svn commit: r50757 - head/ja_JP.eucJP/books/handbook/security

[Ryusuke SUZUKI]

Author: ryusuke
Date: Mon Aug 28 08:31:59 2017
New Revision: 50757
URL: https://svnweb.freebsd.org/changeset/doc/50757

Log:
  - Merge the following from the English version:
  
  	r23130 -> r23603	head/ja_JP.eucJP/books/handbook/security/chapter.xml

Modified:
  head/ja_JP.eucJP/books/handbook/security/chapter.xml

Modified: head/ja_JP.eucJP/books/handbook/security/chapter.xml
==============================================================================
--- head/ja_JP.eucJP/books/handbook/security/chapter.xml	Mon Aug 28 06:31:11 2017	(r50756)
+++ head/ja_JP.eucJP/books/handbook/security/chapter.xml	Mon Aug 28 08:31:59 2017	(r50757)
@@ -3,7 +3,7 @@
      The FreeBSD Documentation Project
      The FreeBSD Japanese Documentation Project
 
-     Original revision: r23130
+     Original revision: r23603
      $FreeBSD$
 -->
 <chapter xmlns="http://docbook.org/ns/docbook" xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0" xml:id="security">
@@ -900,10 +900,10 @@
 	¤òÍѤ¤¤ë¤³¤È¤ò¶¯¤¯¿ä¾©¤·¤Þ¤¹¡£¤³¤ì¤¬¤Ç¤­¤Ê¤¤¤Ê¤é¡¢
 	<option>-a</option> ¥ª¥×¥·¥ç¥ó¤ò»È¤Ã¤Æ²¼¤µ¤¤¡£</para>
 
-      <para><application>tcpwrapper</application> ¤ÎµÕ identd ¤Ê¤É¤ÎÀÜ
+      <para><application>TCP Wrapper</application> ¤ÎµÕ identd ¤Ê¤É¤ÎÀÜ
 	³ÊÖ¤· (connect-back) ¤ò¹Ô¤¦¥µ¡¼¥Ó¥¹¤Ë¤Ä¤¤¤Æ¤Ï½½Ê¬Ãí°Õ¤òʧ¤¦¤è
 	¤¦¤Ë¤¹¤ë¤Ù¤­¤Ç¤¹¡£¤³¤ì¤é¤ÏľÀܹ¶·â¤ò¼õ¤±¤ë²ÄǽÀ­¤¬¤¢¤ê¤Þ¤¹¡£¤³
-	¤¦¤¤¤¦»ö¾ð¤¬¤¢¤ë¤Î¤Ç¡¢<application>tcpwrapper</application> ¤Î
+	¤¦¤¤¤¦»ö¾ð¤¬¤¢¤ë¤Î¤Ç¡¢<application>TCP wrapper</application> ¤Î
 	µÕ ident µ¡Ç½¤ò»È¤ª¤¦¤È¤Ï»×¤ï¤Ê¤¤¤Î¤¬°ìÈÌŪ¤Ç¤¹¡£</para>
 
       <para>¶­³¦¥ë¡¼¥¿¤Î¤È¤³¤í¤Ç¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤òÀߤ±¤Æ¡¢³°Éô¤«¤é¤Î¥¢
@@ -1663,8 +1663,9 @@ permit port ttyd0</programlisting>
 
     <para><acronym>TCP</acronym> Wrappers µ¡Ç½¤ÎÄɲäϡ¢
       ¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤Î¤è¤êÎɤ¤ÃÖ¤­´¹¤¨¤È¹Í¤¨¤ë¤Ù¤­¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£
-      ¥·¥¹¥Æ¥à¤ò¼é¤ë¤¿¤á¤Î¥ì¥¤¥ä¤òÄɲ乤뤿¤á¤Ë¤Ï¡¢
-      ¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤ª¤è¤Ó¾¤Î¥»¥­¥å¥ê¥Æ¥£ÀßÄê¤ÈÁȤ߹ç¤ï¤»¤Æ»È¤¦¤Ù¤­¤Ç¤¹¡£</para>
+      <acronym>TCP</acronym> Wrappers ¤Ï¡¢
+      ¥Õ¥¡¥¤¥¢¥¦¥©¡¼¥ë¤ª¤è¤Ó¾¤Î¥»¥­¥å¥ê¥Æ¥£ÀßÄê¤ÈÁȤ߹ç¤ï¤»¤Æ»È¤¦¤³¤È¤¬¤Ç¤­¡¢
+      ¥·¥¹¥Æ¥à¤ò¼é¤ë¤¿¤á¤ÎÄɲäΥ쥤¥ä¤È¤·¤Æ¾å¼ê¤¯µ¡Ç½¤·¤Þ¤¹¡£</para>
 
