https://wiki.thnic.or.th/index.php?action=history&feed=atom&title=5._%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B8%AA%E0%B8%A3%E0%B9%89%E0%B8%B2%E0%B8%87_SSL_CentOS_75. วิธีการสร้าง SSL CentOS 7 - ประวัติรุ่นแก้ไข2026-10-23T07:43:02Zประวัติรุ่นแก้ไขของหน้านี้ในวิกิMediaWiki 1.46.2https://wiki.thnic.or.th/index.php?title=5._%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B8%AA%E0%B8%A3%E0%B9%89%E0%B8%B2%E0%B8%87_SSL_CentOS_7&diff=355&oldid=prevTitipong: Created page with "1. สร้าง private key '''# cd /etc/pki/tls/certs # make '''eai.key''''' ''' umask 77 ; \ /usr/bin/openssl genrsa -aes128 2048 > eai.key Generating RSA priva..."2020-10-26T16:38:20Z<p>Created page with "1. สร้าง private key '''# cd /etc/pki/tls/certs # make '''<a href="/index.php?title=Eai.key&action=edit&redlink=1" class="new" title="Eai.key (ไม่มีหน้านี้)">eai.key</a>''''' ''' umask 77 ; \ /usr/bin/openssl genrsa -aes128 2048 > eai.key Generating RSA priva..."</p>
<p><b>หน้าใหม่</b></p><div>1. สร้าง private key<br />
'''# cd /etc/pki/tls/certs<br />
# make '''[[eai.key]]'''''<br />
<br />
''' umask 77 ; \<br />
/usr/bin/openssl genrsa -aes128 2048 > eai.key<br />
Generating RSA private key, 2048 bit long modulus<br />
...<br />
...<br />
e is 65537 (0x10001)<br />
Enter pass phrase: '''[[#set passphrase]]'''<br />
Verifying - Enter pass phrase: '''[[#confirm]]'''''<br />
<br />
<br />
2. ถอด Passphase ออกจาก private key ที่สร้างขึ้น<br />
'''# openssl rsa -in '''[[eai.key]]''' -out '''[[eai.key]]'''''<br />
<br />
'''Enter pass phrase for eai.key: '''[[#input passphrase]]'''<br />
writing RSA key'''<br />
<br />
<br />
3. สร้าง csr <br />
'''# make eai.csr<br />
<br />
'''umask 77 ; \<br />
/usr/bin/openssl req -utf8 -new -key eai.key -out eai.csr<br />
You are about to be asked to enter information that will be incorporated<br />
into your certificate request.<br />
What you are about to enter is what is called a Distinguished Name or a DN.<br />
There are quite a few fields but you can leave some blank<br />
For some fields there will be a default value,<br />
If you enter '.', the field will be left blank.<br />
-----<br />
Country Name (2 letter code) [XX]:'''[[TH]]''' '''[[#country]]'''<br />
State or Province Name (full name) []:'''[[Bangkok]]''' '''[[#state]]'''<br />
Locality Name (eg, city) [Default City]:'''[[Dusit]]''' '''[[#city]]'''<br />
Organization Name (eg, company) [Default Company Ltd]:'''[[EAI]]''' '''[[#company]]'''<br />
Organizational Unit Name (eg, section) []:'''[[IT]]''' '''[[#department]]'''<br />
Common Name (eg, your name or your server's hostname) []:'''[[mail.eai.in.th]]''' '''[[#server's FQDN]]'''<br />
Email Address []:'''[[xxx@eai.in.th]]''' '''[[#email address]]'''<br />
Please enter the following 'extra' attributes<br />
to be sent with your certificate request<br />
A challenge password []: '''[[#Enter]]'''<br />
An optional company name []: '''[[#Enter]]'''''<br />
<br />
<br />
4. ทำการ generate key<br />
'''# openssl x509 -in '''[[eai.csr]]''' -out '''[[eai.crt]]''' -req -signkey '''[[eai.key]]''' -days 3650'''<br />
<br />
'''Signature ok<br />
subject=/C=JP/ST=Hiroshima/L=Hiroshima/O=GTS/OU=Server World/CN=www.srv.world/emailAddress=xxx@eai.in.th<br />
Getting Private key'''</div>Titipong