home *** CD-ROM | disk | FTP | other *** search
/ PC World 2006 July & August / PCWorld_2006-07-08_cd.bin / komunikace / apache / apache_2[1].2.2-win32-x86-no_ssl.msi / Data1.cab / _BE621D9E0D2F8F1B931680FF93E3F7B1 < prev    next >
Encoding:
Extensible Markup Language  |  2006-01-15  |  30.9 KB  |  697 lines
  1. <?xml version="1.0" encoding="EUC-JP"?>
  2. <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
  3. <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head><!--
  4.         XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
  5.               This file is generated from xml source: DO NOT EDIT
  6.         XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
  7.       -->
  8. <title>SSL/TLS ░┼╣µ▓╜: ñ╧ñ╕ñßñ╦ - Apache HTTP Ñ╡í╝Ñ╨</title>
  9. <link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
  10. <link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
  11. <link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" />
  12. <link href="../images/favicon.ico" rel="shortcut icon" /></head>
  13. <body id="manual-page"><div id="page-header">
  14. <p class="menu"><a href="../mod/">ÑΓÑ╕Ñσí╝Ñδ</a> | <a href="../mod/directives.html">Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">═╤╕∞</a> | <a href="../sitemap.html">Ñ╡ÑñÑ╚Ñ▐Ñ├Ñ╫</a></p>
  15. <p class="apache">Apache HTTP Ñ╡í╝Ñ╨ Ñ╨í╝Ñ╕ÑτÑ≤ 2.2</p>
  16. <img alt="" src="../images/feather.gif" /></div>
  17. <div class="up"><a href="./"><img title="<-" alt="<-" src="../images/left.gif" /></a></div>
  18. <div id="path">
  19. <a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP Ñ╡í╝Ñ╨</a> > <a href="http://httpd.apache.org/docs/">Ñ╔Ñ¡ÑσÑßÑ≤Ñ╞í╝Ñ╖ÑτÑ≤</a> > <a href="../">Ñ╨í╝Ñ╕ÑτÑ≤ 2.2</a> > <a href="./">SSL/TLS</a></div><div id="page-content"><div id="preamble"><h1>SSL/TLS ░┼╣µ▓╜: ñ╧ñ╕ñßñ╦</h1>
  20. <div class="toplang">
  21. <p><span>Available Languages: </span><a href="../en/ssl/ssl_intro.html" hreflang="en" rel="alternate" title="English"> en </a> |
  22. <a href="../ja/ssl/ssl_intro.html" title="Japanese"> ja </a></p>
  23. </div>
  24. <div class="outofdate">This translation may be out of date. Check the
  25.             English version for recent changes.</div>
  26.  
  27. <blockquote>
  28. <p>╔╕╜α╡¼│╩ñ╬╬╔ññ╜Ωñ╧íóñ┐ñ»ñ╡ñ≤ñ╬╡¼│╩ñ½ñΘ┴¬ñ┘ñδñ╚ñññªñ│ñ╚ñ└íú
  29. ñ╜ñ╖ñ╞íóñΓñ╖╦▄┼÷ñ╦ñ╔ñ╬╡¼│╩ñΓ╡ññ╦╞■ñΘñ╩ñ▒ñ∞ñ╨íó
  30. ░∞╟»┬╘ñ─ñ└ñ▒ñ╟├╡ñ╖ñ╞ñññ┐╡¼│╩ñ¼╕╜ñ∞ñδíú</p>
  31.  
  32. <p class="cite">-- <cite>A. Tanenbaum</cite>, "Introduction to
  33. Computer Networks"</p>
  34. </blockquote>
  35.  
  36. <p>
  37. ╞■╠τñ╚ñññªñ│ñ╚ñ╟íóñ│ñ╬╛╧ñ╧ WebíóHTTPíóApache ñ╦─╠ñ╕ñ╞ñññδ
  38. ╞╔╝╘╕■ñ▒ñ╟ñ╣ñ¼íóÑ╗Ñ¡ÑσÑΩÑ╞Ñú└∞╠τ▓╚╕■ñ▒ñ╟ñ╧ñóñΩñ▐ñ╗ñ≤íú
  39. SSL Ñ╫ÑφÑ╚Ñ│Ñδñ╬╖Φ─Ω┼¬ñ╩╝Ω░·ñ¡ñ╟ñóñδñ─ñΓñΩñ╧ñóñΩñ▐ñ╗ñ≤íú
  40. ñ▐ñ┐íó┴╚┐Ñ╞Γñ╬╟º╛┌┤╔═²ñ╬ñ┐ñßñ╬╞├─Ωñ╬Ñ╞Ñ»Ñ╦Ñ├Ñ»ñΣíó
  41. ╞├╡÷ñΣ═ó╜╨╡¼└⌐ñ╩ñ╔ñ╬╜┼═╫ñ╩╦í┼¬ñ╩╠Σ┬Ωñ╦ñ─ñññ╞ñΓ░╖ñññ▐ñ╗ñ≤íú
  42. ñαñ╖ñφíó╣╣ñ╩ñδ╕ª╡µñ╪ñ╬╜╨╚»┼└ñ╚ñ╖ñ╞┐ºí╣ñ╩│╡╟░íó─Ω╡┴íó╬πñ≥╩┬ñ┘ñδñ│ñ╚ñ╟
  43.  mod_ssl ñ╬ѵí╝Ñ╢ñ╦┤≡┴├├╬╝▒ñ≥─≤╢íñ╣ñδ╗÷ñ≥╠▄┼¬ñ╚ñ╖ñ╞ñññ▐ñ╣íú</p>
  44.  
  45. <p>ñ│ñ│ñ╦╝¿ñ╡ñ∞ñ┐╞Γ═╞ñ╧╝τñ╦íó╕╢├°╝╘ñ╬╡÷▓─ñ╬▓╝
  46. The Open Group Research Institute ñ╬ <a href="http://home.earthlink.net/~fjhirsch/">Frederick J. Hirsch</a>
  47.  ╗ßñ╬╡¡╗÷ <a href="http://home.earthlink.net/~fjhirsch/Papers/wwwj/article.html">
  48. Introducing SSL and Certificates using SSLeay</a> ñ≥┤≡ñ╦ñ╖ñ╞ñññ▐ñ╣íú
  49. ╗ßñ╬╡¡╗÷ñ╧ <a href="http://www.ora.com/catalog/wjsum97/">Web Security: A Matter of
  50. Trust</a>, World Wide Web Journal, Volume 2, Issue 3, Summer 1997
  51. ñ╦╖╟║▄ñ╡ñ∞ñ▐ñ╖ñ┐íú
  52. ╣╬─Ω┼¬ñ╩░╒╕½ñ╧ <a href="mailto:hirsch@fjhirsch.com">Frederick Hirsch</a> ╗ß
  53.  (╕╡╡¡╗÷ñ╬├°╝╘) ñ╪┴┤ñ╞ñ╬╢∞╛≡ñ╧ <a href="mailto:rse@engelschall.com">Ralf S. Engelschall</a> (
  54. <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ñ╬║ε╝╘) ñ╪ñ¬┤Ωñññ╖ñ▐ñ╣íú
  55. [╠⌡├φ: ╠⌡ñ╦ñ─ñññ╞ñ╧ <a href="mailto:apache-docs@ml.apache.or.jp">
  56. Apache Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚╦▌╠⌡Ñ╫ÑφÑ╕ѺѻÑ╚</a>
  57. ñ╪ñ¬┤Ωñññ╖ñ▐ñ╣íú]</p>
  58. </div>
  59. <div id="quickview"><ul id="toc"><li><img alt="" src="../images/down.gif" /> <a href="#cryptographictech">░┼╣µ▓╜╡╗╜╤</a></li>
  60. <li><img alt="" src="../images/down.gif" /> <a href="#certificates">╛┌╠└╜±</a></li>
  61. <li><img alt="" src="../images/down.gif" /> <a href="#ssl">Secure Sockets Layer (SSL)</a></li>
  62. <li><img alt="" src="../images/down.gif" /> <a href="#references">╗▓╣═╩╕╕Ñ</a></li>
  63. </ul></div>
  64. <div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
  65. <div class="section">
  66. <h2><a name="cryptographictech" id="cryptographictech">░┼╣µ▓╜╡╗╜╤</a></h2>
  67.  
  68. <p>SSL ñ≥═²▓≥ñ╣ñδñ╦ñ╧íó░┼╣µÑóÑδÑ┤ÑΩÑ║Ñαíó
  69. ÑßÑ├Ñ╗í╝Ñ╕Ñ└ÑñÑ╕ѺÑ╣Ñ╚┤╪┐⌠(╩╠╠╛: ░∞╩²╕■┤╪┐⌠íóÑ╧Ñ├Ñ╖Ñσ┤╪┐⌠)íó
  70. ┼┼╗╥╜≡╠╛ñ╩ñ╔ñ╪ñ╬═²▓≥ñ¼╔¼═╫ñ╟ñ╣íú
  71. ñ│ñ∞ñΘñ╬╡╗╜╤ñ╧╦▄ñ¼┤▌ñ┤ñ╚╔¼═╫ñ╩┬Ω╠▄ñ╟
  72. (╬πñ¿ñ╨ [<a href="#AC96">AC96</a>] ñ≥╗▓╛╚)íó
  73. Ñ╫ÑΘÑñÑ╨Ñ╖í╝íó┐«═╤íó╟º╛┌ñ╩ñ╔ñ╬╡╗╜╤ñ╬┤≡┴├ñ╚ñ╩ñ├ñ╞ñññ▐ñ╣íú</p>
  74.  
  75. <h3><a name="cryptographicalgo" id="cryptographicalgo">░┼╣µÑóÑδÑ┤ÑΩÑ║Ñα</a></h3>
  76.  
  77.     <p>╬πñ¿ñ╨íóÑóÑΩÑ╣ñ¼┴≈╢Γñ╬ñ┐ñßñ╦╢Σ╣╘ñ╦ÑßÑ├Ñ╗í╝Ñ╕ñ≥┴≈ñΩñ┐ñññ╚ñ╖ñ▐ñ╣íú
  78.     ╕²║┬╚╓╣µñΣ┴≈╢Γñ╬╢Γ│█ñ¼┤▐ñ▐ñ∞ñδñ┐ñßíó
  79.     ÑóÑΩÑ╣ñ╧ñ╜ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ≥╚δ╠⌐ñ╦ñ╖ñ┐ñññ╚╗╫ñññ▐ñ╣íú
  80.     ▓≥╖Φ╩²╦íñ╬░∞ñ─ñ╧░┼╣µÑóÑδÑ┤ÑΩÑ║Ñαñ≥╗╚ñ├ñ╞íóÑßÑ├Ñ╗í╝Ñ╕ñ≥
  81.     ╞╔ñ▐ñ╗ñ┐ññ┐═░╩│░ñ╧╞╔ñαñ│ñ╚ñ¼ñ╟ñ¡ñ╩ññ░┼╣µ▓╜ñ╡ñ∞ñ┐
  82.     ╖┴┬╓ñ╦╩╤ñ¿ñ╞ñ╖ñ▐ñªñ│ñ╚ñ╟ñ╣íú
  83.     ñ╜ñ╬╖┴┬╓ñ╦ñ╩ñδñ╚íó
  84.     ÑßÑ├Ñ╗í╝Ñ╕ñ╧╚δ╠⌐ñ╬╕░ñ╦ñΦñ├ñ╞ñ╬ñ▀▓≥╝ßñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  85.     ╕░ñ╩ñ╖ñ╟ñ╧íóÑßÑ├Ñ╗í╝Ñ╕ñ╧╠≥ñ╦╬⌐ñ┴ñ▐ñ╗ñ≤íú
  86.     ╬╔ññ░┼╣µÑóÑδÑ┤ÑΩÑ║Ñαñ╧íó┐»╞■╝╘ñ¼╕╡ñ╬Ñ╞Ñ¡Ñ╣Ñ╚ñ≥▓≥╞╔ñ╣ñδñ│ñ╚ñ≥
  87.     ╚≤╛∩ñ╦╞±ñ╖ñ»ñ╣ñδñ┐ñßíó┼╪╬╧ñ¼│Σñ╦╣τñ∩ñ╩ñ»ñ╡ñ╗ñ▐ñ╣íú</p>
  88.  
