[Web/Was] OPENSSL 사설 인증키 생성 방법 및 tomcat openssl 설정방법

1. openssl key 생성

 

[root@test~]# openssl genrsa -out server.key 2048

 

Generating RSA private key, 2048 bit long modulus

............................................+++

............+++

e is 65537 (0x10001)

 

[root@test ~]# openssl req -new -key server.key -out server.csr

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [XX]:KR

State or Province Name (full name) []:Seoul

Locality Name (eg, city) [Default City]:Seoul

Organization Name (eg, company) [Default Company Ltd]:asite

Organizational Unit Name (eg, section) []:

Common Name (eg, your name or your server's hostname) []:websvr

Email Address []:

 

Please enter the following 'extra' attributes

to be sent with your certificate request

 

A challenge password []:

An optional company name []:

 

[root@test ~]# openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt

Signature ok

subject=/C=KR/ST=Seoul/L=Seoul/O=asite/CN=websvr

 

Getting Private key

 

 

2. Tomcat openssl 설정 server.xml

 

<Connector

           port="8443" maxThreads="200"

           scheme="https" secure="true" SSLEnabled="true"

           SSLCertificateFile="/usr/local/ssl/server.crt"

           SSLCertificateKeyFile="/usr/local/ssl/server.key"

           clientAuth="optional" SSLProtocol="TLSv1"/>