HomeServer13
をテンプレートにして作成
[
トップ
] [
新規
|
一覧
|
検索
|
最終更新
|
ヘルプ
]
開始行:
#contents
*** ハードウエア [#s2015e58]
- Mini PC Intel NUC Kit NUC5CPYH
-- Celeron N3050 (64bit)
-- bios062 (20170813) --- &ref(PY0062.bio);
*** ソフトウエアベース [#ad0dd999]
- Ubuntu Server 14.04-LTS (サーバー版を利用)
*** 証明書 [#ec5ec835]
- &ref(ORDER#15187565.eml);
*** 固定 IP 化 [#b0c45369]
- /etc/network/interface
# This file describes the network interfaces available o...
# and how to activate them. For more information, see in...
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
#auto p2p1
#iface p2p1 inet dhcp
auto p2p1
iface p2p1 inet static
address 192.168.1.25
network 192.168.1.0
netmask 255.255.255.0
broadcast 192.168.1.255
gateway 192.168.1.1
dns-nameservers 192.168.1.25
- /etc/hostname
mail-admin@mail:~$ cat /etc/hostname
mail.hmuna.com
- /etc/resolve.conf
mail-admin@mail:~$ cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) gene...
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL...
nameserver 192.168.1.25
*** bind9 [#m65a489c]
- &ref(bindset.tgz);
*** メールサーバー（postfix, dovecot, mysql） [#m8bbff17]
- postfix の virtual mailbox モード
- https://www.exratione.com/2014/05/a-mailserver-on-ubun...
*** ntp [#g60a1eec]
- /etc/ntp.conf でタイムソースを変更
# Specify one or more NTP servers.$
# Use servers from the NTP Pool Project. Approved by Ubu...
# on 2011-02-08 (LP: #104525). See http://www.pool.ntp.o...
# more information.$
#server 0.ubuntu.pool.ntp.org$
#server 1.ubuntu.pool.ntp.org$
#server 2.ubuntu.pool.ntp.org$
#server 3.ubuntu.pool.ntp.org$
server ntp1.jst.mfeed.ad.jp iburst$
server ntp2.jst.mfeed.ad.jp iburst$
server ntp3.jst.mfeed.ad.jp iburst$
*** VPN Server（Softether) [#d32d973b]
*** サーバー証明書更新（2016-12-31) [#vdf9a6cc]
- namecheap から Symantec （Symantec, GeoTrust, and Thawt...
- 購入詳細履歴は ------- &ref(Namecheap.com Order Summar...
-- Order Date: Dec 30, 2016 09:16:09 PM
-- Order Number: 24331097
-- Transaction ID: 29079556
-- User Name: wikihmuna
- CSR (Certificate Signing Request＝署名要求) を以下の内...
mail-admin@mail:/etc/ssl$ sudo openssl req -new -newkey ...
Generating a 2048 bit RSA private key
.............+++
.+++
writing new private key to 'mail.hmuna2017.key'
-----
You are about to be asked to enter information that will...
into your certificate request.
What you are about to enter is what is called a Distingu...
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:Kanagawa
Locality Name (eg, city) []:Yokohama
Organization Name (eg, company) [Internet Widgits Pty Lt...
Organizational Unit Name (eg, section) []:NA
Common Name (e.g. server FQDN or YOUR name) []:mail.hmun...
Email Address []:mail-admin@hmuna.com
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
- 生成されたCSR(署名要求）の中味
mail-admin@mail:/etc/ssl$ ls -l
total 48
drwxr-xr-x 2 root root 20480 Jul 22 00:58 certs
-rw-r--r-- 1 root root 1054 Dec 31 12:06 mail.hmuna...
-rw-r--r-- 1 root root 1704 Dec 31 12:06 mail.hmuna...
-rw-r--r-- 1 root root 1903 Jul 20 14:57 mail_hmuna...
-rw-r--r-- 1 root root 10835 Dec 4 2015 openssl.cnf
drwx--x--- 2 root ssl-cert 4096 Jul 22 00:36 private
- サーバー証明書の中味
mail-admin@mail:/etc/ssl$ cat mail.hmuna2017.csr
-----BEGIN CERTIFICATE REQUEST-----
MIIC0TCCAbkCAQAwgYsxCzAJBgNVBAYTAkpQMREwDwYDVQQIDAhLYW5h...