     <para>¤³¤ÎÀßÄê¤Ï <command>inetd</command> ¤ÎÀßÄê¤Î³ÈÄ¥¤Ê¤Î¤Ç¡¢
       <link linkend="network-inetd">inetd ¤ÎÀßÄê</link>
@@ -2530,7 +2531,7 @@ FreeBSD BUILT-19950429 (GR386) #0: Sat Apr 29 17:50:09
       <title>Heimdal <acronym>KDC</acronym> ¤ÎÀßÄê</title>
       <indexterm>
 	<primary>Kerberos5</primary>
-	<secondary>¸°ÇÛÉÛ¥»¥ó¥¿¡¼¤ÎÀßÄê</secondary>
+	<secondary>¸°ÇÛÉÛ¥»¥ó¥¿¡¼</secondary>
       </indexterm>
 
       <para>¸°ÇÛÉÛ¥»¥ó¥¿¡¼ (<acronym>KDC</acronym>) ¤Ï¡¢
@@ -3313,7 +3314,7 @@ jdoe at example.org</screen>
       <para>¿¤¯¤Î¾ì¹ç¡¢Ports Collection ¤Ï¡¢
 	make ¤Î WITH_OPENSSL_BASE ÊÑ¿ô¤¬ÌÀ¼¨Åª¤Ë
 	<quote>yes</quote> ¤ËÀßÄꤵ¤ì¤Æ¤¤¤Ê¤¤¤È¡¢
-	<filename role="package">security/openssl</filename>
+	<filename role="package">security/openssl</filename> port
 	¤Î¹½ÃÛ¤ò»î¤ß¤Þ¤¹¡£</para>
     </note>
 
@@ -3321,7 +3322,7 @@ jdoe at example.org</screen>
     ¡¡¤Î¥Ð¡¼¥¸¥ç¥ó¤Ï¡¢Secure Sockets Layer v2/v3 (SSLv2/SSLv3) ¤ä
       Transport Layer Security v1 (TLSv1)
       ¥Í¥Ã¥È¥ï¡¼¥¯¥»¥­¥å¥ê¥Æ¥£¥×¥í¥È¥³¥ë¤ËÂбþ¤·¤Æ¤ª¤ê¡¢
-      ¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤ÇÍøÍѤ¹¤ë¤¿¤á¤Î¿ÌÜŪ¤Ê°Å¹æ²½¥é¥¤¥Ö¥é¥ê¤È¤·¤Æ»È¤¦¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£</para>
+      ¿ÌÜŪ¤Ê°Å¹æ²½¥é¥¤¥Ö¥é¥ê¤È¤·¤Æ»È¤¦¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£</para>
 
     <note>
       <para><application>OpenSSL</application> ¤Ï¡¢
@@ -3332,17 +3333,17 @@ jdoe at example.org</screen>
 	MAKE_IDEA ÊÑ¿ô¤òÀßÄꤷ¤Æ¤¯¤À¤µ¤¤¡£</para>
     </note>
 
-    <para>¤ª¤½¤é¤¯ºÇ¤â°ìÈÌŪ¤Ê <application>OpenSSL</application>
+    <para>ºÇ¤â°ìÈÌŪ¤Ê <application>OpenSSL</application>
       ¤ÎÍøÍÑÊýË¡¤Î¤Ò¤È¤Ä¤Ï¡¢
       ¥½¥Õ¥È¥¦¥§¥¢¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤¬»È¤¨¤ë¤è¤¦¤Ë¾ÚÌÀ½ñ¤òÄ󶡤¹¤ë¤³¤È¤Ç¤¹¡£
       ¤³¤ì¤é¤Î¾ÚÌÀ½ñ¤Ë¤è¤ê¡¢
       ²ñ¼Ò¤Þ¤¿¤Ï¸Ä¿Í¤Î¸ø³«¸°¤¬¡¢
       ²þ¤¶¤ó¤ä¤Ê¤ê¤¹¤Þ¤·¤¬¹Ô¤ï¤ì¤Æ¤¤¤Ê¤¤¤³¤È¤ò³Îǧ¤Ç¤­¤Þ¤¹¡£
-      ¤â¤·ÌäÂê¤È¤Ê¤Ã¤Æ¤¤¤ë¾ÚÌÀ½ñ¤¬¡¢Ç§¾Ú¶É
+      ¤â¤·ÌäÂê¤È¤Ê¤Ã¤Æ¤¤¤ë¾ÚÌÀ½ñ¤¬¡¢<quote>ǧ¾Ú¶É</quote>
       ¤Þ¤¿¤Ï <acronym>CA</acronym> ¤Ë¤è¤ê¸¡¾Ú¤µ¤ì¤Ê¤±¤ì¤Ð¡¢
       Ä̾ï·Ù¹ð¤¬É½¼¨¤µ¤ì¤Þ¤¹¡£
-      ǧ¾Ú¶É¤Ï¡¢VeriSign ¤Î¤è¤¦¤Ê²ñ¼Ò¤Ç¡¢
-      ¸Ä¿Í¤Þ¤¿¤Ï²ñ¼Ò¤Î¸ø³«¸°¤Î¸¡¾Ú¤ò¹Ô¤¨¤ë¤è¤¦¤Ë¡¢
+      ǧ¾Ú¶É¤Ï¡¢<link xlink:href="http://www.verisign.com">VeriSign</link>
+      ¤Î¤è¤¦¤Ê²ñ¼Ò¤Ç¡¢¸Ä¿Í¤Þ¤¿¤Ï²ñ¼Ò¤Î¸ø³«¸°¤Î¸¡¾Ú¤ò¹Ô¤¨¤ë¤è¤¦¤Ë¡¢
       ¾ÚÌÀ½ñ¤Ë½ð̾¤ò¹Ô¤¤¤Þ¤¹¡£
       ¾ÚÌÀ½ñ¤òºîÀ®¤¹¤ë¤Ë¤ÏÈñÍѤ¬¤«¤«¤ê¡¢
       ¾ÚÌÀ½ñ¤Î»ÈÍѤÏɬ¤º¤·¤âɬÍ×¾ò·ï¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£
@@ -3402,10 +3403,15 @@ An optional company name []:<userinput><replaceable>An
 
