Yanor.net/
Wiki
Blog
GitHub
Sandbox
開始行:
* CA.shを使ってCAを作成 [#x6ac88e5]
ここではLinuxのUbuntuをOSとする。
** CA作成スクリプトの用意 [#sea152d2]
mkdir /etc/ssl/CA
cd /etc/ssl/CA
cp /usr/lib/ssl/misc/CA.sh ,
vi CA.sh
CA.shを編集して、CADAYS="-days 3650"とした。
** CAの作成 [#scc46081]
DAYS=3650 CATOP=myCA ./CA.sh -newca
CA certificate filename (or enter to create)
Making CA certificate ...
Generating a 1024 bit RSA private key
.....++++++
...++++++
writing new private key to './demoCA/private/./cakey.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will...
into your certificate request.
What you are about to enter is what is called a Distingu...
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:N/A
Locality Name (eg, city) []:N/A
Organization Name (eg, company) [Internet Widgits Pty Lt...
Organizational Unit Name (eg, section) []:N/A
Common Name (eg, YOUR name) []:myCA0531.local
Email Address []:
*** CA証明書作成時の質問について [#u59baf63]
CAとCSRを発行するホストが同一の場合、Country NameやOrgani...
** openssl.cnfの修正 [#ma97c962]
cp /usr/lib/ssl/openssl.cnf .
vi openssl.cnf
dir = ./myCAとする。以後、opensslコマンドを使う場合はこの...
終了行:
* CA.shを使ってCAを作成 [#x6ac88e5]
ここではLinuxのUbuntuをOSとする。
** CA作成スクリプトの用意 [#sea152d2]
mkdir /etc/ssl/CA
cd /etc/ssl/CA
cp /usr/lib/ssl/misc/CA.sh ,
vi CA.sh
CA.shを編集して、CADAYS="-days 3650"とした。
** CAの作成 [#scc46081]
DAYS=3650 CATOP=myCA ./CA.sh -newca
CA certificate filename (or enter to create)
Making CA certificate ...
Generating a 1024 bit RSA private key
.....++++++
...++++++
writing new private key to './demoCA/private/./cakey.pem'
Enter PEM pass phrase:
Verifying - Enter PEM pass phrase:
-----
You are about to be asked to enter information that will...
into your certificate request.
What you are about to enter is what is called a Distingu...
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:N/A
Locality Name (eg, city) []:N/A
Organization Name (eg, company) [Internet Widgits Pty Lt...
Organizational Unit Name (eg, section) []:N/A
Common Name (eg, YOUR name) []:myCA0531.local
Email Address []:
*** CA証明書作成時の質問について [#u59baf63]
CAとCSRを発行するホストが同一の場合、Country NameやOrgani...
** openssl.cnfの修正 [#ma97c962]
cp /usr/lib/ssl/openssl.cnf .
vi openssl.cnf
dir = ./myCAとする。以後、opensslコマンドを使う場合はこの...
ページ名: