Comments
Transcript
XP000336-Internet Explorer / Edge SECUREMATRIX
XP000336-Internet Explorer / Edge SECUREMATRIX ... 1/6 XP000336-Internet Explorer / Edge SECUREMATRIX Top / XP000336-Internet Explorer / Edge SECUREMATRIX 2016/06/23 2016/06/27 Version SECUREMATRIX Version 3.8.0 / 3.9.0 2016 6 22 Microsoft DHE (Diffie-Hellman ) Internet Explorer / Edge SECUREMATRIX SECUREMATRIX Version 4.0.0 SECUREMATRIX Version 4.1.0 Microsoft [ ] Windows7 KB3161608 Windows8.1 KB3161606 Windows10 KB3163018 [ ] Internet Explorer / Edge SECUREMATRIX SECUREMATRIX https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27 XP000336-Internet Explorer / Edge SECUREMATRIX ... 2/6 SECUREMATRIX ciphers TLS_DHE_RSA_WITH_AES_128_CBC_SHA [ ] 1. "TLS_DHE_RSA_WITH_AES_128_CBC_SHA" 2. SECUREMATRIX [ ] ##### ##### (1) [ :root ] # cd /opt/cse/smx/admin/servlet/conf/ # cp -p server.xml server.xml.yyyymmdd # cd /home/smxd/installer/tmp/opt/cse/smx/admin/servlet/conf/ # cp -p server.xml server.xml.yyyymmdd yyyymmdd (2) server.xml 1. /opt/cse/smx/admin/servlet/conf/server.xml [ ( )] <Connector port="8443" maxHttpHeaderSize ="8192" ( ) https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27 XP000336-Internet Explorer / Edge SECUREMATRIX ... 3/6 ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="/opt/cse/smx/admin/servlet/conf/smx.jks"/> [ ( )] <Connector port="8443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="/opt/cse/smx/admin/servlet/conf/smx.jks"/> ciphers= TLS_DHE_RSA_WITH_AES_128_CBC_SHA 2. /home/smxd/installer/tmp/opt/cse/smx/admin/servlet/conf/server.xml [ ( )] <Connector port="8443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="###ADMIN_JKS_FILE###" /> [ ( )] <Connector port="8443" maxHttpHeaderSize ="8192" ) ( ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="###ADMIN_JKS_FILE###" /> ciphers= (3) admin TLS_DHE_RSA_WITH_AES_128_CBC_SHA (smx-admin) # /sbin/service smx-admin restart ##### GSB ##### (1) https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27 XP000336-Internet Explorer / Edge SECUREMATRIX ... 4/6 [ :root ] # cd /opt/cse/smx/gsb/servlet/conf/ # cp -p server.xml server.xml.yyyymmdd # cd /home/smxd/installer/tmp/opt/cse/smx/gsb/servlet/conf/ # cp -p server.xml server.xml.yyyymmdd yyyymmdd (2) server.xml 1. /opt/cse/smx/gsb/servlet/conf/server.xml [ ( )] <Connector port="443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="/opt/cse/smx/gsb/servlet/conf/gsb_out.jks" /> [ ( )] <Connector port="443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="/opt/cse/smx/gsb/servlet/conf/gsb_out.jks" /> ciphers= TLS_DHE_RSA_WITH_AES_128_CBC_SHA 2. /home/smxd/installer/tmp/opt/cse/smx/gsb/servlet/conf/server.xml [ ( )] <Connector port="443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="###GSB_OUT_JKS_FILE###" /> https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27 XP000336-Internet Explorer / Edge [ ( SECUREMATRIX ... 5/6 )] <Connector port="443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="###GSB_OUT_JKS_FILE###" /> ciphers= TLS_DHE_RSA_WITH_AES_128_CBC_SHA (3) GSB (smx-gsb) [ root ] # /sbin/service smx-gsb restart ##### ISB ##### (1) [ root ] # cd /opt/cse/smx/isb/servlet/conf/ # cp -p server.xml server.xml.yyyymmdd # cd /home/smxd/installer/tmp/opt/cse/smx/isb/servlet/conf/ # cp -p server.xml server.xml.yyyymmdd yyyymmdd (2) server.xml 1. /opt/cse/smx/isb/servlet/conf/server.xml [ ( )] <Connector port="443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="/opt/cse/smx/isb/servlet/conf/isb238-71.jks" /> [ ( )] <Connector port="443" maxHttpHeaderSize ="8192" ) ( ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27 XP000336-Internet Explorer / Edge SECUREMATRIX ... 6/6 TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="/opt/cse/smx/isb/servlet/conf/isb238-71.jks" /> ciphers= TLS_DHE_RSA_WITH_AES_128_CBC_SHA 2. /home/smxd/installer/tmp/opt/cse/smx/isb/servlet/conf/server.xml ( [ )] <Connector port="443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="###ISB_JKS_FILE###" /> [ ( )] <Connector port="443" maxHttpHeaderSize ="8192" ( ) ciphers="TLS_RSA_WITH_AES_128_CBC_SHA,TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_DSS_WITH_AES_128_CBC_SHA,TLS_DHE_DSS_WITH_AES_256_CBC_SHA, SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA" keystoreFile="###ISB_JKS_FILE###" /> ciphers= (3) ISB TLS_DHE_RSA_WITH_AES_128_CBC_SHA (smx-isb) [ root ] # /sbin/service smx-isb restart (c) Copyright 2015 CSE Co.,Ltd. All rights reserved. https://www.cse-tokyo.com/knowledgebase/index.php?XP000336-Internet%20... 2016/06/27