Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
高集積マルチテナントWebサーバの大規模証明書管理 / Large-scale Certificate Management on Highly-integrated Multi-tenant Web Servers
MATSUMOTO Ryosuke
PRO
May 25, 2017
Technology
5
2.8k
高集積マルチテナントWebサーバの大規模証明書管理 / Large-scale Certificate Management on Highly-integrated Multi-tenant Web Servers
HTTP/2と常時HTTPS時代のWebサーバの効率的なTLS証明書の設定と管理
MATSUMOTO Ryosuke
PRO
May 25, 2017
Tweet
Share
More Decks by MATSUMOTO Ryosuke
See All by MATSUMOTO Ryosuke
matsumoto_r
PRO
1
180
matsumoto_r
PRO
7
1.8k
matsumoto_r
PRO
0
410
matsumoto_r
PRO
3
3k
matsumoto_r
PRO
4
300
matsumoto_r
PRO
1
580
matsumoto_r
PRO
1
340
matsumoto_r
PRO
0
560
matsumoto_r
PRO
0
140
Other Decks in Technology
See All in Technology
sakon310
4
4.2k
saoritakita
0
350
yokatsuki
1
190
tsuyo
0
180
opelab
2
290
yosuke_matsuura
PRO
0
3.3k
vkbaba
0
130
zaki134rp
1
180
caori_t
0
160
sumi
0
270
nihonbuson
2
1.7k
shomaekawa
3
1.2k
Featured
See All Featured
ddemaree
274
31k
jlugia
216
16k
sstephenson
144
12k
searls
204
35k
smashingmag
283
47k
bryan
30
3.3k
zakiwarfel
88
3.3k
afnizarnur
176
14k
mthomps
39
2.3k
denniskardys
220
120k
