--- /dev/null
+<?xml version='1.0' encoding='iso-2022-jp' ?>
+<!DOCTYPE manualpage SYSTEM "../style/manualpage.dtd">
+<?xml-stylesheet type="text/xsl" href="../style/manual.ja.xsl"?>
+<manualpage metafile="ssl_intro.xml.meta">
+<parentdocument href="./">SSL/TLS</parentdocument>
+<!-- English revision: 1.7 -->
+
+ <title>SSL/TLS \e$B0E9f2=\e(B: \e$B$O$8$a$K\e(B</title>
+
+<summary>
+<blockquote>
+<p>\e$BI8=`5,3J$NNI$$=j$O!"$?$/$5$s$N5,3J$+$iA*$Y$k$H$$$&$3$H$@!#\e(B
+\e$B$=$7$F!"$b$7K\Ev$K$I$N5,3J$b5$$KF~$i$J$1$l$P!"\e(B
+\e$B0lG/BT$D$@$1$GC5$7$F$$$?5,3J$,8=$l$k!#\e(B</p>
+
+<p class="cite">-- <cite>A. Tanenbaum</cite>, "Introduction to
+Computer Networks"</p>
+</blockquote>
+
+<p>
+\e$BF~Lg$H$$$&$3$H$G!"$3$N>O$O\e(B Web\e$B!"\e(BHTTP\e$B!"\e(BApache \e$B$KDL$8$F$$$k\e(B
+\e$BFI<T8~$1$G$9$,!"%;%-%e%j%F%#@lLg2H8~$1$G$O$"$j$^$;$s!#\e(B
+SSL \e$B%W%m%H%3%k$N7hDjE*$J<j0z$-$G$"$k$D$b$j$O$"$j$^$;$s!#\e(B
+\e$B$^$?!"AH?%Fb$NG'>Z4IM}$N$?$a$NFCDj$N%F%/%K%C%/$d!"\e(B
+\e$BFC5v$dM"=P5,@)$J$I$N=EMW$JK!E*$JLdBj$K$D$$$F$b07$$$^$;$s!#\e(B
+\e$B$`$7$m!"99$J$k8&5f$X$N=PH/E@$H$7$F?'!9$J35G0!"Dj5A!"Nc$rJB$Y$k$3$H$G\e(B
+ mod_ssl \e$B$N%f!<%6$K4pACCN<1$rDs6!$9$k;v$rL\E*$H$7$F$$$^$9!#\e(B</p>
+
+<p>\e$B$3$3$K<($5$l$?FbMF$O<g$K!"86Cx<T$N5v2D$N2<\e(B
+The Open Group Research Institute
\e$B$N
\e(B <a
+href="http://home.earthlink.net/~fjhirsch/">Frederick J. Hirsch</a>
+href="http://home.earthlink.net/~fjhirsch/Papers/wwwj/article.html">
+Introducing SSL and Certificates using SSLeay</a> \e$B$r4p$K$7$F$$$^$9!#\e(B
+href="http://www.ora.com/catalog/wjsum97/">Web Security: A Matter of
+Trust</a>, World Wide Web Journal, Volume 2, Issue 3, Summer 1997
+\e$B$K7G:\$5$l$^$7$?!#\e(B
+
\e$B9NDjE*$J0U8+$O
\e(B <a
+href="mailto:hirsch@fjhirsch.com">Frederick Hirsch</a> \e$B;a\e(B
+ (
\e$B855-;v$NCx<T
\e(B)
\e$B$XA4$F$N6l>p$O
\e(B <a
+href="mailto:rse@engelschall.com">Ralf S. Engelschall</a> (
+<module>mod_ssl</module> \e$B$N:n<T\e(B) \e$B$X$*4j$$$7$^$9!#\e(B
+[
\e$BLuCm
\e(B:
\e$BLu$K$D$$$F$O
\e(B <a
+href="mailto:apache-docs@ml.apache.or.jp">
+Apache \e$B%I%-%e%a%s%HK]Lu%W%m%8%'%/%H\e(B</a>
+\e$B$X$*4j$$$7$^$9!#\e(B]</p>
+</summary>
+
+<section id="cryptographictech">
+<title>\e$B0E9f2=5;=Q\e(B</title>
+<p>SSL \e$B$rM}2r$9$k$K$O!"0E9f%"%k%4%j%:%`!"\e(B
+\e$B%a%C%;!<%8%@%$%8%'%9%H4X?t\e(B(\e$BJLL>\e(B: \e$B0lJ}8~4X?t!"%O%C%7%e4X?t\e(B)\e$B!"\e(B
+\e$BEE;R=pL>$J$I$X$NM}2r$,I,MW$G$9!#\e(B
+\e$B$3$l$i$N5;=Q$OK\$,4]$4$HI,MW$JBjL\$G\e(B
+(
\e$BNc$($P
\e(B [<a href="#AC96">AC96</a>]
\e$B$r;2>H
\e(B)
\e$B!"
\e(B
+\e$B%W%i%$%P%7!<!"?.MQ!"G'>Z$J$I$N5;=Q$N4pAC$H$J$C$F$$$^$9!#\e(B</p>
+
+<section id="cryptographicalgo">
+<title>\e$B0E9f%"%k%4%j%:%`\e(B</title>
+ <p>\e$BNc$($P!"%"%j%9$,Aw6b$N$?$a$K6d9T$K%a%C%;!<%8$rAw$j$?$$$H$7$^$9!#\e(B
+ \e$B8}:BHV9f$dAw6b$N6b3[$,4^$^$l$k$?$a!"\e(B
+ \e$B%"%j%9$O$=$N%a%C%;!<%8$rHkL)$K$7$?$$$H;W$$$^$9!#\e(B
+ \e$B2r7hJ}K!$N0l$D$O0E9f%"%k%4%j%:%`$r;H$C$F!"%a%C%;!<%8$r\e(B
+ \e$BFI$^$;$?$$?M0J30$OFI$`$3$H$,$G$-$J$$0E9f2=$5$l$?\e(B
+ \e$B7ABV$KJQ$($F$7$^$&$3$H$G$9!#\e(B
+ \e$B$=$N7ABV$K$J$k$H!"\e(B
+
\e$B%a%C%;!<%8$OHkL)$N80$K$h$C$F$N$_2r<a$9$k$3$H$,$G$-$^$9!#
\e(B
+ \e$B80$J$7$G$O!"%a%C%;!<%8$OLr$KN)$A$^$;$s!#\e(B
+ \e$BNI$$0E9f%"%k%4%j%:%`$O!"?/F~<T$,85$N%F%-%9%H$r2rFI$9$k$3$H$r\e(B
+ \e$BHs>o$KFq$7$/$9$k$?$a!"EXNO$,3d$K9g$o$J$/$5$;$^$9!#\e(B</p>
+
+ <p>\e$B0E9f%"%k%4%j%:%`$K$O\e(B
+ \e$B=>Mh7?$H8x3+80$NFs$D$N<oN`$,$"$j$^$9!#\e(B</p>
+
+ <dl>
+ <dt>\e$B=>Mh7?0E9f\e(B</dt>
+ <dd>\e$BBP>N0E9f$H$7$F$bCN$i$l!"\e(B
+ \e$BAw?.<T$H<u?.<T$,80$r6&M-$9$k$3$H$,I,MW$G$9!#\e(B
+ \e$B80$H$O!"%a%C%;!<%8$r0E9f2=$7$?$jI|9f$9$k$N$K;H$o$l$kHkL)\e(B
+ \e$B$N>pJs$N$3$H$G$9!#\e(B
