ssl_intro.xml.ja

Apache HTTP Server 是一个功能强大的灵活的与HTTP/1.1相兼容的web服务器.这里给出的是Apache HTTP服务器的源码。

    <tr><td>Common Name ($B%3%b%s%M!<%`(B)</td>
        <td>CN</td>
        <td>$BG'>Z$5$l$kL>A0(B<br />
        SSL$B@\B3$9$k(BURL</td>
        <td>CN=www.example.com</td></tr>
    <tr><td>Organization or Company ($BAH?%L>(B)</td>
        <td>O</td>
        <td>$BCDBN$N@5<01Q8lAH?%L>(B</td>
        <td>O=Example Japan K.K.</td></tr>
    <tr><td>Organizational Unit ($BItLgL>(B)</td>
        <td>OU</td>
        <td>$BIt=pL>$J$I(B</td>
        <td>OU=Customer Service</td></tr>
    <tr><td>City/Locality ($B;T6hD.B<(B)</td>
        <td>L</td>
        <td>$B=j:_$7$F$k;T6hD.B<(B</td>
        <td>L=Sapporo</td></tr>
    <tr><td>State/Province ($BETF;I\8)(B)</td>
        <td>ST</td>
        <td>$B=j:_$7$F$kETF;I\8)(B</td>
        <td>ST=Hokkaido</td></tr>
    <tr><td>Country($B9q(B)</td>
        <td>C</td>
        <td>$B=j:_$7$F$$$k9qL>$N(B ISO $B%3!<%I(B<br />
        $BF|K\$N>l9g(B JP
        </td>
        <td>C=JP</td></tr>
    </table>
    </section>

    <p>$BG'>Z6I$O$I$N9`L\$,>JN,2DG=$G$I$l$,I,?\$+$NJ}?K$rDj5A$9$k(B
    $B$+$b$7$l$^$;$s!#9`L\$NFbMF$K$D$$$F$bG'>Z6I$d>ZL@=q$N%f!<%6$+$i$N(B
    $BMW7o$,$"$k$+$b$7$l$^$;$s!#(B
    $BNc$($P!"%M%C%H%9%1!<%W$N%V%i%&%6$O%5!<%P$N>ZL@=q$N(B
     Common Name ($B%3%b%s%M!<%`(B)$B$,%5!<%P$N%I%a%$%sL>$N(B
     <code>*.example.com</code> 
    $B$H$$$&$h$&$J%o%$%k%I%+!<%I$N%Q%?!<%s$K%^%C%A$9$k$3$H(B
    $B$rMW5a$7$^$9!#(B</p>

    <p>$B%P%$%J%j7A<0$N>ZL@=q$O(B ASN.1 $BI=5-K!(B
     [<a href="#X208">X208</a>] [<a href="#PKCS">PKCS</a>] $B$G(B
    $BDj5A$5$l$F$$$^$9!#(B
    $B$3$NI=5-K!$OFbMF$r$I$N$h$&$K5-=R$9$k$+$rDj5A$7!"(B
    $BId9f2=$N5,Dj$,$3$N>pJs$,$I$N$h$&$K%P%$%J%j7A<0$KJQ49$5$l$k$+$r(B
    $BDj5A$7$^$9!#(B
    $B>ZL@=q$N%P%$%J%jId9f2=$O(B Distinguished Encoding
    Rules (DER) $B$GDj5A$5$l!"$=$l$O$h$j0lHLE*$J(B Basic Encoding Rules
    (BER) $B$K4p$E$$$F$$$^$9!#(B
    $B%P%$%J%j7A<0$r07$&$3$H$N$G$-$J$$Aw?.$G$O!"(B
    $B%P%$%J%j7A<0$O(B Base64 $BId9f2=(B [<a href="#MIME">MIME</a>] $B$G(B
    ASCII $B7A<0$KJQ49$5$l$k$3$H$,$"$j$^$9!#(B
    $B$3$N$h$&$KId9f2=$5$l!"0J2<$NNc$K<($5$l$k$h$&$K6h@Z$j9T$K(B
    $B64$^$l$?$b$N$O(B PEM $BId9f2=$5$l$?$H8@$$$^$9!#(B
    (PEM $B$NL>A0$O(B "Privacy Enhanced Mail" $B$KM3Mh$7$^$9(B)</p>

