質問編集履歴
4
一部不備ありました
test
CHANGED
|
File without changes
|
test
CHANGED
|
@@ -358,15 +358,15 @@
|
|
|
358
358
|
|
|
359
359
|
CSRのModulusを確認
|
|
360
360
|
|
|
361
|
-
openssl req -in
|
|
361
|
+
openssl req -in server.csr -modulus -noout
|
|
362
362
|
|
|
363
363
|
SSLサーバ証明書のModulusを確認
|
|
364
364
|
|
|
365
|
-
openssl x509 -in c
|
|
365
|
+
openssl x509 -in ssl.crt -modulus -noout
|
|
366
366
|
|
|
367
367
|
秘密鍵のModulusを確認
|
|
368
368
|
|
|
369
|
-
openssl rsa -in
|
|
369
|
+
openssl rsa -in server.key -modulus -noout
|
|
370
370
|
|
|
371
371
|
整合性確認いたしました。
|
|
372
372
|
|
|
@@ -374,7 +374,7 @@
|
|
|
374
374
|
|
|
375
375
|
秘密鍵が破損していないことの確認
|
|
376
376
|
|
|
377
|
-
openssl rsa -in
|
|
377
|
+
openssl rsa -in server.key -check -noout
|
|
378
378
|
|
|
379
379
|
問題なし
|
|
380
380
|
|
|
@@ -382,7 +382,7 @@
|
|
|
382
382
|
|
|
383
383
|
SSL証明書内容確認
|
|
384
384
|
|
|
385
|
-
openssl x509 -in c
|
|
385
|
+
openssl x509 -in ssl.crt -text -noout
|
|
386
386
|
|
|
387
387
|
|
|
388
388
|
|
3
進捗の追記です
test
CHANGED
|
File without changes
|
test
CHANGED
|
@@ -352,6 +352,54 @@
|
|
|
352
352
|
|
|
353
353
|
|
|
354
354
|
|
|
355
|
+
####秘密鍵、CSR、証明書に不備がないかどうか
|
|
356
|
+
|
|
357
|
+
```linux
|
|
358
|
+
|
|
359
|
+
CSRのModulusを確認
|
|
360
|
+
|
|
361
|
+
openssl req -in csr_filename.pem -modulus -noout
|
|
362
|
+
|
|
363
|
+
SSLサーバ証明書のModulusを確認
|
|
364
|
+
|
|
365
|
+
openssl x509 -in cert_filename.pem -modulus -noout
|
|
366
|
+
|
|
367
|
+
秘密鍵のModulusを確認
|
|
368
|
+
|
|
369
|
+
openssl rsa -in decrypted_privatekey.pem -modulus -noout
|
|
370
|
+
|
|
371
|
+
整合性確認いたしました。
|
|
372
|
+
|
|
373
|
+
|
|
374
|
+
|
|
375
|
+
秘密鍵が破損していないことの確認
|
|
376
|
+
|
|
377
|
+
openssl rsa -in decrypted_privatekey.pem -check -noout
|
|
378
|
+
|
|
379
|
+
問題なし
|
|
380
|
+
|
|
381
|
+
|
|
382
|
+
|
|
383
|
+
SSL証明書内容確認
|
|
384
|
+
|
|
385
|
+
openssl x509 -in cert_filename.pem -text -noout
|
|
386
|
+
|
|
387
|
+
|
|
388
|
+
|
|
389
|
+
Subject: CN=sample-web.com
|
|
390
|
+
|
|
391
|
+
CPS: https://www.digicert.com/CPS
|
|
392
|
+
|
|
393
|
+
証明書の設定に不備見られませんでした
|
|
394
|
+
|
|
395
|
+
```
|
|
396
|
+
|
|
397
|
+
|
|
398
|
+
|
|
399
|
+
|
|
400
|
+
|
|
401
|
+
|
|
402
|
+
|
|
355
403
|
|
|
356
404
|
|
|
357
405
|
|
|
