>> Delete No. 47837 article
No. [질문]apache1.3.23+mod_ssl2.8.7+openssl0.9.6c

등록 2002-04-26 21:12:00 By localhost     조회 1
이름 꼬막이    

		환경 : redhat7.2 + apache1.3.23, mod_ssl2.8.7, openssl0.9.6c
 우선 openssl0.9.6c를 설치하여 개인 crt를 생성하였습니다
 --------------------------
1. /usr/local/src/openssl-0.9.6/apps/openssl genrsa -des3 -out secure.key 1024
2. /usr/local/src/openssl-0.9.6/apps/openssl req -new -key secure.key -out
   secure.csr
3. /usr/local/src/openssl req -x509 -key ./secure.key -in secure.csr > secure.crt
 --------------------------
 그리고 난후 mod_ssl2.8.7 디렉토리에 가서 compile를 했습니다.
   ./configure
             --with-apache=../apache_1.3.23
             --with-ssl=../openssl0.9.6c
             --prefix=/usr/local/apche
             --enable-module=so
             --enable-rule=SHARED_CORE
 그리고 난후
secure.key와 secure.crt를 /home/apache/ssl.key, /home/apache/ssl.crt 디렉토리로
각각 copy 하고 나서 httpd.conf를 수정하고 난후 apachectl startssl를 구동하였습니다.
 httpd.conf
----------------------------------------
 SSLEngine on
SSLCertificateFile /home/apache/conf/ssl.crt/secure.crt
SSLCertificateKeyFile /home/apache/conf/ssl.key/secure.key
------------------------------------------
 aapche_error 로그를 보면
----------------------------------------------------------
[Fri Apr 26 19:19:11 2002] [notice] Apache/1.3.23 (Unix) mod_ssl/2.8.7 OpenSSL/0.9.6c configured -- resuming normal oper
ations [Fri Apr 26 19:19:11 2002] [notice] Accept mutex: sysvsem (Default: sysvsem)
---------------------------------------------------------
 이런식으로 잘 떠 있습니다.물론 데몬도 띄워져 있구요..
 그런데....
ssl_engine_log 를 보면 이런 로그가 나타납니다.
-------------------------------------------------
[26/Apr/2002 19:19:06 13635] [info]  Server: Apache/1.3.23, Interface: mod_ssl/2.8.7, Library: OpenSSL/0.9.6c
[26/Apr/2002 19:19:06 13635] [info]  Init:1st startup round (still not detached)
[26/Apr/2002 19:19:06 13635] [info]  Init: Initializing OpenSSL library
[26/Apr/2002 19:19:06 13635] [info]  Init: Loading certificate & private key of SSL-aware server test.co.kr:443
[26/Apr/2002 19:19:06 13635] [info]  Init: Requesting pass phrase via builtin terminal dialog
[26/Apr/2002 19:19:11 13635] [info]  Init: Wiped out the queried pass phrases from memory
[26/Apr/2002 19:19:11 13635] [info]  Init: Seeding PRNG with 136 bytes of entropy
[26/Apr/2002 19:19:11 13635] [info]  Init: Generating temporary RSA private keys (512/1024 bits)
[26/Apr/2002 19:19:11 13635] [info]  Init: Configuring temporary DH parameters (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info]  Init:2nd startup round (already detached)
[26/Apr/2002 19:19:11 13636] [info]  Init: Reinitializing OpenSSL library
[26/Apr/2002 19:19:11 13636] [info]  Init: Seeding PRNG with 136 bytes of entropy
[26/Apr/2002 19:19:11 13636] [info]  Init: Configuring temporary RSA private keys (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info]  Init: Configuring temporary DH parameters (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info]  Init: Initializing (virtual) servers for SSL
[26/Apr/2002 19:19:11 13636] [info]  Init: Configuring server test.co.kr:443 for SSL protocol
[26/Apr/2002 19:19:11 13636] [warn]  Init:(test.co.kr:443) RSA server certificate is a CA certificate (BasicConstraint
s : CA == TRUE !?)
----------------------------------------------------
보시면 알시겠지만..맨 밑에 warn 뜹니다.
 그리고 나서 웹 브라우저에서..
 https://test.co.kr:443 으로 접속을 해보면 서버를 찾을수 없거나 DNS 오류라고 나옵니다.
 어떻게 해결해야 되는지...감이 잡히지가 않는군요..
 많은 도움 부탁드립니다.
 --
서명.
[관리자] 패스워드를 입력 하십시오. 답장이 존재하면 함께 삭제됩니다.[ 목록 | 이전 ]
패스워드:    

Copyleft 1999-2026 by JSBoard Open Project
Theme Designed by IDOO All right reserved