    <example>
    <title>PEM $BId9f2=$5$l$?>ZL@=q$NNc(B (example.crt)</title>
    <pre>-----BEGIN CERTIFICATE-----
MIIC7jCCAlegAwIBAgIBATANBgkqhkiG9w0BAQQFADCBqTELMAkGA1UEBhMCWFkx
FTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25ha2UgVG93bjEXMBUG
A1UEChMOU25ha2UgT2lsLCBMdGQxHjAcBgNVBAsTFUNlcnRpZmljYXRlIEF1dGhv
cml0eTEVMBMGA1UEAxMMU25ha2UgT2lsIENBMR4wHAYJKoZIhvcNAQkBFg9jYUBz
bmFrZW9pbC5kb20wHhcNOTgxMDIxMDg1ODM2WhcNOTkxMDIxMDg1ODM2WjCBpzEL
MAkGA1UEBhMCWFkxFTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25h
a2UgVG93bjEXMBUGA1UEChMOU25ha2UgT2lsLCBMdGQxFzAVBgNVBAsTDldlYnNl
cnZlciBUZWFtMRkwFwYDVQQDExB3d3cuc25ha2VvaWwuZG9tMR8wHQYJKoZIhvcN
AQkBFhB3d3dAc25ha2VvaWwuZG9tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
gQDH9Ge/s2zcH+da+rPTx/DPRp3xGjHZ4GG6pCmvADIEtBtKBFAcZ64n+Dy7Np8b
vKR+yy5DGQiijsH1D/j8HlGE+q4TZ8OFk7BNBFazHxFbYI4OKMiCxdKzdif1yfaa
lWoANFlAzlSdbxeGVHoT0K+gT5w3UxwZKv2DLbCTzLZyPwIDAQABoyYwJDAPBgNV
HRMECDAGAQH/AgEAMBEGCWCGSAGG+EIBAQQEAwIAQDANBgkqhkiG9w0BAQQFAAOB
gQAZUIHAL4D09oE6Lv2k56Gp38OBDuILvwLg1v1KL8mQR+KFjghCrtpqaztZqcDt
2q2QoyulCgSzHbEGmi0EsdkPfg6mp0penssIFePYNI+/8u9HT4LuKMJX15hxBam7
dUHzICxBVC1lnHyYGjDuAMhe396lYAn8bCld1/L4NMGBCQ==
-----END CERTIFICATE-----</pre>
    </example>
</section>

<section id="certificateauthorities">
<title>$BG'>Z6I(B</title>
    <p>$B$^$:>ZL@=q$N?=@A$N>pJs$r3NG'$9$k$3$H$G!"(B
    $BG'>Z6I$OHkL)80$N;}$A<g$N?H85$rJ]>Z$7$^$9!#(B
    $BNc$($P!"%"%j%9$,8D?M>ZL@=q$r?=@A$7$?$H$9$k$H!"(B
    $BG'>Z6I$O%"%j%9$,>ZL@=q$N?=@A$,<gD%$9$kDL$j$N(B
    $B?MJ*$@$H$$$&$3$H$r3NG'$7$J$/$F$O$$$1$^$;$s!#(B</p>

    <section id="certificatechains">
    <title>$B>ZL@=q3,AX9=B$(B</title>
        <p>$BG'>Z6I$OB>$NG'>Z6I$X$N>ZL@=q$rH/9T$9$k$3$H$,$G$-$^$9!#(B
        $BL$CN$N>ZL@=q$rD4$Y$k;~$K!"%"%j%9$O$=$N>ZL@=q$NH/9T<T(B
        $B$K<+?.$,;}$F$k$^$G!"H/9T<T$N>ZL@=q$r(B
        $B$=$N>e0L3,AX$NG'>Z6I$r$?$I$C$FD4$Y$kI,MW$,$"$j$^$9!#(B
        $B!V0-<A$J!W>ZL@=q$N4m81@-$r8:$i$9$?$a!"(B
        $BH`=w$O8B$i$l$?O":?$NH/9T<T$N$_?.Mj$9$k$h$&$K(B
        $B7h$a$k$3$H$b$G$-$^$9!#(B</p>
    </section>