@@ -366,4 +414,4 @@
|
|
|
366
414
|
|
|
367
415
|
nginx version: nginx/1.15.2
|
|
368
416
|
|
|
369
|
-
ssl ラピッドSSL
|
|
417
|
+
ssl ラピッドSSL digicert 8月18日新規発行
|
2
頂いた回答を元にエラーテストを行いました
test
CHANGED
|
File without changes
|
test
CHANGED
|
@@ -278,6 +278,80 @@
|
|
|
278
278
|
|
|
279
279
|
|
|
280
280
|
|
|
281
|
+
### 以下頂いた回答から行った事です。
|
|
282
|
+
|
|
283
|
+
####opensslでの確認
|
|
284
|
+
|
|
285
|
+
```linux
|
|
286
|
+
|
|
287
|
+
CONNECTED(00000003)
|
|
288
|
+
|
|
289
|
+
139875657488272:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:794:
|
|
290
|
+
|
|
291
|
+
---
|
|
292
|
+
|
|
293
|
+
no peer certificate available
|
|
294
|
+
|
|
295
|
+
---
|
|
296
|
+
|
|
297
|
+
No client certificate CA names sent
|
|
298
|
+
|
|
299
|
+
---
|
|
300
|
+
|
|
301
|
+
SSL handshake has read 7 bytes and written 289 bytes
|
|
302
|
+
|
|
303
|
+
---
|
|
304
|
+
|
|
305
|
+
New, (NONE), Cipher is (NONE)
|
|
306
|
+
|
|
307
|
+
Secure Renegotiation IS NOT supported
|
|
308
|
+
|
|
309
|
+
Compression: NONE
|
|
310
|
+
|
|
311
|
+
Expansion: NONE
|
|
312
|
+
|
|
313
|
+
No ALPN negotiated
|
|
314
|
+
|
|
315
|
+
SSL-Session:
|
|
316
|
+
|
|
317
|
+
Protocol : TLSv1.2
|
|
318
|
+
|
|
319
|
+
Cipher : 0000
|
|
320
|
+
|
|
321
|
+
Session-ID:
|
|
322
|
+
|
|
323
|
+
Session-ID-ctx:
|
|
324
|
+
|
|
325
|
+
Master-Key:
|
|
326
|
+
|
|
327
|
+
Key-Arg : None
|
|
328
|
+
|
|
329
|
+
Krb5 Principal: None
|
|
330
|
+
|
|
331
|
+
PSK identity: None
|
|
332
|
+
|
|
333
|
+
PSK identity hint: None
|
|
334
|
+
|
|
335
|
+
Start Time: 1535102954
|
|
336
|
+
|
|
337
|
+
Timeout : 300 (sec)
|
|
338
|
+
|
|
339
|
+
Verify return code: 0 (ok)
|
|
340
|
+
|
|
341
|
+
---
|
|
342
|
+
|
|
343
|
+
|
|
344
|
+
|
|
345
|
+
```
|
|
346
|
+
|
|
347
|
+
こちら(http://d.hatena.ne.jp/rougeref/20170519)を元に
|
|
348
|
+
|
|
349
|
+
hostsに172.16.0.1(WebサイトのIPアドレス) sample-web.comを追記
|
|
350
|
+
|
|
351
|
+
再度opensslを実行->同じエラーが発生しております。
|
|
352
|
+
|
|
353
|
+
|
|
354
|
+
|
|
281
355
|
|
|
282
356
|
|
|
283
357
|
|
1
SSLの種類について追記致しました
test
CHANGED
|
File without changes
|
test
CHANGED
|
@@ -291,3 +291,5 @@
|
|
|
291
291
|
CentOS Linux release 7.5.1804 (Core)
|
|
292
292
|
|
|
293
293
|
nginx version: nginx/1.15.2
|
|
294
|
+
|
|
295
|
+
ssl ラピッドSSL
|