hannesfritz
27
930
sachag
446
36k
Transcript
)551ͱৗ࣌)5514࣌ͷ8FCαʔόͷޮతͳ5-4ূ໌ॻͷઃఆͱཧ দຊ྄հɺࡾ༔հɺྗ݈࣍ ɺ܀ྛ݈ଠϖύϘݚڀॴ ྗ݈ٕ࣍ज़࢜ࣄॴ ୈճใॲཧֶձΠϯλʔωοτͱӡ༻ٕज़ݚڀձ ߴूੵϚϧνςφϯτ8FCαʔό ͷେنূ໌ॻཧ
࣍ wৗ࣌)5514Խͷഎܠͱຊݚڀͷత wैདྷͷ8FCαʔόͷূ໌ॻઃఆͷ՝ wߴूੵϚϧνςφϯτ8FCαʔόͷେنূ໌ॻཧ w࣮ݧͱߟ w·ͱΊ
ৗ࣌)5514Խͷഎܠͱຊݚڀͷత
ݚڀͷഎܠ w)551ͷ3'$࠾ͱ࣮༻ԽͷऔΓΈ w(PPHMFʹΑΔৗ࣌)5514Խͷਪਐ w-FU`T&ODSZQUʹΑΔແྉͷ%7ূ໌ॻͷఏڙ wاۀ͚ͩͰͳ͘ݸਓͷ8FCαΠτͷ)5514Խඞਢ
ߴूੵϚϧνςφϯτํࣜͷ8FCαʔό wݸਓͷ8FCαΠτΛϗεςΟϯά͍ͯ͠ΔՁ֨8FC ϗεςΟϯάαʔϏεͰ࠾༻͞ΕΔ͜ͱͷଟ͍ํࣜ w୯Ұͷ8FCαʔόʹߴूੵʹϗετΛऩ༰ wϗετͱϓϩηε͕ґଘ͠ͳ͍ΞʔΩςΫνϟ w)5514ରԠਐΊΔඞཁ͕͋Δ
ैདྷͷ8FCαʔόͷূ໌ॻઃఆͱ՝ w8FCαʔόϓϩηεىಈ࣌ʹূ໌ॻΛશͯಡΈࠐΉ wূ໌ॻͷ͕গͳ͍߹ʹͳΒͳ͍ wߴूੵϚϧνςφϯτ8FCαʔόূ໌ॻ͕େ wϓϩηεͷϝϞϦ༻ྔ͕ϗετʹඥͮ͘ূ໌ॻ ʹґଘ͠ɺੑೳ໘ͱӡ༻໘Ͱ՝͕ੜ͡Δ
ຊݚڀͷత ߴूੵϚϧνςφϯτ8FCαʔόͷେنূ໌ॻ ཧΞʔΩςΫνϟͷఏҊ wূ໌ॻ͕ϓϩηεͷϦιʔε༻ྔʹґଘ͠ͳ͍ wੑೳ໘ͱӡ༻໘ͷ՝Λղܾ➜ޙड़
ैདྷͷ8FCαʔόͷূ໌ॻઃఆͷ
ैདྷͷ8FCαʔόͷূ໌ॻઃఆ wαʔόϓϩηεىಈ࣌ʹূ໌ॻΛϝϞϦʹࣄલಡΈࠐΈ wߴूੵϚϧνςφϯτͷ߹ূ໌ॻ͕૿େ wূ໌ॻಡΈࠐΈ૿େʹ͏ىಈ࣌ؒͱઃఆߦͷ૿େ wϓϩηεͷϝϞϦ༻ྔ૿ՃʹΑΔγεςϜίʔϧͷੑ ೳྼԽ
ੑೳ໘ͷ՝ɿϓϩηεͷϝϞϦ༻ྔ૿ ՃʹΑΔγεςϜίʔϧͷੑೳྼԽ
$(*ϓϩάϥϜ࣮ߦ࣌ͷॲཧ w8FCϗεςΟϯάͰґવར༻͞ΕΔ$(* w-JOVYͰDMPOF ͱFYFDWF ͕࣮ߦ͞ΕΔ wDMPOF $PQZPO8SJUFʹΑΓϝϞϦσʔλʹมߋ ͕ͳ͍ݶΓϝϞϦίϐʔੜ͡ͳ͍ wཧɾཧΞυϨεͷରԠ 15&
ͷίϐʔඞਢ
$(*࣮ߦํࣜ $(*QSPDFTT QIQDHJJOEFYQIQ $(*QSPDFTT DMPOF $P8ʴ15&ͷSBOHFίϐʔ UFSNJOBUFQSPDFTT FYFDWF
