{"id":1830,"date":"2024-02-22T15:10:38","date_gmt":"2024-02-22T06:10:38","guid":{"rendered":"https:\/\/www.rocher.kyoto.jp\/arbr\/?p=1830"},"modified":"2024-03-02T12:16:23","modified_gmt":"2024-03-02T03:16:23","slug":"esp8266%e7%94%a8bearssl_validation-ino%e3%81%aessl%e6%8e%a5%e7%b6%9a%e7%94%a8%e3%83%95%e3%82%a1%e3%82%a4%e3%83%ab%e6%9b%b4%e6%96%b0","status":"publish","type":"post","link":"https:\/\/www.rocher.kyoto.jp\/arbr\/?p=1830","title":{"rendered":"ESP8266\u7528(BearSSL_Validation.ino)\u306eSSL\u63a5\u7d9a\u7528\u30d5\u30a1\u30a4\u30eb\u66f4\u65b0"},"content":{"rendered":"\n

ESP8266(ESP-WROOM-02)\u306e\u5185\u5bb9\u3002ESP-WROOM-32\u3067\u306f\u306a\u3044\u306e\u3067\u6ce8\u610f\u3002<\/p>\n\n\n\n

\u3053\u3061\u3089<\/a>\u306eBearSSL_Validation.ino\u4e8b\u524d\u6e96\u5099\u306e\u624b\u9806\u3002\u8a66\u3057\u3066\u3044\u308b\u74b0\u5883\u306fWindows11\u3002<\/p>\n\n\n\n

\u524d\u63d0<\/h2>\n\n\n\n

BearSSL_Validation.ino\u3068\u540c\u3058\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u3042\u308bcerts.h\u3060\u304c\u3001\u30b5\u30fc\u30d0\u5074\u306e\u8a3c\u660e\u66f8\u304c\u66f4\u65b0\u3055\u308c\u3066\u3044\u308b\u3068\u3064\u306a\u304c\u3089\u306a\u304b\u3063\u305f\u308a\u3059\u308b\u3002\uff08\u30ec\u30dd\u30b8\u30c8\u30ea\u5074\u306e\u66f4\u65b0\u30bf\u30a4\u30df\u30f3\u30b0\u6b21\u7b2c\u3067\u306f\u3064\u306a\u304c\u3063\u305f\u308a\u3064\u306a\u304c\u3089\u306a\u304b\u3063\u305f\u308a\u3060\u3068\u601d\u3046\uff09<\/p>\n\n\n\n

certs.h\u3092\u898b\u308b\u3068\u4e0b\u306e\u3088\u3046\u306b\u66f8\u3044\u3066\u3042\u308a<\/p>\n\n\n\n

\/\/ this file is autogenerated - any modification will be overwritten\n\/\/ unused symbols will not be linked in the final binary\n\/\/ generated on 2023-03-20 23:02:42\n\/\/ by ['..\/..\/..\/..\/tools\/cert.py', '-s', 'www.example.com', '-n', 'SSL']<\/pre>\n\n\n\n
..\/..\/..\/..\/tools\/cert.py', '-s', 'www.example.com', '-n', 'SSL'<\/code><\/pre>\n\n\n\n
\u3057\u3066\u66f4\u65b0\u3059\u308b\u3089\u3057\u3044\u3002\u4ed6\u306e\u30c9\u30e1\u30a4\u30f3\u7528\u306b\u4f5c\u308b\u5834\u5408\u3082\u304a\u305d\u3089\u304fcert.py\u3092\u305f\u305f\u3051\u3070\u3088\u3044\u3068\u601d\u3046\u3002<\/p>\n\n\n\n
\u306a\u304a\u3001cert.py\u306e\u30d5\u30a1\u30a4\u30eb\u5148\u982d\u30b3\u30e1\u30f3\u30c8<\/p>\n\n\n\n
#!\/usr\/bin\/env python3\n\n# Script to download\/update certificates and public keys\n# and generate compilable source files for c++\/Arduino.\n# released to public domain<\/pre>\n\n\n\n
Windows\u306e\u306f\u307e\u308a\u30dd\u30a4\u30f3\u30c8<\/h2>\n\n\n\n
