Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Speaker Deck
PRO
Sign in
Sign up
for free
ciecleci/androidのOpenSSLに気をつけよう
yamacraft
October 27, 2017
Technology
0
460
ciecleci/androidのOpenSSLに気をつけよう
2017年10月27日(金)に開催されたshibuya.apk #19にて発表した資料になります
yamacraft
October 27, 2017
Tweet
Share
More Decks by yamacraft
See All by yamacraft
yamacraft
0
1.2k
yamacraft
2
1.6k
yamacraft
2
2.6k
yamacraft
0
4.2k
yamacraft
2
3.8k
yamacraft
0
650
yamacraft
2
1.5k
yamacraft
0
940
yamacraft
0
320
Other Decks in Technology
See All in Technology
clustervr
PRO
0
210
picardparis
4
2.4k
miu_crescent
0
140
ihcomega56
2
170
chipstar_light
0
480
kadoppe
1
200
brtriver
1
480
hmatsu47
1
170
supership
0
190
kentaro
2
470
tj8000rpm
0
210
katsumataryo
3
820
Featured
See All Featured
jeffersonlam
330
15k
jakevdp
776
200k
morganepeng
19
1.3k
searls
204
37k
shlominoach
176
7.6k
michaelherold
226
8.6k
lynnandtonic
272
16k
sferik
613
55k
marktimemedia
7
450
iamctodd
22
2.2k
orderedlist
PRO
330
36k
jlugia
217
16k
Transcript
circleci/androidͷ OpenSSLʹؾΛ͚ͭΑ͏ @yamacraft
profile • @yamacraft (Wataru Yamada) • Mobile Application Engineer •
LeadingMark, inc • team Y.G.E.(private) • Ұ෦دߘ → → →
αϯϓϧϓϩδΣΫτ https://github.com/yamacraft/android.RequestPermissions
લஔ͖ • ઌ΄ͲͷϓϩδΣΫτCircle CI 1.0ͰϏϧυ͢ΔΈΛೖ Ε͍ͯͨ • Circle CI 2.0ͩͱϏϧυૣ͘ͳΔͱฉ͍ͨͷͰɺࢼ͠ʹରԠ
ͯ͠ΈΑ͏ͱࢥͬͨ • ͪͳΈʹൿಗใOpenSSLͰ҉߸Խͨ͠ϑΝΠϧʹೖΕͯ ͍Δʢ1.0࣌ʹެ͕ࣜҊͯͨ͠ํ๏Λ࠾༻ʣ • https://github.com/circleci/encrypted-files
Circle CI2.0Ͱઃఆͨ͠༰ • imageެࣜͷcircleci/androidΛ༻ • OpenSSLͰ҉߸Խͨ͠ϑΝΠϧΛ෮ݩ͠ɺγ εςϜͷڥมʹΈࠐΉ • ͋ͱ./gradlew build͢Δ͚ͩ
decryptͰ͖ͳ͍…
Ͳ͏ͯ͠… • circleci/android(apt)ͷOpenSSL 1.1.0f • mac OS(homebrew)ͷOpenSSL1.0.2l • 1.1.0͔Βޓੑʹͪΐͬͱʢ༷มߋʣ ͕͋ΔΒ͍͠…
ৄࡉ • OpenSSL1.1.0ͱҎલͷόʔδϣϯͱͷޓੑ • https://http2.try-and-test.net/openssl1_1_0_tips.html
ͰɺͲ͏ͨ͠ͷʁ • ҉߸ԽϑΝΠϧΛ࡞Δ࣌ʹɺҰํؔΛ sha256ࢦఆ͢ΔΦϓγϣϯΛࢦఆͯ͠ੜ͢ Δͱ෮߸ԽͰ͖ΔΑ͏ʹͳΔ • openssl aes-256-cbc -md sha256
-e -in secret-env-plain -out secret-env-cipher -k $KEY
ϏϧυͰ͖ͨʂ
·ͱΊ OpenSSLͷόʔδϣϯҧ͍ʹؾΛ͚ͭΑ͏ʂ
͓͠·͍