  89.     <p>░┼╣µÑóÑδÑ┤ÑΩÑ║Ñαñ╦ñ╧
  90.     ╜╛═Φ╖┐ñ╚╕°│½╕░ñ╬╞≤ñ─ñ╬╝∩╬αñ¼ñóñΩñ▐ñ╣íú</p>
  91.  
  92.     <dl>
  93.     <dt>╜╛═Φ╖┐░┼╣µ</dt>
  94.     <dd>┬╨╛╬░┼╣µñ╚ñ╖ñ╞ñΓ├╬ñΘñ∞íó
  95.     ┴≈┐«╝╘ñ╚╝⌡┐«╝╘ñ¼╕░ñ≥╢ª═¡ñ╣ñδñ│ñ╚ñ¼╔¼═╫ñ╟ñ╣íú
  96.     ╕░ñ╚ñ╧íóÑßÑ├Ñ╗í╝Ñ╕ñ≥░┼╣µ▓╜ñ╖ñ┐ñΩ╔ⁿ╣µñ╣ñδñ╬ñ╦╗╚ñ∩ñ∞ñδ╚δ╠⌐
  97.     ñ╬╛≡╩≤ñ╬ñ│ñ╚ñ╟ñ╣íú
  98.     ñΓñ╖íóñ│ñ╬╕░ñ¼╚δ╠⌐ñ╩ñΘíó┴≈┐«╝╘ñ╚╝⌡┐«╝╘░╩│░ñ╧├»ñΓÑßÑ├Ñ╗í╝Ñ╕ñ≥╞╔
  99.     ñαñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╗ñ≤íú
  100.     ñΓñ╖ñΓíóÑóÑΩÑ╣ñ╚╢Σ╣╘ñ¼╚δ╠⌐ñ╬╕░ñ≥├╬ñ├ñ╞ñññδñ╩ñΘíó
  101.     ╚αñΘñ╧ñ¬╕▀ñññ╦╚δ╠⌐ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ≥┴≈ñδñ│ñ╚ñ¼ñ╟ñ¡ñδñ╟ñ╖ñτñªíú
  102.     ñ┐ñ└ñ╖íó╗÷┴░ñ╦╞Γ╠⌐ñ╦╕░ñ≥┴¬ñ╓ñ╚ñññª╗┼╗÷ñ╧╠Σ┬Ωñ≥┤▐ñ≤ñ╟ñññ▐ñ╣íú</dd>
  103.  
  104.     <dt>╕°│½╕░░┼╣µ</dt>
  105.     <dd>╚≤┬╨╛╬░┼╣µñ╚ñ╖ñ╞ñΓ├╬ñΘñ∞íó
  106.     ÑßÑ├Ñ╗í╝Ñ╕ñ≥░┼╣µ▓╜ñ╣ñδñ│ñ╚ñ╬ñ╟ñ¡ñδ╞≤ñ─ñ╬╕░
  107.     ñ≥╗╚═╤ñ╣ñδÑóÑδÑ┤ÑΩÑ║Ñαñ≥─Ω╡┴ñ╣ñδñ│ñ╚ñ╟╕░ñ╬ñΣñΩ╝ΦñΩñ╬╠Σ┬Ωñ≥▓≥╖Φ
  108.     ñ╖ñ▐ñ╣íú
  109.     ñΓñ╖íóñóñδ╕░ñ¼░┼╣µ▓╜ñ╦╗╚ñ∩ñ∞ñ┐ñ╩ñΘíó
  110.     ñΓñª╩╥╩²ñ╬╕░ñ╟╔ⁿ╣µñ╖ñ╩ñ▒ñ∞ñ╨ñññ▒ñ▐ñ╗ñ≤íú
  111.     ñ│ñ╬╩²╝░ñ╦ñΦñ├ñ╞íó░∞ñ─ñ╬╕░ñ≥╕°╔╜ñ╖ñ╞(╕°│½╕░)íó
  112.     ñΓñª╩╥╩²ñ≥╚δ╠⌐ñ╦ñ╖ñ╞ñ¬ñ»(╚δ╠⌐╕░)ñ└ñ▒ñ╟íó
  113.     ░┬┴┤ñ╩ÑßÑ├Ñ╗í╝Ñ╕ñ≥╝⌡ñ▒╝Φñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú</dd>
  114.     </dl>
  115.  
  116.     <p>├»ñΓñ¼░┼╣µ▓╜ñ╡ñ∞ñ┐ÑßÑ├Ñ╗í╝Ñ╕ñ≥╕°│½╕░ñ╦ñΦñ├ñ╞░┼╣µ▓╜
  117.     ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣ñ¼íó╚δ╠⌐╕░ñ╬╗²ñ┴╝τñ└ñ▒ñ¼ñ╜ñ∞ñ≥╞╔ñαñ│ñ╚ñ¼
  118.     ñ╟ñ¡ñ▐ñ╣íú
  119.     ñ│ñ╬╩²╦íñ╟íó╢Σ╣╘ñ╬╕°│½╕░ñ≥╗╚ñ├ñ╞░┼╣µ▓╜ñ╣ñδñ│ñ╚ñ╟íó
  120.     ÑóÑΩÑ╣ñ╧╚δ╠⌐ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ≥┴≈ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  121.     ╢Σ╣╘ñ╬ñ▀ñ¼╔ⁿ╣µñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú</p>
  122.  
  123.  
  124. <h3><a name="messagedigests" id="messagedigests">ÑßÑ├Ñ╗í╝Ñ╕Ñ└ÑñÑ╕ѺÑ╣Ñ╚</a></h3>
  125.  
  126.     <p>ÑóÑΩÑ╣ñ╧ÑßÑ├Ñ╗í╝Ñ╕ñ≥╚δ╠⌐ñ╦ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣ñ¼íó
  127.     ├»ñ½ñ¼╬πñ¿ñ╨╝½╩¼ñ╦┴≈╢Γñ╣ñδñΦñªñ╦ÑßÑ├Ñ╗í╝Ñ╕ñ≥╩╤╣╣ñ╖ñ┐ñΩíó
  128.     ╩╠ñ╬ñΓñ╬ñ╦├╓ñ¡┤╣ñ¿ñ╞ñ╖ñ▐ñªñ½ñΓñ╖ñ∞ñ╩ñññ╚ñññª╠Σ┬Ωñ¼ñóñΩñ▐ñ╣íú
  129.     ÑóÑΩÑ╣ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ╬┐«═╤ñ≥╩▌╛┌ñ╣ñδ╩²╦íñ╬░∞ñ─ñ╧íó
  130.     ÑßÑ├Ñ╗í╝Ñ╕ñ╬┤╩╖Θñ╩Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ≥║εñ├ñ╞íóñ╜ñ∞ñΓ╢Σ╣╘ñ╦┴≈ñδñ╚ñññªñΓñ╬ñ╟ñ╣íú
  131.     ÑßÑ├Ñ╗í╝Ñ╕ñ≥╝⌡ñ▒╝Φñδñ╚╢Σ╣╘ñΓÑ└ÑñÑ╕ѺÑ╣Ñ╚ñ≥║ε└«ñ╖íó
  132.     ÑóÑΩÑ╣ñ¼┴≈ñ├ñ┐ñΓñ╬ñ╚╚µñ┘ñ▐ñ╣íúñΓñ╖░∞├╫ñ╖ñ┐ñ╩ñΘíó
  133.     ╝⌡ñ▒╝Φñ├ñ┐ÑßÑ├Ñ╗í╝Ñ╕ñ╧╠╡╜²ñ└ñ╚ñññªñ│ñ╚ñ╦ñ╩ñΩñ▐ñ╣íú</p>
  134.  
  135.     <p>ñ│ñ╬ñΦñªñ╩═╫╠≤ñ╧<dfn>ÑßÑ├Ñ╗í╝Ñ╕Ñ└ÑñÑ╕ѺÑ╣Ñ╚</dfn>íó
  136.     <em>░∞╩²╣╘┤╪┐⌠</em>íóñ▐ñ┐ñ╧<em>Ñ╧Ñ├Ñ╖Ñσ┤╪┐⌠</em>ñ╚╕╞ñ╨ñ∞ñ▐ñ╣íú
  137.     ÑßÑ├Ñ╗í╝Ñ╕Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ╧─╣ññ▓─╩╤─╣ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ½ñΘ
  138.     ├╗ññ╕╟─Ω─╣ñ╬╔╜╕╜ñ≥║εñδñ╬ñ╦╗╚ñ∩ñ∞ñ▐ñ╣íú
  139.     Ñ└ÑñÑ╕ѺÑ╣Ñ╚ÑóÑδÑ┤ÑΩÑ║Ñαñ╧ÑßÑ├Ñ╗í╝Ñ╕ñ½ñΘ
  140.     ░∞░╒ñ╩Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ≥└╕└«ñ╣ñδñΦñªñ╦║εñΘñ∞ñ╞ñññ▐ñ╣íú
  141.     ÑßÑ├Ñ╗í╝Ñ╕Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ╧Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ½ñΘ╕╡ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ≥
  142.     ╚╜─Ωñ╣ñδñ╬ñ¼ñ╚ñ╞ñΓ╞±ñ╖ñññΦñªñ╦ñ╟ñ¡ñ╞ñññ▐ñ╣íú
  143.     ñ▐ñ┐íó╞▒ñ╕═╫╠≤ñ≥║ε└«ñ╣ñδ╞≤ñ─ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ≥├╡ñ╣ñ╬ñ╧╔╘▓─╟╜ñ╟ñ╣íú
  144.     ñΦñ├ñ╞íó╞▒ñ╕═╫╠≤ñ≥╗╚ñ├ñ╞ÑßÑ├Ñ╗í╝Ñ╕ñ≥├╓ñ¡┤╣ñ¿ñδñ╚ñññª
  145.     ▓─╟╜└¡ñ≥╟╙╜ⁿñ╖ñ╞ñññ▐ñ╣íú</p>
  146.  
  147. <p>ÑóÑΩÑ╣ñ╪ñ╬ñΓñª░∞ñ─ñ╬╠Σ┬Ωñ╧íóñ│ñ╬Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ≥░┬┴┤ñ╦┴≈ñδ╩²╦íñ≥├╡ñ╣ñ│ñ╚ñ╟ñ╣íú
  148. ñ│ñ∞ñ¼ñ╟ñ¡ñ∞ñ╨íóÑßÑ├Ñ╗í╝Ñ╕ñ╬┐«═╤ñ¼╩▌╛┌ñ╡ñ∞ñ▐ñ╣íú
  149. ░∞ñ─ñ╬╩²╦íñ╧ñ│ñ╬Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ╦┼┼╗╥╜≡╠╛ñ≥┤▐ñαñ│ñ╚ñ╟ñ╣íú</p>
  150.  
  151.  
  152. <h3><a name="digitalsignatures" id="digitalsignatures">┼┼╗╥╜≡╠╛</a></h3>
  153. <p>ÑóÑΩÑ╣ñ¼╢Σ╣╘ñ╦ÑßÑ├Ñ╗í╝Ñ╕ñ≥┴≈ñ├ñ┐ñ╚ñ¡íó╢Σ╣╘ñ╧íó
  154. ┐»╞■╝╘ñ¼╚α╜≈ñ╦ñ╩ñΩñ╣ñ▐ñ╖ñ╞╚α╜≈ñ╬╕²║┬ñ╪ñ╬╝Φ░·ñ≥┐╜└┴ñ╖ñ╞ñññ╩ñññ½íó
  155. ÑßÑ├Ñ╗í╝Ñ╕ñ¼╦▄┼÷ñ╦╚α╜≈ñ½ñΘñ╬ñΓñ╬ñ½│╬╝┬ñ╦╩¼ñ½ñΘñ╩ñ▒ñ∞ñ╨ñññ▒ñ▐ñ╗ñ≤íú
  156. ÑóÑΩÑ╣ñ╦ñΦñ├ñ╞║ε└«ñ╡ñ∞íóÑßÑ├Ñ╗í╝Ñ╕ñ╦┤▐ñ▐ñ∞ñ┐
  157. <em>┼┼╗╥╜≡╠╛</em>ñ¼ñ│ñ│ñ╟╠≥ñ╦╬⌐ñ┴ñ▐ñ╣íú</p>
  158.  
