OpenSSL 秘密鍵と証明書

[root@ns1 ~]# cd /usr/ports/security/openssl/
[root@ns1 openssl]# make BATCH=yes install clean

[root@ns1 openssl]# cd /etc/ssl
[root@ns1 ssl]# openssl genrsa -des3 -out server.key 1024
Enter pass phrase for server.key: ←パスフレーズ入力
Verifying - Enter pass phrase for server.key: ←パスフレーズ入力 (確認)

[root@ns1 ssl]# openssl rsa -in server.key -out server.key
Enter pass phrase for server.key: ←先ほどのパスフレーズを入力
writing RSA key

[root@ns1 ssl]# openssl req -new -key server.key -out server.csr
Country Name (2 letter code) [AU]:JP ←国名
State or Province Name (full name) [Some-State]:Tokyo ←都道府県名
Locality Name (eg, city) []:Shibuya ←市区町村名
Organization Name (eg, company) [Internet Widgits Pty Ltd]:freebsd.orz ←ホスト名(または会社名)
Organizational Unit Name (eg, section) []: ←空エンター
Common Name (eg, YOUR name) []:freebsd.orz ←ホスト名(または管理者名)
Email Address []:postmaster@freebsd.orz ←管理者メールアドレス

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []: ←空エンター
An optional company name []: ←空エンター

[root@ns1 ssl]# openssl x509 -in server.csr -out server.pem -req -signkey server.key -days 365
[root@ns1 ssl]# chmod 400 server.*
[root@ns1 ssl]# cd