自己認証局と証明書の作成手順

サーバ証明書

認証局への署名要求書(CSR,申請書)を作成

認証機関(CA)への署名要求書(csr)を作成します。
同一ホストの自己認証局を利用する場合、以下の情報は認証局の証明書を構築時と同じ内容で作成して下さい。

Fig.2-11: 認証機関への署名要求書作成

# /usr/local/ssl/bin/openssl req -new -days 365 -key server.key -out csr.pem -config /usr/local/ssl/openssl.cnf
Enter pass phrase for server.key:	【サーバ秘密鍵のパスフレーズを入力】
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:Tokyo
Locality Name (eg, city) []:Setagaya-ku
Organization Name (eg, company) [Internet Widgits Pty Ltd]:UMIYAMA SHOJI Co., Ltd.
Organizational Unit Name (eg, section) []:Eigyou
Common Name (eg, YOUR name) []:www.umiyama.co.jp
Email Address []:fuguta@umiyama.co.jp
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:	【何も入力しない】
An optional company name []:	【何も入力しない】

ここで作成した署名要求書(csr.pem)を自己認証局に送り署名してもらいます。