Adding upstream version 0.5.1
This commit is contained in:
114
doc-jp/README.SSL
Normal file
114
doc-jp/README.SSL
Normal file
@@ -0,0 +1,114 @@
|
||||
SSL <20><><EFBFBD>ݡ<EFBFBD><DDA1>ȤˤĤ<CBA4><C4A4><EFBFBD>
|
||||
|
||||
(2000/11/07) <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
||||
okabek@guitar.ocn.ne.jp
|
||||
(2001/12/27) <20><><EFBFBD><EFBFBD>ʸ<EFBFBD><CAB8>
|
||||
ukai@debian.or.jp
|
||||
|
||||
<20><> OpenSSL <20>饤<EFBFBD>֥<EFBFBD><D6A5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>̤<EFBFBD><CCA4><EFBFBD>, SSL <20>ݡ<F2A5B5A5><DDA1>Ȥ<EFBFBD><C8A4>Ƥ<EFBFBD><C6A4>ޤ<EFBFBD>.
|
||||
<20><><EFBFBD>餫<EFBFBD><E9A4AB><EFBFBD>ᥤ<EFBFBD>ȡ<F3A5B9A5><C8A1>뤷<EFBFBD>Ƥ<EFBFBD><C6A4><EFBFBD><EFBFBD>Ƥ<EFBFBD><C6A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
|
||||
|
||||
<20><> OpenSSL <20>饤<EFBFBD>֥<EFBFBD><D6A5>꤬<EFBFBD><EAA4AC><EFBFBD>ȡ<F3A5B9A5><C8A1>뤵<EFBFBD><EBA4B5><EFBFBD>Ƥ<EFBFBD><C6A4><EFBFBD><EFBFBD><EFBFBD> configure <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ץȼ¹Ի<C2B9><D4BB>˼<EFBFBD>
|
||||
ưŪ<C6B0>˸<EFBFBD><CBB8>Ф<EFBFBD><D0A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ѳ<EFBFBD>ǽ<EFBFBD>Ȥʤ<C8A4><CAA4>ޤ<EFBFBD>.
|
||||
<20>⤷<EFBFBD><E2A4B7><EFBFBD>ޤ<EFBFBD>ư<EFBFBD><C6B0><EFBFBD>ʤ<EFBFBD><CAA4>Ȥ<EFBFBD><C8A4><EFBFBD>, config.h <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>å<EFBFBD><C3A5><EFBFBD><EFBFBD>ƤߤƤ<DFA4><C6A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>. SSL <20><><EFBFBD><EFBFBD><EFBFBD>Ѥ<EFBFBD>
|
||||
<20>뤿<EFBFBD><EBA4BF><EFBFBD>ˤ<EFBFBD>, config.h <20><>, USE_SSL <20>ޥ<EFBFBD><DEA5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ƥ<EFBFBD><C6A4><EFBFBD>ɬ<EFBFBD>פ<EFBFBD><D7A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ޤ<EFBFBD>.
|
||||
<20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, SSL ǧ<>ڥ<EFBFBD><DAA5>ݡ<EFBFBD><DDA1>Ȥ<EFBFBD><C8A4><EFBFBD><EFBFBD>Ѥ<EFBFBD><D1A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, USE_SSL_VERIFY <20>ޥ<EFBFBD><DEA5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>å<EFBFBD><C3A5><EFBFBD>
|
||||
<20>ƤߤƤ<DFA4><C6A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
|
||||
<20><><EFBFBD><EFBFBD><EFBFBD>ѥ<EFBFBD><D1A5><EFBFBD><EFBFBD>ǥ<EFBFBD><C7A5>顼<EFBFBD><E9A1BC><EFBFBD>Ф<EFBFBD><D0A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD>ե饰<D5A5><E9A5B0> `-lssl -lcrypto', <20><><EFBFBD><EFBFBD><EFBFBD>ѥ<EFBFBD><D1A5><EFBFBD>
|
||||
<20>ե饰<D5A5><E9A5B0> '-I(SSLeay/OpenSSL <20>Υإå<D8A5><C3A5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ǥ<EFBFBD><C7A5>쥯<EFBFBD>ȥ<EFBFBD>)' <20><><EFBFBD><EFBFBD><EFBFBD>뤫<EFBFBD><EBA4AB>ǧ<EFBFBD><C7A7><EFBFBD>Ƥ<EFBFBD>
|
||||
<20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
|
||||
|
||||
SSL <20><><EFBFBD>ݡ<EFBFBD><DDA1>Ȥ<EFBFBD>ͭ<EFBFBD><CDAD><EFBFBD>ˤʤäƤ<C3A4><C6A4>뤫<EFBFBD>ɤ<EFBFBD><C9A4><EFBFBD><EFBFBD><EFBFBD>, Option Setting Panel <20>ˡ<EFBFBD>SSL<53><4C><EFBFBD><EFBFBD>
|
||||
<20><><EFBFBD>פ<EFBFBD><D7A4>ޤޤ<DEA4><DEA4>Ƥ<EFBFBD><C6A4>뤫<EFBFBD>ɤ<EFBFBD><C9A4><EFBFBD><EFBFBD>dz<EFBFBD>ǧ<EFBFBD>Ǥ<EFBFBD><C7A4>ޤ<EFBFBD>.
