apache에서 인증서 사용하기..인증서설치

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

요놈의 인증서를 복사하여 vi 편집기를 사용하여 cert.pem 으로 apache서버의 /conf 에 저장합니다.

 

그럼 다음에 httpd.conf 파일을 열어서 다음 사항을 추가합니다..

 

먼저 VirtualHost를 만들고 그 안에 인증서와 관련된 내용을 추가 합니다...

 

Listen 443 --->요건 필수

NameVirtualHost 443--->요건 선택사항

 

<virtualHost www.xxx.www:443>

DocumentRoot /docs/

Server Name test

SSLCertificateFile /usr/local/apache/conf/ssl/cert.pem (인증서 파일 경로설정)

SSLCertificateKeyFile /usr/local/apache/conf/ssl/key.pem (키파일 경로 설정)

</virtualHost>

 

그리고 apache stop

apache startssl

비밀번호 물어보면 처음에 key 생성할때 만든 비밀번호를 넣으면 끝....

 

확인방법

 

https://localhost

 

http://blog.naver.com/cisa_cissp/150002301925