https://www.bravotouring.com/~yano/archives/2005/01/15/ Recent content in 2005/01/15 on Yano's digital garage Hugo en-us Sat, 15 Jan 2005 00:00:00 +0900 https://www.bravotouring.com/~yano/diary/it/20050115.htm Sat, 15 Jan 2005 00:00:00 +0900 https://www.bravotouring.com/~yano/diary/it/20050115.htm <p>そういえば <span class="Path">/etc/httpd/conf/httpd.conf</span> に<span class="Software">SSL</span>のセクションが無い…と途方に暮れていたところ、<span class="Path">/etc/httpd/conf.d/</span>に ssl.conf を発見。DocumentRootとServerNameを書換えてrestart。アクセスしてみると<span class="Worning">「"localhost.localdomain"の証明書は信頼できない」</span>と怒られた....</p> <p>確かにおっしゃるとおりなので、オリジナルの<span class="Topics">サーバー証明書</span>を作成。<blockquote class="Log">[root@nx9030 root]# <span class="KeyPrint">cd /etc/httpd/conf/</span><br/>[root@nx9030 conf]# <span class="Comment">### 1. サーバー秘密鍵 server.keyの生成 ###</span><br/>[root@nx9030 conf]# <span class="KeyPrint">make genkey</span><br/>umask 77 ; \<br/>/usr/bin/openssl genrsa -des3 1024 > /etc/httpd/conf/ssl.key/server.key<br/>Generating RSA private key, 1024 bit long modulus<br/>.....++++++<br/>...........++++++<br/>e is 65537 (0x10001)<br/>Enter pass phrase:<span class="KeyPrint">************</span><span class="Comment">(パスフレーズ)</span><br/>Verifying - Enter pass phrase:<span class="KeyPrint">************</span><span class="Comment">(パスフレーズ)</span><br/>[root@nx9030 conf]# <span class="Comment">### 2. サーバー証明書 server.crtの生成 ###</span><br/>[root@nx9030 conf]# <span class="KeyPrint">make testcert</span><br/>umask 77 ; \<br/>/usr/bin/openssl req -new -key /etc/httpd/conf/ssl.key/server.key -x509 -days 365 -out /etc/httpd/conf/ssl.crt/server.crt<br/>Enter pass phrase for /etc/httpd/conf/ssl.key/server.key:<span class="KeyPrint">************</span><span class="Comment">(パスフレーズ)</span><br/>You are about to be asked to enter information that will be incorporated<br/>into your certificate request.<br/>What you are about to enter is what is called a Distinguished Name or a DN.<br/>There are quite a few fields but you can leave some blank<br/>For some fields there will be a default value,<br/>If you enter '.', the field will be left blank.<br/>-----<br/>Country Name (2 letter code) [GB]:<span class="KeyPrint">JP</span><br/>State or Province Name (full name) [Berkshire]:<span class="KeyPrint">Fukuoka</span><br/>Locality Name (eg, city) [Newbury]:<span class="KeyPrint">Fukuoka</span><br/>Organization Name (eg, company) [My Company Ltd]:<span class="KeyPrint">bravotouring.com</span><br/>Organizational Unit Name (eg, section) []:<span class="KeyPrint">authorization</span><br/>Common Name (eg, your name or your server's hostname) []:<span class="Topics">www.bravotouring.com</span><br/>Email Address []:<span class="KeyPrint">webmaster＠bravotouring.com</span><br/>[root@nx9030 conf]# <span class="Comment">### 3. apache起動時に止まらないよう秘密鍵からパスフレーズを削除 ###</span><br/>[root@nx9030 conf]# <span class="KeyPrint">/usr/bin/openssl rsa -in ssl.key/server.key -out ssl.key/server.key</span><br/>Enter pass phrase for server.key:<span class="KeyPrint">************</span><span class="Comment">(パスフレーズ)</span><br/>writing RSA key<br/>[root@nx9030 conf]# <span class="Comment">### 終了 ###</span></blockquote></p> https://www.bravotouring.com/~yano/diary/20050115a.htm Sat, 15 Jan 2005 00:00:00 +0900 https://www.bravotouring.com/~yano/diary/20050115a.htm <p>今回は<a href="http://www.carbucks.co.jp/">カーコン倶楽部カーバックス店</a>で。通常の点検整備に加えて<span class="Strong">ブレーキフルード交換</span><span class="Price">3,970円</span>を依頼。諸費用込みの総額は<span class="Price">81,304円</span>也。ディーラーに出すより3万ほど安上がりで終わった。</p> <p>最近TVCMでもガンガン流れている<a href="http://www.jars.gr.jp/">自動車リサイクル</a>。公式アナウンスでは今月から費用徴収となっているのだが、業者側の準備が間に合わず継続車検では2月分からになっているらしい。今回は払わなくて済んだ、とはいえ次回の車検か廃車時には払わなくてはならないのだが…</p>