\ubcf4\uc548 \uc11c\ubc84(SSL) \uad6c\ucd95\ud558\uae30 – apache 2.2.4<\/p>\n
\uc544\ud30c\uce58 2.x\uc758 \uacbd\uc6b0\ub294 1.3\uacfc\ub294 \ub2ec\ub9ac mod_ssl\uc744 \ubcc4\ub3c4\ub85c \ucd94\uac00\ud574\uc11c \uc124\uce58\ud560 \ud544\uc694\uac00 \uc5c6\ub2e4.
\napache2.x \ubc84\uc804 \uc790\uccb4\uc5d0 \ubaa8\ub4c8\uc774 \ud3ec\ud568\ub418\uc5b4 \uc788\uae30 \ub54c\ubb38\uc5d0 apache \uc124\uce58\uc2dc\uc5d0 –enable-ssl \uc635\uc158\ub9cc \ucd94\uac00\ud574\uc11c \uc0ac\uc6a9\ud558\uba74 \ub41c\ub2e4.<\/p>\n
mysql, gd, imap\ub4f1\uc758 \ud328\ud0a4\uc9c0\ub294 \uc774\ubbf8 \uae54\ub824 \uc788\ub294 \uc0c1\ud0dc\uc774\uba70, \ubaa8\ub4e0 \ud328\ud0a4\uc9c0\ub294 \/usr\/local\/src\/ \ub514\ub809\ud1a0\ub9ac \uc548\uc5d0 \ub2e4\uc6b4\ub85c\ub4dc \ubc1b\uc740 \uc0c1\ud0dc\ub85c \uc124\uce58\ub97c \uc2dc\uc791\ud55c\ub2e4.<\/p>\n
1. \uc18c\uc2a4\ub97c \ub2e4\uc6b4 \ubc1b\uc740 \ub514\ub809\ud1a0\ub9ac\ub85c \uc774\ub3d9<\/p>\n
[root@jook.pe.kr root]# cd \/usr\/local\/src<\/p>\n
2. \uc555\ucd95 \ud480\uae30<\/p>\n
[root@jook.pe.kr src]# tar xvzf httpd-2.2.4.tar.gz
\n[root@jook.pe.kr src]# tar xvzfp php-5.2.3.tar.tar
\n[root@jook.pe.kr src]# tar xvzf ZendOptimizer-2.6.2-linux-glibc21-i386.tar.gz<\/p>\n
3. apache \uc124\uce58<\/p>\n
[root@jook.pe.kr src]# cd httpd-2.2.4
\n[root@jook.pe.kr httpd-2.2.4]# .\/configure –prefix=\/usr\/local\/apache2 –enable-module=so –enable-shared=max –enable-rewrite –enable-ssl
\n[root@jook.pe.kr httpd-2.2.4]# make
\n[root@jook.pe.kr httpd-2.2.4]# make install<\/p>\n
4. PHP \uc124\uce58 (DB,imap,gd,apache)<\/p>\n
– \uc544\ub798\uc758 \uc635\uc158\uc744 \ubaa8\ub450 \uc801\uc6a9\ud558\uc5ec php\ub97c \uc124\uce58 \ud560 \uacbd\uc6b0\ub294 \uba87\uba87 \ud328\ud0a4\uc9c0\uac00 \uc124\uce58\ub418\uc5b4 \uc788\uc9c0 \uc54a\uc544 \uc5d0\ub7ec\uac00 \ubc1c\uc0dd\ud558\uac8c \ub41c\ub2e4. php-5.2.3\ubc84\uc804\uc758 \uacbd\uc6b0\ub294 libxml2, libxml2-devel \ud328\ud0a4\uc9c0\uc758 \ubc84\uc804\ubb38\uc81c\ub85c \uc124\uce58\uac00 \ub418\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0 \ud328\ud0a4\uc9c0 \ubc84\uc804\uc744 \uc5c5\uadf8\ub808\uc774\ub4dc \ud55c\ub2e4.(http:\/\/rpmfind.net \uc5d0\uc11c OS\uc5d0 \ub9de\ub294 \ucd5c\uc2e0 \ud328\ud0a4\uc9c0\ub97c \ucc3e\uc544\uc11c \uc124\uce58\ud55c\ub2e4)
\n\uadf8\ub9ac\uace0, freetype, libjpeg, libpng\ub4f1\uc758 \ub77c\uc774\ube0c\ub7ec\ub9ac\uc640 \uad00\ub828\ub41c \uc5d0\ub7ec\uba54\uc9c0\uc2dc\uac00 \ubc1c\uacac\ub418\uba74 freetype-devel, libjpeg-devel, libpng-devel \ud328\ud0a4\uc9c0\ub97c \ucd94\uac00\ub85c \uc124\uce58\ud558\uace0 php\uc124\uce58\ub97c \uc9c4\ud589\ud55c\ub2e4.<\/p>\n
[root@jook.pe.kr httpd-2.2.4]# cd \/usr\/local\/src\/php-5.2.3
