HomeServer18B の編集

#contents()

*** KEY ファイルの作成 [#e10f9d1f]
- AWS のホームディレクトリで作成
- passphrase = nanamochahiko
- module = &color(red){00:b1:45:a5:4e:ea:8f:....};
- &ref(hmuna_190831.key);

[AWS] ubuntu:~/work20190831$ openssl genrsa -des3 2048 > hmuna_190831.key
 Generating RSA private key, 2048 bit long modulus
 ....................+++
 .+++
 e is 65537 (0x10001)
 Enter pass phrase:
 Verifying - Enter pass phrase:

[AWS] ubuntu:~/work20190831$ ls -l
 total 4
 -rw-rw-r-- 1 ubuntu ubuntu 1743 Aug 31 09:18 hmuna_190831.key

[AWS] ubuntu:~/work20190831$ sudo openssl rsa -in hmuna_190831.key -text
 Enter pass phrase for hmuna_190831.key:
 Private-Key: (2048 bit)
 modulus:
     00:b1:45:a5:4e:ea:8f:c1:f1:b4:53:36:50:0d:1d:
     93:ec:f4:b8:55:5c:d1:0e:de:11:ab:88:53:ad:d6:
     2c:28:81:b8:d2:dd:1c:ff:73:d6:93:7d:de:0c:54:
     c8:c4:a5:28:0a:83:e1:76:d2:3e:9a:59:1c:72:23:
     32:51:10:db:e4:da:97:83:8b:95:d9:c7:7e:d1:f3:
     44:fb:a8:d2:c2:7b:0a:b9:ce:4f:16:17:d9:d3:2e:
     a7:60:dc:d3:16:2c:8f:a7:55:12:4e:11:ad:9b:ee:
     ce:ca:30:db:5c:65:b6:e7:61:73:3b:db:16:f1:27:
     17:ab:f8:ec:50:8c:0c:64:f1:a6:20:56:da:88:7d:
     33:28:2e:1e:16:eb:44:c4:9f:eb:bd:64:ae:d3:e9:
     9f:6d:7b:2f:37:b0:c1:69:22:f4:36:3c:6d:dd:e2:
     35:00:d3:6f:a1:b8:8c:c4:d5:1f:c5:4c:d0:db:15:
     0e:3f:8b:97:4d:0c:ea:35:9d:c1:90:49:b1:eb:f2:
     16:9d:af:66:51:41:85:de:64:20:de:d0:37:dc:5d:
     a2:37:cb:14:67:61:6b:31:7c:01:01:8c:c4:b2:f1:
     a5:3f:43:c0:c4:d7:83:f9:0e:10:28:2b:e2:be:d2:
     0e:89:74:7f:16:b6:12:6b:15:97:23:eb:ac:4f:8e:
     32:b9
 publicExponent: 65537 (0x10001)

*** CSR ファイルの作成 [#a20a4427]
- AWS のホームディレクトリで作成
- passphrase = nanamochahiko
- module = &color(red){00:b1:45:a5:4e:ea:8f:....};
- &ref(hmuna_190831.csr);

[AWS] ubuntu:~/work20190831$ openssl req -new -key hmuna_190831.key -out hmuna_190831.csr
 Enter pass phrase for hmuna_190831.key:
 You are about to be asked to enter information that will be incorporated
 into your certificate request. 
 What you are about to enter is what is called a Distinguished Name or a DN.
 There are quite a few fields but you can leave some blank
 For some fields there will be a default value,
 If you enter '.', the field will be left blank.
 -----
 Country Name (2 letter code) [AU]:JP
 State or Province Name (full name) [Some-State]:Kanagawa
 Locality Name (eg, city) []:Yokohama 
 Organization Name (eg, company) [Internet Widgits Pty Ltd]:IT Admin
 Organizational Unit Name (eg, section) []:IT
 Common Name (e.g. server FQDN or YOUR name) []:mail.hmuna.com
 Email Address []:
 
 Please enter the following 'extra' attributes
 to be sent with your certificate request
 A challenge password []:
 An optional company name []:

[AWS] ubuntu:~/work20190831$ ls -la
 total 16
 drwxrwxr-x 2 ubuntu ubuntu 4096 Aug 31 09:33 .
 drwxr-xr-x 7 ubuntu ubuntu 4096 Aug 31 09:17 ..
 -rw-rw-r-- 1 ubuntu ubuntu 1009 Aug 31 09:33 hmuna_190831.csr
 -rw-rw-r-- 1 ubuntu ubuntu 1743 Aug 31 09:18 hmuna_190831.key