Windows\u3067MS Store\u304b\u3089\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3068\u30c4\u30fc\u30eb\u306f\u898b\u308c\u306a\u3044\u5834\u6240\u306b\u3042\u308a\u305d\u3046\u3002\uff08MS Store\u304b\u3089\u5165\u308c\u305f\u30bd\u30d5\u30c8\u985e\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306f\u898b\u308c\u306a\u3044\u6a21\u69d8\uff09\u30a4\u30f3\u30b9\u30c8\u30fc\u30e9\u30fc\u76f4\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305fIDE\u5834\u5408\u591a\u5206\u4e0b\u307f\u305f\u3044\u306a\u914d\u7f6e\u3002<\/p>\n\n\n\n
C:\\Users\\hoge<\/strong>\\Documents\\ArduinoData\\packages\\esp8266\\hardware\\esp8266\\3.1.2\\libraries\\ESP8266WiFi\\examples\\BearSSL_Validation<\/p>\n\n\n\n
\u3060\u3068\u4e0b\u306b\u3042\u308b<\/p>\n\n\n\n
C:\\Users\\hoge<\/strong>\\Documents\\ArduinoData\\packages\\esp8266\\hardware\\esp8266\\3.1.2\\tools<\/p>\n\n\n\n
MS Store\u304b\u3089\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u898b\u308c\u306a\u3044\u4eba\u306f\u3001\u30ec\u30dd\u30b8\u30c8\u30ea<\/a>\u306e\u30bd\u30fc\u30b9\u4e00\u5f0f\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u3089\u591a\u5206\u4e2d\u306b\u5165\u3063\u3066\u3044\u308bcert.py\u3092\u4f7f\u3048\u308b\u3002<\/p>\n\n\n\n
\u74b0\u5883\u69cb\u7bc9<\/h2>\n\n\n\n
cert.py\u306fpython3\u306a\u306e\u3067\u5fc5\u8981\u306a\u3089\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3002<\/p>\n\n\n\n
\u30e9\u30a4\u30d6\u30e9\u30ea\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/p>\n\n\n\n
pip install cryptography<\/code><\/pre>\n\n\n\n
\u306a\u3044\u3068\u4e0b\u307f\u305f\u3044\u306a\u30e1\u30c3\u30bb\u30fc\u30b8<\/p>\n\n\n\n
python  '..\/..\/..\/..\/tools\/cert.py' '-s' 'www.example.com' '-n' 'SSL'                            \nTraceback (most recent call last):\n  File \"C:\\Users\\kitam\\Documents\\ArduinoData\\packages\\esp8266\\hardware\\esp8266\\3.1.2\\tools\\cert.py\", line 15, in <module>\n    from cryptography import x509\nModuleNotFoundError: No module named 'cryptography'<\/pre>\n\n\n\n
\u3082\u3057\u304b\u3057\u305f\u3089<\/p>\n\n\n\n
pip install urllib<\/p>\n\n\n\n
\u3082\u3044\u308b\u304b\u3082\u3002<\/p>\n\n\n\n
import re\nimport ssl\nimport sys\nimport socket\nimport argparse\nimport datetime<\/pre>\n\n\n\n
\u3042\u305f\u308a\u306f\u5143\u3005\u4f7f\u3048\u308b\u3068\u601d\u3046\u3051\u3069\u5fc5\u8981\u306a\u3089\u305d\u3044\u3064\u3089\u3082<\/p>\n\n\n\n
\u8a3c\u660e\u66f8\u751f\u6210\u5b9f\u884c<\/h2>\n\n\n\n
cd C:\\Users\\kitam<\/strong>\\Documents\\ArduinoData\\packages\\esp8266\\hardware\\esp8266\\3.1.2\\libraries\\ESP8266WiFi\\examples\\BearSSL_Validation\npython  '..\/..\/..\/..\/tools\/cert.py' '-s' 'www.example.com' '-n' 'SSL' > test.h\n<\/code><\/pre>\n\n\n\n
\u30d1\u30b9\u306b\u30e6\u30fc\u30b6\u540d\u5165\u3063\u3066\u3044\u308b\u306e\u3067\u9069\u5b9c\u66f8\u304d\u63db\u3048\u3002<\/p>\n\n\n\n
\u51fa\u529b\u30d5\u30a1\u30a4\u30eb\u540d(test.h)\u3082\u9069\u5b9c\u66f8\u304d\u63db\u3048<\/p>\n\n\n\n
\u7d50\u679c<\/p>\n\n\n\n
