CentOS7 HTTPS 보안

Apache를 Https로 보안

# 인증서 넣을 파일로 이동
cd /etc/pki/tls/certs/
# 키 생성
openssl genrsa -out http.key 2048
# csr 파일 생성
openssl req -new -key http.key -out http.csr
# crt 파일 생성
openssl x509 -req -days 365 -in http.csr -signkey http.key -out http.crt

# ssl파일 설치
yum -y install mod_ssl
# ssl 설정 파일 수정
vim /etc/httpd/conf.d/ssl.conf
#   Server Certificate:
 96 # Point SSLCertificateFile at a PEM encoded certificate.  If
 97 # the certificate is encrypted, then you will be prompted for a
 98 # pass phrase.  Note that a kill -HUP will prompt again.  A new
 99 # certificate can be generated using the genkey(1) command.
100 SSLCertificateFile /etc/pki/tls/certs/http.crt
101 
102 #   Server Private Key:
103 #   If the key is not combined with the certificate, use this
104 #   directive to point at the key file.  Keep in mind that if
105 #   you've both a RSA and a DSA private key you can configure
106 #   both in parallel (to also allow the use of DSA ciphers, etc.)
107 SSLCertificateKeyFile /etc/pki/tls/certs/http.key

# httpd 재 구동
systemctl restart httpd

# http, https 확인
netstat -natlp | grep http

<https://192.168.111.100>

Tomcat을 Https로 보안

# 키 생성
keytool -genkey -alias tomcat -keyalg RSA -keystore /etc/pki/keystore
# 키 확인
cd /etc/pki
# 파일 확인
file keystore

# 파일 수정
vim /usr/share/tomcat/conf/server.xml

 87     <Connector port="8443" protocol="org.apache.coyote.http11.Http11Protocol"
 88                maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
 89                clientAuth="false" sslProtocol="TLS"
 90                keystoreFile="/etc/pki/keystore" keystorePass="p@ssw0rd" />

# tomcat 재 구동
systemctl restart tomcat

# tomcat 확인
lsof -i tcp:8443

<https://192.168.111.100:8443>