  159. <p>┼┼╗╥╜≡╠╛ñ╧ÑßÑ├Ñ╗í╝Ñ╕ñ╬Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñΣñ╜ñ╬┬╛ñ╬╛≡╩≤(╜Φ═²╚╓╣µñ╩ñ╔)ñ≥
  160. ┴≈┐«╝╘ñ╬╚δ╠⌐╕░ñ╟░┼╣µ▓╜ñ╣ñδñ│ñ╚ñ╟║εñΘñ∞ñ▐ñ╣íú
  161. ├»ñΓñ¼╕°│½╕░ñ≥╗╚ñ├ñ╞╜≡╠╛ñ≥<em>╔ⁿ╣µ</em>ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣ñ¼íó
  162. ╜≡╠╛╝╘ñ╬ñ▀ñ¼╚δ╠⌐╕░ñ≥├╬ñ├ñ╞ñññ▐ñ╣íú
  163. ñ│ñ∞ñ╧íó╚αñΘñ╬ñ▀ñ¼╜≡╠╛ñ╖ñ¿ñ┐ñ│ñ╚ñ≥░╒╠úñ╖ñ▐ñ╣íú
  164. Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ≥┼┼╗╥╜≡╠╛ñ╦┤▐ñαñ│ñ╚ñ╧íó
  165. ñ╜ñ╬╜≡╠╛ñ¼ñ╜ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ╬ñ▀ñ╦═¡╕·ñ╟ñóñδñ│ñ╚ñ≥░╒╠úñ╖ñ▐ñ╣íú
  166. ñ│ñ∞ñ╧íó├»ñΓÑ└ÑñÑ╕ѺÑ╣Ñ╚ñ≥╩╤ñ¿ñ╞╜≡╠╛ñ≥ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ╩ñññ┐ñßíó
  167. ÑßÑ├Ñ╗í╝Ñ╕ñ╬┐«═╤ñΓ╩▌╛┌ñ╖ñ▐ñ╣íú</p>
  168.  
  169. <p>┐»╞■╝╘ñ¼╜≡╠╛ñ≥╦╡╝⌡ñ╖ñ╞╕σ╞ⁿñ╦║╞═°═╤ñ╣ñδñ╬ñ≥╦╔ñ░ñ┐ñß
  170. ┼┼╗╥╜≡╠╛ñ╦ñ╧░∞░╒ñ╩╜Φ═²╚╓╣µñ¼┤▐ñ▐ñ∞ñ▐ñ╣íú
  171. ñ│ñ∞ñ╧íóÑóÑΩÑ╣ñ¼ñ╜ñ≤ñ╩ÑßÑ├Ñ╗í╝Ñ╕ñ╧┴≈ñ├ñ╞ñññ╩ñññ╚╕└ñª║╛╡╜
  172. ñ½ñΘ╢Σ╣╘ñ≥╝ΘñΩñ▐ñ╣íú
  173. ╚α╜≈ñ└ñ▒ñ¼╜≡╠╛ñ╖ñ¿ñ┐ñ½ñΘñ╟ñ╣íú(╚▌╟º╦╔╗▀)</p>
  174.  
  175. </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
  176. <div class="section">
  177. <h2><a name="certificates" id="certificates">╛┌╠└╜±</a></h2>
  178.  
  179. <p>ÑóÑΩÑ╣ñ╧╚δ╠⌐ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ≥╢Σ╣╘ñ╦┴≈ñΩíó
  180. ╜≡╠╛ñ≥ñ╖ñ╞íóÑßÑ├Ñ╗í╝Ñ╕ñ╬┐«═╤ñ≥╩▌╛┌ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñδñ¬ñªñ╦ñ╩ñΩñ▐ñ╖ñ┐ñ¼íó
  181. ─╠┐«ñ╖ñ╞ñññδ┴Ω╝Ωñ¼╦▄┼÷ñ╦╢Σ╣╘ñ╩ñ╬ñ½│╬ñ½ñßñ╩ñ»ñ╞ñ╧ñññ▒ñ▐ñ╗ñ≤íú
  182. ñ│ñ∞ñ╧íó╚α╜≈ñ¼╗╚ñª╕°│½╕░ñ¼╢Σ╣╘ñ╬╚δ╠⌐╕░ñ╚┬╨ñ╦ñ╩ñ├ñ╞ñññδñΓñ╬ñ½íó
  183. ╚α╜≈ñ╧│╬ñ½ñßñ╩ñ»ñ╞ñ╧ñññ▒ñ╩ñññ╚ñññªñ│ñ╚ñ≥░╒╠úñ╖ñ▐ñ╣íú
  184. ╞▒══ñ╦íó╢Σ╣╘ñ╧ÑßÑ├Ñ╗í╝Ñ╕ñ╬╜≡╠╛ñ¼╦▄┼÷ñ╦ÑóÑΩÑ╣ñ╬╜≡╠╛ñ½│╬╟ºñ╣ñδ╔¼═╫ñ¼
  185. ñóñΩñ▐ñ╣íú</p>
  186.  
  187. <p>ñΓñ╖╬╛╝╘ñ╦┐╚╕╡ñ≥╛┌╠└ñ╖íó╕°│½╕░ñ≥│╬╟ºñ╖íóñ▐ñ┐┐«═Ωñ╡ñ∞ñ┐╡í┤╪ñ¼╜≡╠╛
  188. ñ╖ñ┐╛┌╠└╜±ñ¼ñóñ∞ñ╨íó╬╛╝╘ñ╚ñΓ─╠┐«┴Ω╝Ωñ╦ñ─ñññ╞└╡ñ╖ññ┴Ω╝Ωñ└ñ╚
  189. │╬┐«ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  190. ñ╜ñ╬ñΦñªñ╩┐«═Ωñ╡ñ∞ñ┐╡í┤╪ñ╧<em>╟º╛┌╢╔</em>
  191.  (Certificate Authority ñ▐ñ┐ñ╧ CA) ñ╚╕╞ñ╨ñ∞íó
  192. ╛┌╠└╜± (certificate) ñ¼╟º╛┌ (authentication) ñ╦╗╚ñ∩ñ∞ñ▐ñ╣íú</p>
  193.  
  194. <h3><a name="certificatecontents" id="certificatecontents">╛┌╠└╜±ñ╬╞Γ═╞</a></h3>
  195.  
  196.     <p>╛┌╠└╜±ñ╧╕°│½╕░ñ╚╕─┐═íóÑ╡í╝Ñ╨íóñ╜ñ╬┬╛ñ╬╝τ┬╬ñ╬╝┬║▀ñ╬┐╚╕╡ñ≥
  197.     ┤╪╧ó╔╒ñ▒ñ▐ñ╣íú
  198.     <a href="#table1">╔╜1</a>ñ╦╝¿ñ╡ñ∞ñδñΦñªñ╦╛┌╠└┬╨╛▌ñ╬╛≡╩≤ñ╧
  199.     ┐╚╕╡╛┌╠└ñ╬╛≡╩≤(╝▒╩╠╠╛)ñ╚╕°│½╕░ñ¼┤▐ñ▐ñ∞ñ▐ñ╣íú
  200.     ╛┌╠└╜±ñ╧ñ▐ñ┐íó╟º╛┌╢╔ñ╬┐╚╕╡╛┌╠└ñ╚╜≡╠╛íóñ╜ñ╖ñ╞╛┌╠└╜±ñ╬═¡╕·┤ⁿ┤╓ñ≥
  201.     ┤▐ñ▀ñ▐ñ╣íú
  202.     Ñ╖ÑΩÑóÑδÑ╩Ñ≤Ñ╨í╝ñ╩ñ╔ñ╬╟º╛┌╢╔ñ╬┤╔═²╛σñ╬╛≡╩≤ñΣ
  203.     ñ╜ñ╬┬╛ñ╬─╔▓├ñ╬╛≡╩≤ñ¼┤▐ñ▐ñ∞ñ╞ñññδñ½ñΓñ╖ñ∞ñ▐ñ╗ñ≤íú</p>
  204.  
  205.     <h4><a name="table1" id="table1">╔╜1: ╛┌╠└╜±╛≡╩≤</a></h4>
  206.     
  207.     <table>
  208.     
  209.     <tr><th>╛┌╠└┬╨╛▌</th>
  210.         <td>╝▒╩╠╠╛íó╕°│½╕░</td></tr>
  211.     <tr><th>╚»╣╘╝╘</th>
  212.         <td>╝▒╩╠╠╛íó╕°│½╕░</td></tr>
  213.     <tr><th>═¡╕·┤ⁿ┤╓</th>
  214.         <td>│½╗╧╞ⁿíó╝║╕·╞ⁿ</td></tr>
  215.     <tr><th>┤╔═²╛≡╩≤</th>
  216.         <td>Ñ╨í╝Ñ╕ÑτÑ≤íóÑ╖ÑΩÑóÑδÑ╩Ñ≤Ñ╨í╝</td></tr>
  217.     <tr><th>│╚─Ñ╛≡╩≤</th>
  218.         <td>┤≡╦▄┼¬ñ╩└⌐╠≤íóÑ═Ñ├Ñ╚Ñ╣Ñ▒í╝Ñ╫Ñ╒ÑΘÑ├Ñ░íóñ╜ñ╬┬╛</td></tr>
  219.     </table>
  220.     
  221.  
  222.     <p>╝▒╩╠╠╛(Ñ╟ÑúÑ╣Ñ╞ÑúÑ≤Ñ░ÑñÑ├Ñ╖ÑσíªÑ═í╝Ñα)ñ╧╞├─Ωñ╬╛⌡╢╖ñ╦ñ¬ñ▒ñδ
  223.     ┐╚╩¼╛┌╠└ñ≥─≤╢íñ╣ñδñ╬ñ╦╗╚ñ∩ñ∞ñ╞ñññ▐ñ╣íú╬πñ¿ñ╨íóñóñδ┐═ñ╧
  224.     ╗Σ═╤ñ╚▓±╝╥ñ╚ñ╟╩╠í╣ñ╬┐╚╩¼╛┌╠└ñ≥╗²ñ─ñ½ñΓñ╖ñ∞ñ▐ñ╗ñ≤íú
  225.     
  226.     ╝▒╩╠╠╛ñ╧ X.509 ╔╕╜α╡¼│╩ [<a href="#X509">X509</a>] ñ╟─Ω╡┴ñ╡ñ∞ñ╞ñññ▐ñ╣íú
  227.     X.509 ╔╕╜α╡¼│╩ñ╧íó╣α╠▄íó╣α╠▄╠╛íóñ╜ñ╖ñ╞╣α╠▄ñ╬╬¼╛╬ñ≥─Ω╡┴ñ╖ñ╞ñññ▐ñ╣íú(<a href="#table2">╔╜
  228.     2</a> ╗▓╛╚)</p>
  229.  
  230.     <h4><a name="table2" id="table2">╔╜ 2: ╝▒╩╠╠╛╛≡╩≤</a></h4>
  231.     
  232.     <table class="bordered">
  233.     
  234.     <tr><th>╝▒╩╠╠╛╣α╠▄</th>
  235.         <th>╬¼╛╬</th>
  236.         <th>└Γ╠└</th>
  237.         <th>╬π</th></tr>
  238.     <tr><td>Common Name (Ñ│ÑΓÑ≤Ñ═í╝Ñα)</td>
  239.         <td>CN</td>
  240.         <td>╟º╛┌ñ╡ñ∞ñδ╠╛┴░<br />
  241.         SSL└▄┬│ñ╣ñδURL</td>
  242.         <td>CN=www.example.com</td></tr>
  243.     <tr><td>Organization or Company (┴╚┐Ñ╠╛)</td>
  244.         <td>O</td>
  245.         <td>├─┬╬ñ╬└╡╝░▒╤╕∞┴╚┐Ñ╠╛</td>
  246.         <td>O=Example Japan K.K.</td></tr>
  247.     <tr><td>Organizational Unit (╔⌠╠τ╠╛)</td>
  248.         <td>OU</td>
  249.         <td>╔⌠╜≡╠╛ñ╩ñ╔</td>
  250.         <td>OU=Customer Service</td></tr>
  251.     <tr><td>City/Locality (╗╘╢Φ─«┬╝)</td>
  252.         <td>L</td>
  253.         <td>╜Ω║▀ñ╖ñ╞ñδ╗╘╢Φ─«┬╝</td>
  254.         <td>L=Sapporo</td></tr>
  255.     <tr><td>State/Province (┼╘╞╗╔▄╕⌐)</td>
  256.         <td>ST</td>
  257.         <td>╜Ω║▀ñ╖ñ╞ñδ┼╘╞╗╔▄╕⌐</td>
  258.         <td>ST=Hokkaido</td></tr>
  259.     <tr><td>Country(╣±)</td>
  260.         <td>C</td>
  261.         <td>╜Ω║▀ñ╖ñ╞ñññδ╣±╠╛ñ╬ ISO Ñ│í╝Ñ╔<br />
  262.         ╞ⁿ╦▄ñ╬╛∞╣τ JP
  263.         </td>
  264.         <td>C=JP</td></tr>
  265.     </table>
  266.     
  267.  
  268.     <p>╟º╛┌╢╔ñ╧ñ╔ñ╬╣α╠▄ñ¼╛╩╬¼▓─╟╜ñ╟ñ╔ñ∞ñ¼╔¼┐▄ñ½ñ╬╩²┐╦ñ≥─Ω╡┴ñ╣ñδ
  269.     ñ½ñΓñ╖ñ∞ñ▐ñ╗ñ≤íú╣α╠▄ñ╬╞Γ═╞ñ╦ñ─ñññ╞ñΓ╟º╛┌╢╔ñΣ╛┌╠└╜±ñ╬ѵí╝Ñ╢ñ½ñΘñ╬
  270.     ═╫╖∩ñ¼ñóñδñ½ñΓñ╖ñ∞ñ▐ñ╗ñ≤íú
  271.     ╬πñ¿ñ╨íóÑ═Ñ├Ñ╚Ñ╣Ñ▒í╝Ñ╫ñ╬Ñ╓ÑΘѪÑ╢ñ╧Ñ╡í╝Ñ╨ñ╬╛┌╠└╜±ñ╬
  272.      Common Name (Ñ│ÑΓÑ≤Ñ═í╝Ñα)ñ¼Ñ╡í╝Ñ╨ñ╬Ñ╔ÑßÑñÑ≤╠╛ñ╬
  273.      <code>*.example.com</code> 
  274.     ñ╚ñññªñΦñªñ╩Ñ∩ÑñÑδÑ╔ѽí╝Ñ╔ñ╬Ñ╤Ñ┐í╝Ñ≤ñ╦Ñ▐Ñ├Ñ┴ñ╣ñδñ│ñ╚
  275.     ñ≥═╫╡ßñ╖ñ▐ñ╣íú</p>
  276.  
  277.     <p>Ñ╨ÑñÑ╩ÑΩ╖┴╝░ñ╬╛┌╠└╜±ñ╧ ASN.1 ╔╜╡¡╦í
  278.      [<a href="#X208">X208</a>] [<a href="#PKCS">PKCS</a>] ñ╟
  279.     ─Ω╡┴ñ╡ñ∞ñ╞ñññ▐ñ╣íú
  280.     ñ│ñ╬╔╜╡¡╦íñ╧╞Γ═╞ñ≥ñ╔ñ╬ñΦñªñ╦╡¡╜╥ñ╣ñδñ½ñ≥─Ω╡┴ñ╖íó
  281.     ╔Σ╣µ▓╜ñ╬╡¼─Ωñ¼ñ│ñ╬╛≡╩≤ñ¼ñ╔ñ╬ñΦñªñ╦Ñ╨ÑñÑ╩ÑΩ╖┴╝░ñ╦╩╤┤╣ñ╡ñ∞ñδñ½ñ≥
  282.     ─Ω╡┴ñ╖ñ▐ñ╣íú
  283.     ╛┌╠└╜±ñ╬Ñ╨ÑñÑ╩ÑΩ╔Σ╣µ▓╜ñ╧ Distinguished Encoding
  284.     Rules (DER) ñ╟─Ω╡┴ñ╡ñ∞íóñ╜ñ∞ñ╧ñΦñΩ░∞╚╠┼¬ñ╩ Basic Encoding Rules
  285.     (BER) ñ╦┤≡ñ┼ñññ╞ñññ▐ñ╣íú
  286.     Ñ╨ÑñÑ╩ÑΩ╖┴╝░ñ≥░╖ñªñ│ñ╚ñ╬ñ╟ñ¡ñ╩ññ┴≈┐«ñ╟ñ╧íó
  287.     Ñ╨ÑñÑ╩ÑΩ╖┴╝░ñ╧ Base64 ╔Σ╣µ▓╜ [<a href="#MIME">MIME</a>] ñ╟
  288.     ASCII ╖┴╝░ñ╦╩╤┤╣ñ╡ñ∞ñδñ│ñ╚ñ¼ñóñΩñ▐ñ╣íú
  289.     ñ│ñ╬ñΦñªñ╦╔Σ╣µ▓╜ñ╡ñ∞íó░╩▓╝ñ╬╬πñ╦╝¿ñ╡ñ∞ñδñΦñªñ╦╢Φ└┌ñΩ╣╘ñ╦
  290.     ╢┤ñ▐ñ∞ñ┐ñΓñ╬ñ╧ PEM ╔Σ╣µ▓╜ñ╡ñ∞ñ┐ñ╚╕└ñññ▐ñ╣íú
  291.     (PEM ñ╬╠╛┴░ñ╧ "Privacy Enhanced Mail" ñ╦═│═Φñ╖ñ▐ñ╣)</p>
  292.  
  293.     <div class="example"><h3>PEM ╔Σ╣µ▓╜ñ╡ñ∞ñ┐╛┌╠└╜±ñ╬╬π (example.crt)</h3><pre>-----BEGIN CERTIFICATE-----
  294. MIIC7jCCAlegAwIBAgIBATANBgkqhkiG9w0BAQQFADCBqTELMAkGA1UEBhMCWFkx
  295. FTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25ha2UgVG93bjEXMBUG
  296. A1UEChMOU25ha2UgT2lsLCBMdGQxHjAcBgNVBAsTFUNlcnRpZmljYXRlIEF1dGhv
  297. cml0eTEVMBMGA1UEAxMMU25ha2UgT2lsIENBMR4wHAYJKoZIhvcNAQkBFg9jYUBz
  298. bmFrZW9pbC5kb20wHhcNOTgxMDIxMDg1ODM2WhcNOTkxMDIxMDg1ODM2WjCBpzEL
  299. MAkGA1UEBhMCWFkxFTATBgNVBAgTDFNuYWtlIERlc2VydDETMBEGA1UEBxMKU25h
  300. a2UgVG93bjEXMBUGA1UEChMOU25ha2UgT2lsLCBMdGQxFzAVBgNVBAsTDldlYnNl
  301. cnZlciBUZWFtMRkwFwYDVQQDExB3d3cuc25ha2VvaWwuZG9tMR8wHQYJKoZIhvcN
  302. AQkBFhB3d3dAc25ha2VvaWwuZG9tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKB
  303. gQDH9Ge/s2zcH+da+rPTx/DPRp3xGjHZ4GG6pCmvADIEtBtKBFAcZ64n+Dy7Np8b
  304. vKR+yy5DGQiijsH1D/j8HlGE+q4TZ8OFk7BNBFazHxFbYI4OKMiCxdKzdif1yfaa
  305. lWoANFlAzlSdbxeGVHoT0K+gT5w3UxwZKv2DLbCTzLZyPwIDAQABoyYwJDAPBgNV
  306. HRMECDAGAQH/AgEAMBEGCWCGSAGG+EIBAQQEAwIAQDANBgkqhkiG9w0BAQQFAAOB
  307. gQAZUIHAL4D09oE6Lv2k56Gp38OBDuILvwLg1v1KL8mQR+KFjghCrtpqaztZqcDt
  308. 2q2QoyulCgSzHbEGmi0EsdkPfg6mp0penssIFePYNI+/8u9HT4LuKMJX15hxBam7
  309. dUHzICxBVC1lnHyYGjDuAMhe396lYAn8bCld1/L4NMGBCQ==
  310. -----END CERTIFICATE-----</pre></div>
  311.  
  312.  
  313. <h3><a name="certificateauthorities" id="certificateauthorities">╟º╛┌╢╔</a></h3>
  314.  
  315.     <p>ñ▐ñ║╛┌╠└╜±ñ╬┐╜└┴ñ╬╛≡╩≤ñ≥│╬╟ºñ╣ñδñ│ñ╚ñ╟íó
  316.     ╟º╛┌╢╔ñ╧╚δ╠⌐╕░ñ╬╗²ñ┴╝τñ╬┐╚╕╡ñ≥╩▌╛┌ñ╖ñ▐ñ╣íú
  317.     ╬πñ¿ñ╨íóÑóÑΩÑ╣ñ¼╕─┐═╛┌╠└╜±ñ≥┐╜└┴ñ╖ñ┐ñ╚ñ╣ñδñ╚íó
  318.     ╟º╛┌╢╔ñ╧ÑóÑΩÑ╣ñ¼╛┌╠└╜±ñ╬┐╜└┴ñ¼╝τ─Ññ╣ñδ─╠ñΩñ╬
  319.     ┐═╩¬ñ└ñ╚ñññªñ│ñ╚ñ≥│╬╟ºñ╖ñ╩ñ»ñ╞ñ╧ñññ▒ñ▐ñ╗ñ≤íú</p>
  320.  
  321.     <h4><a name="certificatechains" id="certificatechains">╛┌╠└╜±│¼┴╪╣╜┬ñ</a></h4>
  322.     
  323.         <p>╟º╛┌╢╔ñ╧┬╛ñ╬╟º╛┌╢╔ñ╪ñ╬╛┌╠└╜±ñ≥╚»╣╘ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  324.         ╠ñ├╬ñ╬╛┌╠└╜±ñ≥─┤ñ┘ñδ╗■ñ╦íóÑóÑΩÑ╣ñ╧ñ╜ñ╬╛┌╠└╜±ñ╬╚»╣╘╝╘
  325.         ñ╦╝½┐«ñ¼╗²ñ╞ñδñ▐ñ╟íó╚»╣╘╝╘ñ╬╛┌╠└╜±ñ≥
  326.         ñ╜ñ╬╛σ░╠│¼┴╪ñ╬╟º╛┌╢╔ñ≥ñ┐ñ╔ñ├ñ╞─┤ñ┘ñδ╔¼═╫ñ¼ñóñΩñ▐ñ╣íú
  327.         í╓░¡╝┴ñ╩í╫╛┌╠└╜±ñ╬┤φ╕▒└¡ñ≥╕║ñΘñ╣ñ┐ñßíó
  328.         ╚α╜≈ñ╧╕┬ñΘñ∞ñ┐╧ó║┐ñ╬╚»╣╘╝╘ñ╬ñ▀┐«═Ωñ╣ñδñΦñªñ╦
  329.         ╖Φñßñδñ│ñ╚ñΓñ╟ñ¡ñ▐ñ╣íú</p>
  330.     
  331.  
  332.     <h4><a name="rootlevelca" id="rootlevelca">║╟╛σ░╠╟º╛┌╢╔ñ╬║ε└«</a></h4>
  333.     
  334.         <p>┴░ñ╦╜╥ñ┘ñ┐ñΦñªñ╦íó┴┤ñ╞ñ╬╛┌╠└╜±ñ╦ñ─ñññ╞íó
  335.         ║╟╛σ░╠ñ╬╟º╛┌╢╔(CA)ñ▐ñ╟ñ╜ñ∞ñ╛ñ∞ñ╬╚»╣╘╝╘ñ¼
  336.         ┬╨╛▌ñ╬┐╚╕╡╛┌╠└ñ╬═¡╕·└¡ñ≥╠└ñΘñ½ñ╦ñ╣ñδ╔¼═╫ñ¼ñóñΩñ▐ñ╣íú
  337.         ╠Σ┬Ωñ╧íó├»ñ¼ñ╜ñ╬║╟╛σ░╠ñ╬╟º╛┌╡í┤╪ñ╬╛┌╠└╜±ñ≥╩▌╛┌ñ╣ñδñ╬ñ½íó
  338.         ñ╚ñññªñ│ñ╚ñ╟ñ╣íú
  339.         ñ│ñ╬ñΦñªñ╩╛∞╣τñ╦╕┬ñΩíó╛┌╠└╜±ñ╧í╓╝½╕╩╜≡╠╛í╫ñ╡ñ∞ñ▐ñ╣íú
  340.         ñ─ñ▐ñΩíó╛┌╠└╜±ñ╬╚»╣╘╝╘ñ╚╛┌╠└┬╨╛▌ñ¼╞▒ñ╕ñ╚ñññªñ│ñ╚ñ╦ñ╩ñΩñ▐ñ╣íú
  341.         ñ╜ñ╬╖δ▓╠íó╝½╕╩╜≡╠╛ñ╡ñ∞ñ┐╛┌╠└╜±ñ≥┐«═╤ñ╣ñδñ╦ñ╧
  342.         ║┘┐┤ñ╬├φ░╒ñ¼╔¼═╫ñ╟ñ╣íú
  343.         ║╟╛σ░╠╟º╛┌╢╔ñ¼╕°│½╕░ñ≥╣¡ñ»╕°╔╜ñ╣ñδñ│ñ╚ñ╟íó
  344.         ñ╜ñ╬╕░ñ≥┐«═Ωñ╣ñδÑΩÑ╣Ñ»ñ≥─πñ»ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  345.         ñΓñ╖íó┬╛┐═ñ¼ñ╜ñ╬╟º╛┌╢╔ñ╦ñ╩ñΩñ╣ñ▐ñ╖ñ┐╗■ñ╦íóñ╜ñ∞ñ¼╧¬╕½ñ╖ñΣ
  346.         ñ╣ñññ½ñΘñ╟ñ╣íú
  347.         ┬┐ñ»ñ╬Ñ╓ÑΘѪÑ╢ñ╧═¡╠╛ñ╩╟º╛┌╢╔ñ≥┐«═Ωñ╣ñδñΦñªñ╦
  348.         └▀─Ωñ╡ñ∞ñ╞ñññ▐ñ╣íú</p>
  349.  
