{"id":15,"date":"2014-10-15T21:54:34","date_gmt":"2014-10-15T12:54:34","guid":{"rendered":"https:\/\/blog.daichang.me\/?p=15"},"modified":"2014-10-15T21:54:34","modified_gmt":"2014-10-15T12:54:34","slug":"ssl-3-0-%e3%82%92%e7%84%a1%e5%8a%b9%e3%81%ab%e3%81%99%e3%82%8b%e3%82%88%e3%81%86%e3%81%ab%e8%a8%ad%e5%ae%9a%ef%bc%88poodle-%e5%af%be%e5%bf%9c%ef%bc%89","status":"publish","type":"post","link":"https:\/\/blog.daichang.me\/?p=15","title":{"rendered":"SSL 3.0 \u3092\u7121\u52b9\u306b\u3059\u308b\u3088\u3046\u306b\u8a2d\u5b9a\uff08POODLE \u5bfe\u5fdc\uff09"},"content":{"rendered":"<p>CVE-2014-3566 a.k.a. POODLE (Padding Oracle On Downgraded Legacy Encryption)\u306e\u5bfe\u7b56\u3068\u3057\u3066SSLv3\u3092\u7121\u52b9\u306b\u3057\u307e\u3059\u3002<\/p>\n<p><!--more--><\/p>\n<p>\u3053\u3053\u3067\u306f\u3001Ubuntu Server 12.04\u306eApache\/2.2 \u3092\u5bfe\u8c61\u3068\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n<pre class=\"prettyprint linenums\">\n% sudo vi &#47;etc&#47;apache2&#47;mods-enabled&#47;ssl.conf\n\n(snip)\nSSLProtocol all -SSLv2\n<\/pre>\n<p>\u3068\u306a\u3063\u3066\u3044\u308b\u884c\u306e\u6700\u5f8c\u306b\u3001&#8221;-SSLv3&#8243;\u3092\u8ffd\u52a0\u3002<br \/>\n\u305d\u3057\u3066\u3001Apache\u3092reload\u3059\u308c\u3070OK\u3002<\/p>\n<p>\u4e00\u5fdc\u3001\u3067\u304d\u305f\u304b\u3069\u3046\u304b\u78ba\u8a8d\u3002<\/p>\n<p>\u8a2d\u5b9a\u524d<\/p>\n<pre class=\"prettyprint linenums\">\n% curl -4 -k https:&#47;&#47;blog.daichang.me&#47; --head --sslv3\n\nHTTP&#47;1.1 200 OK\nDate: Wed, 15 Oct 2014 12:42:34 GMT\nServer: Apache&#47;2.2.22 (Ubuntu)\nX-Powered-By: PHP&#47;5.3.10-1ubuntu3.14\nX-Pingback: https:&#47;&#47;blog.daichang.me&#47;xmlrpc.php\nVary: Accept-Encoding\nContent-Type: text&#47;html; charset=UTF-8\n<\/pre>\n<p>\u8a2d\u5b9a\u5f8c<\/p>\n<pre class=\"prettyprint linenums\">\n% curl -4 -k https:&#47;&#47;blog.daichang.me&#47; --head --sslv3\n\ncurl: (35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure\n<\/pre>\n<p>\u3067\u304d\u3066\u308b\u3093\u3058\u3083\u306a\u3044\u3067\u3057\u3087\u3046\u304b\u306d\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE-2014-3566 a.k.a. POODLE (Padding Oracle On Downgraded Legacy Encryption)\u306e\u5bfe\u7b56\u3068\u3057\u3066SSLv3\u3092\u7121\u52b9\u306b\u3057\u307e\u3059\u3002 [&#8230;]<\/p>\n<p><a class=\"btn btn-secondary understrap-read-more-link\" href=\"https:\/\/blog.daichang.me\/?p=15\">\u7d9a\u304d\u3092\u8aad\u3080&#8230;<span class=\"screen-reader-text\"> from SSL 3.0 \u3092\u7121\u52b9\u306b\u3059\u308b\u3088\u3046\u306b\u8a2d\u5b9a\uff08POODLE \u5bfe\u5fdc\uff09<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[16,21],"class_list":["post-15","post","type-post","status-publish","format-standard","hentry","category-tech","tag-network","tag-security"],"_links":{"self":[{"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/posts\/15","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=15"}],"version-history":[{"count":0,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=\/wp\/v2\/posts\/15\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.daichang.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=15"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=15"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.daichang.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=15"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}