\n[root@jook.pe.kr php-5.2.3]# .\/configure –prefix=\/usr\/local\/php –with-mysql=\/usr\/local\/mysql –with-apxs2=\/usr\/local\/apache2\/bin\/apxs –enable-sysvshm=yes –enable-sysvsem=yes –enable-debug=no –enable-track-vars=yes –enable-url-fopen-wrapper=yes –with-ttf –with-png-dir=\/usr –with-zlib-dir –with-jpeg-dir=\/usr –with-gdbm=\/usr –enable-ftp –with-tiff-dir=\/usr –enable-memory-limit –enable-mbstring –with-expat-dir=\/usr –enable-sockets –enable-wddx –with-freetype-dir=\/usr –enable-bcmath –enable-mbstr-enc-trans –enable-mbregex –enable-exif –with-gd –enable-gd-native-ttf –enable-gd-imgstrttf –enable-calendar –with-openssl=\/usr
\n[root@jook.pe.kr php-5.2.3]# make
\n[root@jook.pe.kr php-5.2.3]# make install
\n[root@jook.pe.kr php-5.2.3]# cp php.ini-dist \/usr\/local\/php\/lib\/php.ini<\/p>\n
5. ZendOptimizer \uc124\uce58<\/p>\n
[root@jook.pe.kr php-5.2.3]# cd \/usr\/local\/src\/ZendOptimizer-2.6.2-linux-glibc21-i386
\n[root@jook.pe.kr ZendOptimizer-2.6.2-linux-glibc21-i386]# sh install.sh<\/p>\n
– install.sh \ud30c\uc77c\uc744 \uc2e4\ud589\ud55c \ud6c4 apache\uc640 php\uad00\ub828\ub41c \uc815\ubcf4\ub97c \uc785\ub825\ud55c \ud6c4 \uc124\uce58\ub97c \uc644\ub8cc\ud55c\ub2e4.<\/p>\n
6. httpd.conf \ud30c\uc77c \uc218\uc815\ud6c4 apache \ub9ac\uc2a4\ud0c0\ud2b8<\/p>\n
– httpd.conf \ud30c\uc77c\uc5d0 php\uac00 \uc778\uc2dd\ub418\ub3c4\ub85d \uc544\ub798 \uad6c\ubb38\uc744 \ucd94\uac00\ud55c\ub2e4.<\/p>\n
#################################################
\nAddType application\/x-httpd-php .php .html .htm
\nAddType application\/x-httpd-php-source .phps
\n#################################################<\/p>\n
– httpd.conf \uc218\uc815\ud6c4 apache \ub370\ubaac\uc740 \uc7ac\uc2e4\ud589\ud55c\ub2e4. ssl \uc11c\ubc84\ub85c \uc2dc\uc791\ud558\uae30 \uc704\ud574\uc11c startssl \uba85\ub839\uc73c\ub85c \uc2dc\uc791.<\/p>\n
[root@jook.pe.kr ZendOptimizer-2.6.2-linux-glibc21-i386]# cd \/usr\/local\/apache2\/conf
\n[root@jook.pe.kr conf]# \/usr\/local\/apache\/bin\/apachectl stop
\n[root@jook.pe.kr conf]# \/usr\/local\/apache\/bin\/apachectl startssl<\/p>\n
7. key \ud30c\uc77c \uc0dd\uc131 \ubc0f csr \ucf54\ub4dc \uc0dd\uc131<\/p>\n
– key \ud30c\uc77c \uc0dd\uc131<\/p>\n
[root@jook.pe.kr conf]# openssl genrsa 1024 > jook.pe.kr.key
\nGenerating RSA private key, 1024 bit long modulus
\n………………………………++++++
\n…………….++++++
\ne is 65537 (0x10001)<\/p>\n
– csr \ucf54\ub4dc \uc0dd\uc131<\/p>\n
[root@jook.pe.kr conf]# openssl req -new -key jook.pe.kr.key -out jook.pe.kr.csr
\nUsing configuration from \/usr\/share\/ssl\/openssl.cnf
\nYou are about to be asked to enter information that will be incorporated
\ninto your certificate request.