  350.         <p><a href="http://www.thawte.com/">Thawte</a> 
  351.         ñΣ <a href="http://www.verisign.com/">VeriSign</a> 
  352.         ñ╬ñΦñªñ╩┬┐ñ»ñ╬▓±╝╥ñ¼╟º╛┌╢╔ñ╚ñ╖ñ╞│½└▀ñ╖ñ▐ñ╖ñ┐íú
  353.         ñ│ñ╬ñΦñªñ╩▓±╝╥ñ╧░╩▓╝ñ╬Ñ╡í╝Ñ╙Ñ╣ñ≥─≤╢íñ╖ñ▐ñ╣:</p>
  354.  
  355.         <ul>
  356.         <li>╛┌╠└╜±┐╜└┴ñ╬│╬╟º</li>
  357.         <li>╛┌╠└╜±┐╜└┴ñ╬╜Φ═²</li>
  358.         <li>╛┌╠└╜±ñ╬╚»╣╘ñ╚┤╔═²</li>
  359.         </ul>
  360.  
  361.         <p>╝½╩¼ñ╟╟º╛┌╢╔ñ≥║εñδñ│ñ╚ñΓ▓─╟╜ñ╟ñ╣íú
  362.         ÑñÑ≤Ñ┐í╝Ñ═Ñ├Ñ╚┤─╢¡ñ╟ñ╧┤φ╕▒ñ╟ñ╣ñ¼íó
  363.         ╕─┐═ñΣÑ╡í╝Ñ╨ñ╬┐╚╕╡╛┌╠└ñ¼┤╩├▒ñ╦╣╘ñ¿ñδ┴╚┐Ññ╬
  364.         ÑñÑ≤Ñ╚ÑΘÑ═Ñ├Ñ╚╞Γñ╟ñ╧╠≥ñ╦╬⌐ñ─ñ½ñΓñ╖ñ∞ñ▐ñ╗ñ≤íú</p>
  365.     
  366.  
  367.     <h4><a name="certificatemanagement" id="certificatemanagement">╛┌╠└╜±┤╔═²</a></h4>
  368.     
  369.         <p>╟º╛┌╢╔ñ╬│½└▀ñ╧┼░─∞ñ╖ñ┐┤╔═²íó╡╗╜╤íó▒┐═╤ñ╬┬╬└⌐ñ≥╔¼═╫ñ╚ñ╣ñδ
  370.         └╒╟ññ╬ñóñδ╗┼╗÷ñ╟ñ╣íú
  371.         ╟º╛┌╢╔ñ╧╛┌╠└╜±ñ≥╚»╣╘ñ╣ñδñ└ñ▒ñ╟ñ╩ñ»íó
  372.         ┤╔═²ñΓñ╖ñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íú
  373.         ╢±┬╬┼¬ñ╦ñ╧íó╛┌╠└╜±ñ¼ñññ─ñ▐ñ╟═¡╕·ñ½ñ≥╖Φ─Ωñ╖íó╣╣┐╖ñ╖íó
  374.         ñ▐ñ┐┤√ñ╦╚»╣╘ñ╡ñ∞ñ┐ñ¼╝║╕·ñ╖ñ┐╛┌╠└╜±ñ╬ÑΩÑ╣Ñ╚
  375.         (Certificate Revocation Lists ñ▐ñ┐ñ╧ CRL)
  376.         ñ≥┤╔═²ñ╖ñ╩ñ▒ñ∞ñ╨ñññ▒ñ▐ñ╗ñ≤íú
  377.         ╬πñ¿ñ╨íóÑóÑΩÑ╣ñ¼▓±╝╥ñ½ñΘ╝╥░≈ñ╚ñ╖ñ╞╛┌╠└╜±ñ≥═┐ñ¿ñΘñ∞ñ┐ñ╚ñ╖ñ▐ñ╣íú
  378.         ñ╜ñ╖ñ╞íóÑóÑΩÑ╣ñ¼▓±╝╥ñ≥╝¡ñßñδñ╚ñ¡ñ╦ñ╧╛┌╠└╜±ñ≥╝ΦñΩ╛├ñ╡ñ╩ñ▒ñ∞ñ╨
  379.         ñññ▒ñ╩ñññ╚ñ╖ñ▐ñ╣íú
  380.         ╛┌╠└╜±ñ╧╝íí╣ñ╚┐═ñ╦┼╧ñ╡ñ∞ñ╞ñññ»ñΓñ╬ñ╩ñ╬ñ╟íó
  381.         ╛┌╠└╜±ñ╜ñ╬ñΓñ╬ñ½ñΘíóñ╜ñ∞ñ¼╝ΦñΩ╛├ñ╡ñ∞ñ┐ñ½╚╜├╟ñ╣ñδñ│ñ╚ñ╧
  382.         ╔╘▓─╟╜ñ╟ñ╣íú
  383.         ñΦñ├ñ╞íó╛┌╠└╜±ñ╬═¡╕·└¡ñ≥─┤ñ┘ñδñ╚ñ¡ñ╦ñ╧íó
  384.         ╟º╛┌╢╔ñ╦╧ó═φñ╖ñ╞ CRL ñ≥╛╚╣τñ╣ñδ╔¼═╫ñ¼ñóñΩñ▐ñ╣íú
  385.         ╔ß─╠ñ│ñ╬▓ß─°ñ╧╝½╞░▓╜ñ╡ñ∞ñ╞ñññδñΓñ╬ñ╟ñ╧ñóñΩñ▐ñ╗ñ≤íú</p>
  386.  
  387.         <div class="note"><h3>├φ░╒</h3>
  388.         <p>Ñ╟Ñ╒Ñ⌐ÑδÑ╚ñ╟Ñ╓ÑΘѪÑ╢ñ╦└▀─Ωñ╡ñ∞ñ╞ñññ╩ññ╟º╛┌╢╔ñ≥╗╚ñ├ñ┐╛∞╣τíó
  389.         ╟º╛┌╢╔ñ╬╛┌╠└╜±ñ≥Ñ╓ÑΘѪÑ╢ñ╦╞╔ñ▀╣■ñ≤ñ╟íó
  390.         Ñ╓ÑΘѪÑ╢ñ¼ñ╜ñ╬╟º╛┌╢╔ñ╦ñΦñ├ñ╞╜≡╠╛ñ╡ñ∞ñ┐Ñ╡í╝Ñ╨ñ╬╛┌╠└╜±ñ≥
  391.         ═¡╕·▓╜ñ╣ñδ╔¼═╫ñ¼ñóñΩñ▐ñ╣íú
  392.         ░∞┼┘╞╔ñ▀╣■ñ▐ñ∞ñδñ╚íóñ╜ñ╬╟º╛┌╢╔ñ╦ñΦñ├ñ╞╜≡╠╛ñ╡ñ∞ñ┐┴┤ñ╞ñ╬
  393.         ╛┌╠└╜±ñ≥╝⌡ñ▒╞■ñ∞ñδñ┐ñßíó┤φ╕▒ñ≥╚╝ñññ▐ñ╣íú</p>
  394.         </div>
  395.     
  396.  
  397.  
  398. </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
  399. <div class="section">
  400. <h2><a name="ssl" id="ssl">Secure Sockets Layer (SSL)</a></h2>
  401.  
  402. <p>Secure Sockets Layer Ñ╫ÑφÑ╚Ñ│Ñδñ╧┐«═Ω└¡ñ╬ñóñδÑ│Ñ═Ñ»Ñ╖ÑτÑ≤╖┐ñ╬
  403. Ñ═Ñ├Ñ╚Ñ∩í╝Ñ»┴╪ñ╬Ñ╫ÑφÑ╚Ñ│Ñδ(╬πñ¿ñ╨íóTCP/IP)ñ╚
  404. ÑóÑ╫ÑΩÑ▒í╝Ñ╖ÑτÑ≤┴╪ñ╬Ñ╫ÑφÑ╚Ñ│Ñδ(╬πñ¿ñ╨íóHTTP)
  405. ñ╬┤╓ñ╦├╓ñ»ñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  406. SSL ñ╧íó┴Ω╕▀╟º╛┌ñ╦ñΦñ├ñ╞Ñ╡í╝Ñ╨ñ╚Ñ»ÑΘÑñÑóÑ≤Ñ╚┤╓ñ╬░┬┴┤ñ╩─╠┐«ñ≥íó
  407. ┼┼╗╥╜≡╠╛ñ╦ñΦñ├ñ╞Ñ╟í╝Ñ┐ñ╬┤░┴┤└¡ñ≥íó
  408. ñ╜ñ╖ñ╞░┼╣µ▓╜ñ╦ñΦñ├ñ╞Ñ╫ÑΘÑñÑ╨Ñ╖ñ≥─≤╢íñ╖ñ▐ñ╣íú</p>
  409.  
  410. <p>SSL Ñ╫ÑφÑ╚Ñ│Ñδñ╧░┼╣µ▓╜íóÑ└ÑñÑ╕ѺÑ╣Ñ╚íó┼┼╗╥╜≡╠╛ñ╦ñ─ñññ╞íó
  411. ══í╣ñ╩ÑóÑδÑ┤ÑΩÑ║Ñαñ≥Ñ╡Ñ▌í╝Ñ╚ñ╣ñδñΦñªñ╦ñ╟ñ¡ñ╞ñññ▐ñ╣íú
  412. ñ│ñªñ╣ñδñ│ñ╚ñ╟íó╦íñΣ═ó╜╨ñ╬╡¼└⌐ñ≥╣═╬╕ñ╦╞■ñ∞ñ╞íóÑ╡í╝Ñ╨ñ╦╣τñ∩ñ╗ñ┐
  413. ÑóÑδÑ┤ÑΩÑ║Ñαñ≥┴¬ñ╓ñ│ñ╚ñ¼ñ╟ñ¡íóñ▐ñ┐íó┐╖ñ╖ññÑóÑδÑ┤ÑΩÑ║Ñαñ≥
  414. ═°═╤ñ╖ñ╞ñññ»ñ│ñ╚ñΓ▓─╟╜ñ╦ñ╖ñ╞ñññ▐ñ╣íú
  415. ÑóÑδÑ┤ÑΩÑ║Ñαñ╬┴¬┬≥ñ╧Ñ╫ÑφÑ╚Ñ│ÑδÑ╗Ñ├Ñ╖ÑτÑ≤│½╗╧╗■ñ╦
  416. Ñ╡í╝Ñ╨ñ╚Ñ»ÑΘÑñÑóÑ≤Ñ╚┤╓ñ╟╝ΦñΩ╖ΦñßñΘñ∞ñ▐ñ╣íú</p>
  417.  
  418. <h3><a name="table4" id="table4">╔╜4: SSL Ñ╫ÑφÑ╚Ñ│Ñδñ╬Ñ╨í╝Ñ╕ÑτÑ≤</a></h3>
  419.  
  420.     <table class="bordered">
  421.     