MA8GA1UEBwwIWW9rb2hhbWExCzAJBgNVBAoMAk5BMQswCQYDVQQLDAJO...
A1UEAwwObWFpbC5obXVuYS5jb20xIzAhBgkqhkiG9w0BCQEWFG1haWwt...
aG11bmEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...
N7N+1SakfLHSizPe04epbETWIDaBomg2PYNaQimMM9W5Et4j9DO8+v9U...
ujesNElGG1zAC+C/Y+ak9KrXsjX8ylyK5FIAZWX7Pe4Tr99faiX9rwJV...
Wsm6Qxsw6N14bM7Rzc1rx6xEygrIVFMSL2yc2xsHNfvClUIlwRf2wGy2...
swJ+OsakgxIDVeOWoEvdN/yXKLZzOL++WFICx3HJoP3pra3KC5TzC5bi...
/SxBqOKSJp9/NcMTlNtnsWSFHbnDhwg7nF8arfN8dPP9g/IpQotL2n/p...
2wAC/JjIc/O0TwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAA/6A0AR...
tpQb5c+xODu+8x3XtV+E3xo95aQW/5vpgXy81rD0fxZH0HqyD3blNhEw...
/Wasmpsa7gSa1vUm5h8i3i4SMHdnY2J4xWyfLRIzUgwqZ5msNW++zDMw...
LMiM4SdxTrI0y729hKjkaHeC+Ctc5PgfyL/PcTkxLBsg3ZuGhHLGSvK6...
IEJeEI1r6X0Lre9TELtWBIBlPZy/EyRJU6rINaYozpLfpn1qgosyKYIC...
/7jsq6be9F6RwXpdgk3fPJyXxzzRdhyKUFUtgWTG9flpt9/RAjEpiPHg...
+oimXjA=
-----END CERTIFICATE REQUEST-----
- 発行された証明書 （&ref(mail_hmuna_com.zip);）と [[ロゴ...
- &color(red){証明書をインストールしようとして気付いたが...
&ref(SSL_confused.JPG);
終了行:
#contents
*** ハードウエア [#s2015e58]
- Mini PC Intel NUC Kit NUC5CPYH
-- Celeron N3050 (64bit)
-- bios062 (20170813) --- &ref(PY0062.bio);
*** ソフトウエアベース [#ad0dd999]
- Ubuntu Server 14.04-LTS (サーバー版を利用)
*** 証明書 [#ec5ec835]
- &ref(ORDER#15187565.eml);
*** 固定 IP 化 [#b0c45369]
- /etc/network/interface
# This file describes the network interfaces available o...
# and how to activate them. For more information, see in...
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
#auto p2p1
#iface p2p1 inet dhcp
auto p2p1
iface p2p1 inet static
address 192.168.1.25
network 192.168.1.0
netmask 255.255.255.0
broadcast 192.168.1.255
gateway 192.168.1.1
dns-nameservers 192.168.1.25
- /etc/hostname
mail-admin@mail:~$ cat /etc/hostname
mail.hmuna.com
- /etc/resolve.conf
mail-admin@mail:~$ cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) gene...
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL...
nameserver 192.168.1.25
*** bind9 [#m65a489c]
- &ref(bindset.tgz);
*** メールサーバー（postfix, dovecot, mysql） [#m8bbff17]
- postfix の virtual mailbox モード
- https://www.exratione.com/2014/05/a-mailserver-on-ubun...
*** ntp [#g60a1eec]
- /etc/ntp.conf でタイムソースを変更
# Specify one or more NTP servers.$
# Use servers from the NTP Pool Project. Approved by Ubu...
# on 2011-02-08 (LP: #104525). See http://www.pool.ntp.o...
# more information.$
#server 0.ubuntu.pool.ntp.org$
#server 1.ubuntu.pool.ntp.org$
#server 2.ubuntu.pool.ntp.org$
#server 3.ubuntu.pool.ntp.org$
server ntp1.jst.mfeed.ad.jp iburst$
server ntp2.jst.mfeed.ad.jp iburst$
server ntp3.jst.mfeed.ad.jp iburst$
*** VPN Server（Softether) [#d32d973b]
*** サーバー証明書更新（2016-12-31) [#vdf9a6cc]
- namecheap から Symantec （Symantec, GeoTrust, and Thawt...
