{"id":332,"date":"2008-01-17T11:52:45","date_gmt":"2008-01-17T02:52:45","guid":{"rendered":"https:\/\/tksm.org\/wordpress\/2008\/01\/17\/20080117115245.php"},"modified":"2009-12-05T12:58:46","modified_gmt":"2009-12-05T03:58:46","slug":"centos-%e3%81%ae-apache-%e3%81%a7%e3%82%af%e3%83%a9%e3%82%a4%e3%82%a2%e3%83%b3%e3%83%88%e8%a8%bc%e6%98%8e%e6%9b%b8%e8%aa%8d%e8%a8%bc","status":"publish","type":"post","link":"https:\/\/tksm.org\/wp\/archives\/332","title":{"rendered":"CentOS \u306e Apache \u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u8a3c\u660e\u66f8\u8a8d\u8a3c"},"content":{"rendered":"

\uff1c\u8ffd\u8a18\uff1e
\n\u3061\u3087\u3063\u3068\u4fee\u6b63\u3057\u307e\u3057\u305f\u306e\u3067\u65b0\u3057\u3044\u8a18\u4e8b\u306f\u3053\u3061\u3089\u3067\u3059\u3002
\nCentOS \u306e Apache \u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u8a3c\u660e\u66f8\u8a8d\u8a3c(\u4fee\u6b63\u7248)<\/a>
\nCentOS\u306eApache\u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u8a3c\u660e\u66f8\u8a8d\u8a3c\u3092\u3057\u3066\u307f\u308b\u3002\u524d\u306bDebian\u3067\u3084\u3063\u305f\u306e\u3067\u57fa\u672c\u306f\u540c\u3058\u3060\u3051\u3069\u3001\u30d5\u30a1\u30a4\u30eb\u306e\u30d1\u30b9\u304c\u9055\u3063\u305f\u308a\u3059\u308b\u306e\u3067\u518d\u5ea6\u30e1\u30e2
\n\u4f5c\u696d\u306f\u300c\/var\/www\/ssl\u300d\u3067\u884c\u3044\u3001\u72ec\u81ea\u8a8d\u8a3c\u5c40\u306e\u30d5\u30a9\u30eb\u30c0\u306f\u300c\/var\/www\/ssl\/hogeCA\u300d\u306b\u4f5c\u308a\u307e\u3059\u3002\u307e\u305f\u8a3c\u660e\u66f8\u306e\u671f\u9650\u306f30\u5e74(10950\u65e5)\u306b\u3057\u3066\u3042\u308a\u307e\u3059\u3002
\n\u25c6\u4f5c\u696d\u6e96\u5099
\n\u4f5c\u696d\u30d5\u30a9\u30eb\u30c0\u4f5c\u6210<\/p>\n

mkdir -p  \/var\/www\/ssl<\/pre>\n
openssl\u306e\u8a2d\u5b9a
\n\/etc\/pki\/tls\/openssl.cnf (CentOS5)
\n\/usr\/share\/ssl\/openssl.cnf (CentOS4)<\/p>\n
\n> dir             = .\/demoCA              # Where everything is kept\n< dir             = .\/hogeCA              # Where everything is kept\n<\/pre>\n
\u8a3c\u660e\u66f8\u306e\u30dd\u30ea\u30b7\u30fc\u3092\u5909\u3048\u305f\u3044\u5834\u5408\uff08\u30c7\u30d5\u30a9\u30eb\u30c8\u306fcountryName,stateOrProvinceName,organizationName\u304cCA\u3068\u4e00\u81f4\u3057\u306a\u3044\u3068\u3060\u3081\u306a\u306e\u3067CA\u7d44\u7e54\u5916\u306b\u767a\u884c\u3059\u308b\u5834\u5408\u306b\u56f0\u308b)\uff1cbr \/><\/p>\n
policy          = policy_match<\/pre>\n
policy_match\u3092\u76f4\u4e0b\u306b\u5b9a\u7fa9\u3057\u3066\u3042\u308b\u300cpolicy_anything \u300d\u306b\u5909\u3048\u308b\u3068\u304b\u3001\u300cpolicy_match\u300d\u81ea\u4f53\u3092\u5909\u66f4\u3059\u308b\u3068\u304b\uff08\u4e0b\u306e\u4f8b\uff09
\n\u5909\u66f4\u524d<\/p>\n
[ policy_match ]\ncountryName             = match\nstateOrProvinceName     = match\norganizationName        = match\norganizationalUnitName  = optional\ncommonName              = supplied\nemailAddress            = optional<\/pre>\n
\u5909\u66f4\u5f8c<\/p>\n
