<\/span><\/h2>\nopenssl\u30b3\u30de\u30f3\u30c9\u3092\u4f7f\u3063\u3066\u3001openssl\u3092\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u3057\u3066LSC\u306eTLS\u306b\u5bfe\u5fdc\u3057\u305fSyslog\u30dd\u30fc\u30c8\u3078\u63a5\u7d9a\u3057\u3066\u8a3c\u660e\u66f8\u60c5\u5831\u3092\u53d6\u5f97\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002\u30a8\u30e9\u30fc\u304c\u3042\u308b\u5834\u5408\u306f\u305d\u306e\u30b3\u30de\u30f3\u30c9\u7d50\u679c\u306b\u8868\u793a\u3055\u308c\u307e\u3059\u3002<\/p>\n
\u3046\u307e\u304f\u884c\u304f\u5834\u5408\u306f\u3001\u4f8b\u3068\u3057\u3066\u4ee5\u4e0b\u306e\u7d50\u679c\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002
\n\u3053\u3053\u3067\u306fLSC\u30b5\u30fc\u30d0\u306eIP\u30a2\u30c9\u30ec\u30b9\u3092 172.168.0.1(\u30db\u30b9\u30c8\u540d xxx.logstare.com)\u3001TLS\u306b\u5bfe\u5fdc\u3057\u305fSyslog\u30dd\u30fc\u30c8\u309210514\u3068\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n
# openssl s_client -connect\u00a0 172.168.0.1:10514 -showcerts < \/dev\/null 2>&1<\/p>\n
CONNECTED(00000003)
\nCan't use SSL_get_servername
\ndepth=1 C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = RootCA, emailAddress = xxxx@logstare.com
\nverify error:num=19:self signed certificate in certificate chain
\nverify return:1
\ndepth=1 C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = RootCA, emailAddress = xxxx@logstare.com
\nverify return:1
\ndepth=0 C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = xxx.logstare.com, emailAddress = xxxx@logstare.com
\nverify return:1
\n---
\nCertificate chain
\n0 s:C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = xxx.logstare.com, emailAddress = xxxx@logstare.com
\ni:C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = RootCA, emailAddress = xxxx@logstare.com
\n-----BEGIN CERTIFICATE-----
\nMIIECjCCAvKgAwIBAgIJAKVIR7EPGgcrMA0GCSqGSIb3DQEBCwUAMIGhMQswCQYD
\n\u7701\u7565
\neHgA6e4d8Ir3g0lCnWF4Kt+vf595CfkbUZ\/FYxAG
\n-----END CERTIFICATE-----
\n1 s:C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = RootCA, emailAddress = xxxx@logstare.com
\ni:C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = RootCA, emailAddress = xxxx@logstare.com
\n-----BEGIN CERTIFICATE-----
\nMIIEFzCCAv+gAwIBAgIJAOw\/HodauKeUMA0GCSqGSIb3DQEBCwUAMIGhMQswCQYD
\n\u7701\u7565
\n2aFQo+BXeSRPuQmqQSWvp2UjncuhZjGLN2mDfMcvwz3R9YEupKa86KrqOQ==
\n-----END CERTIFICATE-----
\n---
\nServer certificate
\nsubject=C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = xxx.logstare.com, emailAddress = xxxx@logstare.com<\/p>\n
issuer=C = JP, ST = Tokyo, L = Chiyoda-ku, O = LogStare corp, OU = Tech Unit, CN = RootCA, emailAddress = xxxx@logstare.com<\/p>\n
---
\nNo client certificate CA names sent
\nPeer signing digest: SHA256
\nPeer signature type: RSA-PSS
\nServer Temp Key: ECDH, P-256, 256 bits
\n---
\nSSL handshake has read 2967 bytes and written 796 bytes
\nVerification error: self signed certificate in certificate chain
\n---
\nNew, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
\nServer public key is 2048 bit
\nSecure Renegotiation IS NOT supported
\nCompression: NONE
\nExpansion: NONE
\nNo ALPN negotiated
\nEarly data was not sent
\nVerify return code: 19 (self signed certificate in certificate chain)
\n---
\nDONE<\/p>\n
\u4ee5\u4e0a\u3067LSC\u306b\u304a\u3051\u308bTLS\u901a\u4fe1\u3092\u4f7f\u7528\u3057\u305fSYSLOG\u53ce\u96c6\u306b\u3064\u3044\u3066\u306e\u8aac\u660e\u306f\u7d42\u4e86\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"\u5f53\u8a18\u4e8b\u3067\u306f\u3001LogStare Collector(\u4ee5\u4e0b\u3001LSC\u3068\u8a18\u8f09)\u306b\u304a\u3051\u308bTLS\u901a\u4fe1\u3092\u4f7f\u7528\u3057\u305fSyslog\u53ce\u96c6\u306e\u8a2d\u5b9a\u306b\u3064\u3044\u3066\u8a18\u8f09\u3057\u307e\u3059\u3002 TLS\u901a\u4fe1\u3092\u4f7f\u7528\u3057\u305fSYSLOG\u53ce\u96c6 \u3068\u306f... TLS\u3068\u306f\u901a\u4fe1\u3092\u79d8\u533f\u3059\u308b\u969b\u306b […]","protected":false},"author":21,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[21],"tags":[9,17],"class_list":["post-4666","post","type-post","status-publish","format-standard","hentry","category-references","tag-linux","tag-lscconf"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/posts\/4666","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/users\/21"}],"replies":[{"embeddable":true,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/comments?post=4666"}],"version-history":[{"count":72,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/posts\/4666\/revisions"}],"predecessor-version":[{"id":18392,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/posts\/4666\/revisions\/18392"}],"wp:attachment":[{"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/media?parent=4666"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/categories?post=4666"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.secuavail.com\/kb\/wp-json\/wp\/v2\/tags?post=4666"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}