ܼ

SSLƳ2017ǯ)

֤᤮Ƥ뤿ᡢ2017ǯʳǤμ򵭺ܤ롣

Ϣ

  • иκ̩
    openssl genrsa 2048 > private-key.pem
  • CertificateSigningRequestκ
    openssl req -new -key private-key.pem > private-key.csr
  • x509ʾκʸ
    openssl x509 -req -signkey private-key.pem < private-key.csr > private-key.crt 

AWSؤȤ߹

ELBؤ

ELBκ塢ꥹʡHTTPSꥹʡɲä롣
κȤκݤξɤ߹ޤƻѤ롣򥢥åץɤݤAIM̵ȤƼԤ뤳Ȥ뤬⤦Ʊ򷫤֤ơϿѤ߾򤹤ȻѤǤ롣

  • ̾Ǥդ̾Τ
    ץ饤١ȥprivate-key.pemȤ򥳥ԡ
    ѥ֥åprivate-key.crt Ȥ򥳥ԡ
    Τޤ

SSLƳ2007ǯ)

ܼapache 2.2ˤƼѤSSL̿ĶۤǤ롣 Ķ˱äapache󥹥ȡ뤵Ƥ뤳Ȥ˲⤹롣

OS     : Redhat Enterprise Linux ESv4 (x86 32bit)~
Apache : apache 2.2.3~
OpenSSL: openssl 0.9.7a

SSLκ

OpenSSLѤ/usr/local/apache/conf/ssl۲˾롣

cd /usr/local/apache/conf
mkdir ssl
cd ssl
openssl md5 /bin/* > rand.dat
openssl genrsa -des3 -out server.key -rand rand.dat 1024
openssl req -new -key server.key -out server.csr
openssl x509 -in server.csr -out server.crt -req -signkey server.key -days 3650

켰롣

񤫤ѥɤ

server.key˥ѥɤޤޤ줿֤Ǥϡapacheεư٤˥ѥɤ뤿ᡢѥɤκԤ

openssl rsa -in server.key -out nopass-server.key

server.key⥵nopass-server.key롣

SSLͭ

apacheˤSSLͭԤˤϥѥmod_sslȤ߹ɬפ롣
apacheΥ󥹥ȡ򻲾ȤΤȡ

apacheˤƹԤmod_sslͭSSL󥸥εưVirtualHostȾȤ߹ߤˤʤ롣

  • httpd.conf
    LoadModule ssl_module modules/mod_ssl.so
    Include conf/ssl.conf
  • ssl.conf

ȥå   Խ ʬ ʎގ̎ ź ʣ ̾ѹ   ǽ   إ   ǽRSS
Last-modified: 2017-07-18 () 16:42:04 (129d)