SSLラッパの設定2008/08/15 |
設定によりHTTPS通信も同様にロードバランスできます。
|
|
[1] | Poundサーバーで証明書を作成しておきます。 |
[root@www ~]# cd /etc/pki/tls/certs
[root@www certs]#
[root@www certs]# openssl req -x509 -nodes -newkey rsa:1024 -keyout /etc/pki/tls/certs/pound.pem -out /etc/pki/tls/certs/pound.pem Generating a 1024 bit RSA private key ......++++++ .......++++++ writing new private key to '/etc/pki/tls/certs/pound.pem' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [AU]: JP # 国 State or Province Name (full name) [Some-State]: Hiroshima # 地域(県) Locality Name (eg, city) []: Hiroshima # 都市 Organization Name (eg, company) [Internet Widgits Pty Ltd]: GTS # 組織名 Organizational Unit Name (eg, section) []: Server World # 組織の部門名 Common Name (eg, YOUR name) []: www.srv.world # サーバーのFQDN Email Address []: xxx@srv.world # 管理者アドレス
chmod 600 pound.pem
|
[2] | Poundの設定 |
[root@www ~]#
vi /etc/pound.cfg # 21-25行目:コメント解除 ListenHTTPS Address 0.0.0.0 Port 443 Cert "/etc/pki/tls/certs/pound.pem" End /etc/rc.d/init.d/pound restart Stopping Pound: [ OK ] Starting Pound: starting... [ OK ] |
[3] | https でアクセスして以下のように正常にアクセスできるか確認してください。 |
Sponsored Link |
|