|
||||
|
||||
<20><> SSL <20>˴ؤ<CBB4><D8A4>ưʲ<C6B0><CAB2><EFBFBD><EFBFBD><EFBFBD><EFBFBD>꤬<EFBFBD><EAA4AC>ǽ<EFBFBD>ˤʤäƤޤ<C6A4>:
|
||||
|
||||
ssl_forbid_method
|
||||
<20>Ȥ<EFBFBD><C8A4>ʤ<EFBFBD>SSL<53><EFBFBD>åɤΥꥹ<CEA5><EAA5B9>(2: SSLv2, 3: SSLv3, t: TLSv1)
|
||||
(<28>ǥե<C7A5><D5A5><EFBFBD><EFBFBD>Ȥ<EFBFBD><NULL>).
|
||||
ssl_verify_server ON/OFF
|
||||
SSL<53>Υ<EFBFBD><CEA5><EFBFBD><EFBFBD><EFBFBD>ǧ<EFBFBD>ڤ<EFBFBD><DAA4>Ԥ<EFBFBD>(<28>ǥե<C7A5><D5A5><EFBFBD><EFBFBD>Ȥ<EFBFBD>OFF).
|
||||
ssl_cert_file <20>ե<EFBFBD><D5A5><EFBFBD><EFBFBD><EFBFBD>̾
|
||||
SSL<53>Υ<EFBFBD><CEA5>饤<EFBFBD><E9A5A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>PEM<45><4D><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ե<EFBFBD><D5A5><EFBFBD><EFBFBD><EFBFBD>(<28>ǥե<C7A5><D5A5><EFBFBD><EFBFBD>Ȥ<EFBFBD><NULL>).
|
||||
ssl_key_file <20>ե<EFBFBD><D5A5><EFBFBD><EFBFBD><EFBFBD>̾
|
||||
SSL<53>Υ<EFBFBD><CEA5>饤<EFBFBD><E9A5A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>PEM<45><4D><EFBFBD><EFBFBD><EFBFBD><EFBFBD>̩<EFBFBD><CCA9><EFBFBD>ե<EFBFBD><D5A5><EFBFBD><EFBFBD><EFBFBD>(<28>ǥե<C7A5><D5A5><EFBFBD><EFBFBD>Ȥ<EFBFBD><NULL>).
|
||||
ssl_ca_path <20>ǥ<EFBFBD><C7A5>쥯<EFBFBD>ȥ<EFBFBD>̾
|
||||
SSL<53><4C>ǧ<EFBFBD>ڶɤ<DAB6>PEM<45><4D><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Τ<F1B7B2A4><CEA4><EFBFBD><EFBFBD>ǥ<EFBFBD><C7A5>쥯<EFBFBD>ȥ<EFBFBD><C8A5>ؤΥѥ<CEA5>
|
||||
(<28>ǥե<C7A5><D5A5><EFBFBD><EFBFBD>Ȥ<EFBFBD><NULL>).
|
||||
ssl_ca_file <20>ե<EFBFBD><D5A5><EFBFBD><EFBFBD><EFBFBD>̾
|
||||
SSL<53><4C>ǧ<EFBFBD>ڶɤ<DAB6>PEM<45><4D><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Υե<CEA5><D5A5><EFBFBD><EFBFBD><EFBFBD>(<28>ǥե<C7A5><D5A5><EFBFBD><EFBFBD>Ȥ<EFBFBD><NULL>).
|
||||
<20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>SSLEAY_VERSION_NUMBER >= 0x0800<30>פʴĶ<CAB4><C4B6>Ǥʤ<C7A4><CAA4><EFBFBD>̵<EFBFBD>̤ʥ<CCA4><CAA5><EFBFBD><EFBFBD>ɤ<EFBFBD><C9A4><EFBFBD>
|
||||
<20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʤΤ<CAA4>, configure<72><65><EFBFBD><EFBFBD>disable<6C><65><EFBFBD>Ƥ<EFBFBD><C6A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ۤ<EFBFBD><DBA4><EFBFBD><EFBFBD>褤<EFBFBD>Ǥ<EFBFBD><C7A4>礦.
