<?xml version='1.0' encoding='iso-2022-jp' ?>

<!DOCTYPE manualpage SYSTEM "/style/manualpage.dtd">

<?xml-stylesheet type="text/xsl" href="/style/manual.ja.xsl"?>

<manualpage metafile="ssl_intro.xml.meta">

<parentdocument href="./">SSL/TLS</parentdocument>

<title>SSL/TLS $B0E9f2=(B: $B$O$8$a$K(B</title>

<summary>

<blockquote>

<p>$BI8=`5,3J$NNI$$=j$O!"$?$/$5$s$N5,3J$+$iA*$Y$k$H$$$&$3$H$@!#(B

$B$=$7$F!"$b$7K\Ev$K$I$N5,3J$b5$$KF~$i$J$1$l$P!"(B

$B0lG/BT$D$@$1$GC5$7$F$$$?5,3J$,8=$l$k!#(B</p>

<p class="cite">-- <cite>A. Tanenbaum</cite>, "Introduction to

Computer Networks"</p>

</blockquote>

<p>

$BF~Lg$H$$$&$3$H$G!"$3$N>O$O(B Web$B!"(BHTTP$B!"(BApache $B$KDL$8$F$$$k(B

$BFI<T8~$1$G$9$,!"%;%-%e%j%F%#@lLg2H8~$1$G$O$"$j$^$;$s!#(B

SSL $B%W%m%H%3%k$N7hDjE*$J<j0z$-$G$"$k$D$b$j$O$"$j$^$;$s!#(B

$B$^$?!"AH?%Fb$NG'>Z4IM}$N$?$a$NFCDj$N%F%/%K%C%/$d!"(B

$BFC5v$dM"=P5,@)$J$I$N=EMW$JK!E*$JLdBj$K$D$$$F$b07$$$^$;$s!#(B

$B$`$7$m!"99$J$k8&5f$X$N=PH/E@$H$7$F?'!9$J35G0!"Dj5A!"Nc$rJB$Y$k$3$H$G(B

mod_ssl $B$N%f!<%6$K4pACCN<1$rDs6!$9$k;v$rL\E*$H$7$F$$$^$9!#(B</p>

<p>$B$3$3$K<($5$l$?FbMF$O<g$K!"86Cx<T$N5v2D$N2<(B

The Open Group Research Institute $B$N(B <a

href="http://home.earthlink.net/~fjhirsch/">Frederick J. Hirsch</a>

$B;a$N5-;v(B <a

href="http://home.earthlink.net/~fjhirsch/Papers/wwwj/article.html">

Introducing SSL and Certificates using SSLeay</a> $B$r4p$K$7$F$$$^$9!#(B

$B;a$N5-;v$O(B <a

href="http://www.ora.com/catalog/wjsum97/">Web Security: A Matter of

Trust</a>, World Wide Web Journal, Volume 2, Issue 3, Summer 1997

$B$K7G:\$5$l$^$7$?!#(B

$B9NDjE*$J0U8+$O(B <a

href="mailto:hirsch@fjhirsch.com">Frederick Hirsch</a> $B;a(B

($B855-;v$NCx<T(B) $B$XA4$F$N6l>p$O(B <a

href="mailto:rse@engelschall.com">Ralf S. Engelschall</a> (

<module>mod_ssl</module> $B$N:n<T(B) $B$X$*4j$$$7$^$9!#(B

[$BLuCm(B: $BLu$K$D$$$F$O(B <a

href="mailto:apache-docs@ml.apache.or.jp">

Apache $B%I%-%e%a%s%HK]Lu%W%m%8%'%/%H(B</a>

$B$X$*4j$$$7$^$9!#(B]</p>

</summary>

<section id="cryptographictech">

<title>$B0E9f2=5;=Q(B</title>

<p>SSL $B$rM}2r$9$k$K$O!"0E9f%"%k%4%j%:%`!"(B

$B%a%C%;!<%8%@%$%8%'%9%H4X?t(B($BJLL>(B: $B0lJ}8~4X?t!"%O%C%7%e4X?t(B)$B!"(B

$B%W%i%$%P%7!<!"?.MQ!"G'>Z$J$I$N5;=Q$N4pAC$H$J$C$F$$$^$9!#(B</p>

<section id="cryptographicalgo">

<title>$B0E9f%"%k%4%j%:%`(B</title>

<p>$BNc$($P!"%"%j%9$,Aw6b$N$?$a$K6d9T$K%a%C%;!<%8$rAw$j$?$$$H$7$^$9!#(B

