1. 개요
사설 인증서 생성
2. 방법
2.1. key 파일 생성
$ openssl genrsa -des3 -out server.key 2048 Generating RSA private key, 2048 bit long modulus ......................+++ .....+++ e is 65537 (0x10001) Enter pass phrase for server.key: Verifying - Enter pass phrase for server.key:
2.2. cst 파일 생성
$ openssl req -new -key server.key -out server.csr Enter pass phrase for server.key: You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [XX]:KR State or Province Name (full name) []:Seoul Locality Name (eg, city) [Default City]:Huaya Organization Name (eg, company) [Default Company Ltd]:Huaya Organizational Unit Name (eg, section) []:Huaya Common Name (eg, your name or your server's hostname) []:huayatest.com Email Address []:admin@huayatest.com Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []:
2.3. crt 파일 생성
$ openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt Signature ok subject=/C=KR/ST=Seoul/L=Huaya/O=Huaya/OU=Huaya/CN=huayatest.com/emailAddress=admin@huayatest.com Getting Private key Enter pass phrase for server.key: