Yoshida Shin (yy y ja jp) sakai dictoss( ) Debian Trivia Quiz

Size: px

Start display at page:

Download "Yoshida Shin (yy y ja jp) sakai dictoss( ) Debian Trivia Quiz"

しげじろうにばし
5 years ago
Views:

1 103 Debian.Deb 銀河系唯一のDebian 専門誌

2 Yoshida Shin (yy y ja jp) sakai dictoss( ) Debian Trivia Quiz 3 3 Debian Debian OpenVPN OpenSSL, CA OpenVPN CA HMAC OpenVPN OpenVPN Debian epub epub LaTeX epub

3 103 Debian : 1. vpn 1.1 Yoshida Shin VPN VPN IP VPN 1.2 (yy y ja jp) 1.3 sakai VPN VPN openvpn LAN WEB WEB-DB DB VPN 1.5 dictoss( ) openvpn ssh VPS VPN DynamicDNS L2TP/IPsec VPN IP (=NAT ) ssh PC VPN ssh 1.6 OpenVPN Cisco Anycoonect Anyconnect OpenConnect RSA OneTimePassword SSH Proxy VPN 2

4 103 Debian Debian Trivia Quiz Debian Debian debian-devel-announce@lists.debian.org debian-devel@lists.debian.org Debian Project News 1. Sylvestre Ledru JDK A OpenJDK7 B JDK6 C JDK8 2. OpenJDK A mipsel B amd64 C i Summer Of Code A David Bremner B Nicolas Dandrimont C Nobuhiro Iwamatsu 4. Brian Gupta Debian USPTO A B Debian C DD 3

5 103 Debian Debian 3.1 Debian 102 Debian Linux Kernel armmp dh strip raspberry pi 4

6 103 Debian OpenVPN 4.1 VPN (WAN) (LAN) OpenVPN TLS[5] *1 TLS HTTPS IP Raspberry Pi IP Raspberry pi LAN global static IP server (sakura vps) The internet mobile phone home network raspberry pi laptop 1 *1 TLS SSL 5

7 4.3 OpenSSL, CA OpenVPN *2 CA PKI(x509) openvpn VPN 4.4 Debian openvpn CA openssl openssl # apt-get install openvpn openssl /etc/openvpn/*.conf Debian openvpn /etc/openvpn conf openvpn 4.5 OpenVPN openvpn openvpn ping openvpn UDP TCP server$ sudo openvpn --dev tun1 --ifconfig client$ sudo openvpn --dev tun1 --remote --ifconfig client$ ifconfig tun1 Link encap:unspec HWaddr inet addr: P-t-P: Mask: UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1 RX packets:2 errors:0 dropped:0 overruns:0 frame:0 TX packets:2 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:100 RX bytes:168 (168.0 B) TX bytes:168 (168.0 B) client$ ping CA easy-rsa wheezy openvpn /usr/share/doc/openvpn/examples/easy-rsa/2.0/ *2 openvpn 6

8 # cd /etc/openvpn # sudo cp -R /usr/share/doc/openvpn/examples/easy-rsa/2.0/ easy-rsa/ # cd easy-rsa/ # vi vars export KEY_COUNTRY="JP" export KEY_PROVINCE="TOKYO" export KEY_CITY="Suginami-ku" export KEY_ORG="uekawa" export KEY_ ="dancerj@gmail.com" #export KEY_CN=changeme #export KEY_NAME=changeme #export KEY_OU=changeme #export PKCS11_MODULE_PATH=changeme #export PKCS11_PIN=1234 #../vars #./clean-all #./build-ca Common Name CA root 4.7 CA CA Certificate Signing Request (CSR) CA CRT CA OpenVPN CA OpenVPN CA sakura #./build-key-server sakura CN(common name) A challenge password an optional company name CSR CSR #./build-key client1 #./build-key nexus4 4.8 HMAC TLS CPU DoS HMAC # openvpn --genkey --secret ta.key 4.9 OpenVPN TLS Diffie Hellman #./build-dh 7

9 /etc/openvpn/server.conf port 1194 proto udp dev tun user nobody group nogroup tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0 # server is 0. ca /etc/openvpn/easy-rsa/keys/ca.crt cert /etc/openvpn/easy-rsa/keys/sakura.crt key /etc/openvpn/easy-rsa/keys/sakura.key # keep secret dh /etc/openvpn/easy-rsa/keys/dh1024.pem server ifconfig-pool-persist ipp.txt # internal tun0 connection IP keepalive comp-lzo persist-key persist-tun # Compression - must be turned on at both end status log/openvpn-status.log verb 3 # verbose mode client-to-client log/ /etc/openvpn/log/ /etc/openvpn/ipp.txt IP 60 keepalive ping 2 /etc/openvpn/*.conf TUN net30 /30 ipv4 4 TAP p2p subnet IP A tun or tap TUN TAP TAP L2) TUN IP L3) ios Android openvpn TUN TUN OS tap L2 linux tun L3 linux, ios, Android 4.10 OpenVPN CA Debian root ca.crt, client.crt, client.key, ta.key Android OpenVPN [6] /sdcard conf ovpn OpenVPN Import SD 8

