{"id":1159,"date":"2011-12-12T12:17:27","date_gmt":"2011-12-12T03:17:27","guid":{"rendered":"http:\/\/www.webtech.co.jp\/blog\/?p=1159"},"modified":"2020-06-16T09:35:49","modified_gmt":"2020-06-16T00:35:49","slug":"post-1159","status":"publish","type":"post","link":"https:\/\/www.webtech.co.jp\/blog\/optpix_labs\/server\/1159\/","title":{"rendered":"\u30aa\u30ec\u30aa\u30ec\u8a8d\u8a3c\u5c40\u306e\u4f5c\u308a\u65b9\uff5eSSL\u8a3c\u660e\u66f8\u3092\u7121\u6599\u3067\u4f5c\u308b\u65b9\u6cd5 on CentOS 5"},"content":{"rendered":"

\u30a6\u30a7\u30d6\u30c6\u30af\u30ce\u30ed\u30b8\u306e\u30b5\u30fc\u30d0\u3084\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u306e\u304a\u5b88\u308a\u3092\u3057\u3066\u3044\u308b yone \u3067\u3059\u3002\u4eca\u5f8c\u3001\u793e\u5185\u3067\u5b9f\u969b\u306b\u4f7f\u3063\u3066\u3044\u308b\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u30fb\u8a2d\u5b9a\u30fb\u69cb\u6210\u306a\u3069\u306e\u8c46\u77e5\u8b58\u306e\u3054\u7d39\u4ecb\u3092\u3057\u3066\u3044\u304d\u305f\u3044\u3068\u601d\u3063\u3066\u3044\u307e\u3059\u3002\u5df7\u306b\u3042\u308b\u60c5\u5831\u306e\u518d\u63b2\u306b\u306a\u308a\u307e\u3059\u304c\u3001\u5b9f\u7a3c\u50cd\u4e8b\u4f8b\u306e\u4e00\u3064\u3068\u3057\u3066\u3054\u53c2\u8003\u306b\u306a\u308c\u3070\u5e78\u3044\u3067\u3059\u3002<\/p>\n

1. \u304a\u91d1\u306e\u304b\u304b\u308b\u8a3c\u660e\u66f8\u306f\u8981\u3089\u306a\u3044<\/h2>\n

HTTPS \u3092\u4f7f\u3063\u305f\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u3092\u7acb\u3061\u4e0a\u3052\u308b\u3068\u304d\u3001SSL \u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u304b\u3089\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u3092\u8cfc\u5165\u3059\u308b\u306e\u304c\u666e\u901a\u3067\u3059\u3002<\/p>\n

\u3068\u3053\u308d\u304c\u3001\u4f1a\u793e\u5185\u3084\u7279\u5b9a\u306e\u30e1\u30f3\u30d0\u30fc\u5185\u3060\u3051\u3067\u5229\u7528\u3059\u308b\u30b5\u30fc\u30d0\u3067\u3042\u308c\u3070\u3001\u5fc5\u305a\u3057\u3082\u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u304b\u3089\u8a3c\u660e\u66f8\u3092\u8cfc\u5165\u3059\u308b\u5fc5\u8981\u306f\u306a\u3044\u306e\u3067\u3059\u3002<\/p>\n

\u4eca\u56de\u306f\u3001\u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u304b\u3089\u8cb7\u308f\u305a\u306b\u81ea\u524d\u3067\u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u3092\u4f5c\u3063\u3066\u81ea\u524d\u3067\u8a3c\u660e\u66f8\u3092\u767a\u884c\u3057\u3001HTTPS \u30b5\u30a4\u30c8\u3092\u7acb\u3061\u4e0a\u3052\u308b\u65b9\u6cd5\u3092\u3054\u7d39\u4ecb\u3057\u307e\u3059\u3002<\/p>\n

