환경 : redhat7.2 + apache1.3.23, mod_ssl2.8.7, openssl0.9.6c
우선 openssl0.9.6c를 설치하여 개인 crt를 생성하였습니다
--------------------------
1. /usr/local/src/openssl-0.9.6/apps/openssl genrsa -des3 -out secure.key 1024
2. /usr/local/src/openssl-0.9.6/apps/openssl req -new -key secure.key -out
secure.csr
3. /usr/local/src/openssl req -x509 -key ./secure.key -in secure.csr > secure.crt
--------------------------
그리고 난후 mod_ssl2.8.7 디렉토리에 가서 compile를 했습니다.
./configure
--with-apache=../apache_1.3.23
--with-ssl=../openssl0.9.6c
--prefix=/usr/local/apche
--enable-module=so
--enable-rule=SHARED_CORE
그리고 난후
secure.key와 secure.crt를 /home/apache/ssl.key, /home/apache/ssl.crt 디렉토리로
각각 copy 하고 나서 httpd.conf를 수정하고 난후 apachectl startssl를 구동하였습니다.
httpd.conf
----------------------------------------
SSLEngine on
SSLCertificateFile /home/apache/conf/ssl.crt/secure.crt
SSLCertificateKeyFile /home/apache/conf/ssl.key/secure.key
------------------------------------------
aapche_error 로그를 보면
----------------------------------------------------------
[Fri Apr 26 19:19:11 2002] [notice] Apache/1.3.23 (Unix) mod_ssl/2.8.7 OpenSSL/0.9.6c configured -- resuming normal oper
ations [Fri Apr 26 19:19:11 2002] [notice] Accept mutex: sysvsem (Default: sysvsem)
---------------------------------------------------------
이런식으로 잘 떠 있습니다.물론 데몬도 띄워져 있구요..
그런데....
ssl_engine_log 를 보면 이런 로그가 나타납니다.
-------------------------------------------------
[26/Apr/2002 19:19:06 13635] [info] Server: Apache/1.3.23, Interface: mod_ssl/2.8.7, Library: OpenSSL/0.9.6c
[26/Apr/2002 19:19:06 13635] [info] Init:1st startup round (still not detached)
[26/Apr/2002 19:19:06 13635] [info] Init: Initializing OpenSSL library
[26/Apr/2002 19:19:06 13635] [info] Init: Loading certificate & private key of SSL-aware server test.co.kr:443
[26/Apr/2002 19:19:06 13635] [info] Init: Requesting pass phrase via builtin terminal dialog
[26/Apr/2002 19:19:11 13635] [info] Init: Wiped out the queried pass phrases from memory
[26/Apr/2002 19:19:11 13635] [info] Init: Seeding PRNG with 136 bytes of entropy
[26/Apr/2002 19:19:11 13635] [info] Init: Generating temporary RSA private keys (512/1024 bits)
[26/Apr/2002 19:19:11 13635] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info] Init:2nd startup round (already detached)
[26/Apr/2002 19:19:11 13636] [info] Init: Reinitializing OpenSSL library
[26/Apr/2002 19:19:11 13636] [info] Init: Seeding PRNG with 136 bytes of entropy
[26/Apr/2002 19:19:11 13636] [info] Init: Configuring temporary RSA private keys (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info] Init: Configuring temporary DH parameters (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info] Init: Initializing (virtual) servers for SSL
[26/Apr/2002 19:19:11 13636] [info] Init: Configuring server test.co.kr:443 for SSL protocol
[26/Apr/2002 19:19:11 13636] [warn] Init:(test.co.kr:443) RSA server certificate is a CA certificate (BasicConstraint
s : CA == TRUE !?)
----------------------------------------------------
보시면 알시겠지만..맨 밑에 warn 뜹니다.
그리고 나서 웹 브라우저에서..
https://test.co.kr:443 으로 접속을 해보면 서버를 찾을수 없거나 DNS 오류라고 나옵니다.
어떻게 해결해야 되는지...감이 잡히지가 않는군요..
많은 도움 부탁드립니다.
--
서명.