$B8}:BHV9f$dAw6b$N6b3[$,4^$^$l$k$?$a!"(B

$B%"%j%9$O$=$N%a%C%;!<%8$rHkL)$K$7$?$$$H;W$$$^$9!#(B

$B2r7hJ}K!$N0l$D$O0E9f%"%k%4%j%:%`$r;H$C$F!"%a%C%;!<%8$r(B

$BFI$^$;$?$$?M0J30$OFI$`$3$H$,$G$-$J$$0E9f2=$5$l$?(B

$B7ABV$KJQ$($F$7$^$&$3$H$G$9!#(B

$B$=$N7ABV$K$J$k$H!"(B

$B80$J$7$G$O!"%a%C%;!<%8$OLr$KN)$A$^$;$s!#(B

$BNI$$0E9f%"%k%4%j%:%`$O!"?/F~<T$,85$N%F%-%9%H$r2rFI$9$k$3$H$r(B

$BHs>o$KFq$7$/$9$k$?$a!"EXNO$,3d$K9g$o$J$/$5$;$^$9!#(B</p>

<p>$B0E9f%"%k%4%j%:%`$K$O(B

$B=>Mh7?$H8x3+80$NFs$D$N<oN`$,$"$j$^$9!#(B</p>

<dd>$BBP>N0E9f$H$7$F$bCN$i$l!"(B

$BAw?.<T$H<u?.<T$,80$r6&M-$9$k$3$H$,I,MW$G$9!#(B

$B80$H$O!"%a%C%;!<%8$r0E9f2=$7$?$jI|9f$9$k$N$K;H$o$l$kHkL)(B

$B$N>pJs$N$3$H$G$9!#(B

$B$b$7!"$3$N80$,HkL)$J$i!"Aw?.<T$H<u?.<T0J30$OC/$b%a%C%;!<%8$rFI(B

$B$`$3$H$,$G$-$^$;$s!#(B

$B$b$7$b!"%"%j%9$H6d9T$,HkL)$N80$rCN$C$F$$$k$J$i!"(B

$BH`$i$O$*8_$$$KHkL)$N%a%C%;!<%8$rAw$k$3$H$,$G$-$k$G$7$g$&!#(B

$B$?$@$7!";vA0$KFbL)$K80$rA*$V$H$$$&;E;v$OLdBj$r4^$s$G$$$^$9!#(B</dd>

<dd>$BHsBP>N0E9f$H$7$F$bCN$i$l!"(B

$B%a%C%;!<%8$r0E9f2=$9$k$3$H$N$G$-$kFs$D$N80(B

$B$r;HMQ$9$k%"%k%4%j%:%`$rDj5A$9$k$3$H$G80$N$d$j<h$j$NLdBj$r2r7h(B

$B$7$^$9!#(B

$B$b$7!"$"$k80$,0E9f2=$K;H$o$l$?$J$i!"(B

$B$3$NJ}<0$K$h$C$F!"0l$D$N80$r8xI=$7$F(B($B8x3+80(B)$B!"(B

$B$b$&JRJ}$rHkL)$K$7$F$*$/(B($BHkL)80(B)$B$@$1$G!"(B

$B0BA4$J%a%C%;!<%8$r<u$1<h$k$3$H$,$G$-$^$9!#(B</dd>

</dl>

<p>$BC/$b$,0E9f2=$5$l$?%a%C%;!<%8$r8x3+80$K$h$C$F0E9f2=(B

$B$9$k$3$H$,$G$-$^$9$,!"HkL)80$N;}$A<g$@$1$,$=$l$rFI$`$3$H$,(B

$B$3$NJ}K!$G!"6d9T$N8x3+80$r;H$C$F0E9f2=$9$k$3$H$G!"(B

$B%"%j%9$OHkL)$N%a%C%;!<%8$rAw$k$3$H$,$G$-$^$9!#(B

$B6d9T$N$_$,I|9f$9$k$3$H$,$G$-$^$9!#(B</p>

</section>

<section id="messagedigests">

<title>$B%a%C%;!<%8%@%$%8%'%9%H(B</title>

$B%a%C%;!<%8$N4J7i$J%@%$%8%'%9%H$r:n$C$F!"$=$l$b6d9T$KAw$k$H$$$&$b$N$G$9!#(B

$B%a%C%;!<%8$r<u$1<h$k$H6d9T$b%@%$%8%'%9%H$r:n@.$7!"(B

$B%"%j%9$,Aw$C$?$b$N$HHf$Y$^$9!#$b$70lCW$7$?$J$i!"(B

$B<u$1<h$C$?%a%C%;!<%8$OL5=}$@$H$$$&$3$H$K$J$j$^$9!#(B</p>

<p>$B$3$N$h$&$JMWLs$O(B<dfn>$B%a%C%;!<%8%@%$%8%'%9%H(B</dfn>$B!"(B

$B%a%C%;!<%8%@%$%8%'%9%H$OD9$$2DJQD9$N%a%C%;!<%8$+$i(B

$BC;$$8GDjD9$NI=8=$r:n$k$N$K;H$o$l$^$9!#(B

$B%@%$%8%'%9%H%"%k%4%j%:%`$O%a%C%;!<%8$+$i(B

$B0l0U$J%@%$%8%'%9%H$r@8@.$9$k$h$&$K:n$i$l$F$$$^$9!#(B

$B%a%C%;!<%8%@%$%8%'%9%H$O%@%$%8%'%9%H$+$i85$N%a%C%;!<%8$r(B

<p>$B%"%j%9$X$N$b$&0l$D$NLdBj$O!"$3$N%@%$%8%'%9%H$r0BA4$KAw$kJ}K!$rC5$9$3$H$G$9!#(B

