ubuntu\u3067ssl<\/p>\n
\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3066\u307f\u305f\u3002
\n\u3067\u3082\u52d5\u3044\u3066\u3044\u308b\u306e\u304b\u3042\u3084\u3057\u3044\u2026\u3002<\/p>\n
\u4eca\u306f\u30eb\u30fc\u30bf\u30fc\u306e\u30dd\u30fc\u30c8\u3092\u3042\u3051\u3089\u308c\u306a\u3044\u306e\u3067
\n\u78ba\u8a8d\u3067\u304d\u306a\u3044\u304c\u3068\u308a\u3042\u3048\u305a\u306f\u30e1\u30e2\u3002<\/p>\n
\n(98)Address already in use: make_sock: could not bind to address 0.0.0.0:443
\n\u306e\u30a8\u30e9\u30fc\u304c\u3067\u3066apache\u304c\u8d77\u52d5\u3067\u304d\u306a\u304f\u306a\u304b\u3063\u305f\u306e\u3060\u304c\u3001
\n\u3044\u308d\u3044\u308d\u3044\u3058\u3063\u3066\u305f\u3089\u7a81\u7136\u51fa\u306a\u304f\u306a\u3063\u3066\u8d77\u52d5\u3067\u304d\u305f\u3002
\n\u7279\u306b\u8a2d\u5b9a\u3068\u304b\u3044\u3058\u3063\u3066\u3044\u306a\u3044\u306f\u305a\u306a\u306e\u3060\u304c\u2026\u3002
\n\u4f55\u3092\u3057\u3066\u89e3\u6c7a\u3067\u304d\u305f\u306e\u304b\u308f\u304b\u3089\u306a\u3044\u2026\u3002<\/p>\n
[\u53c2\u8003]
\nhttp:\/\/d.hatena.ne.jp\/rudeboyjet\/20070124\/p1
\n\u8a3c\u660e\u66f8\u306e\u4f5c\u308a\u65b9<\/p>\n
http:\/\/kunik.no-ip.com\/2007\/10\/20\/0146\/ubuntu-gutsy-apache2-ssl-setting.html
\nhttp:\/\/www.key-p.com\/blog\/ohnishi\/article.php?id=87<\/p>\n
http:\/\/hiruandon.net\/article.php?story=20070108191759906
\n\u53e4\u3044\uff1f\uff1f<\/p>\n
———————————————-<\/p>\n
~$ sudo a2enmod ssl
\nModule ssl installed; run \/etc\/init.d\/apache2 force-reload to enable.
\n~$ sudo vi \/etc\/ssl\/openssl.cnf
\n~$ cd \/usr\/lib\/ssl\/misc\/
\n\/usr\/lib\/ssl\/misc$ sudo .\/CA.sh -newca
\nCA certificate filename (or enter to create)<\/p>\n
Making CA certificate …
\nGenerating a 1024 bit RSA private key
\n..++++++
\n…………………++++++
\nwriting new private key to ‘.\/demoCA\/private\/.\/cakey.pem’
\nEnter PEM pass phrase:
\nVerifying – Enter PEM pass phrase:
\n—–
\nYou are about to be asked to enter information that will be incorporated
\ninto your certificate request.
\nWhat you are about to enter is what is called a Distinguished Name or a DN.
\nThere are quite a few fields but you can leave some blank
\nFor some fields there will be a default value,
\nIf you enter ‘.’, the field will be left blank.