[AWS] ubuntu:~/work20190831$ sudo openssl req -in hmuna_190831.csr -text
 Certificate Request:
     Data:
         Version: 0 (0x0)
         Subject: C=JP, ST=Kanagawa, L=Yokohama, O=IT Admin, OU=IT, CN=mail.hmuna.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
                     00:b1:45:a5:4e:ea:8f:c1:f1:b4:53:36:50:0d:1d:
                     93:ec:f4:b8:55:5c:d1:0e:de:11:ab:88:53:ad:d6:
                     2c:28:81:b8:d2:dd:1c:ff:73:d6:93:7d:de:0c:54:
                     c8:c4:a5:28:0a:83:e1:76:d2:3e:9a:59:1c:72:23:
                     32:51:10:db:e4:da:97:83:8b:95:d9:c7:7e:d1:f3:
                     44:fb:a8:d2:c2:7b:0a:b9:ce:4f:16:17:d9:d3:2e:
                     a7:60:dc:d3:16:2c:8f:a7:55:12:4e:11:ad:9b:ee:
                     ce:ca:30:db:5c:65:b6:e7:61:73:3b:db:16:f1:27:
                     17:ab:f8:ec:50:8c:0c:64:f1:a6:20:56:da:88:7d:
                     33:28:2e:1e:16:eb:44:c4:9f:eb:bd:64:ae:d3:e9:
                     9f:6d:7b:2f:37:b0:c1:69:22:f4:36:3c:6d:dd:e2:
                     35:00:d3:6f:a1:b8:8c:c4:d5:1f:c5:4c:d0:db:15:
                     0e:3f:8b:97:4d:0c:ea:35:9d:c1:90:49:b1:eb:f2:
                     16:9d:af:66:51:41:85:de:64:20:de:d0:37:dc:5d:
                     a2:37:cb:14:67:61:6b:31:7c:01:01:8c:c4:b2:f1:
                     a5:3f:43:c0:c4:d7:83:f9:0e:10:28:2b:e2:be:d2:
                     0e:89:74:7f:16:b6:12:6b:15:97:23:eb:ac:4f:8e:
                     32:b9
                 Exponent: 65537 (0x10001)

*** [[SSLストア:https://www.ssl-store.jp/system/service.php/certificate]] から新規で Positive SSL（2年/2,400円）を購入 [#id1f488c]

- OU を空欄にしないと審査に時間かかる事がある....　と書いてあったが、上記の設定（OU=IT) で申請した
- &ref(【SSLストア】お申込み完了のご案内（cs1-0700584）.eml);
- 数分で証明書が発行された -----> &ref(mail_hmuna_com.zip);

**************************************************
 　証明書番号：cs1-0700584
 　商品名　　：PositiveSSL
 　年数　　　：2年
 **************************************************
 
 ------------------------------------------------------
 証明書情報
 ------------------------------------------------------
 証明書番号：cs1-0700584
 
