スーの道具箱/
サーバ/SSL
の編集
[
ホーム
|
一覧
|
単語検索
|
最終更新
|
ヘルプ
]
Top
>
サーバ
> SSL
*サーバのSSL化 **証明書と鍵の作成 [[OpenSSL>http://www.openssl.org/]]をインストール。~ Windows版の場合、C:\usr\local\sslに解凍しないとうまくいかない。~ openssl.cnfを編集して、RSAキー長を512bitに変更~ default_bits = 512 証明書と鍵の作成~ C:\usr\local\ssl\bin>openssl req -new -nodes -x509 -keyout server-key.pem -out server-cert.pem -days 365 Using configuration from /usr/local/ssl/openssl.cnf Loading 'screen' into random state - done Generating a 512 bit RSA private key ......++++++++++++ .++++++++++++ writing new private key to 'server-key.pem' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]:JP State or Province Name (full name) [Some-State]:Fukuoka Locality Name (eg, city) []:Fukuoka Organization Name (eg, company) [Internet Widgits Pty Ltd]:none Organizational Unit Name (eg, section) []: Common Name (eg, YOUR name) []:名前 Email Address []:メールアドレス **[[DeleGate>http://www.delegate.org/delegate/]]でSSL化 server-key.pemとserver-cert.pemを%delegate%\libにコピー~ 各サーバソフトはlocalhost(DeleGate)から接続されるため、IP制限等はDeleGate側で設定する。~ ***HTTP -P443 SERVER=https FCL=sslway MOUNT="/* http://localhost/*" REACHABLE=localhost ADMIN=メールアドレス ***POP -P995 SERVER=pop://localhost FCL=sslway RELIABLE=localhost ADMIN=メールアドレス ***SMTP -P465 SERVER=imap://localhost FCL=sslway RELIABLE=localhost ADMIN=メールアドレス ***IMAP -P993 SERVER=imap://localhost FCL=sslway RELIABLE=localhost ADMIN=メールアドレス **SPA-ProMailServerでSSL化 server-key.pemとserver-cert.pemを適当な場所にコピー~ SpaControlのSSLの設定に、server-key.pemとserver-cert.pemを選択。~ RIGHT:新規作成 2004/11/09 ---- #pcomment(reply) &counter(none);
タイムスタンプを変更しない
*サーバのSSL化 **証明書と鍵の作成 [[OpenSSL>http://www.openssl.org/]]をインストール。~ Windows版の場合、C:\usr\local\sslに解凍しないとうまくいかない。~ openssl.cnfを編集して、RSAキー長を512bitに変更~ default_bits = 512 証明書と鍵の作成~ C:\usr\local\ssl\bin>openssl req -new -nodes -x509 -keyout server-key.pem -out server-cert.pem -days 365 Using configuration from /usr/local/ssl/openssl.cnf Loading 'screen' into random state - done Generating a 512 bit RSA private key ......++++++++++++ .++++++++++++ writing new private key to 'server-key.pem' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]:JP State or Province Name (full name) [Some-State]:Fukuoka Locality Name (eg, city) []:Fukuoka Organization Name (eg, company) [Internet Widgits Pty Ltd]:none Organizational Unit Name (eg, section) []: Common Name (eg, YOUR name) []:名前 Email Address []:メールアドレス **[[DeleGate>http://www.delegate.org/delegate/]]でSSL化 server-key.pemとserver-cert.pemを%delegate%\libにコピー~ 各サーバソフトはlocalhost(DeleGate)から接続されるため、IP制限等はDeleGate側で設定する。~ ***HTTP -P443 SERVER=https FCL=sslway MOUNT="/* http://localhost/*" REACHABLE=localhost ADMIN=メールアドレス ***POP -P995 SERVER=pop://localhost FCL=sslway RELIABLE=localhost ADMIN=メールアドレス ***SMTP -P465 SERVER=imap://localhost FCL=sslway RELIABLE=localhost ADMIN=メールアドレス ***IMAP -P993 SERVER=imap://localhost FCL=sslway RELIABLE=localhost ADMIN=メールアドレス **SPA-ProMailServerでSSL化 server-key.pemとserver-cert.pemを適当な場所にコピー~ SpaControlのSSLの設定に、server-key.pemとserver-cert.pemを選択。~ RIGHT:新規作成 2004/11/09 ---- #pcomment(reply) &counter(none);
テキスト整形のルールを表示する