ACMを使ってWordPressをHTTPSに対応させてみる

by TomoyaIwata

Slide 1

Slide 1 text

ؠాɹஐ࠸ ACMΛ࢖ͬͯWordPressΛHTTPSʹରԠͤͯ͞ΈΔ

Slide 2

Slide 2 text

ࣗݾ঺հ ؠాɹஐ࠸ wαʔόʔϨε։ൃ෦ w೥݄ೖࣾ wࣾྺˍ"84ྺɹϲ݄໨ wલ৬Ͱ͸-".1؀ڥͰͷ։ൃ౳Λܦݧ "QBDIF /HJOY΁ͷ44-ূ໌ॻ૊ࠐܦݧଟ਺

Slide 3

Slide 3 text

ࠓ೔࿩͢͜ͱɺ࿩͞ͳ͍͜ͱ w ࿩͢͜ͱ w "$.౳ɺ"84αʔϏεͷجૅ஌ࣝ w ࿩͞ͳ͍͜ͱ w "$.౳ɺ"84αʔϏεͷԠ༻஌ࣝ w "$.ͱ-FU`T&ODSZQUͷൺֱ w 8PSE1SFTTʹ͍ͭͯ

Slide 4

Slide 4 text

AWSॳ৺ऀ޲͚ͱ͍͏͜ͱͰɺ Ҏޙొ৔͢Δ୯ޠʹ͍ͭͯ ؆୯ʹઆ໌͠·͢ɻ ͸͡Ίʹ

Slide 5

Slide 5 text

ొ৔͢Δ༻ޠͷ؆୯ͳઆ໌ᶃ w &$ "NB[PO&MBTUJD$PNQVUF$MPVE w Ծ૝αʔόʔఏڙαʔϏε w &-# &MBTUJD-PBE#BMBODJOH w ϩʔυόϥϯαʔͷϚωʔδυαʔϏε w 3PVUF w %/4αʔϏε w )PTUFE;POF w 3PVUFʹ͓͚ΔκʔϯϑΝΠϧͷΑ͏ͳ΋ͷ

Slide 6

Slide 6 text

ొ৔͢Δ༻ޠͷ؆୯ͳઆ໌ᶄ w "NB[PO"1*(BUFXBZ w "1*Λ࡞੒ɺӡ༻͢ΔͨΊͷϚωʔδυαʔϏε w "NB[PO$MPVE'SPOU w $%/ ίϯςϯπ഑৴ωοτϫʔΫ αʔϏε w "84&MBTUJD#FBOTUBML w ΞϓϦͷ౷߹؅ཧϓϥοτϑΥʔϜ &$ʴϛυϧ΢ΣΞ w "84,FZ.BOBHFNFOU4FSWJDF w ҉߸ԽΩʔΛ࡞੒ɺ؅ཧ͢ΔϚωʔδυαʔϏε

Slide 7

Slide 7 text

ຊ୊ʹೖΓ·͢

Slide 8

Slide 8 text

ACM(AWS Certiﬁcate Manager)ͱ͸ʁ

Slide 9

Slide 9 text

8IBUJT"$. w ύϒϦοΫূ໌ॻͷൃߦ w αʔυύʔςΟʔͷূ໌ॻΠϯϙʔτ w ϓϥΠϕʔτ$"ͷߏஙɺӡ༻ ˞෼͔Γ΍͢͞Λॏࢹͯ͠ɺ5-4ɾ44-ͷҧ͍౳ແࢹͯ͠ɺ 44-ূ໌ॻͱ͍͏දݱΛ࢖͍·͢ɻ "84$FSUJpDBUF.BOBHFS 44-ূ໌ॻͷ؅ཧɺӡ༻Λߦ͏ ͨΊͷϚωʔδυαʔϏε

Slide 10

Slide 10 text

8IBUJT"$. w ύϒϦοΫূ໌ॻͷൃߦ w αʔυύʔςΟʔͷূ໌ॻΠϯϙʔτ w ϓϥΠϕʔτ$"ͷߏஙɺӡ༻ ˞෼͔Γ΍͢͞Λॏࢹͯ͠ɺ5-4ɾ44-ͷҧ͍౳ແࢹͯ͠ɺ 44-ূ໌ॻͱ͍͏දݱΛ࢖͍·͢ɻ "84$FSUJpDBUF.BOBHFS 44-ূ໌ॻͷ؅ཧɺӡ༻Λߦ͏ ͨΊͷϚωʔδυαʔϏε ࠓճ͸આ໌͠·ͤΜ