\n—–
\nCountry Name (2 letter code) [AU]:JP
\nState or Province Name (full name) [Some-State]:Test
\nLocality Name (eg, city) []:Test
\nOrganization Name (eg, company) [Internet Widgits Pty Ltd]:
\nOrganizational Unit Name (eg, section) []:
\nCommon Name (eg, YOUR name) []:test
\nEmail Address []:<\/p>\n
Please enter the following ‘extra’ attributes
\nto be sent with your certificate request
\nA challenge password []:
\nAn optional company name []:
\nUsing configuration from \/usr\/lib\/ssl\/openssl.cnf
\nEnter pass phrase for .\/demoCA\/private\/.\/cakey.pem:
\nCheck that the request matches the signature
\nSignature ok
\nCertificate Details:
\n Serial Number: 0 (0x0)
\n Validity
\n Not Before: Mar 23 15:21:56 2009 GMT
\n Not After : Mar 22 15:21:56 2012 GMT
\n Subject:
\n countryName = JP
\n stateOrProvinceName = Test
\n organizationName = Internet Widgits Pty Ltd
\n commonName = test
\n X509v3 extensions:
\n X509v3 Subject Key Identifier:
\n 73:D7:F1:C3:76:13:2A:C5:FE:E0:EF:51:9F:0E:40:8F:7E:8E:F3:B6
\n X509v3 Authority Key Identifier:
\n keyid:73:D7:F1:C3:76:13:2A:C5:FE:E0:EF:51:9F:0E:40:8F:7E:8E:F3:B6
\n DirName:\/C=JP\/ST=Test\/O=Internet Widgits Pty Ltd\/CN=test
\n serial:00<\/p>\n
X509v3 Basic Constraints:
\n CA:TRUE
\n Netscape Cert Type:
\n SSL CA, S\/MIME CA
\nCertificate is to be certified until Mar 22 15:21:56 2012 GMT (1095 days)<\/p>\n
Write out database with 1 new entries
\nData Base Updated
\n\/usr\/lib\/ssl\/misc$ sudo openssl rsa -in .\/demoCA\/private\/cakey.pem -out .\/demoCA\/private\/cakey.pem
\nEnter pass phrase for .\/demoCA\/private\/cakey.pem:
\nwriting RSA key
\n\/usr\/lib\/ssl\/misc$ sudo openssl x509 -in .\/demoCA\/cacert.pem -out .\/demoCA\/cacert.crt
\n\/usr\/lib\/ssl\/misc$ sudo openssl x509 -inform pem -in .\/demoCA\/cacert.pem -outform der -out .\/demoCA\/ca.der
\n\/usr\/lib\/ssl\/misc$ sudo zcat \/usr\/share\/doc\/apache2.2-common\/examples\/apache2\/extra\/httpd-ssl.conf.gz > ~\/httpd-ssl.conf \/usr\/lib\/ssl\/misc$ ls -la ~
\n\/usr\/lib\/ssl\/misc$ sudo mv \/home\/markvb\/httpd-ssl.conf \/etc\/apache2\/sites-available\/
\n\/usr\/lib\/ssl\/misc$ sudo vi \/etc\/apache2\/sites-available\/httpd-ssl.conf
\n\/etc\/apache2\/sites-available$ sudo a2ensite httpd-ssl.conf
\nSite httpd-ssl.conf installed; run \/etc\/init.d\/apache2 reload to enable.
\n\/etc\/apache2\/sites-available$ sudo \/etc\/init.d\/apache2 reload
\nWarning: DocumentRoot [\/var\/www\/verryberry\/android\/www\/] does not exist
\nSyntax error on line 99 of \/etc\/apache2\/sites-enabled\/httpd-ssl.conf:
\nSSLCertificateFile: file ‘\/etc\/apache2\/server.crt’ does not exist or is empty
\n …fail!
\n\/etc\/apache2\/sites-available$ sudo vi \/etc\/apache2\/sites-enabled\/httpd-ssl.conf
\n\/etc\/apache2\/sites-available$ sudo \/etc\/init.d\/apache2 reload
\n * Reloading web server config apache2
\n [ OK ]
\n\/etc\/apache2\/sites-available$ sudo \/etc\/init.d\/apache2 restart
\n * Restarting web server apache2
\nhttpd (pid 16504?) not running
\n(98)Address already in use: make_sock: could not bind to address 0.0.0.0:443
\nno listening sockets available, shutting down
\nUnable to open logs
\n [fail]
\n\/etc\/apache2\/sites-available$ sudo \/etc\/init.d\/apache2 start
\n * Starting web server apache2 (98)Address already in use: make_sock: could not bind to address 0.0.0.0:443
\nno listening sockets available, shutting down
\nUnable to open logs
\n [fail]
\n\/etc\/apache2\/sites-available$ sudo \/etc\/init.d\/apache2 start
\n * Starting web server apache2 (98)Address already in use: make_sock: could not bind to address 0.0.0.0:443
\nno listening sockets available, shutting down
\nUnable to open logs
\n [fail]
\n\/etc\/apache2\/sites-available$ sudo \/etc\/init.d\/apache2 start
\n * Starting web server apache2 apache2: Syntax error on line 298 of \/etc\/apache2\/apache2.conf: Could not open configuration file \/etc\/apache2\/sites-enabled\/httpd-ssl.conf: No such file or directory
\n [fail]
\n\/etc\/apache2\/sites-available$ sudo mv ~\/httpd-ssl.conf_20090323 ..\/sites-enabled\/httpd-ssl.conf
\n\/etc\/apache2\/sites-available$ sudo \/etc\/init.d\/apache2 start
\n * Starting web server apache2 [ OK ]<\/p>\n","protected":false},"excerpt":{"rendered":"