PS C:\\Users\\kitam\\Documents\\ArduinoData\\packages\\esp8266\\hardware\\esp8266\\3.1.2\\libraries\\ESP8266WiFi\\examples\\BearSSL_Validation> python  '..\/..\/..\/..\/tools\/cert.py' '-s' 'www.example.com' '-n' 'SSL' > test.h\nC:\\Users\\kitam\\Documents\\ArduinoData\\packages\\esp8266\\hardware\\esp8266\\3.1.2\\tools\\cert.py:44: CryptographyDeprecationWarning: Properties that return a na\u00efve datetime object have been deprecated. Please switch to not_valid_before_utc.\n  print('\/\/ not valid before:', xcert.not_valid_before)\nC:\\Users\\kitam\\Documents\\ArduinoData\\packages\\esp8266\\hardware\\esp8266\\3.1.2\\tools\\cert.py:45: CryptographyDeprecationWarning: Properties that return a na\u00efve datetime object have been deprecated. Please switch to not_valid_after_utc.\n  print('\/\/ not valid after: ', xcert.not_valid_after)\n<\/pre>\n\n\n\n
\u306a\u3093\u304b\u4f59\u8a08\u306a\u8b66\u544a\u51fa\u3066\u3044\u308b\u3051\u3069chatgpt\u5148\u751f\u306b\u3088\u308b\u3068\u4ee5\u4e0b\u3089\u3057\u3044\u306e\u3067\u3068\u308a\u3042\u3048\u305a\u7121\u8996<\/p>\n\n\n\n
\u3053\u306e\u8b66\u544a\u306f\u3001Cryptography \u30e9\u30a4\u30d6\u30e9\u30ea\u304c\u63d0\u4f9b\u3059\u308b\u4e00\u90e8\u306e\u6a5f\u80fd\u306b\u304a\u3044\u3066\u3001\u9069\u5207\u306a\u30bf\u30a4\u30e0\u30be\u30fc\u30f3\u60c5\u5831\u304c\u6b20\u5982\u3057\u3066\u3044\u308b\uff08na\u00efve\u306a\uff09datetime<\/code>\u30aa\u30d6\u30b8\u30a7\u30af\u30c8\u3092\u8fd4\u3059\u30d7\u30ed\u30d1\u30c6\u30a3\u304c\u975e\u63a8\u5968\u3067\u3042\u308b\u3053\u3068\u3092\u793a\u3057\u3066\u3044\u307e\u3059\u3002\u4ee3\u308f\u308a\u306b\u3001not_valid_before_utc<\/code>\u3068\u3044\u3046\u30d7\u30ed\u30d1\u30c6\u30a3\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u304c\u63a8\u5968\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/pre>\n\n\n\n
ino\u4fee\u6b63<\/h2>\n\n\n\n
\u4fee\u6b63\u76ee\u7684<\/h3>\n\n\n\n
Example\u306eBearSSL_Validation.ino\u3092\u4efb\u610f\u30d5\u30a9\u30eb\u30c0\uff08\u4eca\u56de\u306f\u30c7\u30b9\u30af\u30c8\u30c3\u30d7\uff09\u306b\u4fdd\u5b58\u3002<\/p>\n\n\n\n
\u305d\u306e\u5f8c\u3001cert.h\u306e\u4e2d\u8eab\u3092\u5148\u307b\u3069\u51fa\u529b\u3057\u305ftest.h\u306b\u5909\u66f4<\/p>\n\n\n\n
\u305d\u306e\u307e\u307e\u5b9f\u884c\u3059\u308b\u3068<\/p>\n\n\n\n
C:\\Users\\kitam\\Desktop\\BearSSL_Validation\\BearSSL_Validation.ino: In function 'void fetchCertAuthority()':\nC:\\Users\\kitam\\Desktop\\BearSSL_Validation\\BearSSL_Validation.ino:15:14: error: 'cert_DigiCert_TLS_RSA_SHA256_2020_CA1' was not declared in this scope; did you mean 'cert_DigiCert_Global_G2_TLS_RSA_SHA256_2020_CA1'?\n   15 | #define CERT cert_DigiCert_TLS_RSA_SHA256_2020_CA1\n      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\nC:\\Users\\kitam\\Desktop\\BearSSL_Validation\\BearSSL_Validation.ino:15:14: note: in definition of macro 'CERT'\n   15 | #define CERT cert_DigiCert_TLS_RSA_SHA256_2020_CA1\n      |              ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~\n\nexit status 1\n\nCompilation error: 'cert_DigiCert_TLS_RSA_SHA256_2020_CA1' was not declared in this scope; did you mean 'cert_DigiCert_Global_G2_TLS_RSA_SHA256_2020_CA1'?<\/pre>\n\n\n\n
