적수네 동네 - 질문과 답변 [ 게시물 수정 ]

	>> Edit article


			이름
			제목
			패스워드

환경 : redhat7.2 + apache1.3.23, mod_ssl2.8.7, openssl0.9.6c
 우선 openssl0.9.6c를 설치하여 개인 crt를 생성하였습니다
 --------------------------
1. /usr/local/src/openssl-0.9.6/apps/openssl genrsa -des3 -out secure.key 1024
2. /usr/local/src/openssl-0.9.6/apps/openssl req -new -key secure.key -out 
   secure.csr
3. /usr/local/src/openssl req -x509 -key ./secure.key -in secure.csr > secure.crt
 --------------------------
 그리고 난후 mod_ssl2.8.7 디렉토리에 가서 compile를 했습니다.
   ./configure 
             --with-apache=../apache_1.3.23 
             --with-ssl=../openssl0.9.6c 
             --prefix=/usr/local/apche 
             --enable-module=so 
             --enable-rule=SHARED_CORE
 그리고 난후
secure.key와 secure.crt를 /home/apache/ssl.key, /home/apache/ssl.crt 디렉토리로
각각 copy 하고 나서 httpd.conf를 수정하고 난후 apachectl startssl를 구동하였습니다.
 httpd.conf
----------------------------------------
 SSLEngine on
SSLCertificateFile /home/apache/conf/ssl.crt/secure.crt
SSLCertificateKeyFile /home/apache/conf/ssl.key/secure.key
------------------------------------------
 aapche_error 로그를 보면
----------------------------------------------------------
[Fri Apr 26 19:19:11 2002] [notice] Apache/1.3.23 (Unix) mod_ssl/2.8.7 OpenSSL/0.9.6c configured -- resuming normal operations
[Fri Apr 26 19:19:11 2002] [notice] Accept mutex: sysvsem (Default: sysvsem)
---------------------------------------------------------
 이런식으로 잘 떠 있습니다.물론 데몬도 띄워져 있구요..
 그런데....
ssl_engine_log 를 보면 이런 로그가 나타납니다.
-------------------------------------------------
[26/Apr/2002 19:19:06 13635] [info]  Server: Apache/1.3.23, Interface: mod_ssl/2.8.7, Library: OpenSSL/0.9.6c
[26/Apr/2002 19:19:06 13635] [info]  Init: 1st startup round (still not detached)
[26/Apr/2002 19:19:06 13635] [info]  Init: Initializing OpenSSL library
[26/Apr/2002 19:19:06 13635] [info]  Init: Loading certificate & private key of SSL-aware server test.co.kr:443
[26/Apr/2002 19:19:06 13635] [info]  Init: Requesting pass phrase via builtin terminal dialog
[26/Apr/2002 19:19:11 13635] [info]  Init: Wiped out the queried pass phrases from memory
[26/Apr/2002 19:19:11 13635] [info]  Init: Seeding PRNG with 136 bytes of entropy
[26/Apr/2002 19:19:11 13635] [info]  Init: Generating temporary RSA private keys (512/1024 bits)
[26/Apr/2002 19:19:11 13635] [info]  Init: Configuring temporary DH parameters (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info]  Init: 2nd startup round (already detached)
[26/Apr/2002 19:19:11 13636] [info]  Init: Reinitializing OpenSSL library
[26/Apr/2002 19:19:11 13636] [info]  Init: Seeding PRNG with 136 bytes of entropy
[26/Apr/2002 19:19:11 13636] [info]  Init: Configuring temporary RSA private keys (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info]  Init: Configuring temporary DH parameters (512/1024 bits)
[26/Apr/2002 19:19:11 13636] [info]  Init: Initializing (virtual) servers for SSL
[26/Apr/2002 19:19:11 13636] [info]  Init: Configuring server test.co.kr:443 for SSL protocol
[26/Apr/2002 19:19:11 13636] [warn]  Init: (test.co.kr:443) RSA server certificate is a CA certificate (BasicConstraints
: CA == TRUE !?)
----------------------------------------------------
보시면 알시겠지만..맨 밑에 warn 뜹니다.
 그리고 나서 웹 브라우저에서..
 https://test.co.kr:443 으로 접속을 해보면 서버를 찾을수 없거나 DNS 오류라고 나옵니다.
 어떻게 해결해야 되는지...감이 잡히지가 않는군요..
 많은 도움 부탁드립니다.
 --
서명.