SMTP/POP3/IMAP4 over SSL/TLS設定方法 updated!
SMTP/POP3/IMAP4 over SSL/TLS とは、Webサイトで利用されているSSLを利用して、丸裸のSMTP/POP3/IMAP4の通信手順そのものを暗号化する手段です。E-Postシリーズでは、次の通信手順を暗号化することが可能です。 ※なお2019年1月公開の20181224最新差分アップデートを適用した最新版では、SSLは廃止され、TLS1.0〜TLS1.3に対応しています。
Using configuration from openssl.cnf
Loading 'screen' into random state - done
Generating a 512 bit RSA private key
..++++++++++++
....++++++++++++
writing new private key to 'key.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP ← 国
State or Province Name (full name) [Some-State]:Saitama ← 都道府県
Locality Name (eg, city) []:Kasukabe ← 市町村等
Organization Name (eg, company) [Internet Widgits Pty Ltd]:XXX Corp. ← 会社名（組織名）
Organizational Unit Name (eg, section) []:xxxx ← 部署等
Common Name (eg, YOUR name) []:xxxx ← 担当者の氏名等
Email Address []:xxx@domain.jp ← 担当者のメールアドレス 秘密かぎの作成と登録申請書の作成
openssl req -config openssl.cnf -new -nodes -newkey rsa:512 -keyout mykey.pem -out myreq.pem
Using configuration from openssl.cnf
Loading 'screen' into random state - done
Generating a 512 bit RSA private key
...++++++++++++
.++++++++++++
writing new private key to 'mykey.pem'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP ← 国
State or Province Name (full name) [Some-State]:Saitama ← 都道府県
Locality Name (eg, city) []:Kasukabe← 市町村等
Organization Name (eg, company) [Internet Widgits Pty Ltd]:XXX Corp. ← 会社名（組織名）
Organizational Unit Name (eg, section) []:xxxx ← 部署等
Common Name (eg, YOUR name) []:xxxx ← 担当者の氏名等
Email Address []:xxx@domain.jp ← 担当者のメールアドレス
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []: 認証局（CA）によって署名した「公開鍵証明書」を発行
openssl ca -config openssl.cnf -in myreq.pem -keyfile cakey.pem -cert cacert.pem -out mycert.pem
Using configuration from openssl.cnf
Loading 'screen' into random state - done
Check that the request matches the signature
Signature ok
The Subjects Distinguished Name is as follows
countryName :PRINTABLE:'JP'
stateOrProvinceName :PRINTABLE:'Saitama'
localityName :PRINTABLE:'Kasukabe'
organizationName :PRINTABLE:'XXX Corp.'
organizationalUnitName:PRINTABLE:'xxxx'
commonName :PRINTABLE:'xxxx'
Certificate is to be certified until May 6 00:29:27 2003 GMT (365 days)
Sign the certificate? [y/n]:y
1 out of 1 certificate requests certified, commit? [y/n]y
Write out database with 1 new entries
Data Base Updated ２.「公開鍵証明書」と「秘密鍵」を本サーバーソフトウェアに設定する
上記 "CERTIFICATE.BAT" の実行で作成されたファイルは、次の通り作成されています。
秘密鍵ファイル
mykey.pem
証明書要求（Certificate Request or CSR）ファイル
myreq.pem
正規認証局（日本ジオトラストや日本ベリサインなど）にて証明書発行を依頼する場合に利用する