$B$3$l$,$G$-$l$P!"%a%C%;!<%8$N?.MQ$,J]>Z$5$l$^$9!#(B

<p>$B%"%j%9$,6d9T$K%a%C%;!<%8$rAw$C$?$H$-!"6d9T$O!"(B

$B?/F~<T$,H`=w$K$J$j$9$^$7$FH`=w$N8}:B$X$N<h0z$r?=@A$7$F$$$J$$$+!"(B

$B%a%C%;!<%8$,K\Ev$KH`=w$+$i$N$b$N$+3N<B$KJ,$+$i$J$1$l$P$$$1$^$;$s!#(B

$B%"%j%9$K$h$C$F:n@.$5$l!"%a%C%;!<%8$K4^$^$l$?(B

<em>$BEE;R=pL>(B</em>$B$,$3$3$GLr$KN)$A$^$9!#(B</p>

<p>$BEE;R=pL>$O%a%C%;!<%8$N%@%$%8%'%9%H$d$=$NB>$N>pJs(B($B=hM}HV9f$J$I(B)$B$r(B

$B%@%$%8%'%9%H$rEE;R=pL>$K4^$`$3$H$O!"(B

$B$=$N=pL>$,$=$N%a%C%;!<%8$N$_$KM-8z$G$"$k$3$H$r0UL#$7$^$9!#(B

$B$3$l$O!"C/$b%@%$%8%'%9%H$rJQ$($F=pL>$r$9$k$3$H$,$G$-$J$$$?$a!"(B

$BH`=w$@$1$,=pL>$7$($?$+$i$G$9!#(B($BH]G'KI;_(B)</p>

</section>

</section>

<section id="certificates">

<title>$B>ZL@=q(B</title>

<p>$B%"%j%9$OHkL)$N%a%C%;!<%8$r6d9T$KAw$j!"(B

$B=pL>$r$7$F!"%a%C%;!<%8$N?.MQ$rJ]>Z$9$k$3$H$,$G$-$k$*$&$K$J$j$^$7$?$,!"(B

$BDL?.$7$F$$$kAj<j$,K\Ev$K6d9T$J$N$+3N$+$a$J$/$F$O$$$1$^$;$s!#(B

$B$3$l$O!"H`=w$,;H$&8x3+80$,6d9T$NHkL)80$HBP$K$J$C$F$$$k$b$N$+!"(B

$BH`=w$O3N$+$a$J$/$F$O$$$1$J$$$H$$$&$3$H$r0UL#$7$^$9!#(B

$BF1MM$K!"6d9T$O%a%C%;!<%8$N=pL>$,K\Ev$K%"%j%9$N=pL>$+3NG'$9$kI,MW$,(B

$B$"$j$^$9!#(B</p>

<p>$B$b$7N><T$K?H85$r>ZL@$7!"8x3+80$r3NG'$7!"$^$??.Mj$5$l$?5!4X$,=pL>(B

$B$7$?>ZL@=q$,$"$l$P!"N><T$H$bDL?.Aj<j$K$D$$$F@5$7$$Aj<j$@$H(B

$B3N?.$9$k$3$H$,$G$-$^$9!#(B

$B$=$N$h$&$J?.Mj$5$l$?5!4X$O(B<em>$BG'>Z6I(B</em>

(Certificate Authority $B$^$?$O(B CA) $B$H8F$P$l!"(B

$B>ZL@=q(B (certificate) $B$,G'>Z(B (authentication) $B$K;H$o$l$^$9!#(B</p>

<section id="certificatecontents">

<title>$B>ZL@=q$NFbMF(B</title>

<p>$B>ZL@=q$O8x3+80$H8D?M!"%5!<%P!"$=$NB>$N<gBN$N<B:_$N?H85$r(B

$B4XO"IU$1$^$9!#(B

<a href="#table1">$BI=(B1</a>$B$K<($5$l$k$h$&$K>ZL@BP>]$N>pJs$O(B

$B?H85>ZL@$N>pJs(B($B<1JLL>(B)$B$H8x3+80$,4^$^$l$^$9!#(B

$B>ZL@=q$O$^$?!"G'>Z6I$N?H85>ZL@$H=pL>!"$=$7$F>ZL@=q$NM-8z4|4V$r(B

$B4^$_$^$9!#(B

$B%7%j%"%k%J%s%P!<$J$I$NG'>Z6I$N4IM}>e$N>pJs$d(B

<td>$BG'>Z$5$l$kL>A0(B<br />

SSL$B@\B3$9$k(BURL</td>

<td>CN=www.example.com</td></tr>

<tr><td>Organization or Company ($BAH?%L>(B)</td>

<td>O</td>

<td>$BCDBN$N@5<01Q8lAH?%L>(B</td>

<td>O=Example Japan K.K.</td></tr>

<tr><td>Organizational Unit ($BItLgL>(B)</td>

<td>OU</td>

<td>$BIt=pL>$J$I(B</td>