\u305d\u306e\u8a3c\u660e\u66f8\u306e\u6b63\u5f0f\u540d\u79f0\u306f\u3001\u81ea\u5df1\u7f72\u540d\u8a3c\u660e\u66f8\u3067\u3059\u304c\u3001\u672c\u7a3f\u3067\u306f\u30aa\u30ec\u30aa\u30ec\u8a3c\u660e\u66f8<\/strong>\u3068\u8868\u8a18\u3059\u308b\u3053\u3068\u306b\u3057\u307e\u3059\u3002(\u7b11)
\n\u8a66\u3057\u306b\u3001\u300c\u30aa\u30ec\u30aa\u30ec\u8a3c\u660e\u66f8\u300d\u3067\u691c\u7d22\u3057\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002\u30b8\u30e3\u30fc\u30b4\u30f3<\/a>\u3068\u3057\u3066\u3001\u610f\u5916\u3068\u5e83\u304f\u4f7f\u308f\u308c\u3066\u3044\u308b\u3088\u3046\u3067\u3059\u3002<\/p>\n

\u540c\u69d8\u306b\u3001\u81ea\u524d\u306e\u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u306f\u30aa\u30ec\u30aa\u30ec\u8a8d\u8a3c\u5c40<\/strong>\u3068\u8868\u8a18\u3057\u307e\u3059\u3002\u3053\u3061\u3089\u3082\u6b63\u5f0f\u306a\u540d\u79f0\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n

2. SSL\/TLS \u3068\u306f\u306a\u3093\u305e\u3084<\/h2>\n

\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u306e URL \u306e\u5148\u982d\u304c\u3001https:\/\/ \u3068\u306a\u3063\u3066\u3044\u308b\u5834\u5408\u3001SSL \u307e\u305f\u306f TLS \u3092\u5229\u7528\u3057\u3066\u3044\u307e\u3059\u3002\u3053\u306e\u3068\u304d\u306e\u4e3b\u306a\u7279\u5fb4\u306f\u4e0b\u8a18\u306e\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n

    \n
  1. \u6697\u53f7\u5316<\/li>\n
  2. \u30b5\u30fc\u30d0\u8a8d\u8a3c<\/li>\n
  3. \u6539\u7ac4\u691c\u51fa<\/li>\n<\/ol>\n

    \u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u3078\u304a\u91d1\u3092\u6255\u3063\u3066\u8a3c\u660e\u66f8\u3092\u8cb7\u3046\u306e\u306f\u306a\u305c\u3067\u3057\u3087\u3046\u304b\u3002\u305d\u308c\u306f\u30012\u756a\u76ee\u306e\u30b5\u30fc\u30d0\u8a8d\u8a3c\u306e\u305f\u3081\u3067\u3059\u3002\u3053\u306e\u30b5\u30fc\u30d0\u306f\u672c\u7269\u3060\u305e\u3068\u3001\u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u304c\u592a\u9f13\u5224\u3092\u62bc\u3057\u3066\u3044\u308b\u306e\u3067\u3059\u3002<\/p>\n

    \u7279\u5b9a\u306e\u30e1\u30f3\u30d0\u30fc\u5185\u3060\u3051\u3067\u4f7f\u3046\u5834\u5408\u3001\u4e8b\u524d\u306b\u30aa\u30ec\u30aa\u30ec\u8a3c\u660e\u66f8\u3092\u300c\u3053\u306e\u8a3c\u660e\u66f8\u306f\u672c\u7269\u3084!\u300d\u3068\u914d\u5e03\u3057\u3066\u304a\u3051\u3070\u3001\u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u304b\u3089\u8cfc\u5165\u3057\u305f\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u3068\u540c\u69d8\u306b\u4f7f\u3048\u3061\u3083\u3063\u305f\u308a\u3057\u307e\u3059\u3002<\/p>\n

    \u4e0d\u7279\u5b9a\u591a\u6570\u304c\u30a2\u30af\u30bb\u30b9\u3059\u308b\u30a6\u30a7\u30d6\u30b5\u30a4\u30c8\u306b\u4f7f\u3046\u306e\u306f\u4e0d\u9069\u5207\u3067\u3059\u3002\u8ae6\u3081\u3066\u3001\u8a3c\u660e\u66f8\u5c4b\u3055\u3093\u304b\u3089\u8cfc\u5165\u3057\u307e\u3057\u3087\u3046\u3002<\/p>\n