\nWhat you are about to enter is what is called a Distinguished Name or a DN.
\nThere are quite a few fields but you can leave some blank
\nFor some fields there will be a default value,
\nIf you enter ‘.’, the field will be left blank.
\n—–
\nCountry Name (2 letter code) [GB]:KR
\nState or Province Name (full name) [Berkshire]:Gyunggido
\nLocality Name (eg, city) [Newbury]:Sungnam
\nOrganization Name (eg, company) [My Company Ltd]:Hostway IDC
\nOrganizational Unit Name (eg, section) []:Technical support Team
\nCommon Name (eg, your name or your server’s hostname) []:www.jook.pe.kr
\nEmail Address []:jook@jook.pe.kr<\/p>\n
Please enter the following ‘extra’ attributes
\nto be sent with your certificate request
\nA challenge password []:
\nAn optional company name []:<\/p>\n
– \uc0dd\uc131\ub41c csr \ucf54\ub4dc \ud655\uc778<\/p>\n
[root@jook.pe.kr conf]# cat jook.pe.kr.csr
\n—–BEGIN CERTIFICATE REQUEST—–
\nMIIB4jCCAUsCAQAwgaExCzAJBgNVBAYTAktSMRIwEAYDVQQIEwlHeXVuZ2dpZG8x
\nEDAOBgNVBAcTB1N1bmduYW0xFDASBgNVBAoTC0hvc3R3YXkgSURDMR8wHQYDVQQL
\nExZUZWNobmljYWwgc3VwcG9ydCBUZWFtMRUwEwYDVQQDEwxKb28gd29vIGt3b24x
\nHjAcBgkqhkiG9w0BCQEWD2pvb2tAam9vay5wZS5rcjCBnzANBgkqhkiG9w0BAQEF
\nAAOBjQAwgYkCgYEA0ZvDHAVHU5xbT\/ZDsAebNPBjRaXAPtmaV\/WEIi4YsYkwBC15
\nRo\/gsPqNNCe5CJUw+K3qGnhbQI9Nd0\/UKfTn174NSFWUxQv9E1mE4k5xoD\/2T1Jf
\nTcZ0a0WDjIG\/Xd69D+nkCTDG1ZbQnZ8qq2DcbulbjwD6sB5HTusRVHeIu2sCAwEA
\nAaAAMA0GCSqGSIb3DQEBBAUAA4GBAEjfawGIByqF+fLLjpeX2XZAIkL0L\/kfOJbs
\nvuFwVNJuWYiakJF+LJaCz5S40CoZMV\/bD+w+223MVF5KqAKTc6NUBbYGfBvuGTHT
\nTwLtnTqVBP0Xla0opWZWZ8JbGQJAGd+fxMOfvqx0ES1oPn0J97NpknSOBPOO3Q9s
\n\/ZA9CUYd
\n—–END CERTIFICATE REQUEST—–
\n[root@jook.pe.kr conf]#<\/p>\n
– csr \ucf54\ub4dc \uc0dd\uc131\uc774 \uc644\ub8cc\ub418\uba74 \uc0dd\uc131\ub41c csr \ucf54\ub4dc\ub97c \uc785\ub825\ud574\uc11c ssl \uc778\uc99d\ud0a4 \ubc1c\uae09\uc5c5\uccb4\uc5d0 \uc778\uc99d\ud0a4 \ubc1c\uae09\uc744 \uc2e0\uccad \ud55c\ub2e4.<\/p>\n
8. \uc778\uc99d\uc11c \ubc0f CA \uc778\uc99d\uc11c \uc124\uce58<\/p>\n
– \uc778\uc99d\ud0a4 \ubc1c\uae09 \uc5c5\uccb4\uc5d0\uc11c \uc778\uc99d\ud0a4\ub97c \ubc1c\uae09\ubc1b\uc73c\uba74 www_jook_pe_kr.crt(\uc778\uc99d\uc11c), www_jook_pe_kr.ca-bundle(CA \uc778\uc99d\uc11c)\uc640 \uac19\uc774 \ub450\uac1c\uc758 \uc778\uc99d\uc11c \ud30c\uc77c\uc744 \ubc1c\uae09\ubc1b\uac8c \ub41c\ub2e4.