Slide 11

Slide 11 text

"$.ύϒϦοΫূ໌ॻͷಛ௃ᶃ "84ͷαʔϏεͱ૊Έ߹Θͤͯ࢖͏͜ͱͰɺ 44-ূ໌ॻΛ ແྉͰར༻Ͱ͖·͢ɻ ൃߦͨ͠44-ূ໌ॻ͸༗ޮظݶ͕ ੾ΕΔલʹ ࣗಈͰߋ৽͞Ε·͢ɻ

Slide 12

Slide 12 text

"$.ύϒϦοΫূ໌ॻͷಛ௃ᶄ ͭͷূ໌ॻʹෳ਺ͷυϝΠϯΛؚΊΔ͜ͱ͕Ͱ͖Δ ϫΠϧυΧʔυυϝΠϯʹ΋ରԠ %/4΋͘͠͸&ϝʔϧͰυϝΠϯ؅ཧऀͷݕূ͕Մೳ

Slide 13

Slide 13 text

"$.ͱ౷߹Ͱ͖ΔαʔϏε Elastic Load Balancing Amazon CloudFront Amazon API Gateway AWS Elastic Beanstalk "$.Ͱൃߦͨ͠ύϒϦοΫূ໌ॻ͸ ԼهͷαʔϏεͰར༻Ͱ͖·͢ɻ

Slide 14

Slide 14 text

"$.ͱ౷߹͢Δࡍͷ஫ҙ఺ $MPVE'SPOU΋͘͠͸ ઃఆ࣍ୈͰ "1*(BUFXBZͰར༻͢Δ৔߹͸ όʔδχΞϦʔδϣϯͰ44-ূ໌ॻΛ ൃߦ͢Δඞཁ͕͋Γ·͢ɻ ⚠

Slide 15

Slide 15 text

"$.ʹ͓͚Δൿີ伴ͷ؅ཧ "84,.4 "84$FSUJpDBUF.BOBHFS w"$.͸"84,.4Ͱ҉߸Խ͞Εͨൿີ伴Λอ࣋ w֤αʔϏε͸,.4Λ࢖ͬͯ"$.ͷൿີ伴Λ෮߸Խͯ͠ར༻͢Δ ॳճͷϦΫΤετ࣌ʹ ΧελϚʔϚελʔΩʔΛ࡞੒ ΧελϚʔϚελʔΩʔͰ ൿີ伴Λ҉߸Խͯ͠อଘ

Slide 16

Slide 16 text

ACMΛ࢖Θͳ͍ ҰൠతͳSSLূ໌ॻऔಘ&ߋ৽ͷྲྀΕ

Slide 17

Slide 17 text

Α͋͘Δূ໌ॻऔಘɾ૊ࠐͷྲྀΕᶃ ߪೖखଓ͖ ൿີ伴ͱ $43Λ ࡞੒ͯ͠ਃ੥ ৔߹ʹΑͬͯ͸ ࡏ੶֬ೝ

Slide 18

Slide 18 text

Α͋͘Δূ໌ॻऔಘɾ૊ࠐͷྲྀΕᶄ ূ໌ॻൃߦ׬ྃ ূ໌ॻ഑ஔͱ 8FCαʔόʔͷ ઃఆϑΝΠϧमਖ਼ υΩυΩ͠ͳ͕Β 8FCαʔόʔͷ 3FMPBE

Slide 19

Slide 19 text

Α͋͘Δূ໌ॻߋ৽ͷྲྀΕ ๨Εͨࠒʹ ΍͖ͬͯͯ ඍ͔ͳهԱΛཔΓʹ ࡞ۀΛ࣮ࢪ υΩυΩ͠ͳ͕Β 8FCαʔόʔͷ 3FMPBE

Slide 20

Slide 20 text

44-ূ໌ॻಋೖɺߋ৽Ͱݏͩͬͨͱ͜Ζ w ূ໌ॻपΓͷઃఆϑΝΠϧͬͯͲ͏ॻ͘Μ͚ͩͬʁʁ w தؒূ໌ॻʁʁ w ߋ৽ͷ࣌ͬͯൿີ伴ͱ͔$43͸࡞Γ௚͢ʁʁ w ߋ৽͕ՆٳΈͷ॓୊తʹΪϦΪϦʹͳΓ͕ͪ w ಋೖɺߋ৽ͷࡍʹαʔϏεࢭ·Βͳ͍͔ෆ҆

