{"id":1321,"date":"2013-07-15T04:55:31","date_gmt":"2013-07-15T04:55:31","guid":{"rendered":"http:\/\/brain.payzip.co.kr\/?p=1321"},"modified":"2013-07-15T04:55:31","modified_gmt":"2013-07-15T04:55:31","slug":"tlsssl-openssl%ec%9d%84-%ec%9d%b4%ec%9a%a9%ed%95%9c-%ec%9d%b8%ec%a6%9d%ec%84%9c-%ec%83%9d%ec%84%b1-%ec%a0%88%ec%b0%a8","status":"publish","type":"post","link":"https:\/\/blog.goorigo.com\/?p=1321","title":{"rendered":"[TLS\/SSL] Openssl\uc744 \uc774\uc6a9\ud55c \uc778\uc99d\uc11c \uc0dd\uc131 \uc808\ucc28"},"content":{"rendered":"

openssl \uc744 \uc774\uc6a9\ud55c \uc778\uc99d\uc11c \uc0dd\uc131 \uc808\ucc28\ub97c \uc815\ub9ac\ud55c\ub2e4.<\/p>\n

\ucc38\uace0\ub85c \uc5ec\uae30\uc11c \uac1c\uc778\ud0a4\ud30c\uc77c(key.pem), CSR\ud30c\uc77c(csr.pem), \uc778\uc99d\uc11c \ud30c\uc77c (crt.pem) \ub4f1\uc758 \ud30c\uc77c\uba85\uc740 \ub9c8\uc74c\ub370\ub85c \ubcc0\uacbd\ud560 \uc218 \uc788\ub2e4.<\/p>\n

1. \ud0a4 \ud30c\uc77c \uc0dd\uc131<\/strong>
\n– Random Sate \uc0ac\uc6a9 \uc5ec\ubd80 \ubc0f \uc554\ud638\ud654\ub294 \ud544\uc218\uac00 \uc544\ub2cc \uc120\ud0dd\uc0ac\ud56d\uc774\ub2e4.
\n– \ud0a4\ud30c\uc77c\uc744 \uc554\ud638\ud654\ud560\u00a0\uacbd\uc6b0 \ud328\uc2a4\uc6cc\ub4dc \uc785\ub825\uc774 \ud544\uc694\ud558\uba70, \ud574\ub2f9 \ud328\uc2a4\uc6cc\ub4dc\ub97c \uc54c\uc544\uc57c\ub9cc \ud0a4\ud30c\uc77c\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n

\n

$\u00a0openssl md5 * > rand.dat<\/strong>\u00a0\u00a0#Random State \ud30c\uc77c \uc0dd\uc131<\/p>\n

$\u00a0openssl genrsa -rand rand.dat\u00a0-des3 1024 > key.pem<\/strong>\u00a0\u00a0 \u00a0#Random State \uc0ac\uc6a9 & des3 \uc554\ud638\ud654 \uc0ac\uc6a9 & 1024 bit \ud0a4 \uc0dd\uc131<\/p>\n

$\u00a0openssl genrsa -des3 1024 > key.pem<\/strong>\u00a0\u00a0#des3 \uc554\ud638\ud654 \uc0ac\uc6a9 & 1024 bit \ud0a4 \uc0dd\uc131<\/p>\n

$\u00a0openssl genrsa 1024 > key.pem<\/strong>\u00a0\u00a0#1024bit \ud0a4\uc0dd\uc131 (\ud328\uc2a4\uc6cc\ub4dc \ud544\uc694\uc5c6\uc74c)<\/p>\n

$\u00a0openssl genrsa > key.pem<\/strong>\u00a0\u00a0#\uae30\ubcf8 512bit \ud0a4 \uc0dd\uc131<\/p>\n<\/div>\n

 <\/p>\n

2. CSR \uc0dd\uc131<\/strong>
\n– CSR\uc740 “Certificate Signing Request” \uc758 \uc57d\uc790\ub85c \uc778\uc99d\uc11c \uc11c\uba85 \uc694\uccad\uc744 \uc758\ubbf8\ud55c\ub2e4. \uc880\ub354 \uc27d\uac8c \uc124\uba85\ud558\uba74 CSR \ud30c\uc77c\uc740\u00a0\uc778\uc99d\uc11c\ub97c \ubc1c\uae09\ubc1b\uae30 \uc704\ud574\uc11c \ub098\ub294 “\uc544\ubb34\uac1c”\uc774\uace0 \ud0a4\uac12\uc740 \uc5b4\ub5a4\uac78 \uc0ac\uc6a9\ud55c\ub2e4\ub294 \uc815\ubcf4\ub97c \uc800\uc7a5\ud558\uace0 \uc788\ub2e4.<\/p>\n