15&ͷSBOHFআ 1BSFOUIUUQEQSPDFTT PXOFSSPPU $IJMEIUUQEQSPDFTT PXOFSBQBDIF 15&ʢ1BHF5BCMF&OUSZ ɿϖʔδαΠζ୯ҐͰͭΤϯτϦɻϓ ϩηεͷϝϞϦ༻ྔʹൺྫͯ͠ΤϯτϦ૿Ճ͢ΔɻϝϞϦ༻ ྔ͕,#ZUFTͷ߹-JOVYͷϖʔδαΠζ௨ৗ,CZUFͳͷ ͰɺΤϯτϦݸʹͳΔɻ
15&ͷίϐʔͱআͷॲཧίετ૿େ wϓϩηεͷϝϞϦ༻ྔ૿େˠ15&ͷ͕૿େ wDMPOF ͷ15&ίϐʔॲཧ DPQZ@QUF@SBOHF ίετ૿େ wFYFDWF ͷ15&আॲཧ [BQ@QUF@SBOHF ίετ૿େ
wγεςϜ$16͕$16ϦιʔεΛ༗͢Δ ➜࣮ݧͷষͰݕূ
ӡ༻໘ͷ՝ɿূ໌ॻಡΈࠐΈ૿େ ʹ͏ىಈ࣌ؒͱઃఆߦͷ૿େ
8FCαʔόͷઃఆϑΝΠϧߦ૿େ wϗετ୯ҐͰରԠ͢Δূ໌ॻͷϑΝΠϧΛهड़ wߴूੵԽʹ͍ઃఆϑΝΠϧαΠζͷ૿େ wαʔόϓϩηε࠶ىಈ͕࣌ؒϗετ͓Αͼূ໌ॻʹ ґଘͯ͘͠ͳΔ ➜࣮ݧͷষͰݕূ
ߴूੵϚϧνςφϯτ8FCαʔό ͷେنূ໌ॻཧΞʔΩςΫνϟ
ఏҊख๏ w4/* 4FSWFS/BNF*OEJDBUJPO ֦ுΛར༻ wαʔόϓϩηεىಈ࣌ʹূ໌ॻಡΈࠐ·ͳ͍ wαʔόϓϩηεͷ࠶ىಈ࣌ؒΛ͘͢Δ w44-5-4ϋϯυγΣΠΫ࣌ʹূ໌ॻΛಈతಡΈࠐΈ wϝϞϦ༻ྔΛݮͤ͞ੑೳྼԽΛ͙
'JMF,74 IUUQE QSPDFTT $MJFOU 4/*ʹΑͬͯTFSWFSOBNF͕FYBNQMFKQͷ υϝΠϯʹର͢Δ5-4ϋϯυγΣΠΫ͕։࢝ 5-4ϋϯυγΣΠΫ࣌ʹυϝΠϯFYBNQMFKQʹඥͮ͘ ূ໌ॻͱൿີ伴ΛϑΝΠϧ,FZ7BMVF4UPSF ,74 ͔ΒಈతʹಡΈࠐΜͰ͔ΒΫϥΠΞϯτͱॲཧܧଓ
'JMF,74 IUUQE QSPDFTT $MJFOU 0QFO44-όʔδϣϯҎ߱ 44-@$59@TFU@DFSU@DC ͱ͍͏5-4ϋϯυγΣΠΫ࣌ ʹҙͷؔΛίʔϧόοΫ͢Δػೳ͕Ճ ίʔϧόοΫؔͷதͰυϝΠϯͱඥͮ͘αʔόূ໌ॻ ͱൿີ伴ΛಡΈࠐΈޙϋϯυγΣΠΫΛܧଓͯ͠ॲཧ
࣮ wOHY@NSVCZʹ5-4ϋϯυγΣΠΫϑοΫΛՃ w5-4ϋϯυγΣΠΫ࣌ʹ3VCZͷίʔυ͕࣮ߦ w3VCZϝιουͱ0QFO44-ͷίʔϧόοΫΛCJOEJOH wαʔόূ໌ॻىಈ࣌ʹಡΈࠐ·ͳ͍
ϦΫΤετ͞ΕͨυϝΠϯ͔Βಈతʹূ໌ॻΛ ಡΈସ͑Δ͜ͱʹΑΓ୯ҰͷઃఆʹूՄೳ ϑΝΠϧϕʔεͷಈతূ໌ॻಡΈࠐΈྫ 3VCZͰϓϩάϥϚϒϧʹهड़Մೳ
ϦΫΤετ͞ΕͨυϝΠϯ͔Βಈతʹূ໌ॻΛ ಡΈସ͑Δ͜ͱʹΑΓ୯ҰͷઃఆʹूՄೳ ,74ϕʔεͷಈతূ໌ॻಡΈࠐΈྫ