       <para><acronym>CA</acronym> ¤Î½ð̾¤¬É¬Íפʤ¤¾ì¹ç¤Ë¤Ï¡¢
 	¼«¸Ê½ð̾¾ÚÌÀ½ñ¤òºîÀ®¤Ç¤­¤Þ¤¹¡£
-	ºÇ½é¤Ë <acronym>CA</acronym> ¤Î¸°¤òÀ¸À®¤·¤Æ¤¯¤À¤µ¤¤¡£</para>
+	ºÇ½é¤Ë <acronym>RSA</acronym> ¤Î¸°¤òÀ¸À®¤·¤Æ¤¯¤À¤µ¤¤¡£</para>
 
+      <screen>&prompt.root; <userinput>openssl dsaparam -rand -genkey -out
+<filename>myRSA.key</filename> 1024</userinput></screen>
+	
+	<para>¼¡¤Ë¡¢<acronym>CA</acronym> ¸°¤òÀ¸À®¤·¤Æ¤¯¤À¤µ¤¤¡£</para>
+
       <screen>&prompt.root; <userinput>openssl gendsa -des3 -out \
-<filename>myca.key</filename> 1024</userinput></screen>
+<filename>myca.key</filename> <filename>myRSA.key</filename></userinput></screen>
 
       <para>¤³¤Î¸°¤ò»È¤Ã¤Æ¾ÚÌÀ½ñ¤òºîÀ®¤·¤Æ¤¯¤À¤µ¤¤¡£</para>
 
@@ -4567,9 +4573,8 @@ user at example.com's password: <userinput>*******</useri
 	¤ËÊݸ¤µ¤ì¤Þ¤¹¡£</para>
 
       <para>¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢<application>OpenSSH</application>
-	¥µ¡¼¥Ð¤Ï SSH v1 ¤È SSH v2
-	ξÊý¤ÎÀܳ¤ò¼õ¤±ÉÕ¤±¤ë¤è¤¦¤ËÀßÄꤵ¤ì¤Æ¤¤¤Þ¤¹¡£
-	¥¯¥é¥¤¥¢¥ó¥È¤Ï¤½¤Î¤É¤Á¤é¤«¤òÁªÂò¤Ç¤­¤Þ¤¹¡£
+	¥µ¡¼¥Ð¤Ï SSH v2	¤Î¤ß¤ÎÀܳ¤ò¼õ¤±ÉÕ¤±¤ë¤è¤¦¤ËÀßÄꤵ¤ì¤Æ¤¤¤Þ¤¹¡£
+	¥¯¥é¥¤¥¢¥ó¥È¤Ï¥Ð¡¼¥¸¥ç¥ó 1 ¤ª¤è¤Ó 2 ¤Î¤É¤Á¤é¤«¤òÁªÂò¤Ç¤­¤Þ¤¹¡£
 	¥Ð¡¼¥¸¥ç¥ó 2 ¤Ï¡¢µì¥Ð¡¼¥¸¥ç¥ó¤è¤ê¤â·ø¸Ç¤Ç°ÂÁ´¤Ç¤¹¡£</para>
 
       <para>&man.ssh.1; ¥³¥Þ¥ó¥É¤Ë¡¢¥×¥í¥È¥³¥ë v1 ¤È v2