{"id":4332,"date":"2014-12-22T17:08:13","date_gmt":"2014-12-22T08:08:13","guid":{"rendered":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/?p=4332"},"modified":"2020-01-17T19:53:38","modified_gmt":"2020-01-17T10:53:38","slug":"opmanager%e3%81%aeurl%e7%9b%a3%e8%a6%96%e3%81%ab%e3%81%a6%e3%80%81tlsv1%e3%81%a7web%e3%82%b5%e3%83%bc%e3%83%90%e3%81%b8%e3%81%ae%e6%8e%a5%e7%b6%9a%e7%9b%a3%e8%a6%96%e3%81%ab%e5%a4%b1%e6%95%97","status":"publish","type":"post","link":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/?p=4332","title":{"rendered":"OpManager\u306eURL\u76e3\u8996\u306b\u3066\u3001https\u306eWeb\u30b5\u30a4\u30c8\u306e\u76e3\u8996\u306b\u5931\u6557\u3059\u308b"},"content":{"rendered":"

\u3010\u73fe\u8c61\/\u8981\u671b\u3011
\nOpManager\u306eURL\u76e3\u8996\u306b\u3066\u3001https\u306eWeb\u30b5\u30fc\u30d0\u3078\u306e\u76e3\u8996\u306b\u5931\u6557\u3059\u308b\u3002<\/p>\n

\u3010\u539f\u56e0\u3011
\nOpManager(Java6)\u3067\u306f\u3001\u516c\u958b\u9375\u304cRSA2048bit\u306e\u9375\u9577\u306e\u6697\u53f7\u5316\u306ehttps\u306eURL\u76e3\u8996\u306b\u306f\u5bfe\u5fdc\u3057\u3066\u304a\u308a\u307e\u305b\u3093\u30021024bit\u4ee5\u4e0b\u306e\u5834\u5408\u3067\u672c\u4e8b\u8c61\u304c\u767a\u751f\u3057\u3066\u3044\u308b\u5834\u5408\u306b\u306f\u3010\u89e3\u6c7a\u65b9\u6cd5\u3011\u3092\u78ba\u8a8d\u3057\u307e\u3059\u3002<\/p>\n

OpManager\u304c\u4f7f\u7528\u3059\u308bJava6\u306f\u3001Java\u304b\u3089Web\u30b5\u30fc\u30d0\u3078\u306e\u63a5\u7d9a\u3067\u30c7\u30d5\u30a9\u30eb\u30c8\u3067SSLv2\u306e\u30d7\u30ed\u30c8\u30b3\u30eb\u3092\u7528\u3044\u3066\u304a\u308a\u3001\u3053\u306e\u30d7\u30ed\u30c8\u30b3\u30eb\u3067Client hello\u306e\u30d1\u30b1\u30c3\u30c8\u3092\u9001\u308ahttps\u901a\u4fe1\u3092\u884c\u3044\u307e\u3059\u3002
\n\u305d\u306e\u305f\u3081SSLv2 Client Hello\u306e\u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u63a5\u7d9a\u304c\u6709\u52b9\u3067\u306a\u3044Web\u30b5\u30fc\u30d0\u3078\u306e\u63a5\u7d9a\u306fhandshake\u306b\u5931\u6557\u3057Web\u306b\u63a5\u7d9a\u3067\u304d\u305a\u3001OpManager\u306b\u3088\u308bURL\u76e3\u8996\u306b\u5931\u6557\u3057\u307e\u3059\u3002
\nOpManager\u304b\u3089TLSv1\u3067\u306e\u63a5\u7d9a(Client Hello)\u3092\u6709\u52b9\u306b\u3059\u308b\u305f\u3081\u306b\u306f\u3001\u4ee5\u4e0b\u306e\u624b\u9806\u3067\u30d1\u30c3\u30c1\u3092\u9069\u7528\u3057SSLv2\u306b\u3088\u308b Client Hello\u306e\u63a5\u7d9a\u3092\u7121\u52b9\u306b\u3057TLSv1\u306e\u63a5\u7d9a\u3092\u6709\u52b9\u306b\u3057\u307e\u3059\u3002<\/p>\n

\u3010\u89e3\u6c7a\u65b9\u6cd5\u3011
\n\u624b\u9806)
\n\u4ee5\u4e0b\u624b\u98063,\u624b\u98064\u306f\u3001\u8a72\u5f53\u3059\u308bOpManager\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u30b5\u30fc\u30d0\u306eOS\u306b\u5fdc\u3058\u3066\u5b9f\u65bd\u304f\u3060\u3055\u3044\u3002<\/p>\n

