動的証明書読み込み ngx_mruby編 #hoscon / GMO HosCon 2016

by Okumura Takahiro

Slide 1

Slide 1 text

OHY@NSVCZฤ Ԟଜߊ߂(.01FQBCP *OD (.0)PTUJOH$POGFSFODF!ौ୩ ಈతূ໌ॻಡΈࠐΈ

Slide 2

Slide 2 text

ٕज़෦ΠϯϑϥάϧʔϓɾΤϯδχΞ Ԟଜߊ߂!IGN IUUQCMPHIJGVNJJOGP

Slide 3

Slide 3 text

ࠓ೔͓࿩͢Δ͜ͱ w8FCαʔόͰେྔυϝΠϯͷূ໌ॻΛऔΓѻ ͏ࠔ೉ wOHY@NSVCZΛ࢖ͬͨಈతূ໌ॻಡΈࠐΈ wಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ wςετΛ͢ΔͨΊʹ࡞ͬͨ΋ͷ

Slide 4

Slide 4 text

8FCαʔόͰେྔυϝΠϯͷূ໌ ॻΛऔΓѻ͏ࠔ೉

Slide 5

Slide 5 text

8FCαʔόͰେྔυϝΠϯͷূ໌ॻΛऔΓѻ͏ࠔ೉ wূ໌ॻΛಡΈࠐΉͨΊͷઃఆ͕௕େԽ͢Δ wϓϩηεͷϝϞϦ΋υϝΠϯ਺͚ͩංେԽ͢Δ wOHJOYͷ৔߹ɺສͷূ໌ॻΛಡΈࠐΉͱ໿ .#΄Ͳʹ๲ΒΉ

Slide 6

Slide 6 text

44-@$59@TFU@DFSU@DC w0QFO44-Ͱ௥Ճ͞Εͨؔ਺ wূ໌ॻͷཁٻλΠϛϯάͰίʔϧόοΫؔ਺Λ ݺ΂Δ w IUUQTXXXPQFOTTMPSHEPDTNBOTTM44-@$59@TFU@DFSU@DCIUNM

Slide 7

Slide 7 text

44-@$59@TFU@DFSU@DC w0QFO44-Ͱ௥Ճ͞Εͨؔ਺ wূ໌ॻͷཁٻλΠϛϯάͰίʔϧόοΫؔ਺Λ ݺ΂Δ w IUUQTXXXPQFOTTMPSHEPDTNBOTTM44-@$59@TFU@DFSU@DCIUNM ಈతʹূ໌ॻΛಡΈࠐΉ ͨΊͷ؀ڥ͕੔͖ͬͯͨ

Slide 8

Slide 8 text

IUUQTUXJUUFSDPNNBUTVNPUPSZTUBUVT

Slide 9

Slide 9 text

IUUQTUXJUUFSDPNNBUTVNPUPSZTUBUVT OHY@NSVCZΛ࢖͑͹ ಈతʹূ໌ॻΛಡΈࠐΊΔ

Slide 10

Slide 10 text

OHY@NSVCZΛ࢖ͬͨಈతূ໌ॻ ಡΈࠐΈ

Slide 11

Slide 11 text

NSVCZ@TTM@IBOETIBLF@IBOEMFS@DPEF mruby_ssl_handshake_handler_code ' ssl = Nginx::SSL.new ssl.certificate = "/path/to/#{ssl.servername}.crt" ssl.certificate_key = "/path/to/#{ssl.servername}.key" ’;

Slide 12

Slide 12 text

NSVCZ@TTM@IBOETIBLF@IBOEMFS@DPEFͷ՝୊ mruby_ssl_handshake_handler_code ' ssl = Nginx::SSL.new ssl.certificate = "/path/to/#{ssl.servername}.crt" ssl.certificate_key = "/path/to/#{ssl.servername}.key" ’; JOMJOFܗࣜͷσΟϨΫςΟϒ͸ίʔυ͕௕͘ͳΔͱಡΈͮΒ ͍͕ɺϑΝΠϧ͔ΒಡΈࠐΉσΟϨΫςΟϒ͸౰࣌ແ͔ͬͨɻ

Slide 13

Slide 13 text

࡞ͬͨ

Slide 14

Slide 14 text

OHY@NSVCZʹ NSVCZ@TTM@IBOETIBLF@IBOEMFSΛ࣮૷ͨ͠ IUUQCMPHIJGVNJJOGPOHY@NSVCZNSVCZ@TTM@IBOETIBLF@IBOEMFS

Slide 15

Slide 15 text

NSVCZ@TTM@IBOETIBLF@IBOEMFS mruby_ssl_handshake_handler /path/to/handler.rb cache; # /path/to/handler.rb ssl = Nginx::SSL.new ssl.certificate = "/path/to/#{ssl.servername}.crt" ssl.certificate_key = "/path/to/#{ssl.servername}.key" NSVCZ@TTM@IBOETIBLF@IBOEMFS@DPEFͱಉ͡ػೳͰɺ  QBUIUPIBOEMFSSCͷΑ͏ͳ֎෦ϑΝΠϧΛಡΈࠐΊΔ

Slide 16

Slide 16 text

ଞʹ΋͍Ζ͍Ζͱύονૹͬͨ wIUUQTHJUIVCDPNNBUTVNPUPSOHY@NSVCZQVMM wIUUQTHJUIVCDPNNBUTVNPUPSOHY@NSVCZQVMM wIUUQTHJUIVCDPNNBUTVNPUPSOHY@NSVCZQVMM wIUUQTHJUIVCDPNNBUTVNPUPSOHY@NSVCZQVMM wIUUQTHJUIVCDPNNBUTVNPUPSOHY@NSVCZQVMM wIUUQTHJUIVCDPNNBUTVNPUPSOHY@NSVCZQVMM wIUUQTHJUIVCDPNNBUTVNPUPSOHY@NSVCZQVMM ͋Μ·Γ਺ʹ͸ҙຯ͕ͳ͍͚Ͳ

