변군이글루

OpenSSL 최신버전으로 업그레이드 OpenSSL Downloads https://www.openssl.org/source/ 현재 버전 $ openssl version OpenSSL 1.0.2k-fips 26 Jan 2017 공유 라이브러리 $ ldd /usr/bin/openssl linux-vdso.so.1 => (0x00007fffc2b5f000) libssl.so.10 => /lib64/libssl.so.10 (0x00007fb7c9aa8000) libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007fb7c985b000) libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007fb7c9572000) libcom_err.so...

Openssl(소스 컴파일) 업그레이드1. 다운로드 링크 https://www.openssl.org/source/ # wget https://www.openssl.org/source/openssl-1.1.0e.tar.gz2. 컴파일 설치 # tar xvfz openssl-1.1.0e.tar.gz # cd openssl-1.1.0e # ./config # make # make install# which openssl /usr/local/bin/openssl3. 라이브러리 등록 # export LD_LIBRARY_PATH=/usr/local/lib64 or # ln -s /usr/local/lib64/libssl.so.1.1 /usr/lib64/libssl.so.1.1 # ln -s /usr/local/li..

Heartbleed test URL http://filippo.io/Heartbleed/ CMD test [root@cvm121 ~]# openssl s_client -connect google.com:443 -tlsextdebug 2>&1 CONNECTED(00000003) TLS server extension "renegotiation info" (id=65281), len=1 0001 - TLS server extension "EC point formats" (id=11), len=4 0000 - 03 00 01 02 .... TLS server extension "session ticket" (id=35), len=0 TLS server extension "heartbeat" (id=15), le..

OpenSSL 사용, RSA 1024bit 사이즈의 키 생성 1) 개인키 생성 [root@NS1 tmp]# openssl genrsa -out openssl_rsa_1024.key -rand /dev/urandom 1024 2048 semi-random bytes loaded Generating RSA private key, 1024 bit long modulus ..........++++++ ...........++++++ e is 65537 (0x10001) 2) 공개키 생성 [root@NS1 tmp]# openssl rsa -inform PEM -outform PEM -in openssl_rsa_1024.key -out openssl_rsa_1024.pubkey -pubout writing RSA ..

CentOS 6.x버전 APM 설치 [라이브러리] yum -y install openssl openssl-devel libtool libtool-ltdl libtool-ltdl-devel zlib-devel zlib freetype-devel freetype libpng-devel libpng libjpeg-devel libjpeg libtiff-devel libtiff gd-devel gd pcre-devel pcre libxml2-devel libxml2 gdbm-devel gdbm ncurses-devel ncurses curl-devel curl expat-devel expat bzip2-devel bzip2-libs bzip2 libc libc-devel libc-client-devel gcc*..

아파치 SSL 패스워드 없이 시작하기 [root@byungun scbyun]# pwd /web/ssl_conf/scbyun [root@byungun scbyun]# openssl rsa -in scbyun.co.kr.key -out scbyun.co.kr-nopassword.key Enter pass phrase for scbyun.co.kr.key: [패스워드 입력]