    3. \u30aa\u30ec\u30aa\u30ec\u8a3c\u660e\u66f8\u3092\u4f5c\u308d\u3046<\/h2>\n
    \"certificate

    \u30b5\u30fc\u30d0\u30fc\u8a3c\u660e\u66f8\u30a8\u30e9\u30fc\u306e\u753b\u9762<\/p><\/div>\n

    \u5b9f\u306f CentOS 5 \u306e\u5834\u5408\u3001mod_ssl \u30d1\u30c3\u30b1\u30fc\u30b8\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3068\u30aa\u30ec\u30aa\u30ec\u8a3c\u660e\u66f8\u3067\u7a3c\u52d5\u72b6\u614b\u306b\u306a\u308a\u307e\u3059\u3002\u304c\u3001\u305d\u306e\u307e\u307e\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u8b66\u544a\u3092\u8868\u793a\u3057\u3066\u3057\u307e\u3044\u307e\u3059\u3002<\/p>\n

    \u3053\u306e\u96e3\u5c40\u306b\u7acb\u3061\u5411\u304b\u3046\u8853\u306f2\u3064\u3042\u308a\u307e\u3059\u3002<\/p>\n

      \n
    1. \u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u304c\u6b63\u3057\u3044\u3082\u306e\u3060\u3068\u3057\u3001PC\u306b\u8a3c\u660e\u66f8\u3092\u767b\u9332\u3059\u308b<\/li>\n
    2. \u81ea\u524d\u306e\u8a8d\u8a3c\u5c40 (\u30eb\u30fc\u30c8 CA) \u3092\u7528\u610f\u3057\u3001\u305d\u306e\u8a8d\u8a3c\u5c40\u304c\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u3092\u767a\u884c\u3059\u308b\u3002PC<\/strong> \u306b\u81ea\u524d\u306e\u8a8d\u8a3c\u5c40\u3092\u767b\u9332\u3059\u308b<\/li>\n<\/ol>\n

      \u30b5\u30fc\u30d0\u306e\u6570\u304c\u591a\u304f\u306a\u3044\u306e\u3067\u3042\u308c\u3070\u524d\u8005\u3067\u3082\u3088\u3044\u306e\u3067\u3059\u304c\u3001\u3044\u304f\u3064\u3082\u3044\u304f\u3064\u3082\u3042\u308b\u5834\u5408\u306f\u8a8d\u8a3c\u5c40\u3092\u4f5c\u3063\u3066\u3057\u307e\u3044\u307e\u3057\u3087\u3046\u3002\u8a8d\u8a3c\u5c40\u306e\u767b\u9332\u3092\u4e00\u56de\u884c\u3048\u3070\u3001\u4ed6\u306e\u767b\u9332\u4f5c\u696d\u306f\u306a\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n

      4. \u30eb\u30fc\u30c8 CA \u69cb\u7bc9<\/h2>\n

      \u3053\u3053\u3067\u306f CentOS5 \u4e0a\u3067\u65b0\u898f\u69cb\u7bc9\u3057\u307e\u3059\u3002\u4e00\u5ea6\u3060\u3051\u306e\u5b9f\u65bd\u3067\u3059\u3002\u4e0b\u8a18\u306f\u3001exampleCA \u3068\u3044\u3046\u540d\u79f0\u3067\u4f5c\u6210\u3057\u305f\u4f8b\u3067\u3059\u3002<\/p>\n

