nginxにおける大量ドメインの証明書を動的に処理する方法
OHJOYʹ͓͚ΔେྔυϝΠϯͷূ໌ॻΛಈతʹॲཧ͢Δํ๏GMO Pepabo, Inc.ٕज़ج൫νʔϜ γχΞɾϓϦϯγύϧΤϯδχΞMATSUMOTO, Ryosuke@matsumotory2016/01/29 ٕࣾज़ڞ༗ࢿྉ1'4Λߟྀͨ͠5-4ऴͱ[email protected]ʹΑΔେྔυϝΠϯઃఆͷޮԽ
View Slide
࣍ 1FSGFDU'PSXBSE4FDSFDZʢ1'4ʣ 1'4Λຬͨ͢伴ަํࣜ '4Λຬͨ͢5-4ηογϣϯΩϟογϡ [email protected]ʹΑΔಈతূ໌ॻಡΈࠐΈ [email protected]ʹΑΔಈతϦόʔεϓϩΩγ ·ͱΊ
લఏɿલͷ1'4Λߟྀͨ͠OHJOYͷઃఆͱɺޙͷυϝΠϯ͕େྔʹ͋Δ߹ͷ[email protected]Λར༻ͨ͠ূ໌ॻͱϦόʔεϓϩΩγͷઃఆ͚ͯ׆༻͢Δ͜ͱ͕ग़དྷ·͢ɻ
1FSGFDU'PSXBSE4FDSFDZ
1FSGFDU'PSXBSE4FDSFDZ˞Ҏ߱1'4ͱলུ˞5-4ηογϣϯͷ߹ ൿີ伴͕࿙Ӯͯ͠աڈͷ௨৴͕ղಡͰ͖ͳ͍ঢ়ଶ શͯͷ5-4ηογϣϯͰҟͳΔൿີ伴Λ͏ ҉߸Խ͞Εͨ௨৴Λͻͨ͢ΒஷΊ͜ΜͰͲ͔͜Ͱൿີ伴ΛಘͨΒͦͷશͯͷ௨৴ΛղੳՄೳͱ͍͏ঢ়ଶඇৗʹ·͍ͣͱ͍͏ͷରࡦ
5-4Ͱ1'4͋Δ͍'4Λຬͨ͢ʹ 1'4ʹରԠͨ͠DJQIFSTVJUFTͷબ '4Λߟྀͨ͠5-4ηογϣϯΩϟογϡํࣜΛબ ΫϥελߏΠϕϯτυϦϒϯʹΑΔ࣮ͷߟྀ8FCαʔϏεͰͪΌΜͱΖ͏ͱ͢Δͱҙ֎ͱେม
1'4Λຬͨ͢伴ަํࣜ
1'4Λຬͨ͢伴ަ &%)&$%)&伴ަํࣜΛ͏ ηογϣϯຖʹϥϯμϜͳ伴Λ༻ ΫϥΠΞϯτɾαʔόͦΕͧΕͰҟͳΔ伴Λ༻ OHJOYͰͷ伴ަઃఆ OHJOYͩͱ[email protected]σΟϨΫςΟϒ DJQIFSTTVJUFTΛαʔόଆͰࢦఆ͢ΔͳͲ
OHJOYͷؔ࿈σΟϨΫςΟϒSFGIUUQTXFBLEIPSHTZTBENJOIUNM
'4Λຬͨ͢5-4ηογϣϯΩϟογϡ
5-4ηογϣϯΩϟογϡͷछྨ 4FTTJPOSFTVNQUJPO αʔόɾΫϥΠΞϯτͰڞ௨伴ΛΩϟογϡ 4FTTJPOUJDLFU ΫϥΠΞϯτͰڞ௨伴Λνέοτͱͯ͠อଘ αʔόଆͰΩϟογϡΛ࣋ͭඞཁͳ͠ Ϋϥελߏ࣌ʹศར