+ \e$B$b$7!"$3$N80$,HkL)$J$i!"Aw?.<T$H<u?.<T0J30$OC/$b%a%C%;!<%8$rFI\e(B
+ \e$B$`$3$H$,$G$-$^$;$s!#\e(B
+ \e$B$b$7$b!"%"%j%9$H6d9T$,HkL)$N80$rCN$C$F$$$k$J$i!"\e(B
+ \e$BH`$i$O$*8_$$$KHkL)$N%a%C%;!<%8$rAw$k$3$H$,$G$-$k$G$7$g$&!#\e(B
+ \e$B$?$@$7!";vA0$KFbL)$K80$rA*$V$H$$$&;E;v$OLdBj$r4^$s$G$$$^$9!#\e(B</dd>
+
+ <dt>\e$B8x3+800E9f\e(B</dt>
+ <dd>\e$BHsBP>N0E9f$H$7$F$bCN$i$l!"\e(B
+ \e$B%a%C%;!<%8$r0E9f2=$9$k$3$H$N$G$-$kFs$D$N80\e(B
+ \e$B$r;HMQ$9$k%"%k%4%j%:%`$rDj5A$9$k$3$H$G80$N$d$j<h$j$NLdBj$r2r7h\e(B
+ \e$B$7$^$9!#\e(B
+ \e$B$b$7!"$"$k80$,0E9f2=$K;H$o$l$?$J$i!"\e(B
+ \e$B$b$&JRJ}$N80$GI|9f$7$J$1$l$P$$$1$^$;$s!#\e(B
+ \e$B$3$NJ}<0$K$h$C$F!"0l$D$N80$r8xI=$7$F\e(B(\e$B8x3+80\e(B)\e$B!"\e(B
+ \e$B$b$&JRJ}$rHkL)$K$7$F$*$/\e(B(\e$BHkL)80\e(B)\e$B$@$1$G!"\e(B
+ \e$B0BA4$J%a%C%;!<%8$r<u$1<h$k$3$H$,$G$-$^$9!#\e(B</dd>
+ </dl>
+
+ <p>\e$BC/$b$,0E9f2=$5$l$?%a%C%;!<%8$r8x3+80$K$h$C$F0E9f2=\e(B
+ \e$B$9$k$3$H$,$G$-$^$9$,!"HkL)80$N;}$A<g$@$1$,$=$l$rFI$`$3$H$,\e(B
+ \e$B$G$-$^$9!#\e(B
+ \e$B$3$NJ}K!$G!"6d9T$N8x3+80$r;H$C$F0E9f2=$9$k$3$H$G!"\e(B
+ \e$B%"%j%9$OHkL)$N%a%C%;!<%8$rAw$k$3$H$,$G$-$^$9!#\e(B
+ \e$B6d9T$N$_$,I|9f$9$k$3$H$,$G$-$^$9!#\e(B</p>
+</section>
+
+<section id="messagedigests">
+<title>\e$B%a%C%;!<%8%@%$%8%'%9%H\e(B</title>
+ <p>\e$B%"%j%9$O%a%C%;!<%8$rHkL)$K$9$k$3$H$,$G$-$^$9$,!"\e(B
+ \e$BC/$+$,Nc$($P<+J,$KAw6b$9$k$h$&$K%a%C%;!<%8$rJQ99$7$?$j!"\e(B
+ \e$BJL$N$b$N$KCV$-49$($F$7$^$&$+$b$7$l$J$$$H$$$&LdBj$,$"$j$^$9!#\e(B
+ \e$B%"%j%9$N%a%C%;!<%8$N?.MQ$rJ]>Z$9$kJ}K!$N0l$D$O!"\e(B
+ \e$B%a%C%;!<%8$N4J7i$J%@%$%8%'%9%H$r:n$C$F!"$=$l$b6d9T$KAw$k$H$$$&$b$N$G$9!#\e(B
+ \e$B%a%C%;!<%8$r<u$1<h$k$H6d9T$b%@%$%8%'%9%H$r:n@.$7!"\e(B
+ \e$B%"%j%9$,Aw$C$?$b$N$HHf$Y$^$9!#$b$70lCW$7$?$J$i!"\e(B
+ \e$B<u$1<h$C$?%a%C%;!<%8$OL5=}$@$H$$$&$3$H$K$J$j$^$9!#\e(B</p>
+
+ <p>\e$B$3$N$h$&$JMWLs$O\e(B<dfn>\e$B%a%C%;!<%8%@%$%8%'%9%H\e(B</dfn>\e$B!"\e(B
+ <em>\e$B0lJ}9T4X?t\e(B</em>\e$B!"$^$?$O\e(B<em>\e$B%O%C%7%e4X?t\e(B</em>\e$B$H8F$P$l$^$9!#\e(B
+ \e$B%a%C%;!<%8%@%$%8%'%9%H$OD9$$2DJQD9$N%a%C%;!<%8$+$i\e(B
+ \e$BC;$$8GDjD9$NI=8=$r:n$k$N$K;H$o$l$^$9!#\e(B
+ \e$B%@%$%8%'%9%H%"%k%4%j%:%`$O%a%C%;!<%8$+$i\e(B
+ \e$B0l0U$J%@%$%8%'%9%H$r@8@.$9$k$h$&$K:n$i$l$F$$$^$9!#\e(B
+ \e$B%a%C%;!<%8%@%$%8%'%9%H$O%@%$%8%'%9%H$+$i85$N%a%C%;!<%8$r\e(B
+ \e$BH=Dj$9$k$N$,$H$F$bFq$7$$$h$&$K$G$-$F$$$^$9!#\e(B
+ \e$B$^$?!"F1$8MWLs$r:n@.$9$kFs$D$N%a%C%;!<%8$rC5$9$N$OIT2DG=$G$9!#\e(B
+ \e$B$h$C$F!"F1$8MWLs$r;H$C$F%a%C%;!<%8$rCV$-49$($k$H$$$&\e(B
+ \e$B2DG=@-$rGS=|$7$F$$$^$9!#\e(B</p>
+
+<p>\e$B%"%j%9$X$N$b$&0l$D$NLdBj$O!"$3$N%@%$%8%'%9%H$r0BA4$KAw$kJ}K!$rC5$9$3$H$G$9!#\e(B
+\e$B$3$l$,$G$-$l$P!"%a%C%;!<%8$N?.MQ$,J]>Z$5$l$^$9!#\e(B
+\e$B0l$D$NJ}K!$O$3$N%@%$%8%'%9%H$KEE;R=pL>$r4^$`$3$H$G$9!#\e(B</p>
+</section>
+
+<section id="digitalsignatures"><title>\e$BEE;R=pL>\e(B</title>
+<p>\e$B%"%j%9$,6d9T$K%a%C%;!<%8$rAw$C$?$H$-!"6d9T$O!"\e(B
+\e$B?/F~<T$,H`=w$K$J$j$9$^$7$FH`=w$N8}:B$X$N<h0z$r?=@A$7$F$$$J$$$+!"\e(B
+\e$B%a%C%;!<%8$,K\Ev$KH`=w$+$i$N$b$N$+3N<B$KJ,$+$i$J$1$l$P$$$1$^$;$s!#\e(B
+\e$B%"%j%9$K$h$C$F:n@.$5$l!"%a%C%;!<%8$K4^$^$l$?\e(B
+<em>\e$BEE;R=pL>\e(B</em>\e$B$,$3$3$GLr$KN)$A$^$9!#\e(B</p>
+
+<p>\e$BEE;R=pL>$O%a%C%;!<%8$N%@%$%8%'%9%H$d$=$NB>$N>pJs\e(B(\e$B=hM}HV9f$J$I\e(B)\e$B$r\e(B
+\e$BAw?.<T$NHkL)80$G0E9f2=$9$k$3$H$G:n$i$l$^$9!#\e(B
+\e$BC/$b$,8x3+80$r;H$C$F=pL>$r\e(B<em>\e$BI|9f\e(B</em>\e$B$9$k$3$H$,$G$-$^$9$,!"\e(B
+\e$B=pL><T$N$_$,HkL)80$rCN$C$F$$$^$9!#\e(B
+\e$B$3$l$O!"H`$i$N$_$,=pL>$7$($?$3$H$r0UL#$7$^$9!#\e(B
+\e$B%@%$%8%'%9%H$rEE;R=pL>$K4^$`$3$H$O!"\e(B
+\e$B$=$N=pL>$,$=$N%a%C%;!<%8$N$_$KM-8z$G$"$k$3$H$r0UL#$7$^$9!#\e(B
+\e$B$3$l$O!"C/$b%@%$%8%'%9%H$rJQ$($F=pL>$r$9$k$3$H$,$G$-$J$$$?$a!"\e(B