      # cd \/etc\/pki\r\n# mkdir exampleCA\r\n# cp tls\/misc\/CA exampleCA\/\r\n# cp tls\/openssl.cnf exampleCA\/\r\n# echo 01 > exampleCA\/crlnumber<\/pre>\n
      \/etc\/pki\/exampleCA\/CA \u30d5\u30a1\u30a4\u30eb\u3092\u4fee\u6b63\u3057\u307e\u3059\u3002<\/p>\n
      SSLEAY_CONFIG="-config \/etc\/pki\/exampleCA\/openssl.cnf"   \u2190 \u8ffd\u52a0\r\nDAYS="-days 365"        # 1 year\r\nCADAYS="-days 1095"     # 3 years\r\nREQ="openssl req $SSLEAY_CONFIG"\r\nCA="openssl ca $SSLEAY_CONFIG"\r\nVERIFY="openssl verify"\r\nX509="openssl x509"\r\n\r\nCATOP=\/etc\/pki\/exampleCA   \u2190 \u4fee\u6b63\r\n(\u4e2d\u7565)\r\n-newca)\r\n(\u4e2d\u7565)\r\n    $CA -out ${CATOP}\/$CACERT $CADAYS -batch \\\r\n        -extensions v3_ca \\   \u2190 \u8ffd\u52a0\r\n        -keyfile ${CATOP}\/private\/$CAKEY -selfsign \\\r\n        -infiles ${CATOP}\/$CAREQ\r\n<\/pre>\n
      \/etc\/pki\/exampleCA\/openssl.cnf \u30d5\u30a1\u30a4\u30eb\u3092\u4fee\u6b63\u3057\u307e\u3059\u3002<\/p>\n
      [ CA_default ]\r\ndir             = \/etc\/pki\/exampleCA    # Where everything is kept   \u2190 \u4fee\u6b63\r\n(\u4e2d\u7565)\r\n[ req_distinguished_name ]\r\ncountryName                    = Country Name (2 letter code)\r\ncountryName_default            = JP   \u2190\u4fee\u6b63\r\ncountryName_min                = 2\r\ncountryName_max                = 2\r\n\r\nstateOrProvinceName            = State or Province Name (full name)\r\nstateOrProvinceName_default    = Tokyo   \u2190\u4fee\u6b63\r\n\r\nlocalityName                   = Locality Name (eg, city)\r\nlocalityName_default           = Toshima-ku   \u2190\u4fee\u6b63\r\n\r\n0.organizationName             = Organization Name (eg, company)\r\n0.organizationName_default     = Example Corp.   \u2190\u4fee\u6b63\r\n(\u4e2d\u7565)\r\n[ usr_cert ]\r\nbasicConstraints=CA:FALSE\r\nkeyUsage = digitalSignature, keyEncipherment   \u2190\u8ffd\u52a0\r\nextendedKeyUsage = serverAuth   \u2190\u8ffd\u52a0\r\n# nsComment                    = "OpenSSL Generated Certificate"   \u2190\u30b3\u30e1\u30f3\u30c8\u30a2\u30a6\u30c8\r\nsubjectKeyIdentifier=hash\r\nauthorityKeyIdentifier=keyid,issuer\r\n(\u4e2d\u7565)\r\n[ v3_ca ]\r\nkeyUsage = cRLSign, keyCertSign   \u2190\u30b3\u30e1\u30f3\u30c8\u524a\u9664<\/pre>\n
      \u79d8\u5bc6\u9375\u30fb\u516c\u958b\u9375\u30fb\u81ea\u5df1\u7f72\u540d\u8a3c\u660e\u66f8\u3092\u751f\u6210\u3057\u307e\u3059\u3002<\/p>\n
      # cd \/etc\/pki\/exampleCA\r\n# .\/CA -newca\r\nmkdir: cannot create directory `\/etc\/pki\/exampleCA': File exists\r\nCA certificate filename (or enter to create)\r\n(\u305d\u306e\u307e\u307eEnter)\r\nMaking CA certificate ...\r\nGenerating a 1024 bit RSA private key\r\n...++++++\r\n...........++++++\r\nwriting new private key to '\/etc\/pki\/exampleCA\/private\/.\/cakey.pem'\r\nEnter PEM pass phrase:CA\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\r\nVerifying - Enter PEM pass phrase:CA\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\r\n-----\r\nYou are about to be asked to enter information that will be incorporated\r\ninto your certificate request.\r\nWhat you are about to enter is what is called a Distinguished Name or a DN.\r\nThere are quite a few fields but you can leave some blank\r\nFor some fields there will be a default value,\r\nIf you enter '.', the field will be left blank.