\u51fa\u529b\u3055\u308c\u305ftest.h\u306b\u3042\u308bcert_DigiCert_Global_G2_TLS_RSA_SHA256_2020_CA1\u304c\u5143\u30d8\u30c3\u30c0\u30fc\u30d5\u30a1\u30a4\u30eb\u306b\u3042\u3063\u305fcert_DigiCert_TLS_RSA_SHA256_2020_CA1\u304b\u3089\u5909\u308f\u3063\u3066\u3044\u308b\u3002\u3061\u306a\u307f\u306b\u3001cert_DigiCert_Global_Root_G2\u3068cert_DigiCert_Global_Root_CA\u3082\u5909\u308f\u3063\u3066\u3044\u308b\u3002<\/p>\n\n\n\n
\u8a3c\u660e\u66f8\u306eCN\u304b\u3089cert.py\u3067\u81ea\u52d5\u547d\u540d\u3057\u3066\u3044\u308b\u306e\u3067\u3057\u3087\u3046\u304c\u306a\u3044\u3002<\/p>\n\n\n\n
name = re.sub('[^a-zA-Z0-9_]', '_', cn)<\/code><\/pre>\n\n\n\n
\u9577\u671f\u904b\u7528\u3059\u308b\u306a\u3089cert.py\u3092\u3044\u3058\u308b\u304b\u51fa\u3066\u304d\u305f\u30d8\u30c3\u30c0\u30fc\u306e\u547d\u540d\u3092\u66f8\u304d\u63db\u3048\u3066\u56fa\u5b9a\u306b\u3057\u305f\u65b9\u304c\u826f\u3044\u304b\u3082\u3002\u6df1\u304f\u8003\u3048\u306a\u3044\u3067\u53d6\u308a\u6025\u304eino\u306e\u65b9\u3092\u4fee\u6b63\u3059\u308b\u3002\uff0815\u884c\u76ee\uff09<\/p>\n\n\n\n
#define CERT cert_DigiCert_Global_G2_TLS_RSA_SHA256_2020_CA1<\/p>\n\n\n\n
<\/p>\n\n\n\n
\u52d5\u4f5c\u78ba\u8a8d\u306f\u5143\u306e\u30da\u30fc\u30b8<\/a>\u3067<\/p>\n","protected":false},"excerpt":{"rendered":"
ESP8266(ESP-WROOM-02)\u306e\u5185\u5bb9\u3002ESP-WROOM-32\u3067\u306f\u306a\u3044\u306e\u3067\u6ce8\u610f\u3002 \u3053\u3061\u3089\u306eBearSSL_Validation.ino\u4e8b\u524d\u6e96\u5099\u306e\u624b\u9806\u3002\u8a66\u3057\u3066\u3044\u308b\u74b0\u5883\u306fWindows11\u3002 \u524d\u63d0 BearSSL […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[117],"tags":[123,132],"class_list":["post-1830","post","type-post","status-publish","format-standard","hentry","category-117","tag-esp","tag-esp-wroom-02"],"_links":{"self":[{"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=\/wp\/v2\/posts\/1830","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1830"}],"version-history":[{"count":7,"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=\/wp\/v2\/posts\/1830\/revisions"}],"predecessor-version":[{"id":1910,"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=\/wp\/v2\/posts\/1830\/revisions\/1910"}],"wp:attachment":[{"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1830"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1830"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rocher.kyoto.jp\/arbr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1830"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}