|
Apache�ｿｽﾍ撰ｿｽ�ｿｽE�ｿｽﾅ最ゑｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽp�ｿｽ�ｿｽ�ｿｽ�ｿｽﾄゑｿｽ�ｿｽ�ｿｽWeb�ｿｽT�ｿｽ[�ｿｽo�ｿｽﾅゑｿｽ�ｿｽBWindows�ｿｽ�ｿｽﾅゑｿｽLinux�ｿｽf�ｿｽB�ｿｽX�ｿｽg�ｿｽ�ｿｽ�ｿｽr�ｿｽ�ｿｽ�ｿｽ[�ｿｽV�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾅゑｿｽ�ｿｽ�ｿｽ�ｿｽ�し�ｿｽﾜゑｿｽ�ｿｽB�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾅはセ�ｿｽL�ｿｽ�ｿｽ�ｿｽA�ｿｽ�ｿｽWeb�ｿｽT�ｿｽ[�ｿｽo�ｿｽﾌ構�ｿｽz�ｿｽﾌ為ゑｿｽApache�ｿｽ�ｿｽSSL�ｿｽ@�ｿｽ\�ｿｽt�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ@�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾄゑｿｽ�ｿｽﾜゑｿｽ�ｿｽB�ｿｽC�ｿｽ�ｿｽ�ｿｽX�ｿｽg�ｿｽ[�ｿｽ�ｿｽ�ｿｽﾍ、
OS:FedoraCore5
Apache:�ｿｽo�ｿｽ[�ｿｽW�ｿｽ�ｿｽ�ｿｽ�ｿｽ2.2.3
�ｿｽﾅ行�ｿｽ�ｿｽ�ｿｽﾄゑｿｽ�ｿｽﾜゑｿｽ�ｿｽB
| �ｿｽC�ｿｽ�ｿｽ�ｿｽX�ｿｽg�ｿｽ[�ｿｽ�ｿｽ |
Apache�ｿｽ�ｿｽ�ｿｽ_�ｿｽE�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ[�ｿｽh�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽB(�ｿｽ_�ｿｽE�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ[�ｿｽh�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ@�ｿｽ[�ｿｽW�ｿｽ�ｿｽ�ｿｽ�ｿｽ2.2.3)
�ｿｽ_�ｿｽE�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ[�ｿｽh�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽt�ｿｽ@�ｿｽC�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽゑｿｽ�ｿｽﾜゑｿｽ
| # tar zxvf httpd-2.2.3.tar.gz
|
configure�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽs�ｿｽ�ｿｽ�ｿｽ�ｿｽMakefile�ｿｽ�ｿｽ�ｿｽ�成�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ
| # ./configure --enable-so --enable-ssl
|
�ｿｽR�ｿｽ�ｿｽ�ｿｽp�ｿｽC�ｿｽ�ｿｽ�ｿｽA�ｿｽC�ｿｽ�ｿｽ�ｿｽX�ｿｽg�ｿｽ[�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽs�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ
SSL�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�す�ｿｽ�ｿｽ謔､�ｿｽﾉゑｿｽ�ｿｽ�ｿｽﾉは、Apache�ｿｽﾌ設抵ｿｽt�ｿｽ@�ｿｽC�ｿｽ�ｿｽ(httpd.conf)�ｿｽ�ｿｽﾒ集�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽB�ｿｽG�ｿｽf�ｿｽB�ｿｽ^�ｿｽ�ｿｽhttpd.conf�ｿｽ�ｿｽ�ｿｽJ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽB
| # vi /usr/local/apache2/conf/httpd.conf
|
SSL�ｿｽﾝ抵ｿｽY�ｿｽ�ｿｽ�ｿｽﾓ擾ｿｽ�ｿｽﾌコ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽg�ｿｽA�ｿｽE�ｿｽg�ｿｽ�ｿｽ�ｿｽO�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ
�ｿｽy�ｿｽﾏ更�ｿｽO�ｿｽz
�ｿｽ@# Include conf/extra/httpd-ssl.conf
�ｿｽy�ｿｽﾏ更�ｿｽ�ｿｽz
�ｿｽ@Include conf/extra/httpd-ssl.conf
|
�ｿｽ髢ｧ�ｿｽ�ｿｽ�ｿｽA�ｿｽ�ｿｽ�ｿｽﾈ証厄ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾛ托ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽf�ｿｽB�ｿｽ�ｿｽ�ｿｽN�ｿｽg�ｿｽ�ｿｽ�ｿｽﾉ移難ｿｽ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽB(�ｿｽﾛ托ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽf�ｿｽB�ｿｽ�ｿｽ�ｿｽN�ｿｽg�ｿｽ�ｿｽ�ｿｽﾍ、/usr/local/apache2/conf/extra/httpd-ssl.conf�ｿｽ�ｿｽSSLCertificateFile,SSLCertificateKeyFile�ｿｽﾉ指�ｿｽ閧ｳ�ｿｽ�ｿｽﾄゑｿｽ�ｿｽﾜゑｿｽ)
| # cd /usr/local/apache2/conf/
|
openssl�ｿｽR�ｿｽ}�ｿｽ�ｿｽ�ｿｽh�ｿｽﾅ秘密�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�成�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ
# openssl genrsa -des3 -out server.key 1024
Generating RSA private key, 1024 bit long modulus
.............++++++
.............++++++
e is 65537 (0x10001)
Enter pass phrase for server.key:�ｿｽ�ｿｽ�ｿｽp�ｿｽX�ｿｽ�ｿｽ�ｿｽ[�ｿｽh�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
Verifying - Enter pass phrase for server.key:�ｿｽ�ｿｽ�ｿｽ�ｿｽﾆ難ｿｽ�ｿｽ�ｿｽ�ｿｽp�ｿｽX�ｿｽ�ｿｽ�ｿｽ[�ｿｽh�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
|
openssl�ｿｽR�ｿｽ}�ｿｽ�ｿｽ�ｿｽh�ｿｽﾅ趣ｿｽ�ｿｽﾈ証厄ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�成�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ
# openssl req -new -x509 -days 365 -key server.key -out server.crt
Country Name (2 letter code) [GB]:�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
State or Province Name (full name) [Berkshire]:�ｿｽ�ｿｽ�ｿｽs�ｿｽ�ｿｽ�ｿｽ{�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
Locality Name (eg, city) [Newbury]:�ｿｽ�ｿｽ�ｿｽs�ｿｽ謦ｬ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
Organization Name (eg, company) [My Company Ltd]:�ｿｽ�ｿｽ�ｿｽ�ｿｽﾐ厄ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
Organizational Unit Name (eg, section) []:�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
Common Name (eg, your name or your server's hostname) []:�ｿｽ�ｿｽ�ｿｽT�ｿｽ[�ｿｽo�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
Email Address []:�ｿｽ�ｿｽ�ｿｽﾇ暦ｿｽ�ｿｽﾒ��ｿｽ�ｿｽ[�ｿｽ�ｿｽ�ｿｽA�ｿｽh�ｿｽ�ｿｽ�ｿｽX�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
|
�ｿｽN�ｿｽ�ｿｽ�ｿｽX�ｿｽN�ｿｽ�ｿｽ�ｿｽv�ｿｽg�ｿｽ�ｿｽ/etc/init.d�ｿｽﾖコ�ｿｽs�ｿｽ[�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ
| # cp /usr/local/apache2/bin/apachectl /etc/init.d/httpd2
|
Apache�ｿｽ�ｿｽ�ｿｽN�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ
# /etc/init.d/httpd2 start
Apache/2.2.3 mod_ssl/2.2.3 (Pass Phrase Dialog)
Some of your private key files are encrypted for security reasons.
In order to read them you have to provide the pass phrases.
Server www.example.com:443 (RSA)
Enter pass phrase:�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�成�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ髢ｧ�ｿｽ�ｿｽ�ｿｽﾌパ�ｿｽX�ｿｽ�ｿｽ�ｿｽ[�ｿｽh�ｿｽ�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽEnter
OK: Pass Phrase Dialog successful.
|
netstat�ｿｽR�ｿｽ}�ｿｽ�ｿｽ�ｿｽh�ｿｽ�ｿｽhttps�ｿｽ�ｿｽ�ｿｽN�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾄゑｿｽ�ｿｽ驍ｩ�ｿｽ�ｿｽ�ｿｽm�ｿｽF
# netstat -l | grep https
tcp 0 0 *:https *:* LISTEN�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽN�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾄゑｿｽ�ｿｽ�ｿｽ謔､�ｿｽﾅゑｿｽ
|
|
