SSl と仲良くなるやり方

by mickey

Slide 1

Slide 1 text

ࡾπ໦ݡҰ(.01&1"#0JOD ϖύϘςοΫΧϯϑΝϨϯε 44-ͱ஥ྑ͘ͳΔ΍Γํ

Slide 2

Slide 2 text

ΠϯϑϥΤϯδχΞ ࡾπ໦ݡҰ!NJDLFZ ٕज़෦Πϯϑϥάϧʔϓ

Slide 3

Slide 3 text

ΠϯϑϥΤϯδχΞ ࡾπ໦ݡҰ!NJDLFZ ٕज़෦Πϯϑϥάϧʔϓ

Slide 4

Slide 4 text

Χϥʔϛʔγϣοϓ

Slide 5

Slide 5 text

No content

Slide 6

Slide 6 text

44-ͬͯͳΜͩΖ͏ʁ

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

44-Λར༻͢Δͱ

Slide 9

Slide 9 text

৘ใͷվ͟Μ

Slide 10

Slide 10 text

৘ใͷ౪Έݟ

Slide 11

Slide 11 text

Λ๷͙ࣄ͕Ͱ͖·͢

Slide 12

Slide 12 text

͜ΕΛͲ͏΍࣮ͬͯݱͨ͠ͷ͔ʁ

Slide 13

Slide 13 text

࣮૷ͷঢ়گ wαϒυϝΠϯͷৗ࣌44-Խ wATIPQQSPKQAυϝΠϯ ͨͱ͑͹ɼFYBNQMFTIPQ QSPKQ౳ ͷৗ࣌44-ԽΛߦ͍·͢ wಠࣗυϝΠϯ FYBNQMFDPN౳ ͷৗ࣌44-Խ wಠࣗυϝΠϯ FYBNQMFDPN౳ ͷৗ࣌44-Խ

Slide 14

Slide 14 text

શମͷߏ੒

Slide 15

Slide 15 text

ߏ੒ Ҏલͷߏ੒ ࠓͷߏ੒ -PBE#BMBODFS "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS -PBE#BMBODFS 3FWFSTF 1SPYZ 3FWFSTF 1SPYZ "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS

Slide 16

Slide 16 text

-PBE#BMBODFS 3FWFSTF 1SPYZ 3FWFSTF 1SPYZ "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS ಛ௃ -PBE#BMBODFS 3FWFSTF 1SPYZ 3FWFSTF 1SPYZ "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS

Slide 17

Slide 17 text

1SPYZΛஔ͍ͨཧ༝ wେྔͷূ໌ॻΛ؅ཧͨ࣌͠ɼϝϞϦফඅྔ͕૿͑ͯ͠·͏ wେྔʹূ໌ॻΛಡΈࠐΉͷͰɼ̍ͭͷϓϩηε͋ͨΓ ͷϝϞϦফඅྔ͕૿͑·͢ ϓϩηε .BOBHFS ϓϩηε ϓϩηε

Slide 18

Slide 18 text

1SPYZΛஔ͍ͨཧ༝ w"QBDIF͸ϦΫΤετ͝ͱʹɼϓϩηε͕૿͑·͢ wͳͷͰɼϓϩηε͕ଠ͍ͬͯΔͱશମͱͯ͠ϝϞϦফඅ ྔ͕૿͑·͢ ϓϩηε .BOBHFS ϓϩηε ϓϩηε

Slide 19

Slide 19 text

1SPYZΛஔ͍ͨཧ༝ wOHJOYͩͱɼ୯ҰͷϓϩηεͰϦΫΤετΛॲཧ͢Δํ ࣜͷͳͷͰɼϝϞϦফඅྔ͕૿͑·ͤΜ w·ͨɼࠓޙɼಠࣗυϝΠϯͷৗ࣌44-ରԠͰɼ OHY@NSVCZΛ༻͍ͨಈతͳূ໌ॻͷಡΈࠐΈΛߦ͍ͨ ͔͔ͬͨΒͰ͢

Slide 20

Slide 20 text

ͭͷ೰Έ͕͋Γ·ͨ͠

Slide 21

Slide 21 text

ύϑΥʔϚϯε

Slide 22

Slide 22 text

ύϑΥʔϚϯε΁ͷݒ೦ w1SPYZͷΦʔόʔϔου w1SPYZͱ"QQMJDBUJPOαʔόʔͷ௨৴͕༨ܭʹൃੜ͢Δࣄ ʹΑΔϨΠςϯγͷ૿Ճ w44-Խʹͱ΋ͳ͏Φʔόʔϔου w҉߸Խͱ෮߸ʹϦιʔεΛফඅ͢ΔࣄʹΑΔεϧʔϓοτͷ ௿Լ w44-ͷηογϣϯͷཱ֬ʹΑΔϨΠςϯγͷ૿Ճ

Slide 23

Slide 23 text

ҰͭҰͭݕূ͍͖ͯ͠·ͨ͠

Slide 24

Slide 24 text

ݕূํ๏ wෛՙࢼݧΛ࣮ࢪ͠ɼεϧʔϓοτͱϨΠςϯγΛௐࠪ͠·ͨ͠ wෳ਺ͷαʔόʔ͔ΒෛՙΛ͔͚ΔͨΊɼ-0$645 IUUQ MPDVTUJP ͱ͍͏πʔϧΛ༻͍·ͨ͠

Slide 25

Slide 25 text

1SPYZʹΑΔΦʔόʔϔου w ݕূͨ݁͠Ռɼ΄ͱΜͲѱԽ ͠·ͤΜͰͨ͠ w 1SPYZͱ"QQMJDBUJPO4FSWFS ͕ಉ͡%$ʹ͔͋ͬͨΒͰ͢ -PBE#BMBODFS 3FWFSTF 1SPYZ 3FWFSTF 1SPYZ "QQMJDBUJPO 4FSWFS "QQMJDBUJPO 4FSWFS %BUB$FOUFS

Slide 26

Slide 26 text

҉߸Խ෮߸ԽʹΑΔΦʔόʔϔου wௐࠪͨ͠ͱ͜Ζɼ҉߸Խͱ෮߸Խʹ͙Β͍$16ར༻཰ ͕૿Ճ͢Δͱ͍͏͜ͱͰͨ͠ w࣮ࡍʹෛՙࢼݧΛͯ͠Έͨͱ͜Ζɼ1SPYZࣗମͷෛՙ͕େ ͖͘ͳΔ͜ͱ͸͋Γ·ͤΜͰͨ͠ IUUQTXXXJNQFSJBMWJPMFUPSHPWFSDMPDLJOHTTMIUNM

Slide 27

Slide 27 text

࢒Γ͸ηογϣϯཱ֬ͷΦʔόʔϔου

Slide 28

Slide 28 text

ηογϣϯཱ֬ͷΦʔόʔϔου )551 44- )5514 GET / Client Server HTTP 3FTQPODF Client Hello TLS/SSL Session Establish Client Server Server Hello Certiﬁcate Server Key Exchange Server Hello Done Client Key Exchange Change Cipher Spec Finished Change Cipher Spec Finished GET / HTTP 3FTQPODF

Slide 29

Slide 29 text

ͲͷΑ͏ʹղফͨ͠ͷ͔

Slide 30

Slide 30 text

4FTTJPO3FTVNQUJPO wҰ౓ཱ֬ͨ͠ηογϣϯΛ࠶ར༻͢ΔͨΊͷ࢓૊ΈͰ͢ wҎԼͷछྨ͕͋Γ·͢ wαʔόʔଆͰηογϣϯ৘ใΛ֮͑Δํࣜ w4FTTJPO$BDIF wΫϥΠΞϯτଆͰηογϣϯ৘ใΛ֮͑Δํࣜ w4FTTJPO5JDLFU

