SSL更新

SSL更新

#----------------------------------------------------

cd /usr/local/etc/apache24/
cp -Rp SSL2022 SSL2023

cd SSL2023
scp www:/home/admin/SSL/STAR\* ./

mv STAR_zenno_com.ca-bundle zenno_com.ca-bundle
mv STAR_zenno_com.crt zenno_com.crt

cd /usr/local/etc/apache24/extra

sed s/'2022'/'2023'/ < httpd-ssl.conf.2022 > httpd-ssl.conf.2023

cp httpd-ssl.conf.2023 httpd-ssl.conf

service apache24 restart

#----------------------------------------------------

mkdir /usr/local/etc/courier-imap/SSL2023 

cd /usr/local/etc/apache24/SSL2023

cat zenno_com.crt > /usr/local/etc/courier-imap/SSL2023/crt.key.pem
cat myserver.key >> /usr/local/etc/courier-imap/SSL2023/crt.key.pem
cp zenno_com.ca-bundle /usr/local/etc/courier-imap/SSL2023/ca-bundle

cd /usr/local/etc/courier-imap

sed s/'2022'/'2023'/ < imapd-ssl.2022 > imapd-ssl.2023

cp imapd-ssl.2023 imapd-ssl
service courier-imap-imapd-ssl restart

#----------------------------------------------------

cd /usr/local/etc/apache24/SSL2023

cat myserver.key > /var/qmail/cert.pem.2023
cat zenno_com.crt >> /var/qmail/cert.pem.2023
cat zenno_com.ca-bundle >> /var/qmail/cert.pem.2023

cd /var/qmail
cp cert.pem.2023 cert.pem

service svscan restart

#---------------------確認方法-------------

openssl s_client -connect msv1.zenno.com:995 | openssl x509 -text | grep Not