<td>OU=Customer Service</td></tr>

<tr><td>City/Locality ($B;T6hD.B<(B)</td>

<td>L</td>

<td>$B=j:_$7$F$k;T6hD.B<(B</td>

<td>L=Sapporo</td></tr>

<tr><td>State/Province ($BETF;I\8)(B)</td>

<td>ST</td>

<td>$B=j:_$7$F$kETF;I\8)(B</td>

<td>ST=Hokkaido</td></tr>

<tr><td>Country($B9q(B)</td>

<td>C</td>

<td>$B=j:_$7$F$$$k9qL>$N(B ISO $B%3!<%I(B<br />

$BF|K\$N>l9g(B JP

</td>

<td>C=JP</td></tr>

</table>

</section>

<p>$BG'>Z6I$O$I$N9`L\$,>JN,2DG=$G$I$l$,I,?\$+$NJ}?K$rDj5A$9$k(B

$B$+$b$7$l$^$;$s!#9`L\$NFbMF$K$D$$$F$bG'>Z6I$d>ZL@=q$N%f!<%6$+$i$N(B

$BMW7o$,$"$k$+$b$7$l$^$;$s!#(B

$BNc$($P!"%M%C%H%9%1!<%W$N%V%i%&%6$O%5!<%P$N>ZL@=q$N(B

Common Name ($B%3%b%s%M!<%`(B)$B$,%5!<%P$N%I%a%$%sL>$N(B

<code>*.example.com</code>

$B$H$$$&$h$&$J%o%$%k%I%+!<%I$N%Q%?!<%s$K%^%C%A$9$k$3$H(B

$B$rMW5a$7$^$9!#(B</p>

<p>$B%P%$%J%j7A<0$N>ZL@=q$O(B ASN.1 $BI=5-K!(B

[<a href="#X208">X208</a>] [<a href="#PKCS">PKCS</a>] $B$G(B

$BDj5A$5$l$F$$$^$9!#(B

$B$3$NI=5-K!$OFbMF$r$I$N$h$&$K5-=R$9$k$+$rDj5A$7!"(B

$BId9f2=$N5,Dj$,$3$N>pJs$,$I$N$h$&$K%P%$%J%j7A<0$KJQ49$5$l$k$+$r(B

$BDj5A$7$^$9!#(B

$B>ZL@=q$N%P%$%J%jId9f2=$O(B Distinguished Encoding

Rules (DER) $B$GDj5A$5$l!"$=$l$O$h$j0lHLE*$J(B Basic Encoding Rules

(BER) $B$K4p$E$$$F$$$^$9!#(B

$B%P%$%J%j7A<0$r07$&$3$H$N$G$-$J$$Aw?.$G$O!"(B

$B%P%$%J%j7A<0$O(B Base64 $BId9f2=(B [<a href="#MIME">MIME</a>] $B$G(B

ASCII $B7A<0$KJQ49$5$l$k$3$H$,$"$j$^$9!#(B

$B$3$N$h$&$KId9f2=$5$l!"0J2<$NNc$K<($5$l$k$h$&$K6h@Z$j9T$K(B

(PEM $B$NL>A0$O(B "Privacy Enhanced Mail" $B$KM3Mh$7$^$9(B)</p>

<p>$B$^$:>ZL@=q$N?=@A$N>pJs$r3NG'$9$k$3$H$G!"(B

$BG'>Z6I$OHkL)80$N;}$A<g$N?H85$rJ]>Z$7$^$9!#(B

$BG'>Z6I$O%"%j%9$,>ZL@=q$N?=@A$,<gD%$9$kDL$j$N(B

$B?MJ*$@$H$$$&$3$H$r3NG'$7$J$/$F$O$$$1$^$;$s!#(B</p>

<p>$BG'>Z6I$OB>$NG'>Z6I$X$N>ZL@=q$rH/9T$9$k$3$H$,$G$-$^$9!#(B

$BL$CN$N>ZL@=q$rD4$Y$k;~$K!"%"%j%9$O$=$N>ZL@=q$NH/9T<T(B

$B$K<+?.$,;}$F$k$^$G!"H/9T<T$N>ZL@=q$r(B

$B$=$N>e0L3,AX$NG'>Z6I$r$?$I$C$FD4$Y$kI,MW$,$"$j$^$9!#(B

$B!V0-<A$J!W>ZL@=q$N4m81@-$r8:$i$9$?$a!"(B

$BH`=w$O8B$i$l$?O":?$NH/9T<T$N$_?.Mj$9$k$h$&$K(B

$B7h$a$k$3$H$b$G$-$^$9!#(B</p>

</section>

<section id="rootlevelca">

<title>$B:G>e0LG'>Z6I$N:n@.(B</title>

<p>$BA0$K=R$Y$?$h$&$K!"A4$F$N>ZL@=q$K$D$$$F!"(B

$B:G>e0L$NG'>Z6I(B(CA)$B$^$G$=$l$>$l$NH/9T<T$,(B