+\e$B%a%C%;!<%8$N?.MQ$bJ]>Z$7$^$9!#\e(B</p>
+
+<p>\e$B?/F~<T$,=pL>$rK5<u$7$F8eF|$K:FMxMQ$9$k$N$rKI$0$?$a\e(B
+\e$BEE;R=pL>$K$O0l0U$J=hM}HV9f$,4^$^$l$^$9!#\e(B
+\e$B$3$l$O!"%"%j%9$,$=$s$J%a%C%;!<%8$OAw$C$F$$$J$$$H8@$&:>5=\e(B
+\e$B$+$i6d9T$r<i$j$^$9!#\e(B
+\e$BH`=w$@$1$,=pL>$7$($?$+$i$G$9!#\e(B(\e$BH]G'KI;_\e(B)</p>
+</section>
+</section>
+<!-- /cryptographictech -->
+
+<section id="certificates">
+<title>\e$B>ZL@=q\e(B</title>
+<p>\e$B%"%j%9$OHkL)$N%a%C%;!<%8$r6d9T$KAw$j!"\e(B
+\e$B=pL>$r$7$F!"%a%C%;!<%8$N?.MQ$rJ]>Z$9$k$3$H$,$G$-$k$*$&$K$J$j$^$7$?$,!"\e(B
+\e$BDL?.$7$F$$$kAj<j$,K\Ev$K6d9T$J$N$+3N$+$a$J$/$F$O$$$1$^$;$s!#\e(B
+\e$B$3$l$O!"H`=w$,;H$&8x3+80$,6d9T$NHkL)80$HBP$K$J$C$F$$$k$b$N$+!"\e(B
+\e$BH`=w$O3N$+$a$J$/$F$O$$$1$J$$$H$$$&$3$H$r0UL#$7$^$9!#\e(B
+\e$BF1MM$K!"6d9T$O%a%C%;!<%8$N=pL>$,K\Ev$K%"%j%9$N=pL>$+3NG'$9$kI,MW$,\e(B
+\e$B$"$j$^$9!#\e(B</p>
+
+<p>\e$B$b$7N><T$K?H85$r>ZL@$7!"8x3+80$r3NG'$7!"$^$??.Mj$5$l$?5!4X$,=pL>\e(B
+\e$B$7$?>ZL@=q$,$"$l$P!"N><T$H$bDL?.Aj<j$K$D$$$F@5$7$$Aj<j$@$H\e(B
+\e$B3N?.$9$k$3$H$,$G$-$^$9!#\e(B
+\e$B$=$N$h$&$J?.Mj$5$l$?5!4X$O\e(B<em>\e$BG'>Z6I\e(B</em>
+ (Certificate Authority \e$B$^$?$O\e(B CA) \e$B$H8F$P$l!"\e(B
+\e$B>ZL@=q\e(B (certificate) \e$B$,G'>Z\e(B (authentication) \e$B$K;H$o$l$^$9!#\e(B</p>
+
+<section id="certificatecontents">
+<title>\e$B>ZL@=q$NFbMF\e(B</title>
+ <p>\e$B>ZL@=q$O8x3+80$H8D?M!"%5!<%P!"$=$NB>$N<gBN$N<B:_$N?H85$r\e(B
+ \e$B4XO"IU$1$^$9!#\e(B
+ <a href="#table1">\e$BI=\e(B1</a>\e$B$K<($5$l$k$h$&$K>ZL@BP>]$N>pJs$O\e(B
+ \e$B?H85>ZL@$N>pJs\e(B(\e$B<1JLL>\e(B)\e$B$H8x3+80$,4^$^$l$^$9!#\e(B
+ \e$B>ZL@=q$O$^$?!"G'>Z6I$N?H85>ZL@$H=pL>!"$=$7$F>ZL@=q$NM-8z4|4V$r\e(B
+ \e$B4^$_$^$9!#\e(B
+ \e$B%7%j%"%k%J%s%P!<$J$I$NG'>Z6I$N4IM}>e$N>pJs$d\e(B
+ \e$B$=$NB>$NDI2C$N>pJs$,4^$^$l$F$$$k$+$b$7$l$^$;$s!#\e(B</p>
+
+ <section id="table1">
+ <title>\e$BI=\e(B1: \e$B>ZL@=q>pJs\e(B</title>
+ <table>
+ <columnspec><column width=".35"/><column width=".35"/>
+ </columnspec>
+ <tr><th>\e$B>ZL@BP>]\e(B</th>
+ <td>\e$B<1JLL>!"8x3+80\e(B</td></tr>
+ <tr><th>\e$BH/9T<T\e(B</th>
+ <td>\e$B<1JLL>!"8x3+80\e(B</td></tr>
+ <tr><th>\e$BM-8z4|4V\e(B</th>
+ <td>\e$B3+;OF|!"<:8zF|\e(B</td></tr>
+ <tr><th>\e$B4IM}>pJs\e(B</th>
+ <td>\e$B%P!<%8%g%s!"%7%j%"%k%J%s%P!<\e(B</td></tr>
+ <tr><th>\e$B3HD%>pJs\e(B</th>
+ <td>\e$B4pK\E*$J@)Ls!"%M%C%H%9%1!<%W%U%i%C%0!"$=$NB>\e(B</td></tr>
+ </table>
+ </section>
+
+ <p>\e$B<1JLL>\e(B(\e$B%G%#%9%F%#%s%0%$%C%7%e!&%M!<%`\e(B)\e$B$OFCDj$N>u67$K$*$1$k\e(B
+ \e$B?HJ,>ZL@$rDs6!$9$k$N$K;H$o$l$F$$$^$9!#Nc$($P!"$"$k?M$O\e(B
+ \e$B;dMQ$H2q<R$H$GJL!9$N?HJ,>ZL@$r;}$D$+$b$7$l$^$;$s!#\e(B
+
+
\e$B<1JLL>$O
\e(B X.509
\e$BI8=`5,3J
\e(B [<a
+ href="#X509">X509</a>] \e$B$GDj5A$5$l$F$$$^$9!#\e(B
+ X.509
\e$BI8=`5,3J$O!"9`L\!"9`L\L>!"$=$7$F9`L\$NN,>N$rDj5A$7$F$$$^$9!#
\e(B(<a href="#table2">
\e$BI=
\e(B
+ 2</a> \e$B;2>H\e(B)</p>
+
+ <section id="table2">
+ <title>\e$BI=\e(B 2: \e$B<1JLL>>pJs\e(B</title>
+ <table border="1">
+ <columnspec><column width=".25"/><column width=".15"/>
+ <column width=".3"/><column width=".25"/></columnspec>
+ <tr><th>\e$B<1JLL>9`L\\e(B</th>
+ <th>\e$BN,>N\e(B</th>
+ <th>\e$B@bL@\e(B</th>
+ <th>\e$BNc\e(B</th></tr>
+ <tr><td>Common Name (\e$B%3%b%s%M!<%`\e(B)</td>
+ <td>CN</td>
+ <td>\e$BG'>Z$5$l$kL>A0\e(B<br />
+ SSL\e$B@\B3$9$k\e(BURL</td>
+ <td>CN=www.example.com</td></tr>
+ <tr><td>Organization or Company (\e$BAH?%L>\e(B)</td>
+ <td>O</td>
+ <td>\e$BCDBN$N@5<01Q8lAH?%L>\e(B</td>
+ <td>O=Example Japan K.K.</td></tr>
+ <tr><td>Organizational Unit (\e$BItLgL>\e(B)</td>
+ <td>OU</td>
+ <td>\e$BIt=pL>$J$I\e(B</td>
+ <td>OU=Customer Service</td></tr>