\n

$\u00a0openssl req -new -key key.pem > csr.pem<\/strong><\/p>\n

 <\/p>\n

Enter pass phrase for key.pem: \u00a0\u00a0\u00a0#\ud0a4\ud30c\uc77c \uc0dd\uc131\uc2dc \uc0ac\uc6a9\ud55c \ud328\uc2a4\uc6cc\ub4dc \uc785\ub825 (\ud0a4\ud30c\uc77c\uc744 \uc554\ud638\ud654\ud55c \uacbd\uc6b0\ub9cc \ud544\uc694\ud55c \uacfc\uc815\uc784)
\nYou are about to be asked to enter information that will be incorporated
\ninto your certificate request.
\nWhat you are about to enter is what is called a Distinguished Name or a DN.
\nThere are quite a few fields but you can leave some blank
\nFor some fields there will be a default value,
\nIf you enter ‘.’, the field will be left blank.
\n—–
\nCountry Name (2 letter code) [GB]: \u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#ISO\u00a0\uad6d\uac00\ucf54\ub4dc \uc785\ub825
\nState or Province Name (full name) [Berkshire]: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0\u00a0#\ub3c4\/\uc2dc \uc785\ub825
\nLocality Name (eg, city) [Newbury]: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0 \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\ub3c4\uc2dc\uba85\u00a0\uc785\ub825
\nOrganization Name (eg, company) [My Company Ltd]: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u00a0#\ud68c\uc0ac\uba85 \uc785\ub825
\nOrganizational Unit Name (eg, section) []: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\uc870\uc9c1\uba85 \uc785\ub825
\nCommon Name (eg, your name or your server’s hostname) []: \u00a0\u00a0#\uc0ac\uc6a9\uc790\uba85 \ud639\uc740 \uc11c\ubc84 \ud638\uc2a4\ud2b8\uba85
\nEmail Address []: \u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0#\uc774\uba54\uc77c\uc8fc\uc18c<\/p>\n

 <\/p>\n<\/div>\n

 <\/p>\n

3. SSL \uc778\uc99d\uc11c \ud30c\uc77c \uc0dd\uc131<\/strong><\/p>\n

3.1 \uacf5\uc778 \uc778\uc99d\uc11c \ud30c\uc77c\u00a0\uc0dd\uc131<\/strong>
\n– \uacf5\uc778\uc778\uc99d\uc11c \ubc1c\uae09 \uae30\uad00\uc758 \ubc15\uae09\uc808\ucc28\ub97c \ub530\ub77c \uc778\uc815\uc11c \ud30c\uc77c\uc744 \ubc1c\uae09\ubc1b\uc73c\uba70 \uc778\uc815\uc11c \ubc1c\uae09\uc2dc \uc704\uc5d0\uc11c \uc0dd\uc131\ud55c CSR \ud30c\uc77c\uc774 \ud544\uc694\ud558\ub2e4.
\n– \uacf5\uc778 \uc778\uc99d \uae30\uad00\uc740 \uc544\ub798\uc640 \uac19\ub2e4.
\n+ \ud55c\uad6d\uc804\uc790\uc778\uc99d : http:\/\/www.crosscert.com
\n+ \uae08\uc735\uacb0\uc81c\uc6d0 \uc804\uc790\uc778\uc99d\uc13c\ud130(yessign) : https:\/\/www.yessign.or.kr\/ssl\/index.htm<\/p>\n

3.2 \uc0ac\uc124 \uc778\uc99d\uc11c \ud30c\uc77c \uc0dd\uc131<\/strong>
\n– openssl\uc744 \uc774\uc6a9\ud558\uc5ec \uc0ac\uc124 \uc778\uc99d\uc11c \ud30c\uc77c\uc744 \uc0dd\uc131\ud55c\ub2e4.<\/p>\n

\n

$\u00a0openssl req -key key.pem -x509 -nodes -sha1 -days 365 -in csr.pem -out crt.pem<\/strong><\/p>\n

\ucd9c\ucc98 :\u00a0http:\/\/dimdim.tistory.com\/entry\/openssl-%EC%9D%B8%EC%A6%9D%EC%84%9C-%EC%83%9D%EC%84%B1<\/a><\/strong><\/div>\n
<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

openssl \uc744 \uc774\uc6a9\ud55c \uc778\uc99d\uc11c \uc0dd\uc131 \uc808\ucc28\ub97c \uc815\ub9ac\ud55c\ub2e4. \ucc38\uace0\ub85c \uc5ec\uae30\uc11c \uac1c\uc778\ud0a4\ud30c\uc77c(key.pem), CSR\ud30c\uc77c(csr.pem), \uc778\uc99d\uc11c \ud30c\uc77c (crt.pem) \ub4f1\uc758 \ud30c\uc77c\uba85\uc740 \ub9c8\uc74c\ub370\ub85c \ubcc0\uacbd\ud560 \uc218 \uc788\ub2e4. 1. \ud0a4 \ud30c\uc77c \uc0dd\uc131 – Random Sate \uc0ac\uc6a9 \uc5ec\ubd80 \ubc0f… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=\/wp\/v2\/posts\/1321"}],"collection":[{"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1321"}],"version-history":[{"count":0,"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=\/wp\/v2\/posts\/1321\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1321"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1321"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.goorigo.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1321"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}