スーの道具箱/サーバ/SSL

サーバのSSL化

証明書と鍵の作成

OpenSSLをインストール。
Windows版の場合、C:\usr\local\sslに解凍しないとうまくいかない。

openssl.cnfを編集して、RSAキー長を512bitに変更

default_bits = 512

証明書と鍵の作成

C:\usr\local\ssl\bin>openssl req -new -nodes -x509 -keyout server-key.pem -out server-cert.pem -days 365
Using configuration from /usr/local/ssl/openssl.cnf
Loading 'screen' into random state - done
Generating a 512 bit RSA private key
......++++++++++++
.++++++++++++
writing new private key to 'server-key.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:Fukuoka
Locality Name (eg, city) []:Fukuoka
Organization Name (eg, company) [Internet Widgits Pty Ltd]:none
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:名前
Email Address []:メールアドレス

DeleGateでSSL化

server-key.pemとserver-cert.pemを%delegate%\libにコピー
各サーバソフトはlocalhost(DeleGate)から接続されるため、IP制限等はDeleGate側で設定する。

HTTP

-P443
SERVER=https
FCL=sslway
MOUNT="/* http://localhost/*"
REACHABLE=localhost
ADMIN=メールアドレス

POP

-P995
SERVER=pop://localhost
FCL=sslway
RELIABLE=localhost
ADMIN=メールアドレス

SMTP

-P465
SERVER=imap://localhost
FCL=sslway
RELIABLE=localhost
ADMIN=メールアドレス

IMAP

-P993
SERVER=imap://localhost
FCL=sslway
RELIABLE=localhost
ADMIN=メールアドレス

SPA-ProMailServerでSSL化

server-key.pemとserver-cert.pemを適当な場所にコピー
SpaControlのSSLの設定に、server-key.pemとserver-cert.pemを選択。