$BBP>]$N?H85>ZL@$NM-8z@-$rL@$i$+$K$9$kI,MW$,$"$j$^$9!#(B

$BLdBj$O!"C/$,$=$N:G>e0L$NG'>Z5!4X$N>ZL@=q$rJ]>Z$9$k$N$+!"(B

$B$H$$$&$3$H$G$9!#(B

$B$3$N$h$&$J>l9g$K8B$j!">ZL@=q$O!V<+8J=pL>!W$5$l$^$9!#(B

$B$D$^$j!">ZL@=q$NH/9T<T$H>ZL@BP>]$,F1$8$H$$$&$3$H$K$J$j$^$9!#(B

$B$=$N7k2L!"<+8J=pL>$5$l$?>ZL@=q$r?.MQ$9$k$K$O(B

$B:Y?4$NCm0U$,I,MW$G$9!#(B

$B:G>e0LG'>Z6I$,8x3+80$r9-$/8xI=$9$k$3$H$G!"(B

$B$=$N80$r?.Mj$9$k%j%9%/$rDc$/$9$k$3$H$,$G$-$^$9!#(B

$B$b$7!"B>?M$,$=$NG'>Z6I$K$J$j$9$^$7$?;~$K!"$=$l$,O*8+$7$d(B

$B$9$$$+$i$G$9!#(B

$BB?$/$N%V%i%&%6$OM-L>$JG'>Z6I$r?.Mj$9$k$h$&$K(B

$B@_Dj$5$l$F$$$^$9!#(B</p>

<p><a href="http://www.thawte.com/">Thawte</a>

$B$d(B <a href="http://www.verisign.com/">VeriSign</a>

$B$N$h$&$JB?$/$N2q<R$,G'>Z6I$H$7$F3+@_$7$^$7$?!#(B

<li>$B>ZL@=q?=@A$N3NG'(B</li>

<li>$B>ZL@=q?=@A$N=hM}(B</li>

<li>$B>ZL@=q$NH/9T$H4IM}(B</li>

</ul>

<p>$B<+J,$GG'>Z6I$r:n$k$3$H$b2DG=$G$9!#(B

<p>$BG'>Z6I$N3+@_$OE0Dl$7$?4IM}!"5;=Q!"1?MQ$NBN@)$rI,MW$H$9$k(B

$B@UG$$N$"$k;E;v$G$9!#(B

$BG'>Z6I$O>ZL@=q$rH/9T$9$k$@$1$G$J$/!"(B

$B4IM}$b$7$J$1$l$P$J$j$^$;$s!#(B

$B6qBNE*$K$O!">ZL@=q$,$$$D$^$GM-8z$+$r7hDj$7!"99?7$7!"(B

$B$^$?4{$KH/9T$5$l$?$,<:8z$7$?>ZL@=q$N%j%9%H(B

(Certificate Revocation Lists $B$^$?$O(B CRL)

$B$r4IM}$7$J$1$l$P$$$1$^$;$s!#(B

$BNc$($P!"%"%j%9$,2q<R$+$i<R0w$H$7$F>ZL@=q$rM?$($i$l$?$H$7$^$9!#(B

$B$=$7$F!"%"%j%9$,2q<R$r<-$a$k$H$-$K$O>ZL@=q$r<h$j>C$5$J$1$l$P(B

$B$$$1$J$$$H$7$^$9!#(B

$B>ZL@=q$O<!!9$H?M$KEO$5$l$F$$$/$b$N$J$N$G!"(B

$B>ZL@=q$=$N$b$N$+$i!"$=$l$,<h$j>C$5$l$?$+H=CG$9$k$3$H$O(B

$BIT2DG=$G$9!#(B

$B$h$C$F!">ZL@=q$NM-8z@-$rD4$Y$k$H$-$K$O!"(B

$BG'>Z6I$KO"Mm$7$F(B CRL $B$r>H9g$9$kI,MW$,$"$j$^$9!#(B

$BIaDL$3$N2aDx$O<+F02=$5$l$F$$$k$b$N$G$O$"$j$^$;$s!#(B</p>

<p>$B%G%U%)%k%H$G%V%i%&%6$K@_Dj$5$l$F$$$J$$G'>Z6I$r;H$C$?>l9g!"(B

$BG'>Z6I$N>ZL@=q$r%V%i%&%6$KFI$_9~$s$G!"(B

$B%V%i%&%6$,$=$NG'>Z6I$K$h$C$F=pL>$5$l$?%5!<%P$N>ZL@=q$r(B

$BM-8z2=$9$kI,MW$,$"$j$^$9!#(B

$B0lEYFI$_9~$^$l$k$H!"$=$NG'>Z6I$K$h$C$F=pL>$5$l$?A4$F$N(B

$B>ZL@=q$r<u$1F~$l$k$?$a!"4m81$rH<$$$^$9!#(B</p>

<p>Secure Sockets Layer $B%W%m%H%3%k$O?.Mj@-$N$"$k%3%M%/%7%g%s7?$N(B

$B%M%C%H%o!<%/AX$N%W%m%H%3%k(B($BNc$($P!"(BTCP/IP)$B$H(B

$B%"%W%j%1!<%7%g%sAX$N%W%m%H%3%k(B($BNc$($P!"(BHTTP)