10 client dev tun port 1194 proto udp remote xyz.sakura.ne.jp 1194 nobind # vpn server ip : port tls-auth ta.key 1 # client is 1. ca ca.crt cert android-nexus4.crt key android-nexus4.key remote-cert-tls server comp-lzo persist-key persist-tun verb 3 remote-cert-tls server./build-key-server key usage CA /etc/network/interfaces [3] OpenVPN * Android UI Android $ ls -1 android-nexus4.crt android-nexus4.csr android-nexus4.key ca.crt client.ovpn ta.key $ adb push. /sdcard/secure push:./ca.crt -> /sdcard/secure/ca.crt push:./android-nexus4.key -> /sdcard/secure/android-nexus4.key push:./ta.key -> /sdcard/secure/ta.key push:./android-nexus4.crt -> /sdcard/secure/android-nexus4.crt push:./client.ovpn -> /sdcard/secure/client.ovpn push:./android-nexus4.csr -> /sdcard/secure/android-nexus4.csr *3 /etc/network/if-up.d/openvpn 9

11 sdcard 4.11 openvpn push redirect-private VPN VPN /24 /usr/share/doc/openvpn/examples/sample-config-files/firewall.sh iptables VPN redirect-gateway 10

12 WiFi DHCP DNS VPN bypass-dhcp, bypass-dns 4.12 openvpn 2.3 git easy-rsa Windows ssh ssh ssh VPN root ssh VPN root ssh openvpn openvpn TCP UDP root ssh 1 ssh ssh -L, -R TCP -D SOCKS VPN -w IP [1] [2] openvpn(8) manpage [3] OpenVPN README.Debian /usr/share/doc/openvpn/readme.debian.gz [4] OpenVPN Community Software [5] The Transport Layer Security (TLS) Protocol Version [6] OpenVPN Connect Android app openvpn 11

13 103 Debian Debian epub 5.1 epub ebook reader Debian Debian *4 Debian LaTeX PDF PDF PDF *5 epub O Reilly, Ebook epub Debian LaTeX *6 epub 5.2 LaTeX epub L A TEX epub 1) L A TEX epub 2) a. TeX b. DVI, XML HTML 2)-2. epub 3) PDF epub *4 *5 *6 PDF 12

14 2)-a 2)-b XML, HTML 2)-2 LaTeX platex DVI dvipdfmx 3) PDF epub 1) 2 LaTeX epub 5.3 Debian 1. Debian (debianmeetingresume tex) 2. latex2epub TEX (sample.tex) Debian latex2pub 1) Pandoc L A TEX epub NG OK 1) latex2epub L A TEX epub NG OK 2)-a L A TEXML L A TEX XML NG OK 2)-b TEX4ht DVI HTML NG NG 2)-b htplatex(tex4ht) TEX HTML OK NG 3) Pandoc HTML epub OK N/A 4) Calibre PDF epub OK OK Debian latex2epup ( ) documentclass 5.4 Debian htplatex & pandoc tabular table html pandoc TEX4ht HTML pandoc ( ) PDF (= make ) htplatex dvi2ps-fontdata-a2n dvipdfmx DVI PDF ** ERROR ** Virtual fonts nested too deeply 13

15 TEX4ht *7 Debian htplatex Debian L A TEX TEX4ht HTML $ apt-get install dvi2ps-fontdata-a2n dvi2dvi dvipng $./htplatex debianmeetingresume tex jp,2,sections+./html/ L A TEX HTML pandoc epub $ cd html $ pandoc -o debianmeetingresume epub debianmeetingresume200708*.html -e epub $./htplatex -e debianmeetingresume tex jp,2,sections calibre calibre tabular 5.5 L A TEX epub ipad mini Debian PDF PDF [1] What s the best TEX-to-HTML or TEX-to-ePUB converter? /01/05/whats-the-best-tex-to-html-or-tex-to-epub-converter/ *7 14

16 [2] Tools for Converting L A TEXto XML [3] Pandoc [4] LXir [5] Hermes [6] TEXWiki [7] L A TEX tex4ht-howto.html [8] L A TEX2EPUB 15

17 16

18 Debian Debian 17

1. NIC IP 2. VMware Server NAT 3. OS OS CentOS 5.3 NAT NAT /8 eth /8 4. NAT

LPIC 3 303 Security tmiyahar@begi.net 1. NIC IP 2. VMware Server NAT 3. OS OS CentOS 5.3 NAT NAT 10.0.0.0/8 eth0 10.0.0.10/8 4. NAT 22 1194 2 1. OS 2. OS 3. OS Web 4. OS SSH PuTTY OS WinSCP 3 OpenSSL HTTPS