redmineをインストールしてみた

【iptables】ファイアーウォール設定研究

<p><a href="/programmer/%E3%80%90%E6%9C%AA%E6%A4%9C%E8%A8%BC%E3%80%91mac%E3%81%A7ppk%E3%83%95%E3%82%A1%E3%82%A4%E3%83%AB%E3%82%92%E4%BD%BF%E3%81%A3%E3%81%A6centos%E3%81%AEssh%E3%81%AB%E6%8E%A5%E7%B6%9A%E3%81%99%E3%82%8B.html" target="_blank">前回</a>はppkファイルからMacが使える鍵ファイルを作り、CentOSにログインするまでに書きましたが。実はよくわかりませんでした。。</p>
<p>弊社では、<a href="/launchcart" target="_blank">LaunchCart</a>の開発を行うとき、さくらのVPSを使うケースが多いです。<br />
その場合は、強度が十分なパスワードを用意してサーバにログインをしています。<br />
開発の流れ（鍵の作成や配布など）が変わりますが、なりすましを防止する意味で、パスワードでのログインを廃止して、鍵認証を導入したいと思います。</p>
<p>その基本手順を整理してみたいと思います。</p>
<h2>鍵認証の設定</h3>
<h3>VPS側で公開鍵の保管場所を作る</h4>
<p></p>

		<div id="crayon-64953fd589f2c543620177" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div><span class="crayon-language">Shell</span></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
mkdir ~/.ssh
chmod 700 ~/.ssh</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd589f2c543620177-1">1</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd589f2c543620177-2">2</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd589f2c543620177-1"><span class="crayon-r">mkdir</span><span class="crayon-h"> </span><span class="crayon-sy">~</span>/<span class="crayon-e">.ssh</span></div><div class="crayon-line crayon-striped-line" id="crayon-64953fd589f2c543620177-2"><span class="crayon-r">chmod</span><span class="crayon-h"> </span><span class="crayon-cn">700</span><span class="crayon-h"> </span><span class="crayon-sy">~</span>/<span class="crayon-e">.ssh</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p> </p>
<h3>Mac側で鍵のペアを生成</h4>
<p></p>

		<div id="crayon-64953fd589f30201234961" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div><span class="crayon-language">Shell</span></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
ssh-keygen -t rsa -v　// id_rsa（秘密鍵）、id_rsa.pub（公開鍵）を作成
chmod 600 ~/.ssh/id_rsa.pub</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd589f30201234961-1">1</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd589f30201234961-2">2</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd589f30201234961-1"><span class="crayon-i">ssh</span>-<span class="crayon-i">keygen</span><span class="crayon-h"> </span>-<span class="crayon-i">t</span><span class="crayon-h"> </span><span class="crayon-i">rsa</span><span class="crayon-h"> </span>-<span class="crayon-i">v</span>　//<span class="crayon-h"> </span><span class="crayon-i">id_rsa</span>（秘密鍵）、<span class="crayon-i">id_rsa</span><span class="crayon-e">.pub</span>（公開鍵）を作成</div><div class="crayon-line crayon-striped-line" id="crayon-64953fd589f30201234961-2"><span class="crayon-r">chmod</span><span class="crayon-h"> </span><span class="crayon-cn">600</span><span class="crayon-h"> </span><span class="crayon-sy">~</span>/<span class="crayon-e">.ssh</span>/<span class="crayon-i">id_rsa</span><span class="crayon-e">.pub</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p> </p>
<h3>公開鍵をVPSに転送</h4>
<p></p>