|
||||
|
||||
<20>ޤ<EFBFBD><DEA4>ºݤ<C2BA>ǧ<EFBFBD>ڤ<EFBFBD><DAA4>Ԥ<EFBFBD><D4A4><EFBFBD><EFBFBD><EFBFBD>, ssl_ca_path<74>ޤ<EFBFBD><DEA4><EFBFBD>ssl_ca_file<6C><65>, <20><><EFBFBD><EFBFBD><EFBFBD>Фθ<D0A4><CEB8><EFBFBD>
|
||||
<20><>̾<EFBFBD><CCBE><EFBFBD>Ƥ<EFBFBD><C6A4><EFBFBD>ǧ<EFBFBD>ڶɤξ<C9A4><CEBE><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> (ssl_verify_server<65><72>ON/OFF<46>˴ط<CBB4>̵<EFBFBD><CCB5>) <20><><EFBFBD><EFBFBD>
|
||||
<20><><EFBFBD>ʤ<EFBFBD><CAA4>ȥ<EFBFBD><C8A5><EFBFBD><EFBFBD><EFBFBD>ǧ<EFBFBD>ڤ<EFBFBD><DAA4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ޤ<EFBFBD><DEA4><EFBFBD><EFBFBD><EFBFBD>
|
||||
|
||||
<20>̾<EFBFBD><CCBE>Ȥ<EFBFBD><C8A4><EFBFBD><EFBFBD>Ƥ<EFBFBD><C6A4><EFBFBD>ǧ<EFBFBD>ڶɤξ<C9A4><CEBE><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ϰʲ<CFB0><CAB2>ΤȤ<CEA4><C8A4><EFBFBD><EFBFBD>ʤɤ<CAA4><C9A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ǥ<EFBFBD><C7A4>ޤ<EFBFBD><DEA4><EFBFBD>
|
||||
|
||||
* mozilla<6C>Υ<EFBFBD><CEA5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>˴ޤޤ<DEA4><DEA4>Ƥ<EFBFBD><C6A4><EFBFBD>
|
||||
mozilla/security/nss/lib/ckfw/builtins/certdata.txt
|
||||
<20><><EFBFBD><EFBFBD>ź<EFBFBD>դ<EFBFBD> ruby script <20><> *.pem<65>ե<EFBFBD><D5A5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ȥ<EFBFBD><C8A4>ƤȤ<C6A4><C8A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
|
||||
|
||||
% ruby certdata2pem.rb < certdata.txt
|
||||
|
||||
<20>ǥ<EFBFBD><C7A5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ȥǥ<C8A5><C7A5>쥯<EFBFBD>ȥ<EFBFBD><C8A5><EFBFBD> *.pem<65>ե<EFBFBD><D5A5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ȥ<EFBFBD><C8A4><EFBFBD><EFBFBD><EFBFBD>
|
||||
openssl<73><6C> c_rehash <20><><EFBFBD>ޥ<EFBFBD><DEA5>ɤ<EFBFBD> hash symlink <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ޤ<EFBFBD><DEA4><EFBFBD>
|
||||
<20><><EFBFBD>Υǥ<CEA5><C7A5>쥯<EFBFBD>ȥ<EFBFBD><C8A5><EFBFBD> ssl_ca_path <20><><EFBFBD><EFBFBD><EFBFBD>ꤹ<EFBFBD>뤳<EFBFBD>Ȥ<EFBFBD><C8A4>Ǥ<EFBFBD><C7A4>ޤ<EFBFBD><DEA4><EFBFBD>
|
||||
<20>⤷<EFBFBD><E2A4B7><EFBFBD>ϡ<EFBFBD>*.pem <20><><EFBFBD>ޤȤ<C8A4><E1A4BF><EFBFBD>ĤΥե<CEA5><D5A5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ƥ<EFBFBD><C6A4><EFBFBD><EFBFBD><EFBFBD>
|
||||
<20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> ssl_ca_file <20><><EFBFBD><EFBFBD><EFBFBD>ꤹ<EFBFBD>뤳<EFBFBD>Ȥ<EFBFBD><C8A4>Ǥ<EFBFBD><C7A4>ޤ<EFBFBD><DEA4><EFBFBD>
|
||||
|
||||
* mod_ssl<73>Υ<EFBFBD><CEA5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>˴ޤޤ<DEA4><DEA4>Ƥ<EFBFBD><C6A4><EFBFBD> pkg.sslcfg/ca-bundle.crt
|
||||
<20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> PEM<45>ʤΤǡ<CEA4><C7A1><EFBFBD><EFBFBD>Υե<CEA5><D5A5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Υե<CEA5><D5A5>ѥ<EFBFBD>̾<EFBFBD><CCBE> ssl_ca_file <20><>
|
||||