 コモンネーム：mail.hmuna.com
 
 ＣＳＲ：
 -----BEGIN CERTIFICATE REQUEST-----
 MIICsTCCAZkCAQAwbDELMAkGA1UEBhMCSlAxETAPBgNVBAgMCEthbmFnYXdhMREw
 DwYDVQQHDAhZb2tvaGFtYTERMA8GA1UECgwISVQgQWRtaW4xCzAJBgNVBAsMAklU
 MRcwFQYDVQQDDA5tYWlsLmhtdW5hLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEP
 ADCCAQoCggEBALFFpU7qj8HxtFM2UA0dk+z0uFVc0Q7eEauIU63WLCiBuNLdHP9z
 1pN93gxUyMSlKAqD4XbSPppZHHIjMlEQ2+Tal4OLldnHftHzRPuo0sJ7CrnOTxYX
 2dMup2Dc0xYsj6dVEk4RrZvuzsow21xltudhczvbFvEnF6v47FCMDGTxpiBW2oh9
 MyguHhbrRMSf671krtPpn217LzewwWki9DY8bd3iNQDTb6G4jMTVH8VM0NsVDj+L
 l00M6jWdwZBJsevyFp2vZlFBhd5kIN7QN9xdojfLFGdhazF8AQGMxLLxpT9DwMTX
 g/kOECgr4r7SDol0fxa2EmsVlyPrrE+OMrkCAwEAAaAAMA0GCSqGSIb3DQEBCwUA
 A4IBAQApBz5i+iAEC24wJVF4e87FgS1fj1pcY88wtT0R57D8sKPhJa1NbsfYxabZ
 ZGD1HejTqFwsFoT/9Ir+J6BtbcRd9FAhQuihqHvD/OAOC8+0mOJdteCxTLHBeHz8
 C6GBcnPhlW4zut6DFaQ0UmrQzV41xal1ZQngFYepBgnpmXb8jHs8dcErT6hKx5Da
 KX8MSINqKV3AzlkHXOgv8LWE6apqKPR7bqWFszke0xIooLWnuiXC/lHb3Z5dd5YS
 Oug91HuQFFxiGAcaD0z1a4yXJCFO+KAivjMJm2dimGbyz9tqpqanntGQr0rxDMKD
 932CvxEVTTSwViu63gzGU7U7kRDe
 -----END CERTIFICATE REQUEST-----

*** メールサーバー（AWS) に証明書を転送 [#f5595f63]
- ssh を使ったメールサーバー接続
-- ssh -i (秘密鍵) ubuntu@(公開DNS名)
--- 秘密鍵 : &ref(magu-tokyo-messenger.pem);
--- アカウント : ubuntu
--- 接続先 : ec2-13-114-88-171.ap-northeast-1.compute.amazonaws.com

- scp を使って証明書ファイルを AWS サーバーにアップロード
-- scp -i (秘密鍵) (転送ファイル名) ubuntu@(公開DN名)&color(red){:~}; ← 最後のコロン+にょろ　が重要

munakata@muna-E450:~/mail_cert_wk$ scp -i magu-tokyo-messenger.pem mail_hmuna_com.zip ubuntu@ec2-13-114-88-171.ap-northeast-1.compute.amazonaws.com:~
 mail_hmuna_com.zip                                                                               100% 8467   501.1KB/s   00:00    
 munakata@muna-E450:~/mail_cert_wk$

-- AWS 側にファイルが転送された

[AWS] ubuntu:~$ ls -l
 total 40
 -rw------- 1 root   root     312 Sep  1  2017 dkim.txt
 -rw-rw-r-- 1 ubuntu ubuntu 17501 Aug 25  2017 maildb_backup_20170825.sql
 -rw-rw-r-- 1 ubuntu ubuntu  8467 Aug 31 10:24 mail_hmuna_com.zip
 drwxrwxr-x 2 ubuntu ubuntu  4096 Aug 31 10:26 work20190831

*** 発行された証明書が KEY、CSR と一致するかを確認  ・・・・・ &color(red){当たり前だが、ちゃんと一致}; [#gdf23787]
- module = &color(red){00:b1:45:a5:4e:ea:8f:c1:....};

[AWS] ubuntu:~/work20190831$ openssl x509 -text < mail_hmuna_com.crt
 Certificate:
     Data:
         Version: 3 (0x2)
         Serial Number:
             87:58:60:51:f4:68:a1:b1:e7:e7:8b:d4:08:1b:1a:a6
     Signature Algorithm: sha256WithRSAEncryption
         Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
         Validity
             Not Before: Aug 31 00:00:00 2019 GMT
             Not After : Aug 30 23:59:59 2021 GMT
         Subject: OU=Domain Control Validated, CN=mail.hmuna.com
         Subject Public Key Info:
             Public Key Algorithm: rsaEncryption
                 Public-Key: (2048 bit)
                 Modulus:
                     00:b1:45:a5:4e:ea:8f:c1:f1:b4:53:36:50:0d:1d:
                     93:ec:f4:b8:55:5c:d1:0e:de:11:ab:88:53:ad:d6:
                     2c:28:81:b8:d2:dd:1c:ff:73:d6:93:7d:de:0c:54:
                     c8:c4:a5:28:0a:83:e1:76:d2:3e:9a:59:1c:72:23:
                     32:51:10:db:e4:da:97:83:8b:95:d9:c7:7e:d1:f3:
                     44:fb:a8:d2:c2:7b:0a:b9:ce:4f:16:17:d9:d3:2e:
                     a7:60:dc:d3:16:2c:8f:a7:55:12:4e:11:ad:9b:ee:
                     ce:ca:30:db:5c:65:b6:e7:61:73:3b:db:16:f1:27:
                     17:ab:f8:ec:50:8c:0c:64:f1:a6:20:56:da:88:7d:
                     33:28:2e:1e:16:eb:44:c4:9f:eb:bd:64:ae:d3:e9:
                     9f:6d:7b:2f:37:b0:c1:69:22:f4:36:3c:6d:dd:e2:
                     35:00:d3:6f:a1:b8:8c:c4:d5:1f:c5:4c:d0:db:15:
                     0e:3f:8b:97:4d:0c:ea:35:9d:c1:90:49:b1:eb:f2:
                     16:9d:af:66:51:41:85:de:64:20:de:d0:37:dc:5d:
                     a2:37:cb:14:67:61:6b:31:7c:01:01:8c:c4:b2:f1:
                     a5:3f:43:c0:c4:d7:83:f9:0e:10:28:2b:e2:be:d2:
                     0e:89:74:7f:16:b6:12:6b:15:97:23:eb:ac:4f:8e:
                     32:b9
                 Exponent: 65537 (0x10001)