\n– \ub450 \ud30c\uc77c\uc744 \uc11c\ubc84\uc758 \/usr\/local\/apache\/conf \ub514\ub809\ud1a0\ub9ac\uc5d0 \uc5c5\ub85c\ub4dc\ud55c\ub2e4.<\/p>\n
9. SSL \uac00\uc0c1\ud638\uc2a4\ud2b8 \uc124\uc815<\/p>\n
– apache2\ub294 httpd.conf \ud30c\uc77c\uc774\uc678\uc5d0 \/usr\/local\/apache2\/conf\/extra\/ \ub514\ub809\ud1a0\ub9ac\uc5d0 \uc788\ub294 \ud30c\uc77c\ub4e4\uc744 include\ud574\uc11c \ucc38\uc870\ud558\ub3c4\ub85d \uc124\uc815\ub418\uc5b4 \uc788\ub2e4. \uac00\uc0c1\ud638\uc2a4\ud2b8 \uc124\uc815\uacfc, ssl \uc124\uc815\uc744 include \ud560\uc218 \uc788\ub3c4\ub85d httpd.conf \ud30c\uc77c\uc5d0\uc11c \uc544\ub798\ubd80\ubd84\uc758 \uc8fc\uc11d\uc744 \ud574\uc81c \ud55c\ub2e4.<\/p>\n
# Virtual hosts
\nInclude conf\/extra\/httpd-vhosts.conf<\/p>\n
# Secure (SSL\/TLS) connections
\nInclude conf\/extra\/httpd-ssl.conf<\/p>\n
– httpd-vhosts.conf \ud30c\uc77c\uc5d0 \uac00\uc0c1\ud638\uc2a4\ud2b8\ub97c \ucd94\uac00\ud558\uace0 httpd-ssl.conf \ud30c\uc77c\uc5d0 \uc544\ub798\uc640 \uac19\uc740 \ud615\uc2dd\uc73c\ub85c ssl \uac00\uc0c1\ud638\uc2a4\ud2b8\ub97c \ucd94\uac00\ud55c\ub2e4.<\/p>\n
##
\n## SSL Virtual Host Context
\n##<\/p>\n
NameVirtualHost 211.239.151.254:443
\nDocumentRoot “\/home\/jook\/public_html”
\nServerName www.jook.pe.kr
\nServerAdmin jook@jook.pe.kr
\nErrorLog \/usr\/local\/apache2\/logs\/error_log
\nTransferLog \/usr\/local\/apache2\/logs\/access_log<\/p>\n
SSLEngine on<\/p>\n
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
\nSSLCertificateFile \/usr\/local\/apache2\/conf\/www_jook_pe_kr.crt
\nSSLCertificateKeyFile \/usr\/local\/apache2\/conf\/jook.pe.kr.key
\nSSLCACertificateFile \/usr\/local\/apache2\/conf\/ssl.crt\/www_jook_pe_kr.ca-bundle<\/p>\n
<FilesMatch “.(cgi|shtml|phtml|php)$”>
\nSSLOptions +StdEnvVars<\/p>\n
<Directory “\/usr\/local\/apache2\/cgi-bin”>
\nSSLOptions +StdEnvVars<\/p>\n
BrowserMatch “.*MSIE.*”
\nnokeepalive ssl-unclean-shutdown
\ndowngrade-1.0 force-response-1.0<\/p>\n
CustomLog \/usr\/local\/apache2\/logs\/ssl_request_log
\n“%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x “%r” %b”<\/p>\n
<\/p>\n