    <section id="rootlevelca">
    <title>$B:G>e0LG'>Z6I$N:n@.(B</title>
        <p>$BA0$K=R$Y$?$h$&$K!"A4$F$N>ZL@=q$K$D$$$F!"(B
        $B:G>e0L$NG'>Z6I(B(CA)$B$^$G$=$l$>$l$NH/9T<T$,(B
        $BBP>]$N?H85>ZL@$NM-8z@-$rL@$i$+$K$9$kI,MW$,$"$j$^$9!#(B
        $BLdBj$O!"C/$,$=$N:G>e0L$NG'>Z5!4X$N>ZL@=q$rJ]>Z$9$k$N$+!"(B
        $B$H$$$&$3$H$G$9!#(B
        $B$3$N$h$&$J>l9g$K8B$j!">ZL@=q$O!V<+8J=pL>!W$5$l$^$9!#(B
        $B$D$^$j!">ZL@=q$NH/9T<T$H>ZL@BP>]$,F1$8$H$$$&$3$H$K$J$j$^$9!#(B
        $B$=$N7k2L!"<+8J=pL>$5$l$?>ZL@=q$r?.MQ$9$k$K$O(B
        $B:Y?4$NCm0U$,I,MW$G$9!#(B
        $B:G>e0LG'>Z6I$,8x3+80$r9-$/8xI=$9$k$3$H$G!"(B
        $B$=$N80$r?.Mj$9$k%j%9%/$rDc$/$9$k$3$H$,$G$-$^$9!#(B
        $B$b$7!"B>?M$,$=$NG'>Z6I$K$J$j$9$^$7$?;~$K!"$=$l$,O*8+$7$d(B
        $B$9$$$+$i$G$9!#(B
        $BB?$/$N%V%i%&%6$OM-L>$JG'>Z6I$r?.Mj$9$k$h$&$K(B
        $B@_Dj$5$l$F$$$^$9!#(B</p>

        <p><a href="http://www.thawte.com/">Thawte</a> 
        $B$d(B <a href="http://www.verisign.com/">VeriSign</a> 
        $B$N$h$&$JB?$/$N2q<R$,G'>Z6I$H$7$F3+@_$7$^$7$?!#(B
        $B$3$N$h$&$J2q<R$O0J2<$N%5!<%S%9$rDs6!$7$^$9(B:</p>

        <ul>
        <li>$B>ZL@=q?=@A$N3NG'(B</li>
        <li>$B>ZL@=q?=@A$N=hM}(B</li>
        <li>$B>ZL@=q$NH/9T$H4IM}(B</li>
        </ul>

        <p>$B<+J,$GG'>Z6I$r:n$k$3$H$b2DG=$G$9!#(B
        $B%$%s%?!<%M%C%H4D6-$G$O4m81$G$9$,!"(B
        $B8D?M$d%5!<%P$N?H85>ZL@$,4JC1$K9T$($kAH?%$N(B
        $B%$%s%H%i%M%C%HFb$G$OLr$KN)$D$+$b$7$l$^$;$s!#(B</p>
    </section>

    <section id="certificatemanagement">
    <title>$B>ZL@=q4IM}(B</title>
        <p>$BG'>Z6I$N3+@_$OE0Dl$7$?4IM}!"5;=Q!"1?MQ$NBN@)$rI,MW$H$9$k(B
        $B@UG$$N$"$k;E;v$G$9!#(B
        $BG'>Z6I$O>ZL@=q$rH/9T$9$k$@$1$G$J$/!"(B
        $B4IM}$b$7$J$1$l$P$J$j$^$;$s!#(B
        $B6qBNE*$K$O!">ZL@=q$,$$$D$^$GM-8z$+$r7hDj$7!"99?7$7!"(B
        $B$^$?4{$KH/9T$5$l$?$,<:8z$7$?>ZL@=q$N%j%9%H(B
        (Certificate Revocation Lists $B$^$?$O(B CRL)
        $B$r4IM}$7$J$1$l$P$$$1$^$;$s!#(B
        $BNc$($P!"%"%j%9$,2q<R$+$i<R0w$H$7$F>ZL@=q$rM?$($i$l$?$H$7$^$9!#(B
        $B$=$7$F!"%"%j%9$,2q<R$r<-$a$k$H$-$K$O>ZL@=q$r<h$j>C$5$J$1$l$P(B
        $B$$$1$J$$$H$7$^$9!#(B
        $B>ZL@=q$O<!!9$H?M$KEO$5$l$F$$$/$b$N$J$N$G!"(B
        $B>ZL@=q$=$N$b$N$+$i!"$=$l$,<h$j>C$5$l$?$+H=CG$9$k$3$H$O(B
        $BIT2DG=$G$9!#(B
        $B$h$C$F!">ZL@=q$NM-8z@-$rD4$Y$k$H$-$K$O!"(B
        $BG'>Z6I$KO"Mm$7$F(B CRL $B$r>H9g$9$kI,MW$,$"$j$^$9!#(B
        $BIaDL$3$N2aDx$O<+F02=$5$l$F$$$k$b$N$G$O$"$j$^$;$s!#(B</p>