Slide 17

Slide 17 text

ͦ͏͜͏׆ಈͯͨ͠ΒQVTI ݖ΋Βͬͯϝϯςφʹɻ

Slide 18

Slide 18 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯ ϑϥ

Slide 19

Slide 19 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ wԿઍԿສͷূ໌ॻϑΝΠϧΛ؅ཧ͠ͳ͍ͱ͍͚ ͳ͍ wOHY@NSVCZΛಈ͔͢8FCαʔό͸୆ͱ͸ݶ Βͳ͍

Slide 20

Slide 20 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ MC SFWFSTFQSPYZ OHY@NSVCZ BQQMJDBUJPO DBDIF SFEJT EC NZTRM ͍͍ͩͨ͜Μͳ งғؾʹͳΔ

Slide 21

Slide 21 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ MC SFWFSTFQSPYZ OHY@NSVCZ BQQMJDBUJPO DBDIF SFEJT EC NZTRM 5-44/*֦ுͰTFSWFS@OBNFΛड͚औΔ ͍͍ͩͨ͜Μͳ งғؾʹͳΔ

Slide 22

Slide 22 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ MC SFWFSTFQSPYZ OHY@NSVCZ BQQMJDBUJPO DBDIF SFEJT EC NZTRM 5-44/*֦ுͰTFSWFS@OBNFΛड͚औΔ ূ໌ॻͱ伴 ͍͍ͩͨ͜Μͳ งғؾʹͳΔ

Slide 23

Slide 23 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ MC SFWFSTFQSPYZ OHY@NSVCZ BQQMJDBUJPO DBDIF SFEJT EC NZTRM 5-44/*֦ுͰTFSWFS@OBNFΛड͚औΔ ূ໌ॻͱ伴 Bແ͚Ε͹EC͔Βऔಘ ͍͍ͩͨ͜Μͳ งғؾʹͳΔ

Slide 24

Slide 24 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ MC SFWFSTFQSPYZ OHY@NSVCZ BQQMJDBUJPO DBDIF SFEJT EC NZTRM 5-44/*֦ுͰTFSWFS@OBNFΛड͚औΔ ূ໌ॻͱ伴 Bແ͚Ε͹EC͔Βऔಘ CΩϟογϡ ͍͍ͩͨ͜Μͳ งғؾʹͳΔ

Slide 25

Slide 25 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ MC SFWFSTFQSPYZ OHY@NSVCZ BQQMJDBUJPO DBDIF SFEJT EC NZTRM 5-44/*֦ுͰTFSWFS@OBNFΛड͚औΔ ূ໌ॻͱ伴 Bແ͚Ε͹EC͔Βऔಘ CΩϟογϡ ͍͍ͩͨ͜Μͳ งғؾʹͳΔ ϓϩΩγ

Slide 26

Slide 26 text

ಈతূ໌ॻಡΈࠐΈͷͨΊͷΠϯϑϥ MC SFWFSTFQSPYZ OHY@NSVCZ BQQMJDBUJPO DBDIF SFEJT EC NZTRM 5-44/*֦ுͰTFSWFS@OBNFΛड͚औΔ ূ໌ॻͱ伴 Bແ͚Ε͹EC͔Βऔಘ CΩϟογϡ ͍͍ͩͨ͜Μͳ งғؾʹͳΔ ϓϩΩγ ςετ΄͍͠

Slide 27

Slide 27 text

ςετΛ͢ΔͨΊʹ࡞ͬͨ΋ͷ

Slide 28

Slide 28 text

IGNNSVCZUFTUNZTRME w5FTUNZTRMEͷNSVCZҠ২൛ wNSVCZͷςετ༻ʹ.Z42-؀ڥΛࣗಈͰߏங͢Δ NSVCZUFTUNZTRMEΛॻ͍ͨ  IUUQCMPHIJGVNJJOGPNSVCZUFTUNZTRME

Slide 29

Slide 29 text

IGNNSVCZJOJ w.Z42-΁ͷ઀ଓઃఆΛίʔυ͔Β෼཭͍ͨ͠ wઃఆϑΝΠϧͱ͍͑͹*/*͔ͳͱࢥͬͨʢʁʣ w:".-ͷΑ͏ͳن͕֨ແ͍ʢ࡞Γ࢝Ί͔ͯΒ ஌ͬͨʣ wݱঢ়͸ʮ*/*ͬΆ͍ϑΝΠϧΛಡΊΔʯ

Slide 30

Slide 30 text

IUUQXXXTMJEFTIBSFOFUITCUUFTUJOHDBTVBMUBMLT NSVCZͰॻ͍ͨϓϩμΫτͷςετͷॻ͖ํ

Slide 31

Slide 31 text

ࠓ೔͓࿩ͨ͜͠ͱ OHY@NSVCZY0QFO44-Ͱಈతূ໌ॻͷಡΈࠐ Έ͕Ͱ͖Δͱ͍͏͜ͱ ಈతূ໌ॻಡΈࠐΈΛ࣮ݱ͢ΔͨΊͷΠϯϑϥͷߏ੒ ςετ͢ΔͨΊʹࣗ࡞ͨ͠πʔϧ

Slide 32

Slide 32 text

044׆ಈ͸ָ͍͠ɻϏδωε΋େࣄɻ ཱ྆ग़དྷΔϖύϘ͸࠷ߴɻ ࠷৽ͷ࠾༻৘ใΛνΣοΫˠ !QC@SFDSVJU