4FTTJPOSFTVNQUJPO Ϋϥελ࣌ʹΩϟογϡΛαʔόؒͰڞ༗ OHJOYͰαʔόؒڞ༗ʹରԠ͍ͯ͠ͳ͍ ΠϕϯτυϦϒϯαʔόͰ࣮͕͍͠ ΫϥελؒΩϟογϡΛఘΊΔ )0ͦΕΛͰ͖ΔΑ͏ʹ͍ͯ͠ΔͷͰ͍͢͝ ͦΕ͔4FTTJPOUJDLFUΛ͏ ΠϕϯτυϦϒϯ͔ͭΫϥελߏͰ͑Δ ͔͠͠4FTTJPOUJDLFU'4ͷ؍Ͱ༗Γ
4FTTJPOUJDLFU ϚελʔΩʔ͕࿙ΕΔͱશ௨৴͕ղಡՄೳ 1'4ͷ֓೦Λຬ͍ͨͤͯͳ͍ αʔόଆͰϚελʔΩʔΛอଘ͢Δͷ͕௨ৗ ΫϥελؒͰϚελʔΩʔΛڞ༗ ΫϥελͷͲͷαʔόʹৼΓ͚ऽΒΕͯΩϟογϡར༻Մೳ OHJOYͷ߹ '4Λຬͨͨ͢ΊʹϚελʔΩʔΛఆظతʹαʔΨଆͰߋ৽ ͜Ε·ͨ)0ࣗಈతߋ৽ʹରԠࡁΈͰ͍͢͝
͜͜·Ͱͷ·ͱΊ
ΫϥελߏͷOHJOYͷ߹ 1'4ʹରԠͨ͠DJQIFSTVJUFTΛઃఆ '4Λຬͨ͢Α͏ʹTFTTJPOUJDLFUͷϚελʔΩʔΛఆظߋ৽ )0σϑΥϧτͰͰߋ৽ Ϋϥελར༻ʹ͓͍ͯϚελʔΩʔΛαʔόؒͰڞ༗ TFTTJPOSFTVNQUJPOͷ߹αʔόؒΩϟογϡڞ༗ΛఘΊΔ
ಈతূ໌ॻಡΈࠐΈ
υϝΠϯ͕ଟ͍߹ υϝΠϯ͕ઍɾສͷΦʔμʔͷ߹ OHJOYͷ߹ূ໌ॻಡΈࠐΈͷઃఆυϝΠϯ୯Ґͷઃఆ͕େʹͳΔ OHJOYͷϓϩηεͷϝϞϦେ͖͘ͳΔ ສͷূ໌ॻಡΈࠐΈͰ.#ͱ͔
[email protected]Ͱղܾ ಈతূ໌ॻಡΈࠐΈ ηογϣϯ୯ҐͰূ໌ॻಡΈࠐΉ࣌ʹNSVCZΛϑοΫ PQFOTTMҎ্͕ඞཁ 4/*ͷTFSWFSOBNFʹ߹கͨ͠ূ໌ॻϑΝΠϧΛಡΈࠐΉ ઃఆ͕ҰͭͰࡁΉ͠ϝϞϦݮΔ ੑೳ[email protected]ͷIFMMPXPSMEϕϯνͰݮఔ
ಈతϦόʔεϓϩΩγ
ಈతϦόʔεϓϩΩγ 5-4ͰΞΫηεͷ͋ͬͨυϝΠϯΛదͳόοΫΤϯυʹϦόʔεϓϩΩγ͢Δඞཁ༗Γ ඥ͚Λ֎෦σʔλετΞͳͲ͔Βऔಘ ඥ͚Λͱʹ[email protected]ͰಈతϦόʔεϓϩΩγ
͜Εͱ1'4ͷઃఆͱಈతূ໌ॻಡΈࠐΈΛ߹ମͤ͞Δ
·ͱΊ
1'4ͷߟྀͱಈతઃఆ 1'4Λߟྀͨ͠DJQIFSTVJUFTͷઃఆ '4Λߟྀͨ͠ηογϣϯΩϟογϡͷબ ΠϕϯτυϦϒϯΛߟྀͨ͠ηογϣϯΩϟογϡͷબ ಈతূ໌ॻಡΈࠐΈΛ[email protected]Ͱ࣮ݱ ಈతϦόʔεϓϩΩγΛ[email protected]Ͱ࣮ݱ