        <note><title>$BCm0U(B</title>
        <p>$B%G%U%)%k%H$G%V%i%&%6$K@_Dj$5$l$F$$$J$$G'>Z6I$r;H$C$?>l9g!"(B
        $BG'>Z6I$N>ZL@=q$r%V%i%&%6$KFI$_9~$s$G!"(B
        $B%V%i%&%6$,$=$NG'>Z6I$K$h$C$F=pL>$5$l$?%5!<%P$N>ZL@=q$r(B
        $BM-8z2=$9$kI,MW$,$"$j$^$9!#(B
        $B0lEYFI$_9~$^$l$k$H!"$=$NG'>Z6I$K$h$C$F=pL>$5$l$?A4$F$N(B
        $B>ZL@=q$r<u$1F~$l$k$?$a!"4m81$rH<$$$^$9!#(B</p>
        </note>
    </section>
</section>
<!-- /certificateauthorities -->
</section>
<!-- /certificates -->

<section id="ssl">
<title>Secure Sockets Layer (SSL)</title>
<p>Secure Sockets Layer $B%W%m%H%3%k$O?.Mj@-$N$"$k%3%M%/%7%g%s7?$N(B
$B%M%C%H%o!<%/AX$N%W%m%H%3%k(B($BNc$($P!"(BTCP/IP)$B$H(B
$B%"%W%j%1!<%7%g%sAX$N%W%m%H%3%k(B($BNc$($P!"(BHTTP)
$B$N4V$KCV$/$3$H$,$G$-$^$9!#(B
SSL $B$O!"Aj8_G'>Z$K$h$C$F%5!<%P$H%/%i%$%"%s%H4V$N0BA4$JDL?.$r!"(B
$BEE;R=pL>$K$h$C$F%G!<%?$N40A4@-$r!"(B
$B$=$7$F0E9f2=$K$h$C$F%W%i%$%P%7$rDs6!$7$^$9!#(B</p>

<p>SSL $B%W%m%H%3%k$O0E9f2=!"%@%$%8%'%9%H!"EE;R=pL>$K$D$$$F!"(B
$BMM!9$J%"%k%4%j%:%`$r%5%]!<%H$9$k$h$&$K$G$-$F$$$^$9!#(B
$B$3$&$9$k$3$H$G!"K!$dM"=P$N5,@)$r9MN8$KF~$l$F!"%5!<%P$K9g$o$;$?(B
$B%"%k%4%j%:%`$rA*$V$3$H$,$G$-!"$^$?!"?7$7$$%"%k%4%j%:%`$r(B
$BMxMQ$7$F$$$/$3$H$b2DG=$K$7$F$$$^$9!#(B
$B%"%k%4%j%:%`$NA*Br$O%W%m%H%3%k%;%C%7%g%s3+;O;~$K(B
$B%5!<%P$H%/%i%$%"%s%H4V$G<h$j7h$a$i$l$^$9!#(B</p>