  422.     <tr><th>Ñ╨í╝Ñ╕ÑτÑ≤</th>
  423.         <th>╜╨┼╡</th>
  424.         <th>└Γ╠└</th>
  425.         <th>Ñ╓ÑΘѪÑ╢ñ╬Ñ╡Ñ▌í╝Ñ╚</th></tr>
  426.     <tr><td>SSL v2.0</td>
  427.         <td>Vendor Standard (Netscape Corp. ñΦñΩ) [<a href="#SSL2">SSL2</a>]</td>
  428.         <td>╝┬┴⌡ñ¼╕╜┬╕ñ╣ñδ╜Θñßñ╞ñ╬ SSL Ñ╫ÑφÑ╚Ñ│Ñδ</td>
  429.         <td>- NS Navigator 1.x/2.x<br />
  430.         - MS IE 3.x<br />
  431.         - Lynx/2.8+OpenSSL</td></tr>
  432.     <tr><td>SSL v3.0</td>
  433.         <td>Expired Internet Draft (Netscape Corp. ñΦñΩ) [<a href="#SSL3">SSL3</a>]</td>
  434.         <td>╞├─Ωñ╬Ñ╗Ñ¡ÑσÑΩÑ╞Ñú╣╢╖Γñ≥╦╔ñ░ñ┐ñßñ╬▓■─√íó
  435.         ╚≤RSA ░┼╣µñ╬─╔▓├íó╛┌╠└╜±│¼┴╪╣╜┬ññ╬Ñ╡Ñ▌í╝Ñ╚</td>
  436.         <td>- NS Navigator 2.x/3.x/4.x<br />
  437.         - MS IE 3.x/4.x<br />
  438.         - Lynx/2.8+OpenSSL</td></tr>
  439.     <tr><td>TLS v1.0</td>
  440.         <td>Proposed Internet Standard (IETF ñΦñΩ) [<a href="#TLS1">TLS1</a>]</td>
  441.         <td>MAC Ñ∞ÑñÑΣñ≥ HMAC ñ╪╣╣┐╖íóÑ╓ÑφÑ├Ñ»░┼╣µñ╬ block
  442.         paddingíóÑßÑ├Ñ╗í╝Ñ╕╜τ╜°ñ╬╔╕╜α▓╜íó╖┘╣≡╩╕ñ╬╜╝╝┬ñ╩ñ╔ñ╬ñ┐ñß
  443.         SSL 3.0 ñ≥▓■─√íú</td>
  444.         <td>- Lynx/2.8+OpenSSL</td></tr>
  445.     </table>
  446.  
  447.  
  448. <p><a href="#table4">╔╜4</a>ñ╦╝¿ñ╡ñ∞ñδñ╚ñ¬ñΩíóSSL Ñ╫ÑφÑ╚Ñ│Ñδñ╦ñ╧
  449. ñññ»ñ─ñΓñ╬Ñ╨í╝Ñ╕ÑτÑ≤ñ¼ñóñΩñ▐ñ╣íú
  450. ╔╜ñ╦ñΓ╜±ñ½ñ∞ñ╞ñññδñΦñªñ╦íóSSL 3.0 ñ╬═°┼└ñ╬░∞ñ─ñ╧
  451. ╛┌╠└╜±│¼┴╪╣╜┬ññ≥Ñ╡Ñ▌í╝Ñ╚ñ╣ñδñ│ñ╚ñ╟ñ╣íú
  452. ñ│ñ╬╡í╟╜ñ╦ñΦñ├ñ╞íóÑ╡í╝Ñ╨ñ╧╝½╩¼ñ╬╛┌╠└╜±ñ╦▓├ñ¿ñ╞íó
  453. ╚»╣╘╝╘ñ╬╛┌╠└╜±ñ≥Ñ╓ÑΘѪÑ╢ñ╦┼╧ñ╣ñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  454. ╛┌╠└╜±│¼┴╪╣╜┬ññ╦ñΦñ├ñ╞íó
  455. Ñ╓ÑΘѪÑ╢ñ╦╚»╣╘╝╘ñ╬╛┌╠└╜±ñ¼─╛└▄┼╨╧┐ñ╡ñ∞ñ╞ñññ╩ñ»ñ╞ñΓíó
  456. │¼┴╪ñ╬├µñ╦┤▐ñ▐ñ∞ñ╞ñññ∞ñ╨íó
  457. Ñ╓ÑΘѪÑ╢ñ╧Ñ╡í╝Ñ╨ñ╬╛┌╠└╜±ñ≥═¡╕·▓╜ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  458. SSL 3.0 ñ╧╕╜║▀ Internet Engineering Task Force (IETF) 
  459. ñ╦ñΦñ├ñ╞│½╚»ñ╡ñ∞ñ╞ñññδ Transport Layer Security 
  460. [<a href="#TLS1">TLS</a>] Ñ╫ÑφÑ╚Ñ│Ñδ╔╕╜α╡¼│╩ñ╬┤≡┴├ñ╚ñ╩ñ├ñ╞ñññ▐ñ╣íú</p>
  461.  
  462. <h3><a name="session" id="session">Ñ╗Ñ├Ñ╖ÑτÑ≤ñ╬│╬╬⌐</a></h3>
  463.  
  464.     <p><a href="#figure1">┐▐1</a>ñ╟╝¿ñ╡ñ∞ñδñΦñªñ╦íó
  465.     Ñ╗Ñ├Ñ╖ÑτÑ≤ñ╬│╬╬⌐ñ╧Ñ»ÑΘÑñÑóÑ≤Ñ╚ñ╚Ñ╡í╝Ñ╨┤╓ñ╬
  466.     Ñ╧Ñ≤Ñ╔Ñ╖Ѻí╝Ñ»Ñ╖í╝ѻѿÑ≤Ñ╣ñ╦ñΦñ├ñ╞╣╘ñ╩ñ∩ñ∞ñ▐ñ╣íú
  467.     Ñ╡í╝Ñ╨ñ¼╛┌╠└╜±ñ≥─≤╢íñ╣ñδñ½íóÑ»ÑΘÑñÑóÑ≤Ñ╚ñ╬╛┌╠└╜±ñ≥ÑΩѻѿÑ╣Ñ╚ñ╣ñδñ½
  468.     ñ╚ñññªÑ╡í╝Ñ╨ñ╬└▀─Ωñ╦ñΦñΩíóñ│ñ╬Ñ╖í╝ѻѿÑ≤Ñ╣ñ╧░█ñ╩ñδñΓñ╬ñ╚ñ╩ñΩñ▐ñ╣íú
  469.     ░┼╣µ╛≡╩≤ñ╬┤╔═²ñ╬ñ┐ñßñ╦íó─╔▓├ñ╬Ñ╧Ñ≤Ñ╔Ñ╖Ѻí╝Ñ»▓ß─°ñ¼╔¼═╫ñ╦ñ╩ñδ
  470.     ╛∞╣τñΓñóñΩñ▐ñ╣ñ¼íóñ│ñ╬╡¡╗÷ñ╟ñ╧
  471.     ñΦñ»ñóñδÑ╖Ñ╩ÑΩѬñ≥╝Ω├╗ñ╦└Γ╠└ñ╖ñ▐ñ╣íú
  472.     ┴┤ñ╞ñ╬▓─╟╜└¡ñ╦ñ─ñññ╧íóSSL ╗┼══╜±ñ≥╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú</p>
  473.  
  474.     <div class="note"><h3>├φ░╒</h3>
  475.     <p>░∞┼┘ SSL Ñ╗Ñ├Ñ╖ÑτÑ≤ñ¼│╬╬⌐ñ╣ñδñ╚íóÑ╗Ñ├Ñ╖ÑτÑ≤ñ≥║╞═°═╤ñ╣ñδñ│ñ╚ñ╟íó
  476.     Ñ╗Ñ├Ñ╖ÑτÑ≤ñ≥│½╗╧ñ╣ñδñ┐ñßñ╬┬┐ñ»ñ╬▓ß─°ñ≥╖½ñΩ╩╓ñ╣ñ╚ñññª
  477.     Ñ╤Ñ╒Ñ⌐í╝Ñ▐Ñ≤Ñ╣ñ╬┬╗╝║ñ≥╦╔ñ«ñ▐ñ╣íú
  478.     ñ╜ñ╬ñ┐ñßíóÑ╡í╝Ñ╨ñ╧┴┤ñ╞ñ╬Ñ╗Ñ├Ñ╖ÑτÑ≤ñ╦░∞░╒ñ╩Ñ╗Ñ├Ñ╖ÑτÑ≤╝▒╩╠╠╛ñ≥
  479.     │ΣñΩ┼÷ñ╞íóÑ╡í╝Ñ╨ñ╦Ñ¡ÑπÑ├Ñ╖Ñσñ╖íóÑ»ÑΘÑñÑóÑ≤Ñ╚ñ╧╝í▓≤ñ½ñΘ
  480.     (╝▒╩╠╠╛ñ¼Ñ╡í╝Ñ╨ñ╬Ñ¡ÑπÑ├Ñ╖Ñσñ╟┤ⁿ╕┬└┌ñ∞ñ╦ñ╩ñδñ▐ñ╟ñ╧)
  481.     Ñ╧Ñ≤Ñ╔Ñ╖Ѻí╝Ñ»ñ╩ñ╖ñ╟└▄┬│ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú</p>
  482.     </div>
  483.  
  484.     <p class="figure">
  485.     <img src="../images/ssl_intro_fig1.gif" alt="" width="423" height="327" /><br />
  486.     <a id="figure1" name="figure1"><dfn>┐▐1</dfn></a>: SSL
  487.     Ñ╧Ñ≤Ñ╔Ñ╖Ѻí╝Ñ»Ñ╖í╝ѻѿÑ≤Ñ╣│╡╬¼</p>
  488.  
  489.     <p>Ñ╡í╝Ñ╨ñ╚Ñ»ÑΘÑñÑóÑ≤Ñ╚ñ╟╗╚ñ∩ñ∞ñδ
  490.     Ñ╧Ñ≤Ñ╔Ñ╖Ѻí╝Ñ»Ñ╖í╝ѻѿÑ≤Ñ╣ñ╬═╫┴╟ñ≥░╩▓╝ñ╦╝¿ñ╖ñ▐ñ╣:</p>
  491.  
  492.     <ol>
  493.     <li>Ñ╟í╝Ñ┐─╠┐«ñ╦╗╚ñ∩ñ∞ñδ░┼╣µÑ╣Ññí╝Ñ╚ñ╬╝ΦñΩ╖Φñß</li>
  494.     <li>Ñ»ÑΘÑñÑóÑ≤Ñ╚ñ╚Ñ╡í╝Ñ╨┤╓ñ╟ñ╬Ñ╗Ñ├Ñ╖ÑτÑ≤╕░ñ╬│╬╬⌐ñ╚╢ª═¡</li>
  495.     <li>ѬÑ╫Ñ╖ÑτÑ≤ñ╚ñ╖ñ╞íóÑ»ÑΘÑñÑóÑ≤Ñ╚ñ╦┬╨ñ╣ñδÑ╡í╝Ñ╨ñ╬╟º╛┌</li>
  496.     <li>ѬÑ╫Ñ╖ÑτÑ≤ñ╚ñ╖ñ╞íóÑ╡í╝Ñ╨ñ╦┬╨ñ╣ñδÑ»ÑΘÑñÑóÑ≤Ñ╚ñ╬╟º╛┌</li>
  497.     </ol>
  498.  
  499.     <p>┬Φ░∞Ñ╣Ñ╞Ñ├Ñ╫ñ╬░┼╣µÑ╣Ññí╝Ñ╚╝ΦñΩ╖Φñßñ╦ñΦñ├ñ╞íó
  500.     Ñ╡í╝Ñ╨ñ╚Ñ»ÑΘÑñÑóÑ≤Ñ╚ñ╧ñ╜ñ∞ñ╛ñ∞ñ╦ñóñ├ñ┐
  501.     ░┼╣µÑ╣Ññí╝Ñ╚ñ≥┴¬ñ╓ñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  502.     SSL3.0 Ñ╫ÑφÑ╚Ñ│Ñδñ╬╗┼══╜±ñ╧ 31 ñ╬░┼╣µÑ╣Ññí╝Ñ╚ñ≥─Ω╡┴ñ╖ñ╞ñññ▐ñ╣íú
  503.     ░┼╣µÑ╣Ññí╝Ñ╚ñ╧░╩▓╝ñ╬Ñ│Ñ≤Ñ▌í╝Ñ═Ñ≤Ñ╚ñ╦ñΦñΩ─Ω╡┴ñ╡ñ∞ñ╞ñññ▐ñ╣:</p>
  504.  