+ <tr><td>City/Locality (\e$B;T6hD.B<\e(B)</td>
+ <td>L</td>
+ <td>\e$B=j:_$7$F$k;T6hD.B<\e(B</td>
+ <td>L=Sapporo</td></tr>
+ <tr><td>State/Province (\e$BETF;I\8)\e(B)</td>
+ <td>ST</td>
+ <td>\e$B=j:_$7$F$kETF;I\8)\e(B</td>
+ <td>ST=Hokkaido</td></tr>
+ <tr><td>Country(\e$B9q\e(B)</td>
+ <td>C</td>
+ <td>\e$B=j:_$7$F$$$k9qL>$N\e(B ISO \e$B%3!<%I\e(B<br />
+ \e$BF|K\$N>l9g\e(B JP
+ </td>
+ <td>C=JP</td></tr>
+ </table>
+ </section>
+
+ <p>\e$BG'>Z6I$O$I$N9`L\$,>JN,2DG=$G$I$l$,I,?\$+$NJ}?K$rDj5A$9$k\e(B
+ \e$B$+$b$7$l$^$;$s!#9`L\$NFbMF$K$D$$$F$bG'>Z6I$d>ZL@=q$N%f!<%6$+$i$N\e(B
+ \e$BMW7o$,$"$k$+$b$7$l$^$;$s!#\e(B
+ \e$BNc$($P!"%M%C%H%9%1!<%W$N%V%i%&%6$O%5!<%P$N>ZL@=q$N\e(B
+ Common Name (\e$B%3%b%s%M!<%`\e(B)\e$B$,%5!<%P$N%I%a%$%sL>$N\e(B
+ <code>*.example.com</code>
+ \e$B$H$$$&$h$&$J%o%$%k%I%+!<%I$N%Q%?!<%s$K%^%C%A$9$k$3$H\e(B
+ \e$B$rMW5a$7$^$9!#\e(B</p>
+
+ <p>\e$B%P%$%J%j7A<0$N>ZL@=q$O\e(B ASN.1 \e$BI=5-K!\e(B
+ [<a href="#X208">X208</a>] [<a href="#PKCS">PKCS</a>] \e$B$G\e(B
+ \e$BDj5A$5$l$F$$$^$9!#\e(B
+ \e$B$3$NI=5-K!$OFbMF$r$I$N$h$&$K5-=R$9$k$+$rDj5A$7!"\e(B
+ \e$BId9f2=$N5,Dj$,$3$N>pJs$,$I$N$h$&$K%P%$%J%j7A<0$KJQ49$5$l$k$+$r\e(B
+ \e$BDj5A$7$^$9!#\e(B
+ \e$B>ZL@=q$N%P%$%J%jId9f2=$O\e(B Distinguished Encoding
+ Rules (DER) \e$B$GDj5A$5$l!"$=$l$O$h$j0lHLE*$J\e(B Basic Encoding Rules
+ (BER) \e$B$K4p$E$$$F$$$^$9!#\e(B
+ \e$B%P%$%J%j7A<0$r07$&$3$H$N$G$-$J$$Aw?.$G$O!"\e(B
+
\e$B%P%$%J%j7A<0$O
\e(B Base64
\e$BId9f2=
\e(B [<a href="#MIME">MIME</a>]
\e$B$G
\e(B
+ ASCII \e$B7A<0$KJQ49$5$l$k$3$H$,$"$j$^$9!#\e(B
+ \e$B$3$N$h$&$KId9f2=$5$l!"0J2<$NNc$K<($5$l$k$h$&$K6h@Z$j9T$K\e(B
+ \e$B64$^$l$?$b$N$O\e(B PEM \e$BId9f2=$5$l$?$H8@$$$^$9!#\e(B
+ (PEM \e$B$NL>A0$O\e(B "Privacy Enhanced Mail" \e$B$KM3Mh$7$^$9\e(B)</p>
+
+ <example>
+ <title>PEM \e$BId9f2=$5$l$?>ZL@=q$NNc\e(B (example.crt)</title>
+ <pre>-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----</pre>
+ </example>
+</section>
+
+<section id="certificateauthorities">
+<title>\e$BG'>Z6I\e(B</title>
+ <p>\e$B$^$:>ZL@=q$N?=@A$N>pJs$r3NG'$9$k$3$H$G!"\e(B
+ \e$BG'>Z6I$OHkL)80$N;}$A<g$N?H85$rJ]>Z$7$^$9!#\e(B
+ \e$BNc$($P!"%"%j%9$,8D?M>ZL@=q$r?=@A$7$?$H$9$k$H!"\e(B
+ \e$BG'>Z6I$O%"%j%9$,>ZL@=q$N?=@A$,<gD%$9$kDL$j$N\e(B
+ \e$B?MJ*$@$H$$$&$3$H$r3NG'$7$J$/$F$O$$$1$^$;$s!#\e(B</p>
+
+ <section id="certificatechains">
+ <title>\e$B>ZL@=q3,AX9=B$\e(B</title>
+ <p>\e$BG'>Z6I$OB>$NG'>Z6I$X$N>ZL@=q$rH/9T$9$k$3$H$,$G$-$^$9!#\e(B
+ \e$BL$CN$N>ZL@=q$rD4$Y$k;~$K!"%"%j%9$O$=$N>ZL@=q$NH/9T<T\e(B
+ \e$B$K<+?.$,;}$F$k$^$G!"H/9T<T$N>ZL@=q$r\e(B
+ \e$B$=$N>e0L3,AX$NG'>Z6I$r$?$I$C$FD4$Y$kI,MW$,$"$j$^$9!#\e(B
+
\e$B!V0-<A$J!W>ZL@=q$N4m81@-$r8:$i$9$?$a!"
\e(B
+ \e$BH`=w$O8B$i$l$?O":?$NH/9T<T$N$_?.Mj$9$k$h$&$K\e(B
+ \e$B7h$a$k$3$H$b$G$-$^$9!#\e(B</p>
+ </section>
+
+ <section id="rootlevelca">
+ <title>\e$B:G>e0LG'>Z6I$N:n@.\e(B</title>
+ <p>\e$BA0$K=R$Y$?$h$&$K!"A4$F$N>ZL@=q$K$D$$$F!"\e(B
+ \e$B:G>e0L$NG'>Z6I\e(B(CA)\e$B$^$G$=$l$>$l$NH/9T<T$,\e(B
+ \e$BBP>]$N?H85>ZL@$NM-8z@-$rL@$i$+$K$9$kI,MW$,$"$j$^$9!#\e(B
+ \e$BLdBj$O!"C/$,$=$N:G>e0L$NG'>Z5!4X$N>ZL@=q$rJ]>Z$9$k$N$+!"\e(B
+ \e$B$H$$$&$3$H$G$9!#\e(B
+ \e$B$3$N$h$&$J>l9g$K8B$j!">ZL@=q$O!V<+8J=pL>!W$5$l$^$9!#\e(B
+ \e$B$D$^$j!">ZL@=q$NH/9T<T$H>ZL@BP>]$,F1$8$H$$$&$3$H$K$J$j$^$9!#\e(B
+ \e$B$=$N7k2L!"<+8J=pL>$5$l$?>ZL@=q$r?.MQ$9$k$K$O\e(B
+ \e$B:Y?4$NCm0U$,I,MW$G$9!#\e(B
+ \e$B:G>e0LG'>Z6I$,8x3+80$r9-$/8xI=$9$k$3$H$G!"\e(B
+ \e$B$=$N80$r?.Mj$9$k%j%9%/$rDc$/$9$k$3$H$,$G$-$^$9!#\e(B
+ \e$B$b$7!"B>?M$,$=$NG'>Z6I$K$J$j$9$^$7$?;~$K!"$=$l$,O*8+$7$d\e(B
+ \e$B$9$$$+$i$G$9!#\e(B
+ \e$BB?$/$N%V%i%&%6$OM-L>$JG'>Z6I$r?.Mj$9$k$h$&$K\e(B
+ \e$B@_Dj$5$l$F$$$^$9!#\e(B</p>
+
