{"id":260,"date":"2011-05-06T18:07:08","date_gmt":"2011-05-06T09:07:08","guid":{"rendered":"http:\/\/systemdev.comsys-blog.com\/?p=260"},"modified":"2011-05-06T18:07:08","modified_gmt":"2011-05-06T09:07:08","slug":"centos5-%e3%81%a7%e8%87%aa%e5%89%8d%e3%81%aeca%e3%82%92%e4%bd%9c%e3%82%8a%e8%a8%bc%e6%98%8e%e6%9b%b8%e4%bd%9c%e6%88%90%e3%81%99%e3%82%8b","status":"publish","type":"post","link":"https:\/\/tamura.jp\/?p=260","title":{"rendered":"CentOS5 \u3067\u81ea\u524d\u306eCA\uff08\u8a8d\u8a3c\u5c40\uff09\u3092\u4f5c\u308a\u8a3c\u660e\u66f8\u3092\u4f5c\u6210\u3059\u308b"},"content":{"rendered":"

CA\u3092\u4f5c\u308b<\/p>\n

    \n
  1. openssl.cnf\u3092\u4fee\u6b63\u3059\u308b\u306e\u3067\u30aa\u30ea\u30b8\u30ca\u30eb\u3092\u4fdd\u5b58\u3059\u308b#cp \/etc\/pki\/tls\/openssl.cnf \/etc\/pki\/tls\/openssl.cnf.org
    \n\u3000<\/li>\n
  2. \/etc\/pki\/tls\/openssl.cnf\u3092\u7de8\u96c6\u3059\u308b
    \n[ req ]
    \ndefault_bits\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 = 2048\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # 1024->2048
    \n<\/span>
    \n[ usr_cert ]
    \n<\/span><\/span>basicConstraints=CA:TRUE\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # FALSE ->TRUE\u3078\u5909\u66f4
    \n<\/span>
    \n<\/span>nsCertType = server\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # \u30b5\u30fc\u30d0\u30fc\u8a3c\u660e\u66f8\u3092\u4f5c\u6210\u3057\u307e\u3059
    \n<\/span>
    \n[ v3_ca ]
    \nnsCertType = sslCA, emailCA\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # SSL\u304a\u3088\u3073\u96fb\u5b50\u30e1\u30fc\u30eb\u8a8d\u8a3c\u30b5\u30fc\u30d0\u30fc\u3092\u4f5c\u6210\u3057\u307e\u3059
    \n<\/span><\/li>\n
  3. \u8a3c\u660e\u66f8\u4f5c\u6210\u7528\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u306e\u30aa\u30ea\u30b8\u30ca\u30eb\u3092\u4fdd\u5b58\u3059\u308b
    \n#cd \/etc\/pki\/tls\/misc
    \n#cp CA CA.org
    \n\u3000<\/li>\n
  4. \u8a3c\u660e\u66f8\u4f5c\u6210\u7528\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u4fee\u6b63\u3059\u308b
    \nif [ -z “$OPENSSL” ]; then OPENSSL=openssl; fi
    \nSSLEAY_CONFIG=”-config ..\/openssl.cnf” # \u30b3\u30f3\u30d5\u30a3\u30b0\u30ec\u30fc\u30b7\u30e7\u30f3\u30d5\u30a1\u30a4\u30eb\u306e\u4f4d\u7f6e\u3092\u4fee\u6b63
    \n<\/span>DAYS=”-days 7300″\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 #\u00a0\u6709\u52b9\u671f\u9593\u309220\u5e74\u306b\u5909\u66f4
    \n<\/span>CADAYS=”-days 7300″\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 # \u6709\u52b9\u671f\u9593\u309220\u5e74\u306b\u5909\u66f4
    \n<\/span>REQ=”$OPENSSL req $SSLEAY_CONFIG”
    \n\u3000<\/li>\n
  5. CA\uff08\u30b9\u30af\u30ea\u30d7\u30c8\uff09\u3092\u5b9f\u884c\u3059\u308b
    \n#.\/CA -newca
    \n\u5fc5\u8981\u306a\u60c5\u5831\u5165\u308c\u305f\u3089\u51fa\u6765\u4e0a\u304c\u308a
    \n\/etc\/pki\/CA \u30d5\u30a9\u30eb\u30c0\u30fc\u304c\u51fa\u6765\u3066\u3044\u307e\u3059
    \n\u3000<\/li>\n
  6. openssl\u306e\u8a2d\u5b9a\u3092\u5143\u306b\u623b\u3057\u3066\u304a\u304d\u307e\u3059
    \n#cp \/etc\/pki\/tls\/openssl.cnf.org \/etc\/pki\/tls\/openssl.cnf
    \n\u3000<\/li>\n
  7. CA\u306e\u79d8\u5bc6\u9375\u306e\u30d1\u30fc\u30df\u30c3\u30b7\u30e7\u30f3\u3092\u5909\u66f4\u3059\u308b
    \n#chmod 0400 \/etc\/pki\/CA\/private\/cakey.pem
    \n\u3000<\/li>\n
  8. \u8a8d\u8a3c\u5c40\u306e\u8a3c\u660e\u66f8\u3092\u4f5c\u6210\u3059\u308b\uff08\u914d\u5e03\u7528\uff09
    \ncd \/etc\/pki\/CA\/
    \n# openssl x509 -inform PEM -in cacert.pem -outform DER -out cacert.der<\/li>\n<\/ol>\n

    CA\u304c\u3067\u304d\u305f\u3089<\/p>\n

      \n
    1. \u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u8981\u6c42\u3092\u4f5c\u6210\u3059\u308b
      \n# cd \/etc\/pki\/tls\/misc\/
      \n# .\/CA -newreqnewkey.pem
      \nnewreq.pem\u304c\u3067\u304d\u308b
      \n\u3000<\/li>\n
    2. \u30b5\u30a4\u30f3\u3059\u308b
      \n# .\/CA -sign
      \nnewcert.pem\u304c\u3067\u304d\u308b
      \n\u3000<\/li>\n
    3. \u30ad\u30fc\u30d5\u30a1\u30a4\u30eb\u306e\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u89e3\u9664\u3059\u308b
      \n# openssl rsa -in newkey.pem -out newkey.pem
      \n\u3000<\/li>\n
    4. \u51fa\u6765\u4e0a\u304c\u3063\u305f\u8a3c\u660e\u66f8\u306e\u30d5\u30a1\u30a4\u30eb\u306e\u540d\u524d\u3092\u5909\u3048\u3066\u914d\u5099\u3059\u308b<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

      CA\u3092\u4f5c\u308b openssl.cnf\u3092\u4fee\u6b63\u3059\u308b\u306e\u3067\u30aa\u30ea\u30b8\u30ca\u30eb\u3092\u4fdd\u5b58\u3059\u308b#cp \/etc\/pki\/tls\/openssl.cnf \/etc\/pki\/tls\/openssl.cnf.org \u3000 \/etc\/pki\/tls\/ope […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[],"class_list":["post-260","post","type-post","status-publish","format-standard","hentry","category-19"],"_links":{"self":[{"href":"https:\/\/tamura.jp\/index.php?rest_route=\/wp\/v2\/posts\/260","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tamura.jp\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tamura.jp\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tamura.jp\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tamura.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=260"}],"version-history":[{"count":0,"href":"https:\/\/tamura.jp\/index.php?rest_route=\/wp\/v2\/posts\/260\/revisions"}],"wp:attachment":[{"href":"https:\/\/tamura.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=260"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tamura.jp\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=260"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tamura.jp\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=260"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}