PATH=/usr/bin:/usr/sbin:/usr/lib/lvm:/etc/lvm :/usr/local/sbin:/usr/local/bin :/usr/ccs/bin :/usr/local/ssl/bin :/usr/local/ssl/lib :/usr/local/apache/bin LD_LIBRARY_PATH=/usr/local/ssl/lib export PATH LD_LIBRARY_PATH
[root@www Source]# source /.bash_profile■open_ssl mod_ssl apache を /usr/local/src/下に展開
[root@www src]# gunzip apache-1.3.27.tar.gz ;gunzip mod_ssl-2.8.12-1.3.27.tar.gz ;gunzip openssl-0.9.6i.tar.gz [root@www src]# tar xvf apache-1.3.27.tar ;tar xvf mod_ssl-2.8.12-1.3.27.tar;tar xvf openssl-0.9.6i.tar
■gccとmakeのインストール
[root@www Binary]# gunzip gcc-2.95.3-sol8-sparc-local.gz [root@www Binary]# gunzip make-3.80-sol9-sparc-local.gz [root@www Binary]# pkgadd -d gcc-2.95.3-sol8-sparc-local■OpenSSLのインストールThe following packages are available: 1 SMCgcc gcc (sparc) 2.95.3
Select package(s) you wish to process (or 'all' to process all packages). (default: all) [?,??,q]: all
Processing package instance from -sparc-local>
gcc (sparc) 2.95.3 Free Software Foundation Using as the package base directory. ## Processing package information. ## Processing system information. 6 package pathnames are already properly installed. ## Verifying disk space requirements. ## Checking for conflicts with packages already installed. ## Checking for setuid/setgid programs.
Installing gcc as
Installation of was successful.
[root@www Binary]# pkgadd -d make-3.80-sol9-sparc-local
The following packages are available: 1 SMCmake make (sparc) 3.80
Select package(s) you wish to process (or 'all' to process all packages). (default: all) [?,??,q]: all
Processing package instance from -sparc-local>
make (sparc) 3.80 Free Software Foundation Using as the package base directory. ## Processing package information. ## Processing system information. 5 package pathnames are already properly installed. ## Verifying disk space requirements. ## Checking for conflicts with packages already installed. ## Checking for setuid/setgid programs.
Installing make as
Installation of was successful.
[root@www openssl-0.9.6i]# ./config [root@www openssl-0.9.6i]# make [root@www openssl-0.9.6i]# make test [root@www openssl-0.9.6i]# make install■テストキーを試す
[root@www ssl]# openssl md5 * > rand.dat [root@www ssl]# openssl genrsa -des3 -rand rand.dat -out server.key 1024 363 semi-random bytes loaded Generating RSA private key, 1024 bit long modulus ......++++++ ..........................................++++++ e is 65537 (0x10001) Enter PEM pass phrase: Verifying password - Enter PEM pass phrase: [root@www ssl]# openssl rsa -in server.key -out server.key read RSA key Enter PEM pass phrase: writing RSA key [root@www ssl]# openssl req -new -key server.key -x509 -out server.crt Using configuration from /usr/local/ssl/openssl.cnf You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank.