࣮ݧͱߟ
࣮ݧͱධՁ wैདྷख๏ͷϝϞϦ༻ྔͱىಈ࣌ؒͷݕূ wैདྷख๏ͷϝϞϦ༻ྔͱੑೳͷݕূ wఏҊख๏ͷੑೳධՁ wಈతಡΈࠐΈͷΦʔόʔϔουʁ
࣮ݧڥ ༷ $16 *OUFM9FPO&W()[DPSF .FNPSZ (CZUFT 4FSWFS /&$&YQSFTT3G& 04 $FOU04-JOVY,FSOFM
ैདྷͷϝϞϦ༻ྔͱىಈ࣌ؒͷݕূ wສϗετͷCJUTͷ伴ͷൿີ伴ͱαʔόূ ໌ॻΛOHJOYόʔδϣϯͰಡΈࠐΈ ߲ ϓϩηεىಈͷ࣮࣌ؒ ඵ ϓϩηεىಈͷϢʔβ$16༻࣌ؒ ඵ ϓϩηεىಈͷγεςϜ$16༻࣌ؒ
ඵ ϓϩηεͷϝϞϦ༻ྔʢ344 .CZUFT
ैདྷख๏ͷϝϞϦ༻ྔͱੑೳͷݕূ wࣗࣾϗεςΟϯάαʔϏεڥͷऩ༰ͱϝϞϦ༻ ྔʹج͍ͯγεςϜίʔϧͷੑೳΛௐࠪ ϗετऩ༰ ϓϩηεͷϝϞϦ༻ྔʢ344 DMPOF γεςϜίʔϧͷ࣮ߦ࣌ؒ ,#ZUFT TFD
,#ZUFT TFD ,#ZUFT TFD ϓϩηε͋ͨΓDMPOF ͰTFDɺFYFDWF ͰTFD$16Λ༗͢Δͱ ඵؒʹ࠷େϦΫΤετ͔͠ॲཧͰ͖ͳ͍ ʢ࣮࣭$(*ͷίϯςϯπॲཧؚΊΔͱॲཧͷ͍ܰ$(*ͰϦΫΤετTFDʣ
ϓϩηεͷϝϞϦ༻ྔ(#࣌ͷෛՙঢ়ଶ $(*ʹΞΫηεूத࣌ͷQFSGʹΑΔΧʔωϧͷγϯϘϧؚΊͨෛՙঢ়ଶ Χʔωϧͷ15&ૢ࡞ؔͷॲཧ͕$16શମͷΛΊ͍ͯΔ
ఏҊख๏ͷੑೳධՁ wैདྷͷࣄલূ໌ॻಡΈࠐΈख๏ͱఏҊख๏ͷ5-4ϋϯυ γΣΠΫ࣌ʹಈతʹಡΈࠐΉख๏ ,74ϕʔε ͱൺֱ wಉ࣌ଓΛมԽͤ͞ͳ͕ΒੑೳΛධՁ wOHJOYʹॳظಉ෧͞Ε͍ͯΔ#ZUFTͷJOEFYIUNM wDJQIFSTVJUFT&$%)&34""&4($.4)"
ఏҊํࣜͱैདྷํࣜͷൺֱ ಉ࣌ଓ ఏҊํࣜ EZOBNJDMPBE SFRTFD ैདྷํࣜ QSFMPBE SFRTFD
$(*ͷΑ͏ͳϓϩηεෳ͕ੜ͡ͳ͍ܰྔͳ੩తϑΝΠϧͷϦΫΤετͰɺ ূ໌ॻͷಈతಡΈࠐΈैདྷख๏ͷ੩తಡΈࠐΈͱൺֱͯ͠΄΅͕ࠩͳ͍
ߟ w5-4Ϩεϙϯεੜॲཧͱൺֱͯ͠ಈతূ໌ॻಡΈ ࠐΈॲཧ࣮༻্ʹͳΒͳ͍ఔͷίετ wىಈ࣌ͷϝϞϦ༻ྔূ໌ॻΛಡΈࠐ·ͳ͍߹ͱ ಉఔ
·ͱΊ
·ͱΊ wߴूੵϚϧνςφϯτํࣜͷ8FCαʔόʹ͓͚Δαʔ όূ໌ॻͷಡΈࠐΈํࣜͷ՝Λղܾ wαʔόϓϩηεىಈ࣌ʹࣄલʹಡΈࠐΉͷͰͳ͘ 5-4ϋϯυγΣΠΫ࣌ʹϑΝΠϧ,74͔ΒυϝΠϯ ʹରԠͨ͠ূ໌ॻΛಈతʹಡΈࠐΉํࣜ wಈతಡΈࠐΈͷੑೳ࣮༻্ͷͳ͍Ϩϕϧ