<p>SSL $B%W%m%H%3%k$O0E9f2=!"%@%$%8%'%9%H!"EE;R=pL>$K$D$$$F!"(B

$BMM!9$J%"%k%4%j%:%`$r%5%]!<%H$9$k$h$&$K$G$-$F$$$^$9!#(B

$B$3$&$9$k$3$H$G!"K!$dM"=P$N5,@)$r9MN8$KF~$l$F!"%5!<%P$K9g$o$;$?(B

$B%"%k%4%j%:%`$rA*$V$3$H$,$G$-!"$^$?!"?7$7$$%"%k%4%j%:%`$r(B

$BMxMQ$7$F$$$/$3$H$b2DG=$K$7$F$$$^$9!#(B

$B%"%k%4%j%:%`$NA*Br$O%W%m%H%3%k%;%C%7%g%s3+;O;~$K(B

$B%5!<%P$H%/%i%$%"%s%H4V$G<h$j7h$a$i$l$^$9!#(B</p>

<columnspec><column width=".15"/><column width=".2"/>

<column width=".30"/><column width=".25"/></columnspec>

<td>Vendor Standard (Netscape Corp. $B$h$j(B) [<a href="#SSL2"

<td>Expired Internet Draft (Netscape Corp. $B$h$j(B) [<a href="#SSL3"

<td>$BFCDj$N%;%-%e%j%F%#967b$rKI$0$?$a$N2~D{!"(B

$BHs(BRSA $B0E9f$NDI2C!">ZL@=q3,AX9=B$$N%5%]!<%H(B</td>

<td>Proposed Internet Standard (IETF $B$h$j(B) [<a href="#TLS1"

<td>MAC $B%l%$%d$r(B HMAC $B$X99?7!"%V%m%C%/0E9f$N(B block

padding$B!"%a%C%;!<%8=g=x$NI8=`2=!"7Y9pJ8$N=<<B$J$I$N$?$a(B

SSL 3.0 $B$r2~D{!#(B</td>

<td>- Lynx/2.8+OpenSSL</td></tr>

</table>

</section>

<p><a href="#table4">$BI=(B4</a>$B$K<($5$l$k$H$*$j!"(BSSL $B%W%m%H%3%k$K$O(B

$B$$$/$D$b$N%P!<%8%g%s$,$"$j$^$9!#(B

$BI=$K$b=q$+$l$F$$$k$h$&$K!"(BSSL 3.0 $B$NMxE@$N0l$D$O(B

$B$3$N5!G=$K$h$C$F!"%5!<%P$O<+J,$N>ZL@=q$K2C$($F!"(B

$BH/9T<T$N>ZL@=q$r%V%i%&%6$KEO$9$3$H$,$G$-$^$9!#(B

$B>ZL@=q3,AX9=B$$K$h$C$F!"(B

$B%V%i%&%6$KH/9T<T$N>ZL@=q$,D>@\EPO?$5$l$F$$$J$/$F$b!"(B

$B3,AX$NCf$K4^$^$l$F$$$l$P!"(B

$B%V%i%&%6$O%5!<%P$N>ZL@=q$rM-8z2=$9$k$3$H$,$G$-$^$9!#(B

SSL 3.0 $B$O8=:_(B Internet Engineering Task Force (IETF)

