ÁÖÀÇ: ÀÌ ÀýÂ÷µéÀº .infn.it¿¡¸¸ ÇØ´çµÇ´Â °ÍÀÌ´Ù.
srv.cnf ¸¦ /usr/local/ssl/lib/ ¿¡ º¹»çÇÑ´Ù(ÁÖ: À̰ÍÀº ÁöÀºÀÌÀÇ Áö¿ªÀû ¼³Á¤À¸·Î OpenSSLÀÇ Ãʱ⠼³Á¤ ÆÄÀÏÀÎ /usr/local/ssl/openssl.cnf À» ÀÌ¿ëÇϴ°ÍÀÌ ÀϹÝÀû °æ¿ì´Ù.).
ÀÎÁõ¼ ¿äûÀ» »ý¼ºÇÑ´Ù.
> cd /usr/local/ssl/certs
> /usr/local/ssl/bin/openssl req -new -nodes -out req.pem \
-keyout key.pem -config /usr/local/ssl/lib/srv.cnf
Using configuration from /usr/local/ssl/lib/srv.cnf
Generating a 1024 bit RSA private key
.......................+++++
.........................+++++
writing new private key to 'key.pem'
-----
You are about to be asked to enter information that will be
incorporated into your certificate request.
What you are about to enter is what is called
a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
%ÀÌÁ¦ ´ç½ÅÀÇ ÀÎÁõ¼ ¿äû(certificate request)¿¡ ±â·ÏµÉ Á¤º¸¸¦ ¹°¾îº¼ ¶§ÀÌ´Ù.
%ÀÔ·ÂµÉ °ÍÀº ±¸º°µÇ´Â À̸§(Distinguished Name) À̳ª DNÀ¸·Î ºÎ¸¥´Ù.
%´ç½ÅÀÌ ÀÔ·ÂÇÒ Ç׸ñÀº ¸î°³ µÇÁö ¾ÊÀ¸¸ç, ±âº»°ªÀ» ÃëÇÒ¶§´Â ºóÄÀ¸·Î ´ë½ÅÇÒ¼ö ÀÖ´Ù.
%¸¸ÀÏ ´ç½ÅÀÌ '.'¸¦ ÀÔ·ÂÇÑ´Ù¸é, ±× Ç׸ñÀº °ø¹éÀ¸·Î ³²À»°ÍÀÌ´Ù.
Country Name (2 letter code) [IT]: %2-¹®ÀÚ ±¹°¡ÄÚµå
INFN (accettare il default!) [INFN]: %µµ¸ÞÀÎ¸í °°Àºµ¥¿ä?
Locality Name (p.e. Firenze) []:Firenze %Áö¿ª¸í
Organization Name (p.e. Sezione di Firenze) []:Sezione di Firenze %±â°ü¸í
Server type [Server IMAP]: %¼¹öŸÀÔ
Server name (p.e. postino.fi.infn.it) []:postino.fi.infn.it %¼¹öÀ̸§
Email Address []:cecchini@fi.infn.it
> chmod 600 key.pem
|
key.pem Àº ¼¹ö ºñ¹ÐŰ(private key)¸¦ Æò¹®À¸·Î ´ã°í ÀÖ´Ù!
req.pem À» ÀÎÁõ¼¸¦ º¸³»ÁÙ CA·Î º¸³½´Ù(Âü°í: ÀÚÇÊ ¼¸í ÀÎÁõ¼ »ý¼º: ¼Á¤·æ´ÔÀÇ ¹ø¿ªÁß ÀϺÎ).
(¿¡µðÅ͸¦ ÀÌ¿ëÇÏ¿©) /usr/local/ssl/certs/stunnel.pem ¸¦ ÀÛ¼ºÇϴµ¥, ÀÌ´Â ¼¹ö ºñ¹ÐŰ¿Í ¼¹ö ÀÎÁõ¼¸¦ ´ã°í ÀÖ´Ù. ÇϳªÀÇ ºó ÁÙÀ» µÎ ºÎºÐ »çÀÌ¿¡ »ðÀÔÇϰí, ¶ÇÇϳªÀÇ ºóÁÙÀ» ÆÄÀÏ °¡Àå ¹Ø¿¡´Ù »ðÀÔÇ϶ó.
¿ªÀÚÁÖ: ½ÇÁ¦ÀûÀ¸·Î ÇÑÁÙÀÌ º°µµ·Î ÷°¡µÇÁö ¾Ê¾Æµµ Àß µ¿ÀÛÇÏ¿´´Ù. µû¶ó¼ ÁöÀºÀÌÀÇ Àǵµ´Â °¢ ºÎºÐÀÌ ³¡³ª°í ´ÙÀ½ÁÙ·Î ³Ñ¾î°¡¶ó´Â ¶æÀ¸·Î ¹Þ¾ÆµéÀÌ¸é µÇ°Ú´Ù. ´ÙÀ½Àº stunnel.pemÀÇ ³»¿ëÀÇ ¿¹ÀÌ´Ù.
-----BEGIN RSA PRIVATE KEY-----
MIICXQIBAAKBgQDHkqs4YDbakYxRkYXIpY7xLXDQwULR5LW7xWVzuWmmZJOtzwlP % ¼¹ö ºñ¹ÐŰ ºÎºÐ
7mN87g+aaiQzwXUVndaCw3Zm6cOG4mytf20jPZq0tvWnjEB3763sorpfpOe/4Vsn %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-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
MIIECTCCA3KgAwIBAgIBADANBgkqhkiG9w0BAQQFADCBujELMAkGA1UEBhMCVVMx % ÀÎÁõ¼ ºÎºÐ
EzARBgNVBAgTCldhc2hpbmd0b24xEDAOBgNVBAcTB1NlYXR0bGUxHzAdBgNVBAoT %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-----END CERTIFICATE-----
|
req.pem °ú key.pem À» »èÁ¦Çϰí, stunnel.pem À» º¸È£Ç϶ó (chmod 600). Áö±Ý ÀÌ ÆÄÀÏÀº ¼¹ö ºñ¹Ð۸¦ Æò¹®À¸·Î ´ã°í ÀÖ´Ù.