7: 2018-05-12 (Sat) 12:52:35 iseki  |
Cur: 2023-08-12 (Sat) 10:53:01 iseki |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| - | ** OpenSSL [#i4f7b286] | + | ** OpenSSL [#o98d2107] |
| + | *** コマンド例[#i4f7b286] | ||
| + | |||
| + | **** CAに認証してもらう (pem) [#o06fc354] | ||
| + | - openssl genrsa -out private/key.pem 2048 | ||
| + | - openssl req -new -key private/key.pem -out csr.pem | ||
| + | |||
| + | **** オレオレ証明書 [#u4112959] | ||
| + | - openssl req -new -newkey rsa:2048 -days 3650 -nodes -keyout private.pem -out server.csr | ||
| + | - openssl x509 -in server.csr -days 3650 -req -signkey private/key.pem -out server.pem | ||
| + | |||
| + | **** オレオレ認証局 [#x95593cd] | ||
| + | - openssl req -new -x509 -key private/key.pem -out server.crt -days 3650 | ||
| + | #br | ||
| + | |||
| + | ** Install [#sab17923] | ||
| ***1.1.0e Install [#o0147261] | ***1.1.0e Install [#o0147261] | ||
| -see https://http2.try-and-test.net/openssl1_1_0.html | -see https://http2.try-and-test.net/openssl1_1_0.html | ||
| Line 8: | Line 24: | ||
| # tar xzfv openssl-1.1.0e.tar.gz | # tar xzfv openssl-1.1.0e.tar.gz | ||
| # cd openssl-1.1.0e | # cd openssl-1.1.0e | ||
| - | # ./config --prefix=/usr/local/openssl shared -no-ssl2 | + | # ./config shared |
| - | # make -j4 | + | # make |
| # make test | # make test | ||
| (perl-coreがないとすべてエラーとなる) | (perl-coreがないとすべてエラーとなる) | ||
| (Rootだと1件エラーになるが仕様らしい) | (Rootだと1件エラーになるが仕様らしい) | ||
| # make install | # make install | ||
| + | - /etc/ld.so.conf に /usr/local/lib64 を追加して ldconfig を実行する． | ||
| + | - for PHP7 | ||
| + | cd /usr/local/lib | ||
| + | ln -s ../lib64/* . | ||
| + | |||
| + | #br | ||
| ***1.0.2o Install [#xfb04fab] | ***1.0.2o Install [#xfb04fab] | ||
| Line 26: | Line 48: | ||
| # make test | # make test | ||
| # make install | # make install | ||
| + | - /etc/ld.so.conf に /usr/local/ssl/lib を追加して ldconfig を実行する． | ||
| #br | #br | ||
| Line 39: | Line 62: | ||
| *** 確認コマンド [#va7af9ed] | *** 確認コマンド [#va7af9ed] | ||
| - | - バイナリ | + | - Cert バイナリ |
| openssl x509 -inform der -in cert.crt -text | openssl x509 -inform der -in cert.crt -text | ||
| - | - Pem | + | - Cert Pem |
| openssl x509 -in cert.pem -text | openssl x509 -in cert.pem -text | ||
| + | - CSR | ||
| + | openssl req -in csr.pem -text | ||
| #br | #br | ||
- Backup list of OpenSSL
- Backup diff of OpenSSL vs current(No. All)
- 1: 2012-03-27 (Tue) 12:51:50 iseki
- 2: 2012-03-27 (Tue) 12:52:02 iseki
- 3: 2013-10-22 (Tue) 19:39:22 iseki
- 4: 2016-03-09 (Wed) 12:42:55 iseki
- 5: 2017-02-18 (Sat) 11:22:01 macsatou
- 6: 2018-05-11 (Fri) 18:27:13 iseki
- 7: 2018-05-12 (Sat) 12:52:35 iseki
- 8: 2018-05-12 (Sat) 18:38:44 iseki
- 9: 2018-08-17 (Fri) 16:09:37 iseki
- 10: 2019-08-16 (Fri) 13:54:17 iseki
- 11: 2021-06-27 (Sun) 20:03:17 iseki
- 12: 2021-06-29 (Tue) 13:46:44 iseki
- 13: 2021-08-11 (Wed) 09:12:10 iseki
- 14: 2021-09-23 (Thu) 17:43:22 iseki