- 購入詳細履歴は ------- &ref(Namecheap.com Order Summar...
-- Order Date: Dec 30, 2016 09:16:09 PM
-- Order Number: 24331097
-- Transaction ID: 29079556
-- User Name: wikihmuna
- CSR (Certificate Signing Request＝署名要求) を以下の内...
mail-admin@mail:/etc/ssl$ sudo openssl req -new -newkey ...
Generating a 2048 bit RSA private key
.............+++
.+++
writing new private key to 'mail.hmuna2017.key'
-----
You are about to be asked to enter information that will...
into your certificate request.
What you are about to enter is what is called a Distingu...
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:Kanagawa
Locality Name (eg, city) []:Yokohama
Organization Name (eg, company) [Internet Widgits Pty Lt...
Organizational Unit Name (eg, section) []:NA
Common Name (e.g. server FQDN or YOUR name) []:mail.hmun...
Email Address []:mail-admin@hmuna.com
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
- 生成されたCSR(署名要求）の中味
mail-admin@mail:/etc/ssl$ ls -l
total 48
drwxr-xr-x 2 root root 20480 Jul 22 00:58 certs
-rw-r--r-- 1 root root 1054 Dec 31 12:06 mail.hmuna...
-rw-r--r-- 1 root root 1704 Dec 31 12:06 mail.hmuna...
-rw-r--r-- 1 root root 1903 Jul 20 14:57 mail_hmuna...
-rw-r--r-- 1 root root 10835 Dec 4 2015 openssl.cnf
drwx--x--- 2 root ssl-cert 4096 Jul 22 00:36 private
- サーバー証明書の中味
mail-admin@mail:/etc/ssl$ cat mail.hmuna2017.csr
-----BEGIN CERTIFICATE REQUEST-----
MIIC0TCCAbkCAQAwgYsxCzAJBgNVBAYTAkpQMREwDwYDVQQIDAhLYW5h...
MA8GA1UEBwwIWW9rb2hhbWExCzAJBgNVBAoMAk5BMQswCQYDVQQLDAJO...
A1UEAwwObWFpbC5obXVuYS5jb20xIzAhBgkqhkiG9w0BCQEWFG1haWwt...
aG11bmEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA...
N7N+1SakfLHSizPe04epbETWIDaBomg2PYNaQimMM9W5Et4j9DO8+v9U...
ujesNElGG1zAC+C/Y+ak9KrXsjX8ylyK5FIAZWX7Pe4Tr99faiX9rwJV...
Wsm6Qxsw6N14bM7Rzc1rx6xEygrIVFMSL2yc2xsHNfvClUIlwRf2wGy2...
swJ+OsakgxIDVeOWoEvdN/yXKLZzOL++WFICx3HJoP3pra3KC5TzC5bi...
/SxBqOKSJp9/NcMTlNtnsWSFHbnDhwg7nF8arfN8dPP9g/IpQotL2n/p...
2wAC/JjIc/O0TwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAA/6A0AR...
tpQb5c+xODu+8x3XtV+E3xo95aQW/5vpgXy81rD0fxZH0HqyD3blNhEw...
/Wasmpsa7gSa1vUm5h8i3i4SMHdnY2J4xWyfLRIzUgwqZ5msNW++zDMw...
LMiM4SdxTrI0y729hKjkaHeC+Ctc5PgfyL/PcTkxLBsg3ZuGhHLGSvK6...
IEJeEI1r6X0Lre9TELtWBIBlPZy/EyRJU6rINaYozpLfpn1qgosyKYIC...
/7jsq6be9F6RwXpdgk3fPJyXxzzRdhyKUFUtgWTG9flpt9/RAjEpiPHg...
+oimXjA=
-----END CERTIFICATE REQUEST-----
- 発行された証明書 （&ref(mail_hmuna_com.zip);）と [[ロゴ...
- &color(red){証明書をインストールしようとして気付いたが...
&ref(SSL_confused.JPG);
ページ名:
![[PukiWiki]](image/taikyoku.gif "[PukiWiki]")