$B$K$h$C$F3+H/$5$l$F$$$k(B Transport Layer Security

[<a href="#TLS1">TLS</a>] $B%W%m%H%3%kI8=`5,3J$N4pAC$H$J$C$F$$$^$9!#(B</p>

<section id="session">

<title>$B%;%C%7%g%s$N3NN)(B</title>

<p><a href="#figure1">$B?^(B1</a>$B$G<($5$l$k$h$&$K!"(B

$B%;%C%7%g%s$N3NN)$O%/%i%$%"%s%H$H%5!<%P4V$N(B

$B%O%s%I%7%'!<%/%7!<%/%(%s%9$K$h$C$F9T$J$o$l$^$9!#(B

$B%5!<%P$,>ZL@=q$rDs6!$9$k$+!"%/%i%$%"%s%H$N>ZL@=q$r%j%/%(%9%H$9$k$+(B

$B$H$$$&%5!<%P$N@_Dj$K$h$j!"$3$N%7!<%/%(%s%9$O0[$J$k$b$N$H$J$j$^$9!#(B

$B0E9f>pJs$N4IM}$N$?$a$K!"DI2C$N%O%s%I%7%'!<%/2aDx$,I,MW$K$J$k(B

$B%O%s%I%7%'!<%/$J$7$G@\B3$9$k$3$H$,$G$-$^$9!#(B</p>

</note>

<p class="figure">

<img

src="/images/ssl_intro_fig1.gif" alt="" width="423" height="327" /><br />

<a id="figure1" name="figure1"><dfn>$B?^(B1</dfn></a>: SSL

$B%O%s%I%7%'!<%/%7!<%/%(%s%935N,(B</p>

<p>$B%5!<%P$H%/%i%$%"%s%H$G;H$o$l$k(B

<li>$B%/%i%$%"%s%H$H%5!<%P4V$G$N%;%C%7%g%s80$N3NN)$H6&M-(B</li>

<li>$B%*%W%7%g%s$H$7$F!"%/%i%$%"%s%H$KBP$9$k%5!<%P$NG'>Z(B</li>

<li>$B%*%W%7%g%s$H$7$F!"%5!<%P$KBP$9$k%/%i%$%"%s%H$NG'>Z(B</li>

</ol>

<p>$BBh0l%9%F%C%W$N0E9f%9%$!<%H<h$j7h$a$K$h$C$F!"(B

$B%5!<%P$H%/%i%$%"%s%H$O$=$l$>$l$K$"$C$?(B

$B0E9f%9%$!<%H$rA*$V$3$H$,$G$-$^$9!#(B

SSL3.0 $B%W%m%H%3%k$N;EMM=q$O(B 31 $B$N0E9f%9%$!<%H$rDj5A$7$F$$$^$9!#(B

$B0E9f%9%$!<%H$O0J2<$N%3%s%]!<%M%s%H$K$h$jDj5A$5$l$F$$$^$9(B:</p>

<ul>

<li>$B80$N8r49<jCJ(B</li>

<li>$B%G!<%?DL?.$N0E9f=Q(B</li>

<li>Message Authentication Code (MAC) $B:n@.$N$?$a$N(B

$B%a%C%;!<%8%@%$%8%'%9%H(B</li>

<title>$B%@%$%8%'%9%H4X?t(B</title>

<p>

$B%@%$%8%'%9%H4X?t$NA*Br$O%l%3!<%I%f%K%C%H$+$i$I$N$h$&$K%@%$%8%'%9%H$,@8@.$5$l$k$+$r7hDj$7$^$9!#(B

<li>$B%@%$%8%'%9%H$J$7(B</li>

<li>MD5 (128-bit $B%O%C%7%e(B)</li>

<li>Secure Hash Algorithm (SHA-1) (160-bit $B%O%C%7%e(B)</li>

</ul>

<p>$B%a%C%;!<%8%@%$%8%'%9%H$O(B Message Authentication Code (MAC)

<title>$B%O%s%I%7%'!<%/%7!<%/%(%s%9%W%m%H%3%k(B</title>

<p>$B%O%s%I%7%'!<%/%7!<%/%(%s%9$O;0$D$N%W%m%H%3%k$r;H$$$^$9(B:</p>

<ul>

<li><dfn>SSL $B%O%s%I%7%'!<%/%W%m%H%3%k(B</dfn>$B$O(B

$B%/%i%$%"%s%H$H%5!<%P4V$G$N(B SSL $B%;%C%7%g%s$N3NN)$K;H$o$l$^$9!#(B</li>

<li><dfn>SSL $B0E9f;EMMJQ99%W%m%H%3%k(B</dfn>$B$O(B

$B%;%C%7%g%s$G$N0E9f%9%$!<%H$N<h$j7h$a$K;H$o$l$^$9!#(B</li>

<li><dfn>SSL $B7Y9p%W%m%H%3%k(B</dfn>$B$O(B

$B%/%i%$%"%s%H%5!<%P4V$G(B SSL $B%(%i!<$rEAC#$9$k$N$K;H$o$l$^$9!#(B</li>

</ul>

<p>$B;0$D$N%W%m%H%3%k$O!"%"%W%j%1!<%7%g%s%W%m%H%3%k%G!<%?$H$H$b$K!"(B

<a href="#figure2">$B?^(B2</a>$B$K<($9$H$*$j(B <dfn>SSL $B%l%3!<%I%W%m%H%3%k(B</dfn>

$B$G%+%W%;%k2=$5$l$^$9!#(B

$B%+%W%;%k2=$5$l$?%W%m%H%3%k$O%G!<%?$r8!::$7$J$$(B

$B2<AX$N%W%m%H%3%k$K$h$C$F%G!<%?$H$7$FEAC#$5$l$^$9!#(B

$B%+%W%;%k2=$5$l$?%W%m%H%3%k$O2<AX$N%W%m%H%3%k$K4X$7$F0l@Z4XCN$7$^$;$s!#(B</p>

<p class="figure">

<img src="/images/ssl_intro_fig2.gif" alt="" width="428"

height="217" /><br />

<a id="figure2" name="figure2"><dfn>$B?^(B2</dfn></a>: SSL $B%W%m%H%3%k%9%?%C%/(B