    \n
  1. \u6dfb\u4ed8\u30d5\u30a1\u30a4\u30eb\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u89e3\u51cd\u3057\u3001\u5f97\u3089\u308c\u305fHTTPClient\u30d5\u30a9\u30eb\u30c0\u3092OpManager\\classes\u914d\u4e0b\u306b\u914d\u7f6e<\/li>\n
  2. OpManager\\tomcat\\conf\\backup\\ssl_server.xml\u30d5\u30a1\u30a4\u30eb\u3092\u7de8\u96c6 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u5bfe\u8c61:72\u884c\u76ee
    \n\u5909\u66f4\u524d)
    \nsslProtocol=\"TLS\"\/>
    \n\u5909\u66f4\u5f8c)
    \nsslProtocol=\"TLSv1<\/strong>\"\/><\/li>\n
  3. OpManager\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u30b5\u30fc\u30d0\u304cWindows OS\u306e\u5834\u5408\u3001OpManager\\conf\\wrapper.conf\u306b\u3066\u4ee5\u4e0b\u306e\u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u8ffd\u52a0\u8a2d\u5b9a\u3000\u3000\u3000\u5bfe\u8c61137\u884c\u76ee
    \n\u5909\u66f4\u524d)
    \nwrapper.java.additional.13=-Djava.net.preferIPv4Stack=true
    \nwrapper.filter.trigger.1=OpMCrash-OOM
    \n\u5909\u66f4\u5f8c) \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0\u3000\u3000\u3000\u3000\u3000\u3000\u3000\u3000 \u00a0 \u00a0 \u00a0 \u00a0wrapper.java.additional.13=-Djava.net.preferIPv4Stack=true \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 \u3000\u3000\u00a0wrapper.java.additional.14=-Dhttps.protocols=TLSv1<\/strong>
    \nwrapper.filter.trigger.1=OpMCrash-OOM<\/li>\n
  4. OpManager\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u30b5\u30fc\u30d0\u304cLinux OS\u306e\u5834\u5408\u3001OpManager\\bin\\StartOpManagerServer.sh\u30d5\u30a1\u30a4\u30eb\u3092\u4ee5\u4e0b\u306e\u3088\u3046\u306b-Dhttps.protocols=TLSv1\u3092\u8ffd\u52a0\u7de8\u96c6\u3057\u4fdd\u5b58
    \n\u5bfe\u8c61\u884c:85\u884c\u76ee
    \n\u5909\u66f4\u524d) -Djava.rmi.server.codebase=\"$CODEBASE_LIST\" -XX:+HeapDumpOnOutOfMemoryError
    \n\u5909\u66f4\u5f8c) -Djava.rmi.server.codebase=\"$CODEBASE_LIST\" -Dhttps.protocols=TLSv1<\/strong> -XX:+HeapDumpOnOutOfMemoryError
    \n3.OpManager\\bin\\StartOpManagerServer.sh\u3092\u5b9f\u884c\u3057OpManager\u3092\u8d77\u52d5<\/li>\n
  5. OpManager\u30b5\u30fc\u30d3\u30b9\u3092\u518d\u8d77\u52d5<\/li>\n<\/ol>\n

    HTTPClient<\/a><\/p>\n

    \u203b\u30d3\u30eb\u30c9\u756a\u53f712.3.x\u3067\u306fJava7\u3092\u4f7f\u7528\u3057\u3066\u3044\u307e\u3059\u304c\u3001Java7\u306f<\/span><\/strong>\u9375\u9577RSA2048\u306b\u306f\u6b63\u5f0f\u306b\u5bfe\u5fdc\u3057\u3066\u304a\u3089\u305a\u30b5\u30dd\u30fc\u30c8\u5bfe\u8c61\u5916\u3068\u306a\u308a\u307e\u3059\u3002RSA2048bit\u3092\u7528\u3044\u305fhttps\u306eURL\u76e3\u8996\u306b\u3064\u3044\u3066\u306f\u3001\u52d5\u4f5c\u306e\u6b63\u78ba\u6027\u306e\u4fdd\u8a3c\u3084\u691c\u8a3c\u306f\u3044\u305f\u3057\u304b\u306d\u307e\u3059\u3002
    \n<\/span><\/strong>
    \n\u203b\u30d3\u30eb\u30c9\u756a\u53f712.4.x\u3067\u306f\u3001JRE\u304c\u30d0\u30fc\u30b8\u30e7\u30f3\u30a2\u30c3\u30d7\u3055\u308c\u305f\u305f\u3081\u3001\u9375\u9577RSA2048\u306b\u5bfe\u5fdc\u3057\u3066\u304a\u308a\u307e\u3059\u3002<\/span><\/strong><\/p>\n

     <\/p>\n

    \u3010\u5bfe\u5fdc\u30d3\u30eb\u30c9\u3011 11400, 11500<\/p>\n

     <\/p>\n","protected":false},"excerpt":{"rendered":"

    \u3010\u73fe\u8c61\/\u8981\u671b\u3011 OpManager\u306eURL\u76e3\u8996\u306b\u3066\u3001https\u306eWeb\u30b5\u30fc\u30d0\u3078\u306e\u76e3\u8996\u306b\u5931\u6557\u3059\u308b\u3002 \u3010\u539f\u56e0\u3011 OpManager(Java6)\u3067\u306f\u3001\u516c\u958b\u2026 \uff3b\u7d9a\u304d\u3092\u8aad\u3080\uff3d<\/a><\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"no","_lmt_disable":"","footnotes":""},"categories":[15,14],"tags":[],"class_list":["post-4332","post","type-post","status-publish","format-standard","hentry","category-7-trouble-opm","category-6-knownissue-opm"],"modified_by":"yuka","_links":{"self":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=\/wp\/v2\/posts\/4332","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4332"}],"version-history":[{"count":32,"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=\/wp\/v2\/posts\/4332\/revisions"}],"predecessor-version":[{"id":19063,"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=\/wp\/v2\/posts\/4332\/revisions\/19063"}],"wp:attachment":[{"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.manageengine.jp\/support\/kb\/OpManager\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}