*** 証明書の調整（名前の変更、ワークディレクトリーへのコピー） [#b09b155e]

- zip ファイルを展開
 [AWS] ubuntu:~/work20190831$ ls -l
 total 24
 -rw-rw-rw- 1 ubuntu ubuntu 1521 May 30  2000 AddTrustExternalCARoot.crt
 -rw-rw-rw- 1 ubuntu ubuntu 2269 Aug 31 00:00 mail_hmuna_com.crt
 -rw-rw-rw- 1 ubuntu ubuntu 2167 Nov  2  2018 SectigoRSADomainValidationSecureServerCA.crt
 -rw-rw-rw- 1 ubuntu ubuntu 1956 May 30  2000 USERTrustRSAAddTrustCA.crt

- 中間証明所をマージ
 [AWS] ubuntu:~/work20190831$ cat AddTrustExternalCARoot.crt SectigoRSADomainValidationSecureServerCA.crt USERTrustRSAAddTrustCA.crt > mail_hmuna_com.ca-bundle

- ファイル名を変更しながら、証明書置き場に移動
 [AWS] ubuntu:~/work20190831$ sudo cp mail_hmuna_com.crt /etc/ssl/official_m4_20190831/mail_hmuna_com.crt
 [AWS] ubuntu:~/work20190831$ sudo cp hmuna_190831.key /etc/ssl/official_m4_20190831/mail_hmuna.key
 [AWS] ubuntu:~/work20190831$ sudo cp mail_hmuna_com.ca-bundle /etc/ssl/official_m4_20190831/
 [AWS] ubuntu:~/work20190831$ sudo cp hmuna_190831.csr /etc/ssl/official_m4_20190831/mail_hmuna_com.csr

- 証明書置き場 (=/etc/ssl/official_m4_20190831)
 [AWS] ubuntu:~/work20190831$ ls -la /etc/ssl/official_m4_20190831/
 total 28
 drwxr-xr-x 2 root root 4096 Aug 31 10:41 .
 drwxr-xr-x 7 root root 4096 Aug 31 08:07 ..
 -rw-r--r-- 1 root root 5644 Aug 31 10:39 mail_hmuna_com.ca-bundle
 -rw-r--r-- 1 root root 2269 Aug 31 10:38 mail_hmuna_com.crt
 -rw-r--r-- 1 root root 1009 Aug 31 10:40 mail_hmuna_com.csr
 -rw-r--r-- 1 root root 1743 Aug 31 10:39 mail_hmuna.key

*** 証明書の配置　（従来の　dovecot.conf の設定を踏襲） [#n8bb085d]
 ssl_ca = </etc/apache2/ssl.crt/mail_hmuna_com.ca-bundle  <----------------------------
 ssl_cert = </etc/ssl/certs/mail_hmuna_com.crt  <------------------------------------------
 ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
 ssl_dh_parameters_length = 2048
 ssl_key = </etc/ssl/private/mail_hmuna.key  <---------------------------------------------
 ssl_prefer_server_ciphers = yes

