[OS/UBUNTU] openssl 명령 : 인증서 서명 요청(CSD) 파일 생성하기

icodebroker UBUNTU 2024-06-18

■ openssl 명령을 사용해 인증서 서명 요청(CSD) 파일을 생성하는 방법을 보여준다.

1. CTRL + ALT + T 키를 눌러서 [터미널]을 실행한다.

2. [터미널]에서 아래 명령을 실행한다.

▶ 실행 명령


king@cosmos:~$ openssl req -new -key private_key.pem -out csr.pem
Enter pass phrase for private_key.pem:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:KR
State or Province Name (full name) [Some-State]:GYEONGGI
Locality Name (eg, city) []:SUWON
Organization Name (eg, company) [Internet Widgits Pty Ltd]:DSCORE
Organizational Unit Name (eg, section) []:SE
Common Name (e.g. server FQDN or YOUR name) []:icodebroker
Email Address []:icodebroker.naver.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:test
An optional company name []:DSCORE

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

king@cosmos:~$ openssl req -new -key private_key.pem -out csr.pem

Enter pass phrase for private_key.pem:

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [AU]:KR

State or Province Name (full name) [Some-State]:GYEONGGI

Locality Name (eg, city) []:SUWON

Organization Name (eg, company) [Internet Widgits Pty Ltd]:DSCORE

Organizational Unit Name (eg, section) []:SE

Common Name (e.g. server FQDN or YOUR name) []:icodebroker

Email Address []:icodebroker.naver.com

Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:test

An optional company name []:DSCORE

※ private_key.pem : RSA 개인키 파일명
※ csr.pem : 생성할 인증서 서명 요청 파일명

▶ csr.pem

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

-----BEGIN CERTIFICATE REQUEST-----

MIIC/DCCAeQCAQAwgYoxCzAJBgNVBAYTAktSMREwDwYDVQQIDAhHWUVPTkdHSTEO

MAwGA1UEBwwFU1VXT04xDzANBgNVBAoMBkRTQ09SRTELMAkGA1UECwwCU0UxFDAS

BgNVBAMMC2ljb2RlYnJva2VyMSQwIgYJKoZIhvcNAQkBFhVpY29kZWJyb2tlci5u

YXZlci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4p/VeaMsq

WwBUo/Q8iTzv89sYTiCVwE0XdVKK0pJQphxIEuYFLNWc/NhC7uxl9+gyji/+mvE/

O1REfxHfDSCVVCJDGUsDD/snOG78qQt+xDF3Cqx0+QRnKwsXY1hhYhd65CCkZ0Mr

VoTwO0ido+hoE4SCqgD2WhDsNZXRstYPIQ2Oj25gC9+J0OY/uC6VFDigLF9qo5k1

1fcvV8k1KnFxXQFomD/fSr5xPVsUSGmGs7yJ9lMIqxpGRtFWHCJcxJlH1KTVYtjN

TpL8uCcxFYI9pPVXoWah/z49624p7iiN+whaZs0Mog1JDRSsPx2RHh1k5d6qHoH1

GCTrkUtdXli5AgMBAAGgLDATBgkqhkiG9w0BCQcxBgwEdGVzdDAVBgkqhkiG9w0B

CQIxCAwGRFNDT1JFMA0GCSqGSIb3DQEBCwUAA4IBAQAIHxiuAPue/AvPYr217HKb

5M81KMKqwYKy9/bhyAE5s0J5AbDRBWkzGo8IB4KAKfGDyJyCx0/Sy9eFQET6psG1

c1MKgXR4OFzdcvap3a9NaYbDR9CK3lwe068c9q27bnb8jfNWRDFnAvviPaxTtRUw

BSOpdIb8joq/Be0oLdgCbavJ6uJpRQC8fTd/q+YlmfuP0aid7PHbAwINKYrWrHGX

tTGBMoHokqF7MHpJwzts/aU64zzA5L4a67ex+t671CvIRrJK3n/zr6M2FVSLVq0i

0KlEyAwWyNpwGW85YYT1RsUsbeIA5xq7uUrzH14hHCo29ttBiVOT43JDoSv8Jukj

-----END CERTIFICATE REQUEST-----