Date: Fri, 29 Mar 2024 22:27:10 +0900 (JST) Message-ID: <1099628955.2409.1711718830878@meatwiki.nii.ac.jp> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_2408_1800776071.1711718830877" ------=_Part_2408_1800776071.1711718830877 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
RADIUS=E3=82=B5=E3=83=BC=E3=83=90=E3=81=AB=E3=81=8A=E3=81=84=E3= =81=A6=E3=82=AF=E3=83=A9=E3=82=A4=E3=82=A2=E3=83=B3=E3=83=88=E8=A8=BC=E6=98= =8E=E6=9B=B8=E3=82=92=E7=94=A8=E3=81=84=E3=81=9F=E8=AA=8D=E8=A8=BC=E3=82=92= =E8=A1=8C=E3=81=86=E8=A8=AD=E5=AE=9A=E3=81=AE=E3=82=B5=E3=83=B3=E3=83=97=E3= =83=AB=E3=81=A7=E3=81=99=E3=80=82
FreeRADIUS=E8=87=AA=E4=BD=93=E3=81=AB=E3=82=82=E3=82=AF=E3=83=A9=E3=82= =A4=E3=82=A2=E3=83=B3=E3=83=88=E8=A8=BC=E6=98=8E=E6=9B=B8=E3=82=92=E7=94=A8= =E3=81=84=E3=81=9F=E8=AA=8D=E8=A8=BC=E3=82=92=E8=A1=8C=E3=81=86=E6=A9=9F=E8= =83=BD=E3=81=8C=E3=81=82=E3=82=8A=E3=81=BE=E3=81=99=E3=81=8C=E3=80=81=E7=89= =B9=E5=AE=9A=E3=81=AECA=E3=81=8B=E3=82=89=E7=99=BA=E8=A1=8C=E3=81=95=E3=82= =8C=E3=81=9F=E8=A8=BC=E6=98=8E=E6=9B=B8=E3=81=A7=E3=81=82=E3=82=8B=E3=81=8B= =E3=81=A9=E3=81=86=E3=81=8B=E3=82=92=E7=A2=BA=E8=AA=8D=E3=81=99=E3=82=8B=E7= =A8=8B=E5=BA=A6=E3=81=A7=E3=80=81=E8=A8=BC=E6=98=8E=E6=9B=B8=E3=81=AE=E7=B4= =B0=E3=81=8B=E3=81=AA=E6=83=85=E5=A0=B1=E3=81=AB=E5=9F=BA=E3=81=A5=E3=81=84= =E3=81=9F=E8=AA=8D=E8=A8=BC=E5=8F=AF=E5=90=A6=E3=81=AE=E5=88=B6=E5=BE=A1=E3= =82=92=E8=A1=8C=E3=81=86=E3=81=9F=E3=82=81=E3=81=AB=E3=81=AF=E3=80=81=E5=A4= =96=E9=83=A8=E3=82=B9=E3=82=AF=E3=83=AA=E3=83=97=E3=83=88=E3=81=A7=E8=AA=8D= =E8=A8=BC=E5=88=A4=E6=96=AD=E3=82=92=E5=AE=9F=E7=8F=BE=E3=81=99=E3=82=8B=E5= =BF=85=E8=A6=81=E3=81=8C=E3=81=82=E3=82=8A=E3=81=BE=E3=81=99=E3=80=82=E3=81= =93=E3=81=93=E3=81=A7=E3=81=AF=E3=80=81=E3=81=9D=E3=81=AE=E4=BE=8B=E3=82=92= =E7=B4=B9=E4=BB=8B=E3=81=97=E3=81=BE=E3=81=99=E3=80=82
=E3=81=82=E3=81=8F=E3=81=BE=E3=81=A7=E3=82=82=E3=82=B5=E3=83=B3=E3=83=97= =E3=83=AB=E3=81=A7=E3=81=82=E3=82=8A=E3=80=81=E5=AE=9F=E9=9A=9B=E3=81=AB=E6= =84=8F=E5=9B=B3=E9=80=9A=E3=82=8A=E5=8B=95=E4=BD=9C=E3=81=99=E3=82=8B=E3=81= =8B=E3=81=A9=E3=81=86=E3=81=8B=E3=80=81=E5=90=84=E8=87=AA=E3=81=A7=E6=A4=9C= =E8=A8=BC=E3=82=92=E8=A1=8C=E3=81=A3=E3=81=A6=E3=81=8B=E3=82=89=E9=81=8B=E7= =94=A8=E3=81=AB=E6=8A=95=E5=85=A5=E3=81=97=E3=81=A6=E3=81=8F=E3=81=A0=E3=81= =95=E3=81=84=E3=80=82
