# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: Apache Traffic Server 6.2\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2016-06-30 14:07+0900\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.2.0\n"

#: ../../../admin-guide/security/index.en.rst:23
msgid "Security"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:31
msgid "Controlling Access"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:33
msgid ""
"Traffic Server can be configured to allow only certain clients to use the "
"proxy cache."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:36
msgid ""
"Add a line to :file:`ip_allow.config` for each IP address or range of IP "
"addresses allowed to access Traffic Server."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:39
#: ../../../admin-guide/security/index.en.rst:333
msgid ""
"Run the command :option:`traffic_ctl config reload` to apply the "
"configuration changes."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:45
msgid "SSL Termination"
msgstr "SSL ターミネーション"

#: ../../../admin-guide/security/index.en.rst:47
msgid ""
"The Traffic Server *SSL termination* option enables you to secure "
"connections in reverse proxy mode between a client and a Traffic Server and/"
"or Traffic Server and an origin server."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:51
msgid ""
"The following sections describe how to enable and configure the SSL "
"termination option."
msgstr ""
"次の章では SSL ターミネーションをどうのように設定し有効化するかを説明しま"
"す。"

#: ../../../admin-guide/security/index.en.rst:54
msgid ""
"Enable and configure SSL termination for client/Traffic Server "
"connections: :ref:`client-and-traffic-server-connections`"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:57
msgid ""
"Enable and configure SSL termination for Traffic Server/origin server "
"connections: :ref:`traffic-server-and-origin-server-connections`"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:63
msgid "Client and Traffic Server Connections"
msgstr "クライアントと Traffic Server の接続"

#: ../../../admin-guide/security/index.en.rst:67
msgid ""
"The figure below illustrates communication between a client and Traffic "
"Server (and between Traffic Server and an origin server) when the SSL "
"termination option is enabled and configured for Client/Traffic Server "
"connections only."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:76
msgid "Client and Traffic Server communication using SSL termination"
msgstr "SSL ターミネーションを使用したクライアントと Traffic Server の通信"

#: ../../../admin-guide/security/index.en.rst:80
#: ../../../admin-guide/security/index.en.rst:174
msgid "The figure above depicts the following:"
msgstr "上の図は次のことを説明しています"

#: ../../../admin-guide/security/index.en.rst:82
msgid ""
"The client sends an HTTPS request for content. Traffic Server receives the "
"request and performs the SSL handshake to authenticate the client "
"(depending on the authentication options configured) and determine the "
"encryption method that will be used. If the client is allowed access, then "
"Traffic Server checks its cache for the requested content."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:88
msgid ""
"If the request is a cache hit and the content is fresh, then Traffic Server "
"encrypts the content and sends it to the client. The client decrypts the "
"content (using the method determined during the handshake) and displays it."
msgstr ""
"リクエストがキャッシュヒットかつコンテンツが新鮮な場合、Traffic Server はコ"
"ンテンツを暗号化しクライアントに送信します。クライアントはコンテンツを (ハン"
"ドシェイクの間に決定した方式で) 復号化し表示します。"

#: ../../../admin-guide/security/index.en.rst:92
msgid ""
"If the request is a cache miss or cached content is stale, then Traffic "
"Server communicates with the origin server via HTTP and obtains a plain "
"text version of the content. Traffic Server saves the plain text version of "
"the content in its cache, encrypts the content, and sends it to the client. "
"The client decrypts and displays the content."
msgstr ""
"リクエストがキャッシュミスもしくはキャッシュされたコンテンツが新鮮でない場"
"合、Traffic Server はオリジンサーバーと HTTP で通信し平文のコンテンツを取得"
"します。Traffic Server は平文のコンテンツをキャッシュに保存し、コンテンツを"
"暗号化し、クライアントに送信します。クライアントはコンテンツを復号化し表示し"
"ます。"

#: ../../../admin-guide/security/index.en.rst:98
msgid ""
"To configure Traffic Server to use the SSL termination option for Client/"
"Traffic Server connections, you must do the following:"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:101
msgid ""
"Obtain and install an SSL server certificate from a recognized certificate "
"authority. The SSL server certificate contains information that enables the "
"client to authenticate Traffic Server and exchange encryption keys."
msgstr ""
"SSL サーバー証明書を認められた認証局から取得しインストールする。SSL サーバー"
"証明書はクライアントが Traffic Server を認証し暗号化鍵を交換することを可能に"
"する情報を含んでいます。"