+ <p><a href="http://www.thawte.com/">Thawte</a>
+
\e$B$d
\e(B <a href="http://www.verisign.com/">VeriSign</a>
+ \e$B$N$h$&$JB?$/$N2q<R$,G'>Z6I$H$7$F3+@_$7$^$7$?!#\e(B
+ \e$B$3$N$h$&$J2q<R$O0J2<$N%5!<%S%9$rDs6!$7$^$9\e(B:</p>
+
+ <ul>
+ <li>\e$B>ZL@=q?=@A$N3NG'\e(B</li>
+ <li>\e$B>ZL@=q?=@A$N=hM}\e(B</li>
+ <li>\e$B>ZL@=q$NH/9T$H4IM}\e(B</li>
+ </ul>
+
+ <p>\e$B<+J,$GG'>Z6I$r:n$k$3$H$b2DG=$G$9!#\e(B
+ \e$B%$%s%?!<%M%C%H4D6-$G$O4m81$G$9$,!"\e(B
+ \e$B8D?M$d%5!<%P$N?H85>ZL@$,4JC1$K9T$($kAH?%$N\e(B
+ \e$B%$%s%H%i%M%C%HFb$G$OLr$KN)$D$+$b$7$l$^$;$s!#\e(B</p>
+ </section>
+
+ <section id="certificatemanagement">
+ <title>\e$B>ZL@=q4IM}\e(B</title>
+ <p>\e$BG'>Z6I$N3+@_$OE0Dl$7$?4IM}!"5;=Q!"1?MQ$NBN@)$rI,MW$H$9$k\e(B
+ \e$B@UG$$N$"$k;E;v$G$9!#\e(B
+ \e$BG'>Z6I$O>ZL@=q$rH/9T$9$k$@$1$G$J$/!"\e(B
+ \e$B4IM}$b$7$J$1$l$P$J$j$^$;$s!#\e(B
+ \e$B6qBNE*$K$O!">ZL@=q$,$$$D$^$GM-8z$+$r7hDj$7!"99?7$7!"\e(B
+ \e$B$^$?4{$KH/9T$5$l$?$,<:8z$7$?>ZL@=q$N%j%9%H\e(B
+ (Certificate Revocation Lists \e$B$^$?$O\e(B CRL)
+ \e$B$r4IM}$7$J$1$l$P$$$1$^$;$s!#\e(B
+ \e$BNc$($P!"%"%j%9$,2q<R$+$i<R0w$H$7$F>ZL@=q$rM?$($i$l$?$H$7$^$9!#\e(B
+ \e$B$=$7$F!"%"%j%9$,2q<R$r<-$a$k$H$-$K$O>ZL@=q$r<h$j>C$5$J$1$l$P\e(B
+ \e$B$$$1$J$$$H$7$^$9!#\e(B
+ \e$B>ZL@=q$O<!!9$H?M$KEO$5$l$F$$$/$b$N$J$N$G!"\e(B
+ \e$B>ZL@=q$=$N$b$N$+$i!"$=$l$,<h$j>C$5$l$?$+H=CG$9$k$3$H$O\e(B
+ \e$BIT2DG=$G$9!#\e(B
+ \e$B$h$C$F!">ZL@=q$NM-8z@-$rD4$Y$k$H$-$K$O!"\e(B
+ \e$BG'>Z6I$KO"Mm$7$F\e(B CRL \e$B$r>H9g$9$kI,MW$,$"$j$^$9!#\e(B
+ \e$BIaDL$3$N2aDx$O<+F02=$5$l$F$$$k$b$N$G$O$"$j$^$;$s!#\e(B</p>
+
+ <note><title>\e$BCm0U\e(B</title>
+ <p>\e$B%G%U%)%k%H$G%V%i%&%6$K@_Dj$5$l$F$$$J$$G'>Z6I$r;H$C$?>l9g!"\e(B
+ \e$BG'>Z6I$N>ZL@=q$r%V%i%&%6$KFI$_9~$s$G!"\e(B
+ \e$B%V%i%&%6$,$=$NG'>Z6I$K$h$C$F=pL>$5$l$?%5!<%P$N>ZL@=q$r\e(B
+ \e$BM-8z2=$9$kI,MW$,$"$j$^$9!#\e(B
+ \e$B0lEYFI$_9~$^$l$k$H!"$=$NG'>Z6I$K$h$C$F=pL>$5$l$?A4$F$N\e(B
+ \e$B>ZL@=q$r<u$1F~$l$k$?$a!"4m81$rH<$$$^$9!#\e(B</p>
+ </note>
+ </section>
+</section>
+<!-- /certificateauthorities -->
+</section>
+<!-- /certificates -->
+
+<section id="ssl">
+<title>Secure Sockets Layer (SSL)</title>
+<p>Secure Sockets Layer \e$B%W%m%H%3%k$O?.Mj@-$N$"$k%3%M%/%7%g%s7?$N\e(B
+\e$B%M%C%H%o!<%/AX$N%W%m%H%3%k\e(B(\e$BNc$($P!"\e(BTCP/IP)\e$B$H\e(B
+\e$B%"%W%j%1!<%7%g%sAX$N%W%m%H%3%k\e(B(\e$BNc$($P!"\e(BHTTP)
+\e$B$N4V$KCV$/$3$H$,$G$-$^$9!#\e(B
+SSL \e$B$O!"Aj8_G'>Z$K$h$C$F%5!<%P$H%/%i%$%"%s%H4V$N0BA4$JDL?.$r!"\e(B
+\e$BEE;R=pL>$K$h$C$F%G!<%?$N40A4@-$r!"\e(B
+\e$B$=$7$F0E9f2=$K$h$C$F%W%i%$%P%7$rDs6!$7$^$9!#\e(B</p>
+
+<p>SSL \e$B%W%m%H%3%k$O0E9f2=!"%@%$%8%'%9%H!"EE;R=pL>$K$D$$$F!"\e(B
+\e$BMM!9$J%"%k%4%j%:%`$r%5%]!<%H$9$k$h$&$K$G$-$F$$$^$9!#\e(B
+\e$B$3$&$9$k$3$H$G!"K!$dM"=P$N5,@)$r9MN8$KF~$l$F!"%5!<%P$K9g$o$;$?\e(B
+\e$B%"%k%4%j%:%`$rA*$V$3$H$,$G$-!"$^$?!"?7$7$$%"%k%4%j%:%`$r\e(B
+\e$BMxMQ$7$F$$$/$3$H$b2DG=$K$7$F$$$^$9!#\e(B
+\e$B%"%k%4%j%:%`$NA*Br$O%W%m%H%3%k%;%C%7%g%s3+;O;~$K\e(B
+\e$B%5!<%P$H%/%i%$%"%s%H4V$G<h$j7h$a$i$l$^$9!#\e(B</p>
+
+<section id="table4">
+<title>\e$BI=\e(B4: SSL \e$B%W%m%H%3%k$N%P!<%8%g%s\e(B</title>
+ <table border="1">
+ <columnspec><column width=".15"/><column width=".2"/>
+ <column width=".30"/><column width=".25"/></columnspec>
+ <tr><th>\e$B%P!<%8%g%s\e(B</th>
+ <th>\e$B=PE5\e(B</th>
+ <th>\e$B@bL@\e(B</th>
+ <th>\e$B%V%i%&%6$N%5%]!<%H\e(B</th></tr>
+ <tr><td>SSL v2.0</td>
+ <td>Vendor Standard (Netscape Corp.
\e$B$h$j
\e(B) [<a href="#SSL2"
+ >SSL2</a>]</td>
+ <td>\e$B<BAu$,8=B8$9$k=i$a$F$N\e(B SSL \e$B%W%m%H%3%k\e(B</td>
+ <td>- NS Navigator 1.x/2.x<br />
+ - MS IE 3.x<br />
+ - Lynx/2.8+OpenSSL</td></tr>
+ <tr><td>SSL v3.0</td>
+ <td>Expired Internet Draft (Netscape Corp.