\r\n-----\r\nCountry Name (2 letter code) [JP]:\r\nState or Province Name (full name) [Tokyo]:\r\nLocality Name (eg, city) [Toshima-ku]:\r\nOrganization Name (eg, company) [Example Corp.]:\r\nOrganizational Unit Name (eg, section) []:\r\nCommon Name (eg, your name or your server's hostname) []:example CA\r\nEmail Address []:\r\n\r\nPlease enter the following 'extra' attributes\r\nto be sent with your certificate request\r\nA challenge password []:\r\nAn optional company name []:\r\nUsing configuration from \/etc\/pki\/exampleCA\/openssl.cnf\r\nEnter pass phrase for \/etc\/pki\/exampleCA\/private\/.\/cakey.pem:CA\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\r\nCheck that the request matches the signature\r\nSignature ok\r\nCertificate Details:\r\n        Serial Number: 0 (0x0)\r\n        Validity\r\n            Not Before: Aug  1 10:34:25 2007 GMT\r\n            Not After : Jul 31 10:34:25 2010 GMT\r\n        Subject:\r\n            countryName               = JP\r\n            stateOrProvinceName       = Tokyo\r\n            organizationName          = Example Corp.\r\n            commonName                = example CA\r\n        X509v3 extensions:\r\n            X509v3 Subject Key Identifier:\r\n                xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx\r\n            X509v3 Authority Key Identifier:\r\n                keyid:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx:xx\r\n                DirName:\/C=JP\/ST=Tokyo\/O=Example Corp.\/CN=Example CA\r\n                serial:00\r\n\r\n            X509v3 Basic Constraints:\r\n                CA:TRUE\r\n            X509v3 Key Usage:\r\n                Certificate Sign, CRL Sign\r\nCertificate is to be certified until Jul 31 10:34:25 2010 GMT (1095 days)\r\n\r\nWrite out database with 1 new entries\r\nData Base Updated\r\n# mv careq.pem certs\/00.pem\r\n# openssl ca -config openssl.cnf -gencrl -out crl.pem<\/pre>\n
      \u3053\u308c\u3067\u6e96\u5099\u5b8c\u4e86\u3067\u3059\u3002<\/p>\n\n\n\n\n\n\n\n
      \u30eb\u30fc\u30c8 CA \u30d5\u30a1\u30a4\u30eb<\/caption>\n
      \u8aac\u660e<\/th>\n\u30d5\u30a1\u30a4\u30eb\u540d<\/th>\n<\/tr>\n<\/thead>\n
      CA \u8a3c\u660e\u66f8<\/td>\ncacert.pem, newcerts\/00.pem<\/td>\n<\/tr>\n
      CA \u79d8\u5bc6\u9375<\/td>\nprivate\/cakey.pem<\/td>\n<\/tr>\n
      CA \u8a3c\u660e\u66f8\u767a\u884c\u8981\u6c42<\/td>\ncerts\/00.pem<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      5. \u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u3092\u767a\u884c<\/h2>\n
      \u3067\u306f\u3055\u3063\u305d\u304f\u3001\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u3092\u4f5c\u3063\u3066\u307f\u307e\u3059\u3002https:\/\/www.example.jp\/ \u7528\u306e\u8a3c\u660e\u66f8\u306e\u767a\u884c\u4f8b\u3067\u3059\u3002<\/p>\n
      # cd \/etc\/pki\/exampleCA\r\n# .\/CA -newreq\r\nGenerating a 1024 bit RSA private key\r\n.........++++++\r\n...........................++++++\r\nwriting new private key to 'newreq.pem'\r\nEnter PEM pass phrase:\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\r\nVerifying - Enter PEM pass phrase:\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\r\n-----\r\nYou are about to be asked to enter information that will be incorporated\r\ninto your certificate request.\r\nWhat you are about to enter is what is called a Distinguished Name or a DN.\r\nThere are quite a few fields but you can leave some blank\r\nFor some fields there will be a default value,\r\nIf you enter '.', the field will be left blank.