サークルのWebサイトで H2O + WordPress 名古屋業学 B4 雄規 常時TLS(SSL) + HTTP/2対応をやってみた
WebH2O + WordPress
B4
TLS(SSL) + HTTP/2
2
4 Webozone notes SDN 3 SF
3
l
NitechBBNitech
4Web
TLSHTTP/2
5HTTP vs HTTPS
lHTTPS!?TLSHTTPS .
http://www.httpvshttps.com/
6
MAC
IP
TCP
TLS(SSL)
HTTP
MAC
IP
TCP
TLS(SSL)
HTTP
MAC
IP
TCP
MAC
IP
TCP
7HTTP vs HTTPS
lHTTPSHTTP1.1HTTP/2
HTTPSHTTPS
HTTP/2
8HTTP/2?
lHTTP1.1
HTTP/2Server Push
9Chrome
HTTP HTTP/2
HTTP/2
10HTTP/2TLS
l TLSTLSiOSTLS
lSEO!?GoogleTLSWeb
TLS
11Lets Encrypt
l!! (CA) (DV) 2012mozilla 20164
Started by
12H2O
lHTTP/2 DeNA HTTP/2 apachenginx
apache, nginxHTTP/2
13
H2O
TLS
PHP, MariaDB
WordPress
14PHP, MariaDB
lPHPPHP7PHP5
lMariaDBMySQLMariaDB
l LinuxCentOS7
15
l!
$ git clone https://github.com/certbot/certbot.git
$ cd letsencrypt
$ ./certbot-auto certonly --webroot
-w
-d
-m
--agree-tos
16H2O
l
https://github.com/h2o/h2o/releases
17H2O
l &
$ cd h2o
$ cmake -DWITH_BUNDLED_SSL=off .
$ make
$ sudo make install
#
$ sudo vi /etc/h2o/h2o.conf
#apachehttpd.conf
#
18H2O
"exodus.c0de-mattari.com:443":listen:
port: 443ssl:certificate-file:/etc/letsencrypt/live/()/fullchain.pemkey-file:/etc/letsencrypt/live/()/privkey.pem
paths:/:file.dir:file.dirlisting: offredirect:/index.php/ internal: YES status: 307
Document Root
TLS
19WordPress
lhttps://
URLhttphttpshttphttps
l
20
lH2O + WordPressapachenginx
WordPressHTTP/2(- -;)
lHTTP/2
21
l Using H2O with Let's Encrypthttp://blog.kazuhooku.com/2015/12/using-h2o-with-lets-encrypt.html
l CentOS7 + PHP7 + nginx + php-fpmhttp://qiita.com/onishik/items/810fd840530d4fb6970c
l CentOS 7.0 + HTTP2 (h2o) + PHP7 + MariaDB Wordpress http://qiita.com/chatii0079/items/a577fa77dd003073abaa
l HTTP vs HTTPShttp://www.httpvshttps.com/
22
l Using H2O with Let's Encrypthttp://blog.kazuhooku.com/2015/12/using-h2o-with-lets-encrypt.html
l (C0de)Webhttp://qiita.com/chatii0079/items/a577fa77dd003073abaa