10. apache \ub370\ubaac \ub9ac\uc2a4\ud0c0\ud2b8<\/p>\n
– \ubaa8\ub4e0 \uc124\uc815\uc774 \uc644\ub8cc\ub41c \ud6c4 apache \ub370\ubaac\uc744 \ub9ac\uc2a4\ud0c0\ud2b8 \ud558\uace0 https:\/\/\ub3c4\uba54\uc778\uc73c\ub85c \uc0ac\uc774\ud2b8\ub97c \ub744\uc6cc\uc11c \uc778\uc99d\ud0a4\ub97c \ud655\uc778\ud55c\ub2e4.
\n– \uc5ec\uae30\uc11c https:\/\/www.jook.pe.kr\uc740 \uc2e4\uc81c\ub85c\ub294 ssl \uc124\uc815\uc774 \ub418\uc5b4 \uc788\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc5d0 \uc548\ub728\ub294\uac8c \uc815\uc0c1 ^^<\/p>\n
[root@jook.pe.kr conf]# \/usr\/local\/apache\/bin\/apachectl stop
\n[root@jook.pe.kr conf]# \/usr\/local\/apache\/bin\/apachectl start<\/p>\n
– apache2.x \uc5d0\uc11c\ub294 apachectl startssl\ub85c \uc2e4\ud589\uc744 \ud558\uc9c0 \uc54a\ub294\ub2e4. httpd.conf \ud30c\uc77c\uc5d0\uc11c httpd-ssl.conf \ud30c\uc77c\uc744 include\ud558\ub294 \ubd80\ubd84\uc758 \uc8fc\uc11d\uc744 \ud480\uace0 start \ud558\uac8c\ub418\uba74 \uc790\ub3d9\uc73c\ub85c 443\ud3ec\ud2b8\uae4c\uc9c0 \uc5f4\ub9ac\uac8c \ub418\uba70, ssl \uc11c\ubc84\uac00 \uac00\ub3d9\ub418\uac8c \ub41c\ub2e4.<\/p>\n
* csr \ucf54\ub4dc \ud655\uc778 : openssl req -noout -text -in *.csr<\/p>\n","protected":false},"excerpt":{"rendered":"
\ubcf4\uc548 \uc11c\ubc84(SSL) \uad6c\ucd95\ud558\uae30 – apache 2.2.4 \uc544\ud30c\uce58 2.x\uc758 \uacbd\uc6b0\ub294 1.3\uacfc\ub294 \ub2ec\ub9ac mod_ssl\uc744 \ubcc4\ub3c4\ub85c \ucd94\uac00\ud574\uc11c \uc124\uce58\ud560 \ud544\uc694\uac00 \uc5c6\ub2e4. apache2.x \ubc84\uc804 \uc790\uccb4\uc5d0<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,5],"tags":[],"_links":{"self":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts\/122"}],"collection":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=122"}],"version-history":[{"count":0,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=\/wp\/v2\/posts\/122\/revisions"}],"wp:attachment":[{"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=122"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=122"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/jook.pe.kr\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=122"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}