[AWS] ubuntu:~/work20190831$ sudo ls -al /etc/apache2/ssl.crt/
 total 32
 drwxr-xr-x 2 root   root   4096 Aug 31 10:52 .
 drwxr-xr-x 9 root   root   4096 Aug 31 06:24 ..
 -rw-r--r-- 1 root   root   5644 Aug 31 10:52 mail_hmuna_com.ca-bundle
 -rw-r--r-- 1 root   root   5644 Jul 27 08:55 mail_hmuna_com.ca-bundle_notworks
 -rw-r--r-- 1 ubuntu ubuntu 4103 Aug 26  2017 mail_hmuna_com.ca-bundle_till201908

[AWS] ubuntu:~/work20190831$ sudo ls -la /etc/ssl/certs/mail_hmuna_com.*
 -rw-r--r-- 1 root   root   2269 Aug 31 10:54 /etc/ssl/certs/mail_hmuna_com.crt
 -rw-r--r-- 1 root   root   2269 Jul 14 12:11 /etc/ssl/certs/mail_hmuna_com.crt_notworks
 -rw-r--r-- 1 ubuntu ubuntu 2327 Aug 26  2017 /etc/ssl/certs/mail_hmuna_com.crt_till201908

[AWS] ubuntu:~/work20190831$ sudo ls -la /etc/ssl/private/
 total 24
 drwx--x--- 2 root ssl-cert 4096 Aug 31 10:56 .
 drwxr-xr-x 7 root root     4096 Aug 31 08:07 ..
 -rw------- 1 root root      424 Aug 25  2017 dhparams.pem
 -rw------- 1 root root     1743 Aug 31 10:56 mail_hmuna.key
 -rw------- 1 root root     1704 Jul 27 08:53 mail_hmuna.key_notworks
 -rw------- 1 root root     1679 Aug 26  2017 mail_hmuna.key_till201908

*** メールサーバーの証明書を更新 [#d8bef6b9]

*** postfix ではパスフレーズ付きの KEYファイル（秘密鍵）は扱えない。 パスフレーズを削除する [#ibf5ac81]

[AWS] ubuntu:~/work20190831$ openssl rsa -in hmuna_190831.key -out hmuna_190831_wopass.key

- オリジナルの KEY ファイル（上の2行に 3DES 暗号化されていると記載）
 [AWS] ubuntu:~/work20190831$ cat hmuna_190831.key
 -----BEGIN RSA PRIVATE KEY-----
 Proc-Type: 4,ENCRYPTED
 DEK-Info: DES-EDE3-CBC,08A385EA24594D48
 
