ߲໨ ஋
    ϓϩηεىಈͷ࣮࣌ؒ ඵ
    ϓϩηεىಈͷϢʔβ$16࢖༻࣌ؒ ඵ
    ϓϩηεىಈͷγεςϜ$16࢖༻࣌ؒ ඵ
    ϓϩηεͷϝϞϦ࢖༻ྔʢ344
    .CZUFT

    View Slide

  27. ैདྷख๏ͷϝϞϦ࢖༻ྔͱੑೳͷݕূ
    wࣗࣾϗεςΟϯάαʔϏε؀ڥͷऩ༰਺ͱϝϞϦ࢖༻
    ྔʹج͍ͯγεςϜίʔϧͷੑೳΛௐࠪ
    ϗετऩ༰਺ ϓϩηεͷϝϞϦ࢖༻ྔʢ344
    DMPOF
    γεςϜίʔϧͷ࣮ߦ࣌ؒ
    ,#ZUFT TFD
    ,#ZUFT TFD
    ,#ZUFT TFD
    ϓϩηε͋ͨΓDMPOF
    ͰTFDɺFYFDWF
    ͰTFD$16Λ઎༗͢Δͱ
    ඵؒʹ࠷େϦΫΤετ͔͠ॲཧͰ͖ͳ͍
    ʢ࣮࣭$(*ͷίϯςϯπॲཧ΋ؚΊΔͱॲཧͷ͍ܰ$(*Ͱ਺ϦΫΤετTFDʣ

    View Slide

  28. ϓϩηεͷϝϞϦ࢖༻ྔ(#࣌ͷෛՙঢ়ଶ
    $(*ʹΞΫηεूத࣌ͷQFSGʹΑΔΧʔωϧͷγϯϘϧ΋ؚΊͨෛՙঢ়ଶ
    Χʔωϧͷ15&ૢ࡞ؔ਺ͷॲཧ͕$16શମͷΛ઎Ί͍ͯΔ

    View Slide

  29. ఏҊख๏ͷੑೳධՁ
    wैདྷͷࣄલূ໌ॻಡΈࠐΈख๏ͱఏҊख๏ͷ5-4ϋϯυ
    γΣΠΫ࣌ʹಈతʹಡΈࠐΉख๏ ,74ϕʔε
    ͱൺֱ
    wಉ࣌઀ଓ਺ΛมԽͤ͞ͳ͕ΒੑೳΛධՁ
    wOHJOYʹॳظಉ෧͞Ε͍ͯΔ#ZUFTͷJOEFYIUNM
    wDJQIFSTVJUFT͸&$%)&34""&4($.4)"

    View Slide

  30. ఏҊํࣜͱैདྷํࣜͷൺֱ
    ಉ࣌઀ଓ਺
    ఏҊํࣜ
    EZOBNJDMPBE
    SFRTFD

    ैདྷํࣜ
    QSFMPBE
    SFRTFD





    $(*ͷΑ͏ͳϓϩηεෳ੡͕ੜ͡ͳ͍ܰྔͳ੩తϑΝΠϧ΁ͷϦΫΤετͰ΋ɺ
    ূ໌ॻͷಈతಡΈࠐΈ͸ैདྷख๏ͷ੩తಡΈࠐΈͱൺֱͯ͠΋΄΅͕ࠩͳ͍

    View Slide

  31. ߟ࡯
    w5-4΍Ϩεϙϯεੜ੒ॲཧͱൺֱͯ͠ಈతূ໌ॻಡΈ
    ࠐΈॲཧ͸࣮༻্໰୊ʹͳΒͳ͍ఔ౓ͷίετ
    wىಈ࣌ͷϝϞϦ࢖༻ྔ͸ূ໌ॻΛಡΈࠐ·ͳ͍৔߹ͱ
    ಉఔ౓

    View Slide

  32. ·ͱΊ

    View Slide

  33. ·ͱΊ
    wߴूੵϚϧνςφϯτํࣜͷ8FCαʔόʹ͓͚Δαʔ
    όূ໌ॻͷಡΈࠐΈํࣜͷ՝୊Λղܾ
    wαʔόϓϩηεىಈ࣌ʹࣄલʹಡΈࠐΉͷͰ͸ͳ͘
    5-4ϋϯυγΣΠΫ࣌ʹϑΝΠϧ΍,74͔ΒυϝΠϯ
    ʹରԠͨ͠ূ໌ॻΛಈతʹಡΈࠐΉํࣜ
    wಈతಡΈࠐΈͷੑೳ΋࣮༻্໰୊ͷͳ͍Ϩϕϧ

    View Slide