아파치 (Apache )

[아파치 보안 인증키 처리 방법]

랩퍼우 2015. 12. 25. 00:12

[아파치 보안 인증키 처리 방법]


/NCIA/APACHE/certs/new.cert.tar

# tar xvf new.cert.tar (압축풀기)

# mv new.www www.privacy.go.kr (파일명변경, 인터넷망)
# mv new.intra intra.privacy.go.kr  (파일명변경, 업무망)


/NCIA/APACHE/certs/intra.privacy.go.kr  intra.privacy.go.kr (I,인트라넷)

/NCIA/APACHE/certs/www.privacy.go.kr    www.privacy.go.kr (P, 업무망)



/NCIA/APACHE/jboss-ews-2.1/httpd/conf.d/conf_backup (경로이동)

# mv ssl.conf .. (상위단계로 이동)
# cp ssl.conf ssl.conf_20151125 (파일 복사, 백업)

# vim /NCIA/APACHE/jboss-ews-2.1/httpd/conf.d/ssl.conf


#LoadModule ssl_module modules/mod_ssl.so (주석처리)
---------------------------------인터넷망---------------------------------------------


SSLPassPhraseDialog exec:/NCIA/APACHE/certs/www.privacy.go.kr/passwd.sh

1.SSLCertificateFile /etc/pki/tls/certs/localhost.crt (기존)
1.SSLCertificateFile /NCIA/APACHE/certs/www.privacy.go.kr/cert.pem (변경)

2.SSLCertificateKeyFile /etc/pki/tls/private/localhost.key (기존)
2.SSLCertificateKeyFile /NCIA/APACHE/certs/www.privacy.go.kr/key.pem (변경)

3.SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt (기존, 이미주석처리됨)
3.SSLCertificateChainFile /NCIA/APACHE/certs/www.privacy.go.kr/caChain.pem (변경)

4.SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt (기존, 이미주석처리됨)
4.SSLCACertificateFile /NCIA/APACHE/certs/www.privacy.go.kr/ca.pem (변경)


---------------------------------업무망---------------------------------------------


SSLPassPhraseDialog exec:/NCIA/APACHE/certs/intra.privacy.go.kr/passwd.sh

1.SSLCertificateFile /etc/pki/tls/certs/localhost.crt (기존)
1.SSLCertificateFile /NCIA/APACHE/certs/intra.privacy.go.kr/cert.pem (변경)

2.SSLCertificateKeyFile /etc/pki/tls/private/localhost.key (기존)
2.SSLCertificateKeyFile /NCIA/APACHE/certs/intra.privacy.go.kr/key.pem (변경)

3.SSLCertificateChainFile /etc/pki/tls/certs/server-chain.crt (기존, 이미주석처리됨)
3.SSLCertificateChainFile /NCIA/APACHE/certs/intra.privacy.go.kr/caChain.pem (변경)

4.SSLCACertificateFile /etc/pki/tls/certs/ca-bundle.crt (기존, 이미주석처리됨)
4.SSLCACertificateFile /NCIA/APACHE/certs/intra.privacy.go.kr/ca.pem (변경)

-----------------------------------------------------------------------------------

5. 아파치 서버 재기동
# /NCIA/APACHE/jboss-ews-2.1/httpd/sbin./apachectl stop (아파치 서비스 정지)

# /NCIA/APACHE/jboss-ews-2.1/httpd/sbin./apachectl start (아파치 서비스 시작)


6. 아파치 프로세스 기동 확인
# ps -ef | grep httpd

저작자표시