\e$B$h$j
\e(B) [<a href="#SSL3"
+ >SSL3</a>]</td>
+ <td>\e$BFCDj$N%;%-%e%j%F%#967b$rKI$0$?$a$N2~D{!"\e(B
+ \e$BHs\e(BRSA \e$B0E9f$NDI2C!">ZL@=q3,AX9=B$$N%5%]!<%H\e(B</td>
+ <td>- NS Navigator 2.x/3.x/4.x<br />
+ - MS IE 3.x/4.x<br />
+ - Lynx/2.8+OpenSSL</td></tr>
+ <tr><td>TLS v1.0</td>
+ <td>Proposed Internet Standard (IETF
\e$B$h$j
\e(B) [<a href="#TLS1"
+ >TLS1</a>]</td>
+ <td>MAC \e$B%l%$%d$r\e(B HMAC \e$B$X99?7!"%V%m%C%/0E9f$N\e(B block
+ padding\e$B!"%a%C%;!<%8=g=x$NI8=`2=!"7Y9pJ8$N=<<B$J$I$N$?$a\e(B
+ SSL 3.0 \e$B$r2~D{!#\e(B</td>
+ <td>- Lynx/2.8+OpenSSL</td></tr>
+ </table>
+</section>
+
+<p><a href="#table4">\e$BI=\e(B4</a>\e$B$K<($5$l$k$H$*$j!"\e(BSSL \e$B%W%m%H%3%k$K$O\e(B
+\e$B$$$/$D$b$N%P!<%8%g%s$,$"$j$^$9!#\e(B
+\e$BI=$K$b=q$+$l$F$$$k$h$&$K!"\e(BSSL 3.0 \e$B$NMxE@$N0l$D$O\e(B
+\e$B>ZL@=q3,AX9=B$$r%5%]!<%H$9$k$3$H$G$9!#\e(B
+\e$B$3$N5!G=$K$h$C$F!"%5!<%P$O<+J,$N>ZL@=q$K2C$($F!"\e(B
+\e$BH/9T<T$N>ZL@=q$r%V%i%&%6$KEO$9$3$H$,$G$-$^$9!#\e(B
+\e$B>ZL@=q3,AX9=B$$K$h$C$F!"\e(B
+\e$B%V%i%&%6$KH/9T<T$N>ZL@=q$,D>@\EPO?$5$l$F$$$J$/$F$b!"\e(B
+\e$B3,AX$NCf$K4^$^$l$F$$$l$P!"\e(B
+\e$B%V%i%&%6$O%5!<%P$N>ZL@=q$rM-8z2=$9$k$3$H$,$G$-$^$9!#\e(B
+SSL 3.0 \e$B$O8=:_\e(B Internet Engineering Task Force (IETF)
+\e$B$K$h$C$F3+H/$5$l$F$$$k\e(B Transport Layer Security
+[<a href="#TLS1">TLS</a>] \e$B%W%m%H%3%kI8=`5,3J$N4pAC$H$J$C$F$$$^$9!#\e(B</p>
+
+<section id="session">
+<title>\e$B%;%C%7%g%s$N3NN)\e(B</title>
+ <p><a href="#figure1">\e$B?^\e(B1</a>\e$B$G<($5$l$k$h$&$K!"\e(B
+ \e$B%;%C%7%g%s$N3NN)$O%/%i%$%"%s%H$H%5!<%P4V$N\e(B
+ \e$B%O%s%I%7%'!<%/%7!<%/%(%s%9$K$h$C$F9T$J$o$l$^$9!#\e(B
+ \e$B%5!<%P$,>ZL@=q$rDs6!$9$k$+!"%/%i%$%"%s%H$N>ZL@=q$r%j%/%(%9%H$9$k$+\e(B
+ \e$B$H$$$&%5!<%P$N@_Dj$K$h$j!"$3$N%7!<%/%(%s%9$O0[$J$k$b$N$H$J$j$^$9!#\e(B
+ \e$B0E9f>pJs$N4IM}$N$?$a$K!"DI2C$N%O%s%I%7%'!<%/2aDx$,I,MW$K$J$k\e(B
+ \e$B>l9g$b$"$j$^$9$,!"$3$N5-;v$G$O\e(B
+ \e$B$h$/$"$k%7%J%j%*$r<jC;$K@bL@$7$^$9!#\e(B
+ \e$BA4$F$N2DG=@-$K$D$$$O!"\e(BSSL \e$B;EMM=q$r;2>H$7$F$/$@$5$$!#\e(B</p>
+
+ <note><title>\e$BCm0U\e(B</title>
+ <p>\e$B0lEY\e(B SSL \e$B%;%C%7%g%s$,3NN)$9$k$H!"%;%C%7%g%s$r:FMxMQ$9$k$3$H$G!"\e(B
+ \e$B%;%C%7%g%s$r3+;O$9$k$?$a$NB?$/$N2aDx$r7+$jJV$9$H$$$&\e(B
+ \e$B%Q%U%)!<%^%s%9$NB;<:$rKI$.$^$9!#\e(B
+ \e$B$=$N$?$a!"%5!<%P$OA4$F$N%;%C%7%g%s$K0l0U$J%;%C%7%g%s<1JLL>$r\e(B
+ \e$B3d$jEv$F!"%5!<%P$K%-%c%C%7%e$7!"%/%i%$%"%s%H$O<!2s$+$i\e(B
+ (\e$B<1JLL>$,%5!<%P$N%-%c%C%7%e$G4|8B@Z$l$K$J$k$^$G$O\e(B)
+ \e$B%O%s%I%7%'!<%/$J$7$G@\B3$9$k$3$H$,$G$-$^$9!#\e(B</p>
+ </note>
+
+ <p class="figure">
+ <img
+ src="ssl_intro_fig1.gif" alt="" width="423" height="327" /><br />
+ <a id="figure1" name="figure1"><dfn>\e$B?^\e(B1</dfn></a>: SSL
+ \e$B%O%s%I%7%'!<%/%7!<%/%(%s%935N,\e(B</p>
+
+ <p>\e$B%5!<%P$H%/%i%$%"%s%H$G;H$o$l$k\e(B
+ \e$B%O%s%I%7%'!<%/%7!<%/%(%s%9$NMWAG$r0J2<$K<($7$^$9\e(B:</p>
+
+ <ol>
+ <li>\e$B%G!<%?DL?.$K;H$o$l$k0E9f%9%$!<%H$N<h$j7h$a\e(B</li>
+ <li>\e$B%/%i%$%"%s%H$H%5!<%P4V$G$N%;%C%7%g%s80$N3NN)$H6&M-\e(B</li>
+ <li>\e$B%*%W%7%g%s$H$7$F!"%/%i%$%"%s%H$KBP$9$k%5!<%P$NG'>Z\e(B</li>
+ <li>\e$B%*%W%7%g%s$H$7$F!"%5!<%P$KBP$9$k%/%i%$%"%s%H$NG'>Z\e(B</li>
+ </ol>
+
+ <p>\e$BBh0l%9%F%C%W$N0E9f%9%$!<%H<h$j7h$a$K$h$C$F!"\e(B
+ \e$B%5!<%P$H%/%i%$%"%s%H$O$=$l$>$l$K$"$C$?\e(B
+ \e$B0E9f%9%$!<%H$rA*$V$3$H$,$G$-$^$9!#\e(B
+ SSL3.0 \e$B%W%m%H%3%k$N;EMM=q$O\e(B 31 \e$B$N0E9f%9%$!<%H$rDj5A$7$F$$$^$9!#\e(B
+ \e$B0E9f%9%$!<%H$O0J2<$N%3%s%]!<%M%s%H$K$h$jDj5A$5$l$F$$$^$9\e(B:</p>
+
+ <ul>
+ <li>\e$B80$N8r49<jCJ\e(B</li>
+ <li>\e$B%G!<%?DL?.$N0E9f=Q\e(B</li>
+ <li>Message Authentication Code (MAC) \e$B:n@.$N$?$a$N\e(B
+ \e$B%a%C%;!<%8%@%$%8%'%9%H\e(B</li>
+ </ul>
+
+ <p>\e$B$3$l$i$N;0$D$NMWAG$O0J2<$N%;%/%7%g%s$G@bL@$5$l$F$$$^$9!#\e(B</p>
+</section>
+
+<section id="keyexchange">
+<title>\e$B80$N8r49<jCJ\e(B</title>
+ <p>\e$B80$N8r49<jCJ$O%"%W%j%1!<%7%g%s$N%G!<%?DL?.$K;H$o$l!"\e(B
+ \e$B6&M-$5$l$kBP>N0E9f80$r$I$N$h$&$K$,%/%i%$%"%s%H$H%5!<%P$G\e(B
+ \e$B<h$j7h$a$k$+$rDj5A$7$^$9!#\e(B
+ SSL 2.0 \e$B$O\e(B RSA \e$B808r49$7$+;H$$$^$;$s$,!"\e(B
+ SSL 3.0 \e$B$O>ZL@=q$,;H$o$l$k$H$-$O\e(B RSA \e$B808r49$r;H$$!"\e(B