\r\n-----\r\nCountry Name (2 letter code) [JP]:\r\nState or Province Name (full name) [Tokyo]:\r\nLocality Name (eg, city) [Toshima-ku]:\r\nOrganization Name (eg, company) [Example Corp.]:\r\nOrganizational Unit Name (eg, section) []:\r\nCommon Name (eg, YOUR name) []:www.example.jp\r\nEmail Address []:\r\n\r\nPlease enter the following 'extra' attributes\r\nto be sent with your certificate request\r\nA challenge password []:\r\nAn optional company name []:\r\nRequest is in newreq.pem, private key is in newkey.pem\r\n\r\n# .\/CA -sign\r\nUsing configuration from \/etc\/pki\/exampleCA\/openssl.cnf\r\nEnter pass phrase for \/etc\/pki\/exampleCA\/private\/cakey.pem:CA\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b\r\nCheck that the request matches the signature\r\nSignature ok\r\nCertificate Details:\r\n        Serial Number: 3 (0x3)\r\n(\u4e2d\u7565)\r\nCertificate is to be certified until Sep 30 07:12:47 2005 GMT (365 days)\r\nSign the certificate? [y\/n]:y\r\n\r\n1 out of 1 certificate requests certified, commit? [y\/n]y\r\nWrite out database with 1 new entries\r\nData Base Updated\r\nCertificate:\r\n    Data:\r\n        Version: 3 (0x2)\r\n(\u4e2d\u7565)\r\nSigned certificate is in newcert.pem\r\n# ls newcerts\r\n01.pem  02.pem  03.pem  (\u2190\u4e00\u756a\u5927\u304d\u306a\u5024\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u63a2\u3059)\r\n# mv newreq.pem certs\/03.pem (\u2190\u63a2\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u5165\u308c\u308b)\r\n# mv newkey.pem private\/03.pem (\u2190\u63a2\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u540d\u3092\u5165\u308c\u308b)\r\n# rm newcert.pem\r\n# openssl x509 -in newcerts\/03.pem -out www.crt\r\n# openssl rsa -in private\/03.pem -out www.key\r\nEnter pass phrase for private\/03.pem:\u30d1\u30b9\u30d5\u30ec\u30fc\u30ba\u3092\u5165\u529b<\/pre>\n
      \u3053\u308c\u3067\u3001www.example.jp \u306e SSL \u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u304c\u3067\u304d\u307e\u3057\u305f\u3002<\/p>\n\n\n\n\n\n\n
      \u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u30d5\u30a1\u30a4\u30eb<\/caption>\n
      mod_ssl \u30c7\u30a3\u30ec\u30af\u30c6\u30a3\u30d6<\/th>\n\u30d5\u30a1\u30a4\u30eb<\/th>\n<\/tr>\n<\/thead>\n
      SSLCertificateFile<\/td>\nwww.crt<\/td>\n<\/tr>\n
      SSLCertificateKeyFile<\/td>\nwww.key<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
      6. PC \u3078\u30aa\u30ec\u30aa\u30ec\u8a8d\u8a3c\u5c40\u8a3c\u660e\u66f8\u3092\u30a4\u30f3\u30dd\u30fc\u30c8<\/h2>\n
      \u3053\u306e\u307e\u307e https:\/\/www.example.jp\/ \u3078\u30a2\u30af\u30bb\u30b9\u3057\u3066\u3082\u3001\u8a3c\u660e\u66f8\u30a8\u30e9\u30fc\u306b\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002
      \n\u4eca\u56de\u69cb\u7bc9\u3057\u305f\u30eb\u30fc\u30c8 CA \u3092\u4fe1\u983c\u3059\u308b\u3068\u3001\u305d\u306e CA \u304c\u7f72\u540d\u3057\u305f www.example.jp \u3082\u6b63\u3057\u3044\u8a3c\u660e\u66f8\u3068\u8a8d\u8b58\u3059\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n
      Internet Explorer<\/strong> \u3078\u767b\u9332\u3059\u308b\u65b9\u6cd5\u3092\u7d39\u4ecb\u3057\u307e\u3059\u3002Mozilla Firefox \u7b49\u306e\u5834\u5408\u306f\u3001\u305d\u308c\u305e\u308c\u306e\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u5185\u3067\u8a3c\u660e\u66f8\u3092\u767b\u9332\u3057\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n
        \n
      1. \u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d1\u30cd\u30eb \u306e \u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30aa\u30d7\u30b7\u30e7\u30f3 \u3092\u958b\u304d\u307e\u3059\n