#: ../../../admin-guide/security/index.en.rst:106
msgid ""
"Set the port number used for SSL communication using :ts:cv:`proxy.config."
"http.server_ports` in :file:`records.config`."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:109
msgid ""
"Set the appropriate base path for your SSL certificates and private keys "
"in :file:`records.config`. ::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:115
msgid ""
"Add an entry to :file:`ssl_multicert.config` for each certificate and key "
"which your Traffic Server system will be using to terminate SSL connections "
"with clients. ::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:122
msgid ""
"*Optional*: Configure the use of client certificates using the variable :ts:"
"cv:`proxy.config.ssl.client.certification_level` in :file:`records.config`. "
"If you configure Traffic Server to require client certificates, then "
"Traffic Server verifies the client certificate during the SSL handshake "
"that authenticates the client. If you configure Traffic Server to not "
"require client certificates, or if you configure certificates to be "
"optional and the connecting client does not present one, then access to "
"Traffic Server is managed through other Traffic Server options that have "
"been set (such as rules in :file:`ip_allow.config`). ::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:134
msgid "This variable permits one of the following values to be set:"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:137
msgid "Value"
msgstr "値"

#: ../../../admin-guide/security/index.en.rst:137
msgid "Description"
msgstr "解説"

#: ../../../admin-guide/security/index.en.rst:139
msgid "``0``"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:139
msgid "Client certificates not required."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:140
msgid "``1``"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:140
msgid "Client certificates optional. If present, will be used to validate."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:141
msgid "``2``"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:141
msgid ""
"Client certificates required, and must validate based on configured CAs."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:144
msgid ""
"*Optional*: Configure the use of Certification Authorities (CAs). CAs add "
"security by verifying the identity of the person requesting a certificate. "
"The list of acceptable CA signers is configured with :ts:cv:`proxy.config."
"ssl.CA.cert.path` in :file:`records.config`. ::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:151
#: ../../../admin-guide/security/index.en.rst:238
msgid ""
"Run the command :option:`traffic_ctl server restart` to restart Traffic "
"Server."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:158
msgid "Traffic Server and Origin Server Connections"
msgstr "Traffic Server とオリジンサーバーの接続"

#: ../../../admin-guide/security/index.en.rst:162
msgid ""
"The figure below illustrates communication between Traffic Server and an "
"origin server when the SSL termination option is enabled for Traffic Server/"
"origin server connections."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:170
msgid "Traffic Server and origin server communication using SSL termination"
msgstr "SSL ターミネーションを使用したTraffic Server とオリジンサーバーの通信"

#: ../../../admin-guide/security/index.en.rst:176
msgid ""
"If a client request is a cache miss or is stale, then Traffic Server sends "
"an HTTPS request for the content to the origin server. The origin server "
"receives the request and performs the SSL handshake to authenticate Traffic "
"Server and determine the encryption method to be used."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:181
msgid ""
"If Traffic Server is allowed access, then the origin server encrypts the "
"content and sends it to Traffic Server, where it is decrypted (using the "
"method determined during the handshake). A plain text version of the "
"content is saved in the cache, if Traffic Server deems the content "
"cacheable."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:186
msgid ""
"If SSL termination is enabled for Client/Traffic Server connections, then "
"Traffic Server re-encrypts the content and sends it to the client via "
"HTTPS, where it is decrypted and displayed. If SSL termination is not "
"enabled for Client/Traffic Server connections, then Traffic Server sends "
"the plain text version of the content to the client via HTTP."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:192
msgid ""
"To configure Traffic Server to use the SSL termination option for Traffic "
"Server and origin server connections, you must do the following:"
msgstr ""
"Traffic Server が Traffic Server とオリジンサーバーの間で SSL ターミネーショ"
"ンを使用するように設定するには、次のことを行わなければなりません"