<20><><EFBFBD>ꤹ<EFBFBD>뤳<EFBFBD>Ȥ<EFBFBD><C8A4>Ǥ<EFBFBD><C7A4>ޤ<EFBFBD><DEA4><EFBFBD>
|
||||
|
||||
<20><> <20>С<EFBFBD><D0A1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> 0.9.5 <20>ʹߤ<CAB9> OpenSSL <20>饤<EFBFBD>֥<EFBFBD><D6A5><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>뤿<EFBFBD><EBA4BF><EFBFBD>˴<EFBFBD><CBB4>Ĥ<EFBFBD>
|
||||
<20>Υ<EFBFBD><CEA5><EFBFBD><EFBFBD>ɤ<EFBFBD><C9A4><EFBFBD><EFBFBD>ꤹ<EFBFBD><EAA4B9>ɬ<EFBFBD>פ<EFBFBD><D7A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ޤ<EFBFBD>.
|
||||
<20>ǥե<C7A5><D5A5><EFBFBD><EFBFBD>ȤǤ<C8A4> /dev/urandom <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ф<EFBFBD><D0A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ѥ<EFBFBD><D1A4>ޤ<EFBFBD><DEA4><EFBFBD>, ̵<><CCB5><EFBFBD><EFBFBD><EFBFBD><EFBFBD> w3m <20><><EFBFBD><EFBFBD>
|
||||
<20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ޤ<EFBFBD>. <20>⤷, EGD (Entropy Gathering Daemon) <20>ޤ<EFBFBD><DEA4><EFBFBD> PRNGD (Pseudo
|
||||
Random Number Generator Daemon) <20><><EFBFBD><EFBFBD><EFBFBD>ѤǤ<D1A4><C7A4><EFBFBD><EFBFBD>Ķ<EFBFBD><C4B6>Ǥ<EFBFBD><C7A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ȥ<EFBFBD><C8A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>,
|
||||
USE_EGD <20>ޥ<EFBFBD><DEA5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>å<EFBFBD><C3A5><EFBFBD><EFBFBD>ƤߤƤ<DFA4><C6A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>.
|
||||
|
||||
<20><> URL
|
||||
|
||||
OpenSSL - http://www.openssl.org/
|
||||
PRNGD - http://www.aet.tu-cottbus.de/personen/jaenicke/postfix_tls/prngd.html
|
||||
|
||||
----------------------------------------------------------------
|
||||
#!/usr/bin/ruby
|
||||
# Copyright (c) 2001 Fumitoshi UKAI <ukai@debian.or.jp>
|
||||
# All rights reserved.
|
||||
# This is free software with ABSOLUTELY NO WARRANTY.
|
||||
#
|
||||
# You can redistribute it and/or modify it under the terms of
|
||||
# the Ruby's licence.
|
||||
#
|
||||
# certdata2pem.rb
|
||||
|
||||
while line = $stdin.gets
|
||||
next if line =~ /^#/
|
||||
next if line =~ /^\s*$/
|
||||
line.chomp!
|
||||
if line =~ /CKA_LABEL/
|
||||
label,type,val = line.split(' ',3)
|
||||
val.sub!(/^"/, "")
|
||||
val.sub!(/"$/, "")
|
||||
fname = val.gsub(/\//,"_").gsub(/\s+/, "_").gsub(/[()]/, "=") + ".pem"
|
||||
next
|
||||
end
|
||||
if line =~ /CKA_VALUE MULTILINE_OCTAL/
|
||||
data=''
|
||||
while line = $stdin.gets
|
||||
break if /^END/
|
||||
line.chomp!
|
||||
line.gsub(/\\([0-3][0-7][0-7])/) { data += $1.oct.chr }
|
||||
end
|
||||
open(fname, "w") do |fp|
|
||||
fp.puts "-----BEGIN CERTIFICATE-----"
|
||||
fp.puts [data].pack("m*")
|
||||
fp.puts "-----END CERTIFICATE-----"
|
||||
end
|
||||
puts "Created #{fname}"
|
||||
end
|
||||
end
|
||||
system("c_rehash", ".")
|
Reference in New Issue
Block a user