<section id="table4">
<title>$BI=(B4: SSL $B%W%m%H%3%k$N%P!<%8%g%s(B</title>
    <table border="1">
    <columnspec><column width=".15"/><column width=".2"/>
     <column width=".30"/><column width=".25"/></columnspec>
    <tr><th>$B%P!<%8%g%s(B</th>
        <th>$B=PE5(B</th>
        <th>$B@bL@(B</th>
        <th>$B%V%i%&%6$N%5%]!<%H(B</th></tr>
    <tr><td>SSL v2.0</td>
        <td>Vendor Standard (Netscape Corp. $B$h$j(B) [<a href="#SSL2"
        >SSL2</a>]</td>
        <td>$B<BAu$,8=B8$9$k=i$a$F$N(B SSL $B%W%m%H%3%k(B</td>
        <td>- NS Navigator 1.x/2.x<br />
        - MS IE 3.x<br />
        - Lynx/2.8+OpenSSL</td></tr>
    <tr><td>SSL v3.0</td>
        <td>Expired Internet Draft (Netscape Corp. $B$h$j(B) [<a href="#SSL3"
        >SSL3</a>]</td>
        <td>$BFCDj$N%;%-%e%j%F%#967b$rKI$0$?$a$N2~D{!"(B
        $BHs(BRSA $B0E9f$NDI2C!">ZL@=q3,AX9=B$$N%5%]!<%H(B</td>
        <td>- NS Navigator 2.x/3.x/4.x<br />
        - MS IE 3.x/4.x<br />
        - Lynx/2.8+OpenSSL</td></tr>
    <tr><td>TLS v1.0</td>
        <td>Proposed Internet Standard (IETF $B$h$j(B) [<a href="#TLS1"
        >TLS1</a>]</td>
        <td>MAC $B%l%$%d$r(B HMAC $B$X99?7!"%V%m%C%/0E9f$N(B block
        padding$B!"%a%C%;!<%8=g=x$NI8=`2=!"7Y9pJ8$N=<<B$J$I$N$?$a(B
        SSL 3.0 $B$r2~D{!#(B</td>
        <td>- Lynx/2.8+OpenSSL</td></tr>
    </table>
</section>

<p><a href="#table4">$BI=(B4</a>$B$K<($5$l$k$H$*$j!"(BSSL $B%W%m%H%3%k$K$O(B
$B$$$/$D$b$N%P!<%8%g%s$,$"$j$^$9!#(B
$BI=$K$b=q$+$l$F$$$k$h$&$K!"(BSSL 3.0 $B$NMxE@$N0l$D$O(B
$B>ZL@=q3,AX9=B$$r%5%]!<%H$9$k$3$H$G$9!#(B
$B$3$N5!G=$K$h$C$F!"%5!<%P$O<+J,$N>ZL@=q$K2C$($F!"(B
$BH/9T<T$N>ZL@=q$r%V%i%&%6$KEO$9$3$H$,$G$-$^$9!#(B
$B>ZL@=q3,AX9=B$$K$h$C$F!"(B
$B%V%i%&%6$KH/9T<T$N>ZL@=q$,D>@\EPO?$5$l$F$$$J$/$F$b!"(B
$B3,AX$NCf$K4^$^$l$F$$$l$P!"(B
$B%V%i%&%6$O%5!<%P$N>ZL@=q$rM-8z2=$9$k$3$H$,$G$-$^$9!#(B
SSL 3.0 $B$O8=:_(B Internet Engineering Task Force (IETF) 
$B$K$h$C$F3+H/$5$l$F$$$k(B Transport Layer Security 
[<a href="#TLS1">TLS</a>] $B%W%m%H%3%kI8=`5,3J$N4pAC$H$J$C$F$$$^$9!#(B</p>

<section id="session">
<title>$B%;%C%7%g%s$N3NN)(B</title>
    <p><a href="#figure1">$B?^(B1</a>$B$G<($5$l$k$h$&$K!"(B
    $B%;%C%7%g%s$N3NN)$O%/%i%$%"%s%H$H%5!<%P4V$N(B
    $B%O%s%I%7%'!<%/%7!<%/%(%s%9$K$h$C$F9T$J$o$l$^$9!#(B
    $B%5!<%P$,>ZL@=q$rDs6!$9$k$+!"%/%i%$%"%s%H$N>ZL@=q$r%j%/%(%9%H$9$k$+(B
    $B$H$$$&%5!<%P$N@_Dj$K$h$j!"$3$N%7!<%/%(%s%9$O0[$J$k$b$N$H$J$j$^$9!#(B
    $B0E9f>pJs$N4IM}$N$?$a$K!"DI2C$N%O%s%I%7%'!<%/2aDx$,I,MW$K$J$k(B
    $B>l9g$b$"$j$^$9$,!"$3$N5-;v$G$O(B
    $B$h$/$"$k%7%J%j%*$r<jC;$K@bL@$7$^$9!#(B