Slide 31

Slide 31 text

4FTTJPO$BDIF w44-ͷηογϣϯͷཱ֬ʹඞཁͳ৘ใΛ$BDIF͢Δ ΋ͷͰ͢ wෳ਺ͷαʔόʔΛར༻͢ΔͳΒɼԿΒ͔ͷํ๏Ͱ $BDIFΛڞ༗͢Δඞཁ͕͋Γ·͢ w/HJOYͰ͸ɼ͜ͷڞ༗ͷͨΊͷ࢓૊ʹରԠ͍ͯ͠· ͤΜ

Slide 32

Slide 32 text

4FTTJPO5JDLFU w 4FSWFS͕อଘ͢Δηογϣϯ৘ใΛ ҉߸Խͯ͠ɼΫϥΠΞϯτʹૹΓɼΫ ϥΠΞϯτ͕ηογϣϯΛΩϟογϡ ͢Δͱ͍͏࢓૊ΈͰ͢ Client Hello TLS/SSL Session Establish Client Server Server Hello Finished Finished New Session Ticket

Slide 33

Slide 33 text

4FTTJPO5JDLFU w࠶։͢Δ࣌͸ɼ w$MJFOU͕$MJFOU)FMMPͱͱ ΋ʹ4FTTJPO5JDLFUΛ 4FSWFSʹૹΔ wͦͷޙɼෳ߹ͱݕূʹ੒ޭ͢ Ε͹ηογϣϯΛ࠶։͢Δ Client Hello TLS/SSL Session Establish Client Server Server Hello Change Cipher Spec Finished Change Cipher Spec Finished Session Ticket

Slide 34

Slide 34 text

4FTTJPO5JDLFULFZͷఆظతͳߋ৽ w4FTTJPO5JDLFULFZ͕࿙Ӯ͢Δͱɼ44-௨৴͕ղಡͰ͖ͯ͠· ͍·͢ w͜ͷͨΊɼ4FTTJPO5JDLFULFZ͸ɼ೔ఔ౓Ͱߋ৽͢Δ͜ͱ͕ਪ ঑͞Ε͍ͯ·͢ wגࣜձࣾϝϧΧϦͷ$POTVMΛར༻ͨ͠ࣄྫΛࢀߟʹ̍೔ຖʹߋ ৽͍ͯ͠·͢ IUUQUFDINFSDBSJDPNFOUSZ

Slide 35

Slide 35 text

݁Ռ

Slide 36

Slide 36 text

ৗ࣌44-Խ͍ͯ͠ͳ͍αʔό ৗ࣌44-Խͨ͠αʔό ݱ࣮ͷύϑΥʔϚϯε w44-Խ͢Δલͱಉ౳ͱϨΠςϯγʹͳΓ·ͨ͠

Slide 37

Slide 37 text

44-ͷධՁ w44-Λ҆શੑͳͲͰධՁͨ͠ͱ͜Ζɼ"Ͱͨ͠

Slide 38

Slide 38 text

·ͱΊ

Slide 39

Slide 39 text

·ͱΊ w44-ͱ஥ྑ͘͢Δʹ͸͍͔ͭ͘ͷίπ͕ඞ༻Ͱ͢ w͜ͷൃදͰ͸ɼେྔͷূ໌ॻΛѻ͏ͳΒɼOHJOYΛར༻ͨ͠΄͏͕ྑ͍͜ ͱ w·ͨɼOHY@NSVCZΛར༻͢Ε͹ɼಈతʹূ໌ॻΛಡΈࠐΊΔ͜ͱ wύϑΥʔϚϯεΛམͱ͞ͳ͍ͨΊʹ4FTTJPO5DJLFU౳Λར༻ͨ͠΄͏͕ྑ ͍ wʹ͍ͭͯ঺հ͠·ͨ͠

Slide 40

Slide 40 text

ࠓޙ͸ wಠࣗυϝΠϯʹ͓͚Δৗ࣌44-ͷఏڙʹ޲͚ɼ։ൃΛਐΊ ͍͖ͯ·͢ w·ͨɼͲ͔͜ͰɼಠࣗυϝΠϯͷ࣌ͷ޻෉Λ঺հͰ͖ͨΒͱ ࢥ͍·͢