 iZdNp77bkfmhg7yiuFHcWq5OGb0WfCSu1rKXtLfgC7PA0dnRSVGf8j8YPQk8Mst2
 aarQkuXPE4IMJ8TI6deKGRAHyF9MI0Ig6UrLSretPSTuJTq+OMLyuVq9pSrpdRja
 zI6DcLAPNf7ivqbDhkJOdIGZ9yCZjouhAXP1D9T1XOZq0k/MaYlacvq07aorcSli
 V3km2N+r/cl94N4DMErl2dhM2a5O5j8/vGqgrXNOGt9yDgCvimoVKAKQSjRfeguQ
 bqW3qVAf5aL5zrPuy4JHpflV9lkUiLeqe36S0emz1tfY7TJscH2f/7vyM/Q4xTmV
 vfYVD2NaU2hjZS7r2q9QNN5iM0L+7J1gpmB5D48oB51rP4kjtYHvWhwCfZ/TLcO8
 IMkzyButmcYUoZa4mAXXAaxxOij2k3vqxYkZGOj5SiA7Qw+88Gk5rFok/ctFnP5D
 5oDNAWuOVxop5ZOL9a/8vQTrCmHoWj6bp1/3ySNVsjejAGacrAEBzqamFg0+7Krz
 cqW3oyhBlt5ACtAYBD5plin/3h/iAzfvd0zueyyM5uHCHMXSN0pgfNgWrjSKSDPL
 8xruxGXYPyetvQ+yHror6p/xGWGqbunLjocjR0gAonWNggnRTf/ZYhTmv/+RCbdO
 8OcHYBC3S1m3u/ifw/jYQZFPv14AHCJt6v+hdpEhABfQcNexJpYHqOtVP1avr3cn
 V7aorNLMto07beOxqLxiE6nSxC+5Ko/hHbRv2GfLZJI5vGa/N96KjI2QXRIrH6jw
 Yy57MwIc6AtabTV6ButO/hvorRIqyE8E0F4aFwkGpZKvrTKAzc6O0s47jLAWeYBt
 nXti9TY8vFPWeY8BbwD1cL64bdZCDAOud56+4EJgmrDkZM9lFuNdpS7wjLqgbVHR
 XnhKBt/1g0IHNteW1PBhmr+XhnikklG8fy8UJrz5H7vNeLIfFGOweHF7wVdzD2F9
 KiH6nikETh2uKWnQxUNMl9z9t66IZWaS3KhWXHIBMQZZ7uJ6SYQXWi1MdKJNrF0+
 2hbM10yEFWA6NIOpSCyrWLL/LBY/DimMxI8abSKdvN6TBpA3Tc+Nq1VChAzazakp
 58cGcnn+5yvZDq5hBrCi6QyN7of1n6joHfwJVwSPOVycFWk2TSX/OjwGLHRkEzPM
 6Fo+26bjzN7K+VkP+OSe+QZHnE7rvEQUDC53nlWrO8+/zCWQa6dMLaDPbPcasCnM
 S2Gyu6bmfbLFogZZQEcsjaUuzO+JGf6wjiftvG0vOt9CnKDDHaXCrIhocLySFb4N
 HNYS9PnYLTYH5B8WX1wv5/golZr/cqAFBSWsDOoGUSIAMq5XBjPe85ZcdPQ0NJbt
 CEx8LIDJyY5BX87ibWGysKUnLfSLT1Ed0CDKCAKO+RDJ0KvDofWgnC5VAnrgLGKv
 WlCESq2WKMbd/c2TuIIfZvsA9DoNhNm/RXeYzWgazg6HxRRcoG17vJ5VAvPlfVD9
 yuWXxf23ulrspbeliEzREbhnRNz7Hzyxxol/wWPAxcMrqNwFgjKjZnKc68QL+71f
 TYEWAaHbpLbkZwvjMBOI6+0zWYHuYbDms5r6k1PnIUN3r9HTKoRqaA==
 -----END RSA PRIVATE KEY-----

- パスフレーズを取った新しい KEY ファイル
 [AWS] ubuntu:~/work20190831$ cat hmuna_190831_wopass.key
 -----BEGIN RSA PRIVATE KEY-----
 MIIEowIBAAKCAQEAsUWlTuqPwfG0UzZQDR2T7PS4VVzRDt4Rq4hTrdYsKIG40t0c
 /3PWk33eDFTIxKUoCoPhdtI+mlkcciMyURDb5NqXg4uV2cd+0fNE+6jSwnsKuc5P
 FhfZ0y6nYNzTFiyPp1USThGtm+7OyjDbXGW252FzO9sW8ScXq/jsUIwMZPGmIFba
 iH0zKC4eFutExJ/rvWSu0+mfbXsvN7DBaSL0Njxt3eI1ANNvobiMxNUfxUzQ2xUO
 P4uXTQzqNZ3BkEmx6/IWna9mUUGF3mQg3tA33F2iN8sUZ2FrMXwBAYzEsvGlP0PA
 xNeD+Q4QKCvivtIOiXR/FrYSaxWXI+usT44yuQIDAQABAoIBAC/6InBGSVv7F4vB
 0k6KZ8Okw9LOiQIWFgAvqD4PDep0mVnwX+2/Ix7N3O/HboLSFBEsejPXWPwbC/jU
 D8Ui4/B/PKxsdcT4GhmmVlAp88iQ1mlNLdhT4i8mnEQ536NLsiFeg9K/NBZUvoC4
 UlYibSsYE8DqXb4sj1qKxyJRlPUoghVL9R2FRGUyKYUMf5vh6ZvPkWDsvMsBoQXe
 uXObDR5CVdCzm6qHmkDcJcYxryw7RBnCxGXRtR0BAFMPjOsZBU3y2DwycTunydly
 n8TtWNBtZiX7H8F7z5S58qi/0deOk9c+9JZE9o373te2iMfgPxmVNHm5e0zZOA4P
 s2DXXAUCgYEA33Q7/dDXHQdaq9ofw+wk9mIGtx8JA1080JJ6DoKLYNpPrK7V19pQ
 QqNStgwflUNTyn14x3Ig99aA8RiqtaQ3xoyL4TDVHIEP/xIq8m6XOtXGSsV4/gyC
 CKInpquGO9Vop4G7wgSSj7bce73iBhc4Wye1x04ePnj2Wa+fJ5c5OysCgYEAyxd1
 MWsawB1ancsl/UhJOrKRwDf1CVrI1ytFoeiBItk5/C+P0LbeUu6D/qrcdjr8AfpE
 8Ib7Plx+TNpivqNQR3Ee9te4VeC/eAd+SLLbzCxF33G5l0byXRT8oyfKFIslGAo/
 AmKMGPLDHHtqSTbvZ6Orx+RViUsCDsYJf8pgh6sCgYEAlZCdXwRcF6gGfqSfQmpb
 SzbNu+BgDgpoXErOu8uRMyCs166mn7YWpqPfBs8SjLvl59EX+JdhjcHbyIR0LuRe
 GN2V+wLOgie450fnyyFOxCi2cvG+TH1exByVYa/JR19Oj1/8pp6c4ujIp2KvWNhN
 9mWb/G1DPRmF+v3cD4ne2sUCgYBweI84TP5FgnwagtSJDi0vypCZCOQ0yAgN0TMA
 1UgeynooRRa6GWvKNbj3ohvxhfzmA3mGUtp00LhJS2//72WYCveA8DpvpMWkbVHs
 ZNEAo0wW0F5dfrbeAa9fk7t/4Qcr5xC5+2Vms5qF/XsBDOFMXgHV84fDPrzm/Zlp
 IeSPfQKBgBdYSFSGqkL7Mi9LyUbTbu7UZShT0167nt6eqfCLqzpMzNFA4HEMnYa4
 rjPRb0lip4uOOnCX+rO7bp21ORrwUzjaQ45ICk2nfTKj40jNLZBTGvW7jm/rLTkV
 U9RLB87zzrZcgdK4+bXySmJSkJxWdCPRdUqgTZcC53i5AnFftvPW
 -----END RSA PRIVATE KEY-----