[ policy_match ]\ncountryName             = supplied\nstateOrProvinceName     = supplied\norganizationName        = supplied\norganizationalUnitName  = optional\ncommonName              = supplied\nemailAddress            = optional<\/pre>\n
\u3061\u306a\u307f\u306b<\/p>\n
\nmatch    CA\u3068\u540c\u3058\u3058\u3083\u306a\u3044\u3068\u30c0\u30e1\nsupplied \u5165\u529b\u5fc5\u9808\noptional \u3042\u3063\u3066\u3082\u306a\u304f\u3066\u3082\u3044\u3044\n<\/pre>\n
CA\u4f5c\u6210\u30b9\u30af\u30ea\u30d7\u30c8\u30b3\u30d4\u30fc<\/p>\n
cp -p \/etc\/pki\/tls\/misc\/CA \/var\/www\/ssl\/ (CentOS5)\ncp -p \/usr\/share\/ssl\/misc\/CA \/var\/www\/ssl\/ (CentOS4)<\/pre>\n
\/var\/www\/ssl\/CA<\/p>\n
DAYS=\"-days 10950\"\nCADAYS=\"-days 10956\"\nCATOP=\/var\/www\/ssl\/hogeCA<\/pre>\n
\u25c6\u8a8d\u8a3c\u5c40CA\u306e\u4f5c\u6210<\/p>\n
cd \/var\/www\/ssl
\n.\/CA -newca
\nCA certificate filename (or enter to create)
\n\u6b62\u307e\u308b\u306e\u3067\u6539\u884c\u3092\u3044\u308c\u308b
\nMaking CA certificate ...
\nGenerating a 1024 bit RSA private key
\n.............++++++
\n.......++++++
\nwriting new private key to '\/var\/www\/ssl\/hogeCA\/private\/.\/cakey.pem'
\nEnter PEM pass phrase: CA\u306e\u79d8\u5bc6\u9375\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba
\nVerifying - Enter PEM pass phrase: CA\u306e\u79d8\u5bc6\u9375\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u78ba\u8a8d<\/p>\n","protected":false},"excerpt":{"rendered":"
\uff1c\u8ffd\u8a18\uff1e \u3061\u3087\u3063\u3068\u4fee\u6b63\u3057\u307e\u3057\u305f\u306e\u3067\u65b0\u3057\u3044\u8a18\u4e8b\u306f\u3053\u3061\u3089\u3067\u3059\u3002 CentOS \u306e Apache \u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u8a3c\u660e\u66f8\u8a8d\u8a3c(\u4fee\u6b63\u7248) CentOS\u306eApache\u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u8a3c\u660e\u66f8\u8a8d\u8a3c\u3092\u3057\u3066\u307f\u308b\u3002\u524d\u306bDebian\u3067\u3084\u3063\u305f\u306e\u3067\u57fa … “CentOS \u306e Apache \u3067\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u8a3c\u660e\u66f8\u8a8d\u8a3c”\u306e<\/span>\u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[],"class_list":["post-332","post","type-post","status-publish","format-standard","hentry","category-linux"],"views":5560,"_links":{"self":[{"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/posts\/332","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/comments?post=332"}],"version-history":[{"count":1,"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/posts\/332\/revisions"}],"predecessor-version":[{"id":656,"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/posts\/332\/revisions\/656"}],"wp:attachment":[{"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/media?parent=332"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/categories?post=332"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tksm.org\/wp\/wp-json\/wp\/v2\/tags?post=332"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}