Slide 21

Slide 21 text

ACMΛ࢖͑͹ɺ ͜͏͍ͬͨෆ҆΍໘౗͝ͱ͔Β ղ์͞Ε·͢ʂʂ

Slide 22

Slide 22 text

"$.ͷ৔߹ Ϛωδϝϯτίϯιʔϧ͔Βϙνϙνͱ ਺ΫϦοΫɾ਺λΠϓ ͢Δ͚ͩͰূ໌ॻ͕ൃߦՄೳʂʂ

Slide 23

Slide 23 text

࣮ࡍʹূ໌ॻΛऔಘͯ͠ ELBʹ૊ΈࠐΜͰΈ·͢

Slide 24

Slide 24 text

ߏங͢Δ؀ڥ Route53 Hosted Zone AWS Certificate Manager WordPress on EC2 Application Load Balancer

Slide 25

Slide 25 text

ࠓճ͸࣌ؒͷ౎߹্ɺ WordPress؀ڥΛࣄલʹߏங͍ͯ͠·͢

Slide 26

Slide 26 text

ߏங͢Δ؀ڥ Route53 Hosted Zone AWS Certificate Manager WordPress on EC2 Application Load Balancer ίίҎ֎ߏஙࡁΈ

Slide 27

Slide 27 text

σϞαΠτʹ)551ͰΞΫηε

Slide 28

Slide 28 text

σϞαΠτʹ)5514ͰΞΫηε

Slide 29

Slide 29 text

"$.μογϡϘʔυ

Slide 30

Slide 30 text

ূ໌ॻͷϦΫΤετ

Slide 31

Slide 31 text

υϝΠϯ໊ͷ௥Ճ

Slide 32

Slide 32 text

ݕূํ๏ͷબ୒

Slide 33

Slide 33 text

֬ೝͱϦΫΤετ

Slide 34

Slide 34 text

ݕূ

Slide 35

Slide 35 text

ূ໌ॻҰཡ ͠͹Β͘͢Δͱ࢖༻Մೳʹʂ

Slide 36

Slide 36 text

3PVUFͷ)PTUFE;POF

Slide 37

Slide 37 text

3PVUFͷ)PTUFE;POF

Slide 38

Slide 38 text

"-#ʹϦεφʔΛ௥Ճ

Slide 39

Slide 39 text

"-#ʹϦεφʔΛ௥Ճ

Slide 40

Slide 40 text

8PSE1SFTTͷઃఆΛมߋ

Slide 41

Slide 41 text

8PSE1SFTTͷιʔεΛमਖ਼ XQJODMVEFTMPBEQIQ಺ͷJT@TTMΛमਖ਼

Slide 42

Slide 42 text

)5514ରԠ׬ྃʂʂ

Slide 43

Slide 43 text

3PVUFʹ࡞੒͞ΕͨϨίʔυ

Slide 44

Slide 44 text

͜ͷΑ͏ʹɺACMΛར༻͢Δ͜ͱͰ SSLূ໌ॻؔ࿈ͷ໘౗ͳӡ༻͔Β ղ์͞Ε·͢ʂʂ (͔͠΋ແྉ)

Slide 45

Slide 45 text

"$.Λར༻͢Δ্Ͱͷ஫ҙ఺ ACMͰग़དྷͳ͍͜ͱ΋ɾɾɾ

Slide 46

Slide 46 text

"$.ͰͰ͖ͳ͍͜ͱ w ύϒϦοΫ૊৫ೝূ 07 ɺ֦ுೝূ &7 w υϝΠϯೝূ %7 ͷΈରԠ w &$΍ΦϯϓϨαʔόʔ΁ͷ44-ূ໌ॻͷ૊ࠐ w ઌ΄Ͳ঺հͨͭ͠ͷ"84αʔϏεͷΈͰར༻Մೳ

Slide 47

Slide 47 text

·ͱΊ ଟগͷલఏ৚݅͸͋Γ·͕͢ɺ ͏·͘ϋϚΕ͹ӡ༻ෛՙΛ େ͖͘Լ͛Δ͜ͱ͕ՄೳͰ͢ɻ

Slide 48

Slide 48 text

·ͱΊ "$.Λ׆༻ͯ͠ շదͳ)5514ϥΠϑΛʂʂ

Slide 49

Slide 49 text

͝੩ௌ͋Γ͕ͱ͏͍͟͝·ͨ͠