{"id":1960,"date":"2017-12-26T09:59:40","date_gmt":"2017-12-26T01:59:40","guid":{"rendered":"https:\/\/www.webteach.tw\/?p=1960"},"modified":"2017-12-26T09:59:40","modified_gmt":"2017-12-26T01:59:40","slug":"ssl%e7%ad%89%e7%b4%9a","status":"publish","type":"post","link":"https:\/\/www.webteach.tw\/?p=1960","title":{"rendered":"[ LINUX ] – \u6aa2\u6e2c\u4f60\u7684 SSL\u7b49\u7d1a \u542b\u932f\u8aa4\u6392\u9664"},"content":{"rendered":"\n

\u8a71\u8aaa\u5e6b\u7db2\u7ad9\u52a0\u4e86SSL\u7528\u4e86\u5169\u5e74\uff0c\u5f9e\u6c92\u60f3\u5230\u6703\u6709\u8cc7\u5b89\u98a8\u96aa(\u88dd\u9019\u500b\u4e0d\u5c31\u662f\u70ba\u4e86\u5b89\u5168)\uff0c\u5f8c\u4f86\u5728\u7db2\u8def\u4e0a\u67e5\u5230\u9019\u500b SSL\u7b49\u7d1a<\/a> \u6aa2\u6e2c\u7db2\u7ad9\uff0c\u4e00\u6e2c\u4e0d\u5f97\u4e86 \u5f97\u4e86\u500bF\uff1b\u539f\u4f86\u662f\u4e4b\u524d\u7684SSL\u8cc7\u5b89\u554f\u984c\uff0c\u8981\u95dc\u6389SSLV3\u901a\u8a0a\u5354\u5b9a\u624d\u884c\u3002<\/p>\n\n\n

\"\"<\/a><\/figure><\/div>\n\n\n

\u95dc\u6389\u5f8c\u767c\u73fe\u600e\u9ebc\u9084\u662fF \u932f\u8aa4\u8a0a\u606f OpenSSL Padding Oracle vulnerability (CVE-2016-2107)
\u539f\u4f86\u9084\u8981\u5c07openssl \u6539\u7248\u672c<\/p>\n\n\n

\u722c\u6587\u767c\u73fe\u9019\u500b\u7db2\u7ad9 https:\/\/gist.github.com\/ArturT\/bc8836d3bedff801dc324ac959050d12<\/a>
\u4ee5\u4e0b\u662f\u4ed6\u7684\u6b65\u9a5f\uff1a
———————————-
# Based on http:\/\/fearby.com\/article\/update-openssl-on-a-digital-ocean-vm\/<\/p>\n\n\n

$ sudo apt-get update
$ sudo apt-get dist-upgrade<\/p>\n\n\n

$ wget ftp:\/\/ftp.openssl.org\/source\/openssl-1.0.2h.tar.gz
$ tar -xvzf openssl-1.0.2h.tar.gz
$ cd openssl-1.0.2h
$ .\/config –prefix=\/usr\/
$ make depend
$ sudo make install
$ openssl version
# OpenSSL 1.0.2h 3 May 2016<\/p>\n\n\n

# now restart your nginx or other server
$ sudo service nginx restart<\/p>\n\n\n

# check your website here https:\/\/www.ssllabs.com\/ssltest\/
———————————-<\/p>\n\n\n

\u7167\u4ed6\u7684\u6b65\u9a5f\u5230\u4e86 wget ftp:\/\/ftp.openssl.org\/source\/openssl-1.0.2h.tar.gz \u5c31\u5361\u95dc\u4e86\uff0c\u4e0b\u8f09\u4e0d\u5230\u9019\u500b\u6a94\u6848\u3002<\/p>\n\n\n

\u82b1\u6642\u9593\u627e\u4e86\u4e00\u4e0b
https:\/\/ftp.openssl.org\/source\/old\/1.0.2\/<\/a> \u5f8c\u4f86\u627e\u5230\u9019\u500b\u5217\u8868\u3002\u6307\u4ee4\u6539\u6210\uff1a
wget https:\/\/ftp.openssl.org\/source\/old\/1.0.2\/openssl-1.0.2h.tar.gz<\/p>\n\n\n