#: ../../../admin-guide/security/index.en.rst:195
msgid ""
"Ensure first that your origin server responds properly to SSL requests, and "
"configure it for client certificate validation if you intend to use that as "
"part of your access control scheme."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:199
msgid ""
"Refer to your origin server's documentation for details. If your origin "
"server is another Traffic Server system, then you may follow the steps "
"outlined in `Client and Traffic Server Connections`_ for configuring the "
"origin server to validate client certificates."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:204
msgid ""
"*Optional*: Obtain and install an SSL client certificate from a recognized "
"certificate authority, if your origin server requires client certificate "
"validation for access control. Your client certificate must be signed by a "
"Certificate Authority recognized by your origin server."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:209
msgid ""
"If you are using a client certificate, you must add its location to :file:"
"`records.config` in the setting :ts:cv:`proxy.config.ssl.client.cert.path` "
"and :ts:cv:`proxy.config.ssl.client.cert.filename`. ::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:216
msgid ""
"You must also provide the paths to the private key for this certificate, "
"unless the key is contained within the same file as the certificate, using :"
"ts:cv:`proxy.config.ssl.client.private_key.path` and :ts:cv:`proxy.config."
"ssl.client.private_key.filename`. ::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:224
msgid ""
"Enable or disable, per your security policy, server SSL certificate "
"verification using :ts:cv:`proxy.config.ssl.client.verify.server` in :file:"
"`records.config`. ::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:230
msgid ""
"Add the collection of authorized Certificate Authorities to the Traffic "
"Server configuration in :file:`records.config` using the settings :ts:cv:"
"`proxy.config.ssl.client.CA.cert.path` and :ts:cv:`proxy.config.ssl.client."
"CA.cert.filename`. ::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:245
msgid "Rotating TLS Session Ticket Keys"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:247
msgid ""
"TLS sessions can be resumed through session tickets which are encrypted "
"with a session ticket key and stored on clients. For better security, the "
"ticket keys can be rotated periodically, say, every 24 hours. The ticket "
"keys are stored in a ticket key file as a reverse queue in 48-byte chunks."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:252
msgid ""
"Generate a new ticket key and push it to the beginning of the ticket key "
"file."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:254
msgid "*Optional*: Delete the last ticket key from the ticket key file."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:256
msgid ""
"Touch :file:`ssl_multicert.config` to indicate that the SSL configuration "
"is stale."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:258
msgid ""
"Run the command :option:`traffic_ctl config reload` to apply the new ticket "
"key."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:263
msgid "OCSP Stapling"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:265
msgid ""
"OCSP Stapling is an alternative approach to checking the revocation status "
"of an SSL certificate using the Online Certificate Status Protocol."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:269
msgid ""
"Under the original OCSP implementation, clients requested a certificate's "
"revocation status directly from the Certificate Authority (CA) that issued "
"the certificate.  This could cause significant load on the CA servers since "
"they were required to provide a response to every client of a given "
"certificate in real time."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:276
msgid ""
"Enabling OCSP Stapling instructs Traffic Server to retrieve and cache the "
"revocation status of all configured SSL certificates, and present them to "
"the client when the client requests the status.  Traffic Server will "
"automatically query the OCSP responder specified in the SSL certificate to "
"gather the latest revocation status.  Traffic Server will then cache the "
"results for each configured certificate.  The location of the OCSP responder "
"is taken from the Authority Information Access field of the signed "
"certificate. For example::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:288
msgid ""
"Support for OCSP Stapling can be tested using the -status option of the "
"OpenSSL client::"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:299
msgid ""
"Details of the OCSP Stapling TLS extension can be found in :rfc:`6961`."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:301
msgid ""
"To configure Traffic Server to use OCSP Stapling, edit the following "
"variables in :file:`records.config` file:"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:304
msgid ":ts:cv:`proxy.config.ssl.ocsp.enabled`"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:305
msgid ":ts:cv:`proxy.config.ssl.ocsp.cache_timeout`"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:306
msgid ":ts:cv:`proxy.config.ssl.ocsp.request_timeout`"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:307
msgid ":ts:cv:`proxy.config.ssl.ocsp.update_period`"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:312
msgid "Split DNS"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:314
msgid ""
"The *Split DNS* option enables you to configure Traffic Server to use "
"multiple DNS servers, as dictated by your security requirements. For "
"example, you might configure Traffic Server to use one set of DNS servers "
"to resolve hostnames on your internal network, while allowing DNS servers "
"outside the firewall to resolve hosts on the Internet. This maintains the "
"security of your intranet, while continuing to provide direct access to "
"sites outside your organization."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:322
msgid "To configure Split DNS:"
msgstr ""

#: ../../../admin-guide/security/index.en.rst:324
msgid ""
"Specify the rules for performing DNS server selection based on the "
"destination domain, the destination host, or a URL regular expression. "
"These rules are located in :file:`splitdns.config`."
msgstr ""

#: ../../../admin-guide/security/index.en.rst:328
msgid ""
"Enable the *Split DNS* option by adjusting :ts:cv:`proxy.config.dns."
"splitDNS.enabled` in :file:`records.config`. ::"
msgstr ""

#~ msgid ""
#~ "Run the command :option:`traffic_line -x` to apply the configuration "
#~ "changes."
#~ msgstr ":option:`traffic_line -x` を実行して設定の変更を適用してください。"