  505.     <ul>
  506.     <li>╕░ñ╬╕≥┤╣╝Ω├╩</li>
  507.     <li>Ñ╟í╝Ñ┐─╠┐«ñ╬░┼╣µ╜╤</li>
  508.     <li>Message Authentication Code (MAC) ║ε└«ñ╬ñ┐ñßñ╬
  509.     ÑßÑ├Ñ╗í╝Ñ╕Ñ└ÑñÑ╕ѺÑ╣Ñ╚</li>
  510.     </ul>
  511.  
  512.     <p>ñ│ñ∞ñΘñ╬╗░ñ─ñ╬═╫┴╟ñ╧░╩▓╝ñ╬Ñ╗Ñ»Ñ╖ÑτÑ≤ñ╟└Γ╠└ñ╡ñ∞ñ╞ñññ▐ñ╣íú</p>
  513.  
  514.  
  515. <h3><a name="keyexchange" id="keyexchange">╕░ñ╬╕≥┤╣╝Ω├╩</a></h3>
  516.  
  517.     <p>╕░ñ╬╕≥┤╣╝Ω├╩ñ╧ÑóÑ╫ÑΩÑ▒í╝Ñ╖ÑτÑ≤ñ╬Ñ╟í╝Ñ┐─╠┐«ñ╦╗╚ñ∩ñ∞íó
  518.     ╢ª═¡ñ╡ñ∞ñδ┬╨╛╬░┼╣µ╕░ñ≥ñ╔ñ╬ñΦñªñ╦ñ¼Ñ»ÑΘÑñÑóÑ≤Ñ╚ñ╚Ñ╡í╝Ñ╨ñ╟
  519.     ╝ΦñΩ╖Φñßñδñ½ñ≥─Ω╡┴ñ╖ñ▐ñ╣íú
  520.     SSL 2.0 ñ╧ RSA ╕░╕≥┤╣ñ╖ñ½╗╚ñññ▐ñ╗ñ≤ñ¼íó
  521.     SSL 3.0 ñ╧╛┌╠└╜±ñ¼╗╚ñ∩ñ∞ñδñ╚ñ¡ñ╧ RSA ╕░╕≥┤╣ñ≥╗╚ññíó
  522.     ╛┌╠└╜±ñ¼╠╡ñ»íóÑ»ÑΘÑñÑóÑ≤Ñ╚ñ╚Ñ╡í╝Ñ╨ñ╬╗÷┴░ñ╬─╠┐«ñ¼╠╡ññ╛∞╣τñ╧
  523.     Diffie-Hellman ╕░╕≥┤╣ñ≥╗╚ñª
  524.     ñ╩ñ╔══í╣ñ╩╕░╕≥┤╣ÑóÑδÑ┤ÑΩÑ║Ñαñ≥Ñ╡Ñ▌í╝Ñ╚ñ╖ñ▐ñ╣íú</p>
  525.  
  526.     <p>╕░ñ╬╕≥┤╣╩²╦íñ╦ñ¬ñ▒ñδ░∞ñ─ñ╬┴¬┬≥╗Φñ╧┼┼╗╥╜≡╠╛ñ╟ñ╣íú
  527.     ┼┼╗╥╜≡╠╛ñ≥╗╚ñªñ½ñ╔ñªñ½íóñ▐ñ┐íó
  528.     ñ╔ñ╬╝∩╬αñ╬╜≡╠╛ñ≥╗╚ñªñ½ñ╚ñññª┴¬┬≥ñ¼ñóñΩñ▐ñ╣íú
  529.     ╚δ╠⌐╕░ñ╟╜≡╠╛ñ╣ñδñ│ñ╚ñ╟╢ª═¡╕░ñ≥└╕└«ñ╣ñ╖íó╛≡╩≤╕≥┤╣ñ╣ñδ╗■ñ╬
  530.     Ñ▐Ñ≤íªÑñÑ≤íªÑ╢íªÑ▀Ñ╔Ñδ╣╢╖Γñ≥╦╔ñ░ñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú
  531.     [<a href="#AC96">AC96</a>, p516]</p>
  532.  
  533.  
  534. <h3><a name="ciphertransfer" id="ciphertransfer">Ñ╟í╝Ñ┐─╠┐«ñ╬░┼╣µ╜╤</a></h3>
  535.  
  536.     <p>SSL ñ╧Ñ╗Ñ├Ñ╖ÑτÑ≤ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ╬░┼╣µ▓╜ñ╦┴░╜╥ñ╖ñ┐
  537.     ╜╛═Φ╖┐░┼╣µ(┬╨╛╬░┼╣µ)ñ≥═╤ñññ▐ñ╣íú
  538.     ░┼╣µ▓╜ñ╖ñ╩ñññ╚ñññª┴¬┬≥╗ΦñΓ┤▐ñß╢σñ─ñ╬┴¬┬≥╗Φñ¼ñóñΩñ▐ñ╣:</p>
  539.  
  540.     <ul>
  541.     <li>░┼╣µ▓╜ñ╩ñ╖</li>
  542.     <li>Ñ╣Ñ╚ÑΩí╝Ñα░┼╣µ
  543.         <ul>
  544.         <li>40-bit ╕░ñ╟ñ╬ RC4</li>
  545.         <li>128-bit ╕░ñ╟ñ╬ RC4</li>
  546.         </ul></li>
  547.     <li>CBC Ñ╓ÑφÑ├Ñ»░┼╣µ
  548.         <ul><li>40 bit ╕░ñ╟ñ╬ RC2</li>
  549.         <li>40 bit ╕░ñ╟ñ╬ DES</li>
  550.         <li>56 bit ╕░ñ╟ñ╬ DES</li>
  551.         <li>168 bit ╕░ñ╟ñ╬ Triple-DES</li>
  552.         <li>Idea (128 bit ╕░)</li>
  553.         <li>Fortezza (96 bit ╕░)</li>
  554.         </ul></li>
  555.     </ul>
  556.  
  557.     <p>ñ│ñ│ñ╟ñ╬ CBC ñ╚ñ╧░┼╣µÑ╓ÑφÑ├Ñ»╧ó║┐ (Cipher Block Chaining)
  558.      ñ╬╬¼ñ╟íó░∞ñ─┴░ñ╬░┼╣µ▓╜ñ╡ñ∞ñ┐░┼╣µ╩╕ñ╬░∞╔⌠ñ¼
  559.     Ñ╓ÑφÑ├Ñ»ñ╬░┼╣µ▓╜ñ╦╗╚ñ∩ñ∞ñδñ│ñ╚ñ≥░╒╠úñ╖ñ▐ñ╣íú
  560.     DES ñ╧Ñ╟í╝Ñ┐░┼╣µ▓╜╔╕╜α╡¼│╩ (Data Encryption Standard)
  561.      [<a href="#AC96">AC96</a>, ch12] ñ╬╬¼ñ╟íó
  562.     DES40 ñΣ 3DES_EDE ñ≥┤▐ñαñññ»ñ─ñΓñ╬╝∩╬αñ¼ñóñΩñ▐ñ╣íú
  563.     Idea ñ╧║╟╣Γñ╩ñΓñ╬ñ╬░∞ñ─ñ╟íó░┼╣µ╜╤┼¬ñ╦ñ╧╕╜║▀ñóñδ├µñ╟
  564.     ║╟ñΓ╢»╬╧ñ╩ñΓñ╬ñ╟ñ╣íú
  565.     RC2 ñ╧ RSA DSI ñ╦ñΦñδ╞╚└Ω┼¬ñ╩ÑóÑδÑ┤ÑΩÑ║Ñαñ╟ñ╣íú
  566.      [<a href="#AC96">AC96</a>,
  567.     ch13]</p>
  568.  
  569.  
  570. <h3><a name="digestfuntion" id="digestfuntion">Ñ└ÑñÑ╕ѺÑ╣Ñ╚┤╪┐⌠</a></h3>
  571.  
  572.     <p>
  573.     Ñ└ÑñÑ╕ѺÑ╣Ñ╚┤╪┐⌠ñ╬┴¬┬≥ñ╧Ñ∞Ñ│í╝Ñ╔ѵÑ╦Ñ├Ñ╚ñ½ñΘñ╔ñ╬ñΦñªñ╦Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ¼└╕└«ñ╡ñ∞ñδñ½ñ≥╖Φ─Ωñ╖ñ▐ñ╣íú
  574.     SSL ñ╧░╩▓╝ñ≥Ñ╡Ñ▌í╝Ñ╚ñ╖ñ▐ñ╣:</p>
  575.  
  576.     <ul>
  577.     <li>Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ╩ñ╖</li>
  578.     <li>MD5 (128-bit Ñ╧Ñ├Ñ╖Ñσ)</li>
  579.     <li>Secure Hash Algorithm (SHA-1) (160-bit Ñ╧Ñ├Ñ╖Ñσ)</li>
  580.     </ul>
  581.  
  582.     <p>ÑßÑ├Ñ╗í╝Ñ╕Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñ╧ Message Authentication Code (MAC) 
  583.     ñ╬└╕└«ñ╦╗╚ñ∩ñ∞íóÑßÑ├Ñ╗í╝Ñ╕ñ╚╢ªñ╦░┼╣µ▓╜ñ╡ñ∞íóÑßÑ├Ñ╗í╝Ñ╕ñ╬┐«═╤ñ≥
  584.     ─≤╢íñ╖íóÑΩÑ╫Ñ∞Ññ╣╢╖Γñ≥╦╔ñ«ñ▐ñ╣íú</p>
  585.  
  586.  
  587. <h3><a name="handshake" id="handshake">Ñ╧Ñ≤Ñ╔Ñ╖Ѻí╝Ñ»Ñ╖í╝ѻѿÑ≤Ñ╣Ñ╫ÑφÑ╚Ñ│Ñδ</a></h3>
  588.  
  589.     <p>Ñ╧Ñ≤Ñ╔Ñ╖Ѻí╝Ñ»Ñ╖í╝ѻѿÑ≤Ñ╣ñ╧╗░ñ─ñ╬Ñ╫ÑφÑ╚Ñ│Ñδñ≥╗╚ñññ▐ñ╣:</p>
  590.  
  591.     <ul>
  592.     <li><dfn>SSL Ñ╧Ñ≤Ñ╔Ñ╖Ѻí╝Ñ»Ñ╫ÑφÑ╚Ñ│Ñδ</dfn>ñ╧
  593.     Ñ»ÑΘÑñÑóÑ≤Ñ╚ñ╚Ñ╡í╝Ñ╨┤╓ñ╟ñ╬ SSL Ñ╗Ñ├Ñ╖ÑτÑ≤ñ╬│╬╬⌐ñ╦╗╚ñ∩ñ∞ñ▐ñ╣íú</li>
  594.     <li><dfn>SSL ░┼╣µ╗┼══╩╤╣╣Ñ╫ÑφÑ╚Ñ│Ñδ</dfn>ñ╧
  595.     Ñ╗Ñ├Ñ╖ÑτÑ≤ñ╟ñ╬░┼╣µÑ╣Ññí╝Ñ╚ñ╬╝ΦñΩ╖Φñßñ╦╗╚ñ∩ñ∞ñ▐ñ╣íú</li>
  596.     <li><dfn>SSL ╖┘╣≡Ñ╫ÑφÑ╚Ñ│Ñδ</dfn>ñ╧
  597.     Ñ»ÑΘÑñÑóÑ≤Ñ╚Ñ╡í╝Ñ╨┤╓ñ╟ SSL Ñ¿ÑΘí╝ñ≥┼┴├úñ╣ñδñ╬ñ╦╗╚ñ∩ñ∞ñ▐ñ╣íú</li>
  598.     </ul>
  599.  