raddb/mods-enabled/eap=E3=83=95=E3=82=A1=E3=82=A4=E3=83=AB=E4=B8=AD=E3= =81=AE=E5=A4=96=E9=83=A8=E3=83=97=E3=83=AD=E3=82=B0=E3=83=A9=E3=83=A0=E5=91= =BC=E3=81=B3=E5=87=BA=E3=81=97=E3=81=AE=E8=A8=98=E8=BC=89=E3=82=92=E4=BB=A5= =E4=B8=8B=E3=81=AE=E3=82=88=E3=81=86=E3=81=AB=E3=81=97=E3=81=BE=E3=81=99=E3= =80=82
client =3D "/usr/local/etc/raddb/CA/VERIF= Y.sh %{TLS-Client-Cert-Filename}"
=E8=A8=BC=E6=98=8E=E6=9B=B8=E3=81=AF=E3=83=86=E3=83=B3=E3=83=9D=E3=83=A9= =E3=83=AA=E3=83=95=E3=82=A1=E3=82=A4=E3=83=AB=E3=81=AE=E5=BD=A2=E3=81=A7=E3= =82=B9=E3=82=AF=E3=83=AA=E3=83=97=E3=83=88=E3=81=AB=E6=B8=A1=E3=81=95=E3=82= =8C=E3=81=BE=E3=81=99=E3=80=82
VERIFY.sh=E3=81=AE=E4=B8=AD=E8=BA=AB=E3=81=AF=E4=BB=A5=E4=B8=8B=E3=81=AE= =E3=82=88=E3=81=86=E3=81=AA=E5=86=85=E5=AE=B9=E3=81=AB=E3=81=AA=E3=82=8A=E3= =81=BE=E3=81=99=E3=80=82
#! /bin/sh
CRL_URI=3Dhttp://repo1.secomtrust.net/sppca/nii/odca=
3/fullcrlg4.crl
CRL_FILE=3Dfullcrlg4.crl
CRL_DIR=3D/tmp
# Subject matching
openssl x509 -subject -noout -in ${1} |\
grep -q '^subject=3D /C=3DJP/L=3DAcademe=
/O=3DNational Institute of Informatics/'=
|| exit 1
# Issuer matching
openssl x509 -issuer -noout -in ${1} |\
grep -q '^issuer=3D /C=3DJP/L=3DAcademe/O=3DNational Institute of Informati=
cs/CN=3DNII Open Domain CA - G4' || exit 1
# Purpose matching
openssl x509 -purpose -noout -in ${1} |\
grep -q 'SSL client : Yes' || exit 1
# Downloading CRL should be done by CRON daily or weekly
#wget -q -P $CRL_DIR -N $CRL_URI
# CRL lookup
SERIAL=3D`openssl x509 -serial -noout -in ${1} | sed 's/serial=3D//'`
openssl crl -inform der -in $CRL_DIR/$CRL_FILE -text | grep 'Serial Number:=
' |\
grep -q $SERIAL && exit 1
exit 0
=E5=AE=9F=E9=9A=9B=E3=81=AB=E8=A8=BC=E6=98=8E=E6=9B=B8=E3=81=AB=E3=81=A9= =E3=81=AE=E3=82=88=E3=81=86=E3=81=AB=E8=A8=98=E8=BC=89=E3=81=95=E3=82=8C=E3= =81=A6=E3=81=84=E3=82=8B=E3=81=8B=E3=80=81openssl=E3=81=8C=E3=81=A9=E3=81= =AE=E3=82=88=E3=81=86=E3=81=AA=E5=87=BA=E5=8A=9B=E3=82=92=E7=94=9F=E6=88=90= =E3=81=99=E3=82=8B=E3=81=8B=E3=82=92=E7=A2=BA=E8=AA=8D=E3=81=97=E3=81=AA=E3= =81=8C=E3=82=89=E3=80=81=E8=A8=98=E8=BF=B0=E3=82=92=E4=BF=AE=E6=AD=A3=E3=81= =97=E3=81=A6=E3=81=8F=E3=81=A0=E3=81=95=E3=81=84=E3=80=82
CA=E8=A8=BC=E6=98=8E=E6=9B=B8=E3=81=AE=E5=8E=B3=E5=AF=86=E3=81=AA=E7=A2= =BA=E8=AA=8D=E3=82=84=E8=A8=BC=E6=98=8E=E6=9B=B8=E3=81=AE=E6=9C=89=E5=8A=B9= =E6=9C=9F=E9=99=90=E5=88=87=E3=82=8C=E3=81=AE=E3=83=81=E3=82=A7=E3=83=83=E3= =82=AF=E3=82=82=E8=BF=BD=E5=8A=A0=E3=81=99=E3=82=8B=E5=BF=85=E8=A6=81=E3=81= =8C=E3=81=82=E3=82=8B=E3=81=A7=E3=81=97=E3=82=87=E3=81=86=E3=80=82