+ \e$B>ZL@=q$,L5$/!"%/%i%$%"%s%H$H%5!<%P$N;vA0$NDL?.$,L5$$>l9g$O\e(B
+ Diffie-Hellman \e$B808r49$r;H$&\e(B
+ \e$B$J$IMM!9$J808r49%"%k%4%j%:%`$r%5%]!<%H$7$^$9!#\e(B</p>
+
+ <p>\e$B80$N8r49J}K!$K$*$1$k0l$D$NA*Br;h$OEE;R=pL>$G$9!#\e(B
+ \e$BEE;R=pL>$r;H$&$+$I$&$+!"$^$?!"\e(B
+ \e$B$I$N<oN`$N=pL>$r;H$&$+$H$$$&A*Br$,$"$j$^$9!#\e(B
+ \e$BHkL)80$G=pL>$9$k$3$H$G6&M-80$r@8@.$9$7!">pJs8r49$9$k;~$N\e(B
+ \e$B%^%s!&%$%s!&%6!&%_%I%k967b$rKI$0$3$H$,$G$-$^$9!#\e(B
+ [<a href="#AC96">AC96</a>, p516]</p>
+</section>
+
+<section id="ciphertransfer">
+<title>\e$B%G!<%?DL?.$N0E9f=Q\e(B</title>
+ <p>SSL \e$B$O%;%C%7%g%s$N%a%C%;!<%8$N0E9f2=$KA0=R$7$?\e(B
+ \e$B=>Mh7?0E9f\e(B(\e$BBP>N0E9f\e(B)\e$B$rMQ$$$^$9!#\e(B
+ \e$B0E9f2=$7$J$$$H$$$&A*Br;h$b4^$a6e$D$NA*Br;h$,$"$j$^$9\e(B:</p>
+
+ <ul>
+ <li>\e$B0E9f2=$J$7\e(B</li>
+ <li>\e$B%9%H%j!<%`0E9f\e(B
+ <ul>
+ <li>40-bit \e$B80$G$N\e(B RC4</li>
+ <li>128-bit \e$B80$G$N\e(B RC4</li>
+ </ul></li>
+ <li>CBC \e$B%V%m%C%/0E9f\e(B
+ <ul><li>40 bit \e$B80$G$N\e(B RC2</li>
+ <li>40 bit \e$B80$G$N\e(B DES</li>
+ <li>56 bit \e$B80$G$N\e(B DES</li>
+ <li>168 bit \e$B80$G$N\e(B Triple-DES</li>
+ <li>Idea (128 bit \e$B80\e(B)</li>
+ <li>Fortezza (96 bit \e$B80\e(B)</li>
+ </ul></li>
+ </ul>
+
+ <p>\e$B$3$3$G$N\e(B CBC \e$B$H$O0E9f%V%m%C%/O":?\e(B (Cipher Block Chaining)
+ \e$B$NN,$G!"0l$DA0$N0E9f2=$5$l$?0E9fJ8$N0lIt$,\e(B
+ \e$B%V%m%C%/$N0E9f2=$K;H$o$l$k$3$H$r0UL#$7$^$9!#\e(B
+ DES \e$B$O%G!<%?0E9f2=I8=`5,3J\e(B (Data Encryption Standard)
+ [<a href="#AC96">AC96</a>, ch12] \e$B$NN,$G!"\e(B
+ DES40 \e$B$d\e(B 3DES_EDE \e$B$r4^$`$$$/$D$b$N<oN`$,$"$j$^$9!#\e(B
+ Idea \e$B$O:G9b$J$b$N$N0l$D$G!"0E9f=QE*$K$O8=:_$"$kCf$G\e(B
+ \e$B:G$b6/NO$J$b$N$G$9!#\e(B
+ RC2 \e$B$O\e(B RSA DSI \e$B$K$h$kFH@jE*$J%"%k%4%j%:%`$G$9!#\e(B
+ [<a href="#AC96">AC96</a>,
+ ch13]</p>
+</section>
+
+<section id="digestfuntion">
+<title>\e$B%@%$%8%'%9%H4X?t\e(B</title>
+ <p>
+ \e$B%@%$%8%'%9%H4X?t$NA*Br$O%l%3!<%I%f%K%C%H$+$i$I$N$h$&$K%@%$%8%'%9%H$,@8@.$5$l$k$+$r7hDj$7$^$9!#\e(B
+ SSL \e$B$O0J2<$r%5%]!<%H$7$^$9\e(B:</p>
+
+ <ul>
+ <li>\e$B%@%$%8%'%9%H$J$7\e(B</li>
+ <li>MD5 (128-bit \e$B%O%C%7%e\e(B)</li>
+ <li>Secure Hash Algorithm (SHA-1) (160-bit \e$B%O%C%7%e\e(B)</li>
+ </ul>
+
+ <p>\e$B%a%C%;!<%8%@%$%8%'%9%H$O\e(B Message Authentication Code (MAC)
+ \e$B$N@8@.$K;H$o$l!"%a%C%;!<%8$H6&$K0E9f2=$5$l!"%a%C%;!<%8$N?.MQ$r\e(B
+ \e$BDs6!$7!"%j%W%l%$967b$rKI$.$^$9!#\e(B</p>
+</section>
+
+<section id="handshake">
+<title>\e$B%O%s%I%7%'!<%/%7!<%/%(%s%9%W%m%H%3%k\e(B</title>
+ <p>\e$B%O%s%I%7%'!<%/%7!<%/%(%s%9$O;0$D$N%W%m%H%3%k$r;H$$$^$9\e(B:</p>
+
+ <ul>
+ <li><dfn>SSL \e$B%O%s%I%7%'!<%/%W%m%H%3%k\e(B</dfn>\e$B$O\e(B
+ \e$B%/%i%$%"%s%H$H%5!<%P4V$G$N\e(B SSL \e$B%;%C%7%g%s$N3NN)$K;H$o$l$^$9!#\e(B</li>
+ <li><dfn>SSL \e$B0E9f;EMMJQ99%W%m%H%3%k\e(B</dfn>\e$B$O\e(B
+ \e$B%;%C%7%g%s$G$N0E9f%9%$!<%H$N<h$j7h$a$K;H$o$l$^$9!#\e(B</li>
+ <li><dfn>SSL \e$B7Y9p%W%m%H%3%k\e(B</dfn>\e$B$O\e(B
+ \e$B%/%i%$%"%s%H%5!<%P4V$G\e(B SSL \e$B%(%i!<$rEAC#$9$k$N$K;H$o$l$^$9!#\e(B</li>
+ </ul>
+
+ <p>\e$B;0$D$N%W%m%H%3%k$O!"%"%W%j%1!<%7%g%s%W%m%H%3%k%G!<%?$H$H$b$K!"\e(B
+ <a href="#figure2">\e$B?^\e(B2</a>\e$B$K<($9$H$*$j\e(B <dfn>SSL \e$B%l%3!<%I%W%m%H%3%k\e(B</dfn>
+ \e$B$G%+%W%;%k2=$5$l$^$9!#\e(B
+ \e$B%+%W%;%k2=$5$l$?%W%m%H%3%k$O%G!<%?$r8!::$7$J$$\e(B
+
\e$B2<AX$N%W%m%H%3%k$K$h$C$F%G!<%?$H$7$FEAC#$5$l$^$9!#
\e(B
+
\e$B%+%W%;%k2=$5$l$?%W%m%H%3%k$O2<AX$N%W%m%H%3%k$K4X$7$F0l@Z4XCN$7$^$;$s!#
\e(B</p>
+
+ <p class="figure">
+ <img src="ssl_intro_fig2.gif" alt="" width="428" height="217" /><br />
+ <a id="figure2" name="figure2"><dfn>\e$B?^\e(B2</dfn></a>: SSL \e$B%W%m%H%3%k%9%?%C%/\e(B
+ </p>
+
+ <p>
+ \e$B%l%3!<%I%W%m%H%3%k$K$h$k\e(B SSL \e$B%3%s%H%m!<%k%W%m%H%3%k$N%+%W%;%k2=$O!"\e(B
+ \e$B%"%/%F%#%V$J%;%C%7%g%s$NFs2sL\$NDL?.$,$"$C$?>l9g!"\e(B
+ \e$B%3%s%H%m!<%k%W%m%H%3%k$,0BA4$G$"$k$3$H$r0UL#$7$^$9!#\e(B
+ \e$B4{$K%;%C%7%g%s$,L5$$>l9g$O!"\e(BNull \e$B0E9f%9%$!<%H$,;H$o$l!"\e(B
+ \e$B0E9f2=$O9T$J$o$l$:!"%;%C%7%g%s$,3NN)$9$k$^$G$O\e(B
+ \e$B%@%$%8%'%9%H$bL5$$>uBV$H$J$j$^$9!#\e(B</p>
