{"categories":["SSL","Debian"],"published":"2009-11-02 00:00:00","blog_title":"Shammer's Philosophy","provider_url":"https://hatena.blog","version":"1.0","title":"\u72ec\u81eaCA\u74b0\u5883\u69cb\u7bc9\u3068\u8a3c\u660e\u66f8\u4f5c\u6210\u624b\u9806\uff08Debian / CA.sh \u7de8\uff09","blog_url":"https://shammerism.hatenadiary.com/","author_name":"shammer","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fshammerism.hatenadiary.com%2Fentry%2F20091102%2Fp1\" title=\"\u72ec\u81eaCA\u74b0\u5883\u69cb\u7bc9\u3068\u8a3c\u660e\u66f8\u4f5c\u6210\u624b\u9806\uff08Debian / CA.sh \u7de8\uff09 - Shammer&#39;s Philosophy\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","type":"rich","provider_name":"Hatena Blog","author_url":"https://blog.hatena.ne.jp/shammer/","height":"190","description":"\u6e96\u5099\u3068Goal \u307e\u305a\u3001OpenSSL \u7528\u306e\u7279\u5b9a\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u8a2d\u5b9a\uff08$OpenSSL_DIR\uff09\u3002 \u305d\u306e\u914d\u4e0b\u306b RootCA\uff08$MyRootCA\uff09\u3068\u3001\u30b5\u30fc\u30d0\u30fc\u8a3c\u660e\u66f8\u3092\u751f\u6210\u3059\u308b\u5404\u30b5\u30fc\u30d0\u30fc\u7528\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\uff08$ServerCertificates\uff09\u3082\u4f5c\u6210\u3057\u3066\u304a\u304f\u3002 \u30b3\u30de\u30f3\u30c9\u306b\u3059\u308b\u3068\u3053\u3093\u306a\u611f\u3058\u304b\u3002 mkdir $OpenSSL_DIR cd $OpenSSL_DIR mkdir $MyRootCA $MyRootCA \u4f5c\u6210 /etc/ssl/openssl.cnf \u304c openssl \u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u3088\u3046\u306a\u306e\u3067\u3001\u3053\u308c\u3092\u4e88\u3081\u30d0\u30c3\u30af\u30a2\u30c3\u30d7\u3057\u3066\u304a\u304d\u3001/etc/ssl/openssl.cnf \u306b\u7de8\u96c6\u3092\u52a0\u3048\u3066\u3044\u304f\u3002\u2026","image_url":null,"url":"https://shammerism.hatenadiary.com/entry/20091102/p1","width":"100%"}