  600.     <p>╗░ñ─ñ╬Ñ╫ÑφÑ╚Ñ│Ñδñ╧íóÑóÑ╫ÑΩÑ▒í╝Ñ╖ÑτÑ≤Ñ╫ÑφÑ╚Ñ│ÑδÑ╟í╝Ñ┐ñ╚ñ╚ñΓñ╦íó
  601.     <a href="#figure2">┐▐2</a>ñ╦╝¿ñ╣ñ╚ñ¬ñΩ <dfn>SSL Ñ∞Ñ│í╝Ñ╔Ñ╫ÑφÑ╚Ñ│Ñδ</dfn>
  602.     ñ╟ѽÑ╫Ñ╗Ñδ▓╜ñ╡ñ∞ñ▐ñ╣íú
  603.     Ñ½Ñ╫Ñ╗Ñδ▓╜ñ╡ñ∞ñ┐Ñ╫ÑφÑ╚Ñ│Ñδñ╧Ñ╟í╝Ñ┐ñ≥╕í║║ñ╖ñ╩ññ
  604.     ▓╝┴╪ñ╬Ñ╫ÑφÑ╚Ñ│Ñδñ╦ñΦñ├ñ╞Ñ╟í╝Ñ┐ñ╚ñ╖ñ╞┼┴├úñ╡ñ∞ñ▐ñ╣íú
  605.     Ñ½Ñ╫Ñ╗Ñδ▓╜ñ╡ñ∞ñ┐Ñ╫ÑφÑ╚Ñ│Ñδñ╧▓╝┴╪ñ╬Ñ╫ÑφÑ╚Ñ│Ñδñ╦┤╪ñ╖ñ╞░∞└┌┤╪├╬ñ╖ñ▐ñ╗ñ≤íú</p>
  606.  
  607.     <p class="figure">
  608.     <img src="../images/ssl_intro_fig2.gif" alt="" width="428" height="217" /><br />
  609.     <a id="figure2" name="figure2"><dfn>┐▐2</dfn></a>: SSL Ñ╫ÑφÑ╚Ñ│ÑδÑ╣Ñ┐Ñ├Ñ»
  610.     </p>
  611.  
  612.     <p>
  613.     Ñ∞Ñ│í╝Ñ╔Ñ╫ÑφÑ╚Ñ│Ñδñ╦ñΦñδ SSL Ñ│Ñ≤Ñ╚Ñφí╝ÑδÑ╫ÑφÑ╚Ñ│Ñδñ╬ѽÑ╫Ñ╗Ñδ▓╜ñ╧íó
  614.     ÑóÑ»Ñ╞ÑúÑ╓ñ╩Ñ╗Ñ├Ñ╖ÑτÑ≤ñ╬╞≤▓≤╠▄ñ╬─╠┐«ñ¼ñóñ├ñ┐╛∞╣τíó
  615.     Ñ│Ñ≤Ñ╚Ñφí╝ÑδÑ╫ÑφÑ╚Ñ│Ñδñ¼░┬┴┤ñ╟ñóñδñ│ñ╚ñ≥░╒╠úñ╖ñ▐ñ╣íú
  616.     ┤√ñ╦Ñ╗Ñ├Ñ╖ÑτÑ≤ñ¼╠╡ññ╛∞╣τñ╧íóNull ░┼╣µÑ╣Ññí╝Ñ╚ñ¼╗╚ñ∩ñ∞íó
  617.     ░┼╣µ▓╜ñ╧╣╘ñ╩ñ∩ñ∞ñ║íóÑ╗Ñ├Ñ╖ÑτÑ≤ñ¼│╬╬⌐ñ╣ñδñ▐ñ╟ñ╧
  618.     Ñ└ÑñÑ╕ѺÑ╣Ñ╚ñΓ╠╡ññ╛⌡┬╓ñ╚ñ╩ñΩñ▐ñ╣íú</p>
  619.  
  620.  
  621. <h3><a name="datatransfer" id="datatransfer">Ñ╟í╝Ñ┐─╠┐«</a></h3>
  622.  
  623.     <p><a href="#figure3">┐▐3</a>ñ╦╝¿ñ╡ñ∞ñδ SSL Ñ∞Ñ│í╝Ñ╔Ñ╫ÑφÑ╚Ñ│Ñδ
  624.     ñ╧Ñ»ÑΘÑñÑóÑ≤Ñ╚ñ╚Ñ╡í╝Ñ╨┤╓ñ╬ÑóÑ╫ÑΩÑ▒í╝Ñ╖ÑτÑ≤ñΣ
  625.     SSL Ñ│Ñ≤Ñ╚Ñφí╝ÑδÑ╟í╝Ñ┐ñ╬─╠┐«ñ╦╗╚ñ∩ñ∞ñ▐ñ╣íú
  626.     ñ│ñ╬Ñ╟í╝Ñ┐ñ╧ñΦñΩ╛«ñ╡ññѵÑ╦Ñ├Ñ╚ñ╦╩¼ñ▒ñΘñ∞ñ┐ñΩíó
  627.     ñññ»ñ─ñ½ñ╬╣Γ╡ΘÑ╫ÑφÑ╚Ñ│Ñδñ≥ñ▐ñ╚ñßñ╞░∞ѵÑ╦Ñ├Ñ╚ñ╚ñ╖ñ╞─╠┐«ñ¼
  628.     ╣╘ñ╩ñ∩ñ∞ñδñ│ñ╚ñΓñóñΩñ▐ñ╣íú
  629.     Ñ╟í╝Ñ┐ñ≥░╡╜╠ñ╖íóÑ└ÑñÑ╕ѺÑ╣Ñ╚╜≡╠╛ñ≥┼║╔╒ñ╖ñ╞íó
  630.     ñ│ñ∞ñΘñ╬ѵÑ╦Ñ├Ñ╚ñ≥░┼╣µ▓╜ñ╖ñ┐ñ╬ñ┴íóÑ┘í╝Ñ╣ñ╚ñ╩ñ├ñ╞ñññδ
  631.     ┐«═Ω└¡ñ╬ñóñδÑ╚ÑΘÑ≤Ñ╣Ñ▌í╝Ñ╚Ñ╫ÑφÑ╚Ñ│Ñδñ≥═╤ñññδñ½ñΓñ╖ñ∞ñ▐ñ╗ñ≤íú
  632.     (├φ░╒: ╕╜║▀ÑßÑ╕Ñπí╝ñ╩ SLL ╝┬┴⌡ñ╟░╡╜╠ñ≥Ñ╡Ñ▌í╝Ñ╚ñ╖ñ╞ñññδñΓñ╬ñ╧ñóñΩñ▐ñ╗ñ≤)</p>
  633.  
  634.     <p class="figure">
  635.     <img src="../images/ssl_intro_fig3.gif" alt="" width="423" height="323" /><br />
  636.     <a id="figure3" name="figure3"><dfn>┐▐ 3</dfn></a>: SSL Ñ∞Ñ│í╝Ñ╔Ñ╫ÑφÑ╚Ñ│Ñδ
  637.     </p>
  638.  
  639.  
  640. <h3><a name="securehttp" id="securehttp">HTTP ─╠┐«ñ╬░┬┴┤▓╜</a></h3>
  641.  
  642.     <p>ñΦñ»ñóñδ SSL ñ╬╗╚ññ╩²ñ╧Ñ╓ÑΘѪÑ╢ñ╚ѪѺÑ╓Ñ╡í╝Ñ╨┤╓ñ╬ HTTP ─╠┐«
  643.     ñ╬░┬┴┤▓╜ñ╟ñ╣íú
  644.     ñ│ñ∞ñ╧íó╜╛═Φñ╬░┬┴┤ñ╟ñ╧ñ╩ññ HTTP ñ╬╗╚═╤ñ≥╜ⁿ│░ñ╣ñδñΓñ╬ñ╟ñ╧ñóñΩñ▐ñ╗ñ≤íú
  645.     ░┬┴┤▓╜ñ╡ñ∞ñ┐ñΓñ╬ñ╧╝τñ╦ SSH ╛σñ╬╔ß─╠ñ╬ HTTP ñ╟íóHTTPS ñ╚╕╞ñ╨ñ∞ñ▐ñ╣íú
  646.     ┬τñ¡ñ╩░πñññ╧íóURL Ñ╣Ñ¡í╝Ñαñ╦ <code>http</code> ñ╬┬σñ∩ñΩñ╦ <code>https</code>
  647.     ñ≥═╤ññíóÑ╡í╝Ñ╨ñ¼╩╠ñ╬Ñ▌í╝Ñ╚ñ≥╗╚ñªñ│ñ╚ñ╟ñ╣ (Ñ╟Ñ╒Ñ⌐ÑδÑ╚ñ╟ñ╧443)íú
  648.     ñ│ñ∞ñ¼╝τñ╦ <code class="module"><a href="../mod/mod_ssl.html">mod_ssl</a></code> ñ¼ Apache ÑªÑºÑ╓Ñ╡í╝Ñ╨ñ╦─≤╢íñ╣ñδ╡í╟╜ñ╟ñ╣íú</p>
  649.  
  650. </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
  651. <div class="section">
  652. <h2><a name="references" id="references">╗▓╣═╩╕╕Ñ</a></h2>
  653.  
  654. <dl>
  655. <dt><a id="AC96" name="AC96">[AC96]</a></dt>
  656. <dd>Bruce Schneier, <q>Applied Cryptography</q>, 2nd Edition, Wiley,
  657. 1996. See <a href="http://www.counterpane.com/">http://www.counterpane.com/</a> for various other materials by Bruce
  658. Schneier.</dd>
  659.  
  660. <dt><a id="X208" name="X208">[X208]</a></dt>
  661. <dd>ITU-T Recommendation X.208, <q>Specification of Abstract Syntax Notation
  662. One (ASN.1)</q>, 1988. See for instance <a href="http://www.itu.int/rec/recommendation.asp?type=items&lang=e&parent=T-REC-X.208-198811-I">http://www.itu.int/rec/recommendation.asp?type=items&lang=e&parent=T-REC-X.208-198811-I</a>.
  663. </dd>
  664.  
  665. <dt><a id="X509" name="X509">[X509]</a></dt>
  666. <dd>ITU-T Recommendation X.509, <q>The Directory - Authentication
  667. Framework</q>. See for instance <a href="http://www.itu.int/rec/recommendation.asp?type=folders&lang=e&parent=T-REC-X.509">http://www.itu.int/rec/recommendation.asp?type=folders&lang=e&parent=T-REC-X.509</a>.
  668. </dd>
  669.  
  670. <dt><a id="PKCS" name="PKCS">[PKCS]</a></dt>
  671. <dd><q>Public Key Cryptography Standards (PKCS)</q>, 
  672. RSA Laboratories Technical Notes, See <a href="http://www.rsasecurity.com/rsalabs/pkcs/">http://www.rsasecurity.com/rsalabs/pkcs/</a>.</dd>
  673.  
  674. <dt><a id="MIME" name="MIME">[MIME]</a></dt>
  675. <dd>N. Freed, N. Borenstein, <q>Multipurpose Internet Mail Extensions
  676. (MIME) Part One: Format of Internet Message Bodies</q>, RFC2045.
  677. See for instance <a href="http://ietf.org/rfc/rfc2045.txt">http://ietf.org/rfc/rfc2045.txt</a>.</dd>
  678.  
  679. <dt><a id="SSL2" name="SSL2">[SSL2]</a></dt>
  680. <dd>Kipp E.B. Hickman, <q>The SSL Protocol</q>, 1995. See <a href="http://www.netscape.com/eng/security/SSL_2.html">http://www.netscape.com/eng/security/SSL_2.html</a>.</dd>
  681.  
  682. <dt><a id="SSL3" name="SSL3">[SSL3]</a></dt>
  683. <dd>Alan O. Freier, Philip Karlton, Paul C. Kocher, <q>The SSL Protocol
  684. Version 3.0</q>, 1996. See <a href="http://www.netscape.com/eng/ssl3/draft302.txt">http://www.netscape.com/eng/ssl3/draft302.txt</a>.</dd>
  685.  
  686. <dt><a id="TLS1" name="TLS1">[TLS1]</a></dt>
  687. <dd>Tim Dierks, Christopher Allen, <q>The TLS Protocol Version 1.0</q>,
  688. 1999. See <a href="http://ietf.org/rfc/rfc2246.txt">http://ietf.org/rfc/rfc2246.txt</a>.</dd>
  689. </dl>
  690. </div></div>
  691. <div class="bottomlang">
  692. <p><span>Available Languages: </span><a href="../en/ssl/ssl_intro.html" hreflang="en" rel="alternate" title="English"> en </a> |
  693. <a href="../ja/ssl/ssl_intro.html" title="Japanese"> ja </a></p>
  694. </div><div id="footer">
  695. <p class="apache">Copyright 1995-2006 The Apache Software Foundation or its licensors, as applicable.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
  696. <p class="menu"><a href="../mod/">ÑΓÑ╕Ñσí╝Ñδ</a> | <a href="../mod/directives.html">Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">═╤╕∞</a> | <a href="../sitemap.html">Ñ╡ÑñÑ╚Ñ▐Ñ├Ñ╫</a></p></div>
  697. </body></html>