+</section>
+
+<section id="datatransfer">
+<title>\e$B%G!<%?DL?.\e(B</title>
+ <p><a href="#figure3">\e$B?^\e(B3</a>\e$B$K<($5$l$k\e(B SSL \e$B%l%3!<%I%W%m%H%3%k\e(B
+ \e$B$O%/%i%$%"%s%H$H%5!<%P4V$N%"%W%j%1!<%7%g%s$d\e(B
+ SSL \e$B%3%s%H%m!<%k%G!<%?$NDL?.$K;H$o$l$^$9!#\e(B
+ \e$B$3$N%G!<%?$O$h$j>.$5$$%f%K%C%H$KJ,$1$i$l$?$j!"\e(B
+ \e$B$$$/$D$+$N9b5i%W%m%H%3%k$r$^$H$a$F0l%f%K%C%H$H$7$FDL?.$,\e(B
+ \e$B9T$J$o$l$k$3$H$b$"$j$^$9!#\e(B
+ \e$B%G!<%?$r05=L$7!"%@%$%8%'%9%H=pL>$rE:IU$7$F!"\e(B
+ \e$B$3$l$i$N%f%K%C%H$r0E9f2=$7$?$N$A!"%Y!<%9$H$J$C$F$$$k\e(B
+ \e$B?.Mj@-$N$"$k%H%i%s%9%]!<%H%W%m%H%3%k$rMQ$$$k$+$b$7$l$^$;$s!#\e(B
+ (\e$BCm0U\e(B: \e$B8=:_%a%8%c!<$J\e(B SLL \e$B<BAu$G05=L$r%5%]!<%H$7$F$$$k$b$N$O$"$j$^$;$s\e(B)</p>
+
+ <p class="figure">
+ <img src="ssl_intro_fig3.gif" alt="" width="423" height="323" /><br />
+ <a id="figure3" name="figure3"><dfn>\e$B?^\e(B 3</dfn></a>: SSL \e$B%l%3!<%I%W%m%H%3%k\e(B
+ </p>
+</section>
+
+<section id="securehttp">
+<title>HTTP \e$BDL?.$N0BA42=\e(B</title>
+ <p>\e$B$h$/$"$k\e(B SSL \e$B$N;H$$J}$O%V%i%&%6$H%&%'%V%5!<%P4V$N\e(B HTTP \e$BDL?.\e(B
+ \e$B$N0BA42=$G$9!#\e(B
+ \e$B$3$l$O!"=>Mh$N0BA4$G$O$J$$\e(B HTTP \e$B$N;HMQ$r=|30$9$k$b$N$G$O$"$j$^$;$s!#\e(B
+ \e$B0BA42=$5$l$?$b$N$O<g$K\e(B SSH \e$B>e$NIaDL$N\e(B HTTP \e$B$G!"\e(BHTTPS \e$B$H8F$P$l$^$9!#\e(B
+ \e$BBg$-$J0c$$$O!"\e(BURL \e$B%9%-!<%`$K\e(B <code>http</code> \e$B$NBe$o$j$K\e(B <code>https</code>
+ \e$B$rMQ$$!"%5!<%P$,JL$N%]!<%H$r;H$&$3$H$G$9\e(B (\e$B%G%U%)%k%H$G$O\e(B443)\e$B!#\e(B
+ \e$B$3$l$,<g$K\e(B <module
+ >mod_ssl</module> \e$B$,\e(B Apache \e$B%&%'%V%5!<%P$KDs6!$9$k5!G=$G$9!#\e(B</p>
+</section>
+</section>
+<!-- /ssl -->
+
+<section id="references">
+<title>\e$B;29MJ88%\e(B</title>
+<dl>
+<dt><a id="AC96" name="AC96">[AC96]</a></dt>
+<dd>Bruce Schneier, <q>Applied Cryptography</q>, 2nd Edition, Wiley,
+1996. See <a href="http://www.counterpane.com/"
+>http://www.counterpane.com/</a> for various other materials by Bruce
+Schneier.</dd>
+
+<dt><a id="X208" name="X208">[X208]</a></dt>
+<dd>ITU-T Recommendation X.208, <q>Specification of Abstract Syntax Notation
+One (ASN.1)</q>, 1988. See for instance <a
+href="http://www.itu.int/rec/recommendation.asp?type=items&lang=e&parent=T-REC-X.208-198811-I"
+>http://www.itu.int/rec/recommendation.asp?type=items&lang=e&parent=T-REC-X.208-198811-I</a>.
+</dd>
+
+<dt><a id="X509" name="X509">[X509]</a></dt>
+<dd>ITU-T Recommendation X.509, <q>The Directory - Authentication
+Framework</q>. See for instance <a
+href="http://www.itu.int/rec/recommendation.asp?type=folders&lang=e&parent=T-REC-X.509"
+>http://www.itu.int/rec/recommendation.asp?type=folders&lang=e&parent=T-REC-X.509</a>.
+</dd>
+
+<dt><a id="PKCS" name="PKCS">[PKCS]</a></dt>
+<dd><q>Public Key Cryptography Standards (PKCS)</q>,
+RSA Laboratories Technical Notes, See <a
+href="http://www.rsasecurity.com/rsalabs/pkcs/"
+>http://www.rsasecurity.com/rsalabs/pkcs/</a>.</dd>
+
+<dt><a id="MIME" name="MIME">[MIME]</a></dt>
+<dd>N. Freed, N. Borenstein, <q>Multipurpose Internet Mail Extensions
+(MIME) Part One: Format of Internet Message Bodies</q>, RFC2045.
+See for instance <a href="http://ietf.org/rfc/rfc2045.txt"
+>http://ietf.org/rfc/rfc2045.txt</a>.</dd>
+
+<dt><a id="SSL2" name="SSL2">[SSL2]</a></dt>
+<dd>Kipp E.B. Hickman, <q>The SSL Protocol</q>, 1995. See <a
+href="http://www.netscape.com/eng/security/SSL_2.html"
+>http://www.netscape.com/eng/security/SSL_2.html</a>.</dd>
+
+<dt><a id="SSL3" name="SSL3">[SSL3]</a></dt>
+<dd>Alan O. Freier, Philip Karlton, Paul C. Kocher, <q>The SSL Protocol
+Version 3.0</q>, 1996. See <a
+href="http://www.netscape.com/eng/ssl3/draft302.txt"
+>http://www.netscape.com/eng/ssl3/draft302.txt</a>.</dd>
+
+<dt><a id="TLS1" name="TLS1">[TLS1]</a></dt>
+<dd>Tim Dierks, Christopher Allen, <q>The TLS Protocol Version 1.0</q>,
+1999. See <a href="http://ietf.org/rfc/rfc2246.txt"
+>http://ietf.org/rfc/rfc2246.txt</a>.</dd>
+</dl>
+</section>
+<!-- /references -->
+
+</manualpage>
projects / apache / commitdiff