- パスフレーズを取った KEY ファイルの module 情報を確認
 [AWS] ubuntu:~/work20190831$ sudo openssl rsa -in hmuna_190831_wopass.key -text
 Private-Key: (2048 bit)
 modulus:
     00:b1:45:a5:4e:ea:8f:c1:f1:b4:53:36:50:0d:1d:
     93:ec:f4:b8:55:5c:d1:0e:de:11:ab:88:53:ad:d6:
     2c:28:81:b8:d2:dd:1c:ff:73:d6:93:7d:de:0c:54:
     c8:c4:a5:28:0a:83:e1:76:d2:3e:9a:59:1c:72:23:
     32:51:10:db:e4:da:97:83:8b:95:d9:c7:7e:d1:f3:
     44:fb:a8:d2:c2:7b:0a:b9:ce:4f:16:17:d9:d3:2e:
     a7:60:dc:d3:16:2c:8f:a7:55:12:4e:11:ad:9b:ee:
     ce:ca:30:db:5c:65:b6:e7:61:73:3b:db:16:f1:27:
     17:ab:f8:ec:50:8c:0c:64:f1:a6:20:56:da:88:7d:
     33:28:2e:1e:16:eb:44:c4:9f:eb:bd:64:ae:d3:e9:
     9f:6d:7b:2f:37:b0:c1:69:22:f4:36:3c:6d:dd:e2:
     35:00:d3:6f:a1:b8:8c:c4:d5:1f:c5:4c:d0:db:15:
     0e:3f:8b:97:4d:0c:ea:35:9d:c1:90:49:b1:eb:f2:
     16:9d:af:66:51:41:85:de:64:20:de:d0:37:dc:5d:
     a2:37:cb:14:67:61:6b:31:7c:01:01:8c:c4:b2:f1:
     a5:3f:43:c0:c4:d7:83:f9:0e:10:28:2b:e2:be:d2:
     0e:89:74:7f:16:b6:12:6b:15:97:23:eb:ac:4f:8e:
     32:b9
 publicExponent: 65537 (0x10001)

*** postfix / dovecot を再起動して正常に動作する事を確認できた。 [#m643af37]
- 今回利用したファイル ------> &ref(SSL_20190831.tgz);

タイムスタンプを変更しない