\u7136\u5f8c\u518d\u5f80\u4e0b\u57f7\u884c make depend \u53c8\u51fa\u73fe\u932f\u8aa4\u4e86\uff0c\u539f\u4f86\u662f\u6c92\u6709\u88ddgcc<\/p>\n\n\n

\u518d\u57f7\u884c\u6307\u4ee4\uff1asudo apt-get install gcc<\/p>\n\n\n

\u88dd\u5b8c\u5f8c\u91cd\u4e0bmake depend<\/p>\n\n\n

\u91cd\u555fApache \u6307\u4ee4\uff1asudo service apache2 restart<\/p>\n\n\n

\u518d\u53bb\u91cd\u6aa2\u6e2c\u4f60\u7684SSL\uff0c\u7b49\u7d1a\u5c31\u5f9eF\u8b8aA\u4e86\u3002<\/p>\n\n\n

\u7db2\u7ad9\u7d93\u71df\u771f\u7684\u5f88\u8f9b\u82e6\uff0c\u5176\u5be6\u8ddf\u5be6\u9ad4\u5e97\u9762\u5dee\u4e0d\u4e86\u591a\u5c11\uff0c\u6771\u897f\u58de\u4e86\u8981\u4fee\u5c11\u6771\u897f\u8981\u88dc\uff0c\u5149\u9019\u500bSSL\u6191\u8b49\u5c31\u89813000\/\u5e74<\/p>\n\n\n

\u4ee5\u4e0b\u70ba\u6211\u7684\u4f5c\u696d\u7cfb\u7d71\u8cc7\u8a0a
ubuntu 14.04<\/p>\n\n\n

\u82e5\u4f60\u7684ubuntu\u7248\u672c\u70ba16.04\u5c31\u5df2\u7d93\u662f\u4fee\u6b63\u904e\u7684\u3002<\/p>\n\n\n

\u5176\u5b83OS\u8acb\u81ea\u884c\u627e\u5c0b\u89e3\u6cd5\uff0c\u5361\u95dc\u81ea\u884c\u4f9d\u932f\u8aa4\u78bcgoogle\u3002<\/p>\n\n\n

\u53c3\u8003\u4ee5\u4e0b\u9023\u7d50\uff1a
https:\/\/askubuntu.com\/questions\/537481\/disable-sslv3-in-apache2-on-a-clean-install-of-ubuntu-14-04-1-server<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

\t\t\t\t\t\t\u8a71\u8aaa\u5e6b\u7db2\u7ad9\u52a0\u4e86SSL\u7528\u4e86\u5169\u5e74\uff0c\u5f9e\u6c92\u60f3\u5230\u6703\u6709\u8cc7\u5b89\u98a8\u96aa(\u88dd\u9019\u500b\u4e0d\u5c31\u662f\u70ba\u4e86\u5b89\u5168)\uff0c\u5f8c\u4f86\u5728\u7db2\u8def\u4e0a\u67e5\u5230\u9019\u500b SSL\u7b49\u7d1a \u6aa2\u6e2c\u7db2\u7ad9\uff0c\u4e00\u6e2c\u4e0d\u5f97\u4e86 \u5f97\u4e86\u500bF\uff1b\u539f\u4f86\u662f\u4e4b\u524d\u7684SSL\u8cc7\u5b89\u554f\u984c\uff0c\u8981\u95dc\u6389SSLV3\u901a\u8a0a\u5354\u5b9a\u624d\u884c\u3002<\/p>\n","protected":false},"author":1,"featured_media":1962,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[32],"tags":[370,527,530,575],"class_list":["post-1960","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux","tag-linux","tag-ssl","tag-ubuntu-14-04","hvn-theme-has-thumbnail"],"_links":{"self":[{"href":"https:\/\/www.webteach.tw\/index.php?rest_route=\/wp\/v2\/posts\/1960","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.webteach.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.webteach.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.webteach.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.webteach.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1960"}],"version-history":[{"count":0,"href":"https:\/\/www.webteach.tw\/index.php?rest_route=\/wp\/v2\/posts\/1960\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.webteach.tw\/index.php?rest_route=\/wp\/v2\/media\/1962"}],"wp:attachment":[{"href":"https:\/\/www.webteach.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1960"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.webteach.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1960"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.webteach.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1960"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}