</p>

<p>

$B%l%3!<%I%W%m%H%3%k$K$h$k(B SSL $B%3%s%H%m!<%k%W%m%H%3%k$N%+%W%;%k2=$O!"(B

$B%"%/%F%#%V$J%;%C%7%g%s$NFs2sL\$NDL?.$,$"$C$?>l9g!"(B

$B%3%s%H%m!<%k%W%m%H%3%k$,0BA4$G$"$k$3$H$r0UL#$7$^$9!#(B

$B4{$K%;%C%7%g%s$,L5$$>l9g$O!"(BNull $B0E9f%9%$!<%H$,;H$o$l!"(B

$B0E9f2=$O9T$J$o$l$:!"%;%C%7%g%s$,3NN)$9$k$^$G$O(B

$B%@%$%8%'%9%H$bL5$$>uBV$H$J$j$^$9!#(B</p>

</section>

<section id="datatransfer">

<title>$B%G!<%?DL?.(B</title>

<p><a href="#figure3">$B?^(B3</a>$B$K<($5$l$k(B SSL $B%l%3!<%I%W%m%H%3%k(B

$B$O%/%i%$%"%s%H$H%5!<%P4V$N%"%W%j%1!<%7%g%s$d(B

$B$3$N%G!<%?$O$h$j>.$5$$%f%K%C%H$KJ,$1$i$l$?$j!"(B

$B$$$/$D$+$N9b5i%W%m%H%3%k$r$^$H$a$F0l%f%K%C%H$H$7$FDL?.$,(B

$B9T$J$o$l$k$3$H$b$"$j$^$9!#(B

$B%G!<%?$r05=L$7!"%@%$%8%'%9%H=pL>$rE:IU$7$F!"(B

<p>$B$h$/$"$k(B SSL $B$N;H$$J}$O%V%i%&%6$H%&%'%V%5!<%P4V$N(B HTTP $BDL?.(B

$B$N0BA42=$G$9!#(B

$B$3$l$O!"=>Mh$N0BA4$G$O$J$$(B HTTP $B$N;HMQ$r=|30$9$k$b$N$G$O$"$j$^$;$s!#(B

$B0BA42=$5$l$?$b$N$O<g$K(B SSH $B>e$NIaDL$N(B HTTP $B$G!"(BHTTPS $B$H8F$P$l$^$9!#(B

$BBg$-$J0c$$$O!"(BURL $B%9%-!<%`$K(B <code>http</code> $B$NBe$o$j$K(B <code>https</code>

$B$rMQ$$!"%5!<%P$,JL$N%]!<%H$r;H$&$3$H$G$9(B ($B%G%U%)%k%H$G$O(B443)$B!#(B

$B$3$l$,<g$K(B <module

>mod_ssl</module> $B$,(B Apache $B%&%'%V%5!<%P$KDs6!$9$k5!G=$G$9!#(B</p>

</section>

</section>

<section id="references">

<title>$B;29MJ88%(B</title>

<dl>

<dt><a id="AC96" name="AC96">[AC96]</a></dt>

<dd>Bruce Schneier, <q>Applied Cryptography</q>, 2nd Edition, Wiley,

1996. See <a href="http://www.counterpane.com/"

>http://www.counterpane.com/</a> for various other materials by Bruce

Schneier.</dd>

<dt><a id="X208" name="X208">[X208]</a></dt>

<dd>ITU-T Recommendation X.208, <q>Specification of Abstract Syntax Notation

One (ASN.1)</q>, 1988. See for instance <a

>http://www.itu.int/rec/recommendation.asp?type=items&amp;lang=e&amp;parent=T-REC-X.208-198811-I</a>.

</dd>

<dt><a id="X509" name="X509">[X509]</a></dt>

<dd>ITU-T Recommendation X.509, <q>The Directory - Authentication

Framework</q>. See for instance <a

>http://www.itu.int/rec/recommendation.asp?type=folders&amp;lang=e&amp;parent=T-REC-X.509</a>.

</dd>

<dt><a id="PKCS" name="PKCS">[PKCS]</a></dt>

<dd><q>Public Key Cryptography Standards (PKCS)</q>,

RSA Laboratories Technical Notes, See <a

>http://www.rsasecurity.com/rsalabs/pkcs/</a>.</dd>

<dt><a id="MIME" name="MIME">[MIME]</a></dt>

<dd>N. Freed, N. Borenstein, <q>Multipurpose Internet Mail Extensions

(MIME) Part One: Format of Internet Message Bodies</q>, RFC2045.

See for instance <a href="http://ietf.org/rfc/rfc2045.txt"

>http://ietf.org/rfc/rfc2045.txt</a>.</dd>

<dt><a id="SSL2" name="SSL2">[SSL2]</a></dt>

<dd>Kipp E.B. Hickman, <q>The SSL Protocol</q>, 1995. See <a

>http://www.netscape.com/eng/security/SSL_2.html</a>.</dd>

<dt><a id="SSL3" name="SSL3">[SSL3]</a></dt>

<dd>Alan O. Freier, Philip Karlton, Paul C. Kocher, <q>The SSL Protocol

Version 3.0</q>, 1996. See <a

>http://www.netscape.com/eng/ssl3/draft302.txt</a>.</dd>

<dt><a id="TLS1" name="TLS1">[TLS1]</a></dt>

<dd>Tim Dierks, Christopher Allen, <q>The TLS Protocol Version 1.0</q>,

1999. See <a href="http://ietf.org/rfc/rfc2246.txt"

>http://ietf.org/rfc/rfc2246.txt</a>.</dd>

</dl>

</section>

</manualpage>