{"id":1961,"date":"2012-09-05T13:53:21","date_gmt":"2012-09-05T13:53:21","guid":{"rendered":"http:\/\/mooa.net\/ap\/?p=1961"},"modified":"2012-09-05T13:53:21","modified_gmt":"2012-09-05T13:53:21","slug":"openssl-%ec%82%ac%ec%9a%a9%ed%95%98%ea%b8%b0","status":"publish","type":"post","link":"https:\/\/mooa.net\/ap\/1961","title":{"rendered":"OpenSSL \uc0ac\uc6a9\ud558\uae30"},"content":{"rendered":"

 <\/p>\n

1. \uac1c\uc778\ud0a4\uc0dd\uc131<\/span><\/strong><\/em><\/p>\n

 1) 3DES \ub85c \uc554\ud638\ud654<\/p>\n

    openssl genrsa -des3 -out KEYNAME<\/em><\/span>.key 1024<\/p>\n

\n

[root@domU-12-31-39-14-F9-A2 bin]# openssl genrsa -des3 -out mykey.key 1024<\/p>\n

Generating RSA private key, 1024 bit long modulus<\/p>\n

…………………++++++<\/p>\n

……………………..++++++<\/p>\n

e is 65537 (0x10001)<\/p>\n

Enter pass phrase for mykey.key:<\/p>\n

Verifying – Enter pass phrase for mykey.key:<\/p>\n<\/blockquote>\n

 <\/p>\n

 <\/p>\n

 2) \uc554\ud638\ud654 \ud558\uc9c0 \uc54a\uc74c<\/p>\n

    openssl genrsa -out KEYNAME<\/em><\/span>.key 1024<\/p>\n

\n

[root@domU-12-31-39-14-F9-A2 bin]# openssl genrsa -out test.key 1024<\/p>\n

Generating RSA private key, 1024 bit long modulus<\/p>\n

…………………………………………………………………………++++++<\/p>\n

…………………………..++++++<\/p>\n

e is 65537 (0x10001)<\/p>\n<\/blockquote>\n

 <\/p>\n

 <\/p>\n

 3) \uae30\uc874 \ube44\ubc00\ud0a4\uc5d0 \ud328\uc2a4\uc6cc\ub4dc \ucd94\uac00<\/p>\n

    openssl rsa -in KEYNAME<\/em><\/span>.key -des3 -out NEW_KEYNAME<\/em><\/span>.key<\/p>\n

\n

[root@domU-12-31-39-14-F9-A2 bin]# openssl rsa -in mykey.key -des3 -out newmykey.key<\/p>\n

Enter pass phrase for mykey.key:<\/p>\n

writing RSA key<\/p>\n

Enter PEM pass phrase:<\/p>\n

Verifying – Enter PEM pass phrase:<\/p>\n<\/blockquote>\n

 <\/p>\n

 <\/p>\n

 4) \uae30\uc874 \ube44\ubc00\ud0a4\uc5d0 \ud328\uc2a4\uc6cc\ub4dc \uc81c\uac70<\/p>\n

    openssl rsa -in KEYNAME<\/em><\/span>.key -out NEW_KEYNAME<\/em><\/span>.key<\/p>\n

\n

[root@domU-12-31-39-14-F9-A2 bin]# openssl rsa -in mykey.key -out nopassmykey.key<\/p>\n

Enter pass phrase for mykey.key:<\/p>\n

writing RSA key<\/p>\n<\/blockquote>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

2. CSR\uc0dd\uc131 (\uc778\uc99d\uc11c \uc11c\uba85 \uc694\uccad)<\/strong><\/span><\/p>\n

  openssl req -new -key KEYNAME<\/em><\/span>.key -out CSRNAME<\/em><\/span>.csr<\/p>\n

 <\/p>\n

\n

[root@domU-12-31-39-14-F9-A2 bin]# openssl req -new -key mykey.key -out mycsr.csr<\/p>\n

Enter pass phrase for mykey.key:<\/p>\n

You are about to be asked to enter information that will be incorporated<\/p>\n

into your certificate request.<\/p>\n

What you are about to enter is what is called a Distinguished Name or a DN.<\/p>\n

There are quite a few fields but you can leave some blank<\/p>\n

For some fields there will be a default value,<\/p>\n

If you enter ‘.’, the field will be left blank.<\/p>\n

—–<\/p>\n

Country Name (2 letter code) [XX]:xx<\/p>\n

State or Province Name (full name) []:Seoul<\/p>\n

Locality Name (eg, city) [Default City]:Seoul<\/p>\n

Organization Name (eg, company) [Default Company Ltd]:Test company<\/p>\n

Organizational Unit Name (eg, section) []:Test Service<\/p>\n

Common Name (eg, your name or your server’s hostname) []:Test Server<\/p>\n

Email Address []:eunsung.lim@gmail.com<\/p>\n

 <\/p>\n

Please enter the following ‘extra’ attributes<\/p>\n

to be sent with your certificate request<\/p>\n

A challenge password []:color<\/p>\n

An optional company name []:Test Company<\/p>\n<\/blockquote>\n

 <\/p>\n

 <\/p>\n

3. \uc790\uccb4 \uc11c\uba85 \uc778\uc99d\uc11c \uc0dd\uc131\ud558\uae30<\/strong><\/span><\/p>\n

  openssl req -new -key KEYNAME<\/em><\/span>.key -x509 -out CERT_NAME<\/em><\/span>.crt<\/p>\n

\n

[root@domU-12-31-39-14-F9-A2 bin]# openssl req -new -key mykey.key -x509 -out server.crt<\/p>\n

Enter pass phrase for mykey.key:<\/p>\n

You are about to be asked to enter information that will be incorporated<\/p>\n

into your certificate request.<\/p>\n

What you are about to enter is what is called a Distinguished Name or a DN.<\/p>\n

There are quite a few fields but you can leave some blank<\/p>\n

For some fields there will be a default value,<\/p>\n

If you enter ‘.’, the field will be left blank.<\/p>\n

—–<\/p>\n

Country Name (2 letter code) [XX]:xx<\/p>\n

State or Province Name (full name) []:Seoul<\/p>\n

Locality Name (eg, city) [Default City]:Seoul<\/p>\n

Organization Name (eg, company) [Default Company Ltd]:Test Company<\/p>\n

Organizational Unit Name (eg, section) []:Test Service<\/p>\n

Common Name (eg, your name or your server’s hostname) []:domU-12-31-39-14-F9-A2<\/p>\n<\/blockquote>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

4. \uc778\uc99d\uc11c \ub2e4\ub8e8\ub294 \ubc95<\/strong><\/span><\/p>\n

  1) \uc778\uc99d\uc11c \ud655\uc778(\ubcf4\uae30)<\/p>\n

    openssl x509 -noout -text -in CERT_NAME<\/em><\/span>.crt<\/p>\n

\n

[root@domU-12-31-39-14-F9-A2 bin]# openssl x509 -noout -text -in server.crt<\/p>\n

Certificate:<\/p>\n

    Data:<\/p>\n

        Version: 3 (0x2)<\/p>\n

        Serial Number:<\/p>\n

…..<\/p>\n

….<\/p>\n<\/blockquote>\n

 <\/p>\n

  2) \ube44\ubc00\ud0a4 \ubcf4\uae30<\/p>\n

    openssl rsa -noout -text -in KEYNAME<\/em><\/span>.key<\/p>\n

\n

[root@domU-12-31-39-14-F9-A2 bin]# openssl rsa -noout -text -in mykey.key<\/p>\n

Enter pass phrase for mykey.key:<\/p>\n

Private-Key: (1024 bit)<\/p>\n

modulus:<\/p>\n

    00:a9:eb:af:3e:65:0a:57:d3:3a:c6:c3:84:62:da:<\/p>\n

    47:a1:cb:4b:f9:0f:d4:4c:81:56:46:67:ac:dd:52:<\/p>\n

…..<\/p>\n

…<\/p>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"

  1. \uac1c\uc778\ud0a4\uc0dd\uc131  1) 3DES \ub85c \uc554\ud638\ud654     openssl genrsa -des3 -out KEYNAME.key 1024 [root@domU-12-31-39-14-F9-A2 bin]# openssl genrsa -des3 -out mykey.key 1024 Generating RSA private key, 1024 bit long modulus …………………++++++ ……………………..++++++ e is 65537 (0x10001) Enter pass phrase for mykey.key: Verifying – Enter pass phrase for mykey.key:      2) \uc554\ud638\ud654 \ud558\uc9c0 \uc54a\uc74c     openssl genrsa -out KEYNAME.key 1024 [root@domU-12-31-39-14-F9-A2 bin]# openssl genrsa -out test.key 1024 Generating RSA private key, 1024 bit long modulus …………………………………………………………………………++++++ …………………………..++++++ e is 65537 (0x10001)      3) \uae30\uc874 \ube44\ubc00\ud0a4\uc5d0 \ud328\uc2a4\uc6cc\ub4dc \ucd94\uac00     openssl rsa -in KEYNAME.key -des3 -out NEW_KEYNAME.key [root@domU-12-31-39-14-F9-A2 bin]# […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[31,75,106,143],"_links":{"self":[{"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/posts\/1961"}],"collection":[{"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/comments?post=1961"}],"version-history":[{"count":0,"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/posts\/1961\/revisions"}],"wp:attachment":[{"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/media?parent=1961"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/categories?post=1961"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mooa.net\/ap\/wp-json\/wp\/v2\/tags?post=1961"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}