		<div id="crayon-64953fd589f31344556116" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div><span class="crayon-language">Shell</span></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
scp ~/.ssh/id_rsa.pub USER_NAME@IP_ADDRESS:~/.ssh/authorized_keys</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd589f31344556116-1">1</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd589f31344556116-1"><span class="crayon-i">scp</span><span class="crayon-h"> </span><span class="crayon-sy">~</span>/<span class="crayon-e">.ssh</span>/<span class="crayon-i">id_rsa</span><span class="crayon-e">.pub</span><span class="crayon-h"> </span><span class="crayon-i">USER_NAME</span><span class="crayon-sy">@</span><span class="crayon-i">IP_ADDRESS</span><span class="crayon-sy">:</span><span class="crayon-sy">~</span>/<span class="crayon-e">.ssh</span>/<span class="crayon-i">authorized_keys</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p>ここでscpコマンドを使いましたが、もちろんファイル転送ツールでも行けます。<br />
また注意点として、すでにauthorized_keysファイルが存在する場合は、ファイルの最後から追加する必要があります。</p>
<h3>Mac側で秘密鍵を使ってログイン</h4>
<p></p>

		<div id="crayon-64953fd589f33206045470" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div><span class="crayon-language">Shell</span></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
ssh -i ~/.ssh/id_rsa USER_NAME@IP_ADDRESS</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd589f33206045470-1">1</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd589f33206045470-1"><span class="crayon-i">ssh</span><span class="crayon-h"> </span>-<span class="crayon-i">i</span><span class="crayon-h"> </span><span class="crayon-sy">~</span>/<span class="crayon-e">.ssh</span>/<span class="crayon-e">id_rsa </span><span class="crayon-i">USER_NAME</span><span class="crayon-sy">@</span><span class="crayon-i">IP_ADDRESS</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p>-iオプションが省略可能です。</p>
<h2>SSHの設定</h3>
<p>VPSにログインしてから、SSHの設定ファイルを変更します。</p>
<h3>パスワードログインの禁止</h4>
<p></p>

		<div id="crayon-64953fd589f34011521200" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div><span class="crayon-language">Shell</span></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
vi /etc/ssh/sshd_config</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd589f34011521200-1">1</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd589f34011521200-1"><span class="crayon-r">vi</span><span class="crayon-h"> </span>/<span class="crayon-i">etc</span>/<span class="crayon-i">ssh</span>/<span class="crayon-i">sshd_config</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p>「PasswordAuth」で検索して、該当するオプションをNOに設定する<br />
sshd_configを編集するのに、root(sudo -s)権限が必要です。</p>
<h3>sshd再起動</h4>
<p></p>

		<div id="crayon-64953fd589f35957686721" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div><span class="crayon-language">Shell</span></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
service sshd restart</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd589f35957686721-1">1</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd589f35957686721-1"><span class="crayon-e">service </span><span class="crayon-e">sshd </span><span class="crayon-i">restart</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p> </p>

【SSH】Macで出来る！CentOSへの鍵認証設定

<h2>OP25B</h3>
<p>OP25Bとは「Outbound Port25 Blocking」の略称で、<br />
プロバイダーがメールの送信に使われる25番ポートをブロックし、主に迷惑メール対策として使われています。</p>
<h2>587番ポートを使うのに、ssl証明書がいる</h3>
<p>調べてみると、587番ポートを使うのに、ssl証明書がいるそうです。<br />
自分証明書でもいいらしいですが、同じサーバにrapidsslが発行した証明書があるから、そちらを使ってみたいと思います。</p>
<h2>postfixでの設定</h3>
<p>●main.cf<br />
ファイルの最後に、下記を追加します。</p>
<p></p>

		<div id="crayon-64953fd588790392999955" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
smtpd_use_tls = yes
smtpd_tls_cert_file = /path/to/cert.pem 
smtpd_tls_key_file = /path/to/key_without_passpharse.pem
smtpd_tls_CAfile = /path/to/ca.pem
smtpd_tls_session_cache_database = btree:/etc/postfix/smtpd_scache</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd588790392999955-1">1</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd588790392999955-2">2</div><div class="crayon-num" data-line="crayon-64953fd588790392999955-3">3</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd588790392999955-4">4</div><div class="crayon-num" data-line="crayon-64953fd588790392999955-5">5</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd588790392999955-1"><span class="crayon-i">smtpd_use_tls</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span><span class="crayon-e">yes</span></div><div class="crayon-line crayon-striped-line" id="crayon-64953fd588790392999955-2"><span class="crayon-i">smtpd_tls_cert_file</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span>/<span class="crayon-i">path</span>/<span class="crayon-st">to</span>/<span class="crayon-i">cert</span><span class="crayon-sy">.</span><span class="crayon-e">pem </span></div><div class="crayon-line" id="crayon-64953fd588790392999955-3"><span class="crayon-i">smtpd_tls_key_file</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span>/<span class="crayon-i">path</span>/<span class="crayon-st">to</span>/<span class="crayon-i">key_without_passpharse</span><span class="crayon-sy">.</span><span class="crayon-e">pem</span></div><div class="crayon-line crayon-striped-line" id="crayon-64953fd588790392999955-4"><span class="crayon-i">smtpd_tls_CAfile</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span>/<span class="crayon-i">path</span>/<span class="crayon-st">to</span>/<span class="crayon-i">ca</span><span class="crayon-sy">.</span><span class="crayon-e">pem</span></div><div class="crayon-line" id="crayon-64953fd588790392999955-5"><span class="crayon-i">smtpd_tls_session_cache_database</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span><span class="crayon-i">btree</span><span class="crayon-sy">:</span>/<span class="crayon-i">etc</span>/<span class="crayon-i">postfix</span>/<span class="crayon-i">smtpd_scache</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p> </p>
<p>※passpharseが入ったものが使えないみたいで、下記コマンドでpasspharseを除去できます。</p>
<p></p>

		<div id="crayon-64953fd588794804170100" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div><span class="crayon-language">Shell</span></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
openssl rsa -in /path/to/key_with_passpharse.pem  -out /path/to/key_without_passpharse.pem</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd588794804170100-1">1</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd588794804170100-1"><span class="crayon-e">openssl </span><span class="crayon-i">rsa</span><span class="crayon-h"> </span>-<span class="crayon-st">in</span><span class="crayon-h"> </span>/<span class="crayon-i">path</span>/<span class="crayon-st">to</span>/<span class="crayon-i">key_with_passpharse</span><span class="crayon-e">.pem</span><span class="crayon-h">&nbsp;&nbsp;</span>-<span class="crayon-i">out</span><span class="crayon-h"> </span>/<span class="crayon-i">path</span>/<span class="crayon-st">to</span>/<span class="crayon-i">key_without_passpharse</span><span class="crayon-e">.pem</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p> </p>
<p>●master.cf<br />
下記内容のコメントアウトを外してください。</p>
<p></p>

		<div id="crayon-64953fd588796462119831" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
submission inet n       -       n       -       -       smtpd
smtps     inet  n       -       n       -       -       smtpd
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
  -o milter_macro_daemon_name=ORIGINATING</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd588796462119831-1">1</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd588796462119831-2">2</div><div class="crayon-num" data-line="crayon-64953fd588796462119831-3">3</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd588796462119831-4">4</div><div class="crayon-num" data-line="crayon-64953fd588796462119831-5">5</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd588796462119831-6">6</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd588796462119831-1"><span class="crayon-e">submission </span><span class="crayon-i">inet</span><span class="crayon-h"> </span><span class="crayon-i">n</span><span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>-<span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-i">n</span><span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>-<span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>-<span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-e">smtpd</span></div><div class="crayon-line crayon-striped-line" id="crayon-64953fd588796462119831-2"><span class="crayon-e">smtps&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-i">inet</span><span class="crayon-h">&nbsp;&nbsp;</span><span class="crayon-i">n</span><span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>-<span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-i">n</span><span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>-<span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span>-<span class="crayon-h">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; </span><span class="crayon-i">smtpd</span></div><div class="crayon-line" id="crayon-64953fd588796462119831-3"><span class="crayon-h">&nbsp;&nbsp;</span>-<span class="crayon-i">o</span><span class="crayon-h"> </span><span class="crayon-i">smtpd_tls_wrappermode</span>=<span class="crayon-i">yes</span></div><div class="crayon-line crayon-striped-line" id="crayon-64953fd588796462119831-4"><span class="crayon-h">&nbsp;&nbsp;</span>-<span class="crayon-i">o</span><span class="crayon-h"> </span><span class="crayon-i">smtpd_sasl_auth_enable</span>=<span class="crayon-i">yes</span></div><div class="crayon-line" id="crayon-64953fd588796462119831-5"><span class="crayon-h">&nbsp;&nbsp;</span>-<span class="crayon-i">o</span><span class="crayon-h"> </span><span class="crayon-i">smtpd_client_restrictions</span>=<span class="crayon-i">permit_sasl_authenticated</span><span class="crayon-sy">,</span><span class="crayon-i">reject</span></div><div class="crayon-line crayon-striped-line" id="crayon-64953fd588796462119831-6"><span class="crayon-h">&nbsp;&nbsp;</span>-<span class="crayon-i">o</span><span class="crayon-h"> </span><span class="crayon-i">milter_macro_daemon_name</span>=<span class="crayon-i">ORIGINATING</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p> </p>
<h2>dovecot</h3>
<p>受信用のミドルウェアで多分関係ないと思いますが、一応SSLの設定をしておきます。<br />
●10-ssl.conf</p>
<p></p>

		<div id="crayon-64953fd588797832160093" class="crayon-syntax crayon-theme-monokai crayon-font-monaco crayon-os-mac print-yes notranslate" data-settings=" minimize scroll-mouseover wrap" style=" margin-top: 12px; margin-bottom: 12px; font-size: 13px !important; line-height: 18px !important;">
		
			<div class="crayon-toolbar" data-settings=" mouseover overlay hide delay" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><span class="crayon-title"></span>
			<div class="crayon-tools" style="font-size: 13px !important;height: 19.5px !important; line-height: 19.5px !important;"><div class="crayon-button crayon-nums-button" title="Toggle Line Numbers"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-plain-button" title="Toggle Plain Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-wrap-button" title="Toggle Line Wrap"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-expand-button" title="Expand Code"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-copy-button" title="Copy"><div class="crayon-button-icon"></div></div><div class="crayon-button crayon-popup-button" title="Open Code In New Window"><div class="crayon-button-icon"></div></div></div></div>
			<div class="crayon-info" style="min-height: 19.5px !important; line-height: 19.5px !important;"></div>
			<div class="crayon-plain-wrap"><textarea  class="crayon-plain print-no" data-settings="dblclick" readonly style="-moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4; font-size: 13px !important; line-height: 18px !important;">
ssl = yes
ssl_cert = &lt;/path/to/cert.pem 
ssl_key = &lt;/path/to/key_without_passpharse.pem
ssl_ca = &lt;/path/to/ca.pem</textarea></div>
			<div class="crayon-main" style="">
				<table class="crayon-table">
					<tr class="crayon-row">
				<td class="crayon-nums " data-settings="show">
					<div class="crayon-nums-content" style="font-size: 13px !important; line-height: 18px !important;"><div class="crayon-num" data-line="crayon-64953fd588797832160093-1">1</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd588797832160093-2">2</div><div class="crayon-num" data-line="crayon-64953fd588797832160093-3">3</div><div class="crayon-num crayon-striped-num" data-line="crayon-64953fd588797832160093-4">4</div></div>
				</td>
						<td class="crayon-code"><div class="crayon-pre" style="font-size: 13px !important; line-height: 18px !important; -moz-tab-size:4; -o-tab-size:4; -webkit-tab-size:4; tab-size:4;"><div class="crayon-line" id="crayon-64953fd588797832160093-1"><span class="crayon-i">ssl</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span><span class="crayon-e">yes</span></div><div class="crayon-line crayon-striped-line" id="crayon-64953fd588797832160093-2"><span class="crayon-i">ssl_cert</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span><span class="crayon-h">&lt;</span>/<span class="crayon-i">path</span>/<span class="crayon-st">to</span>/<span class="crayon-i">cert</span><span class="crayon-sy">.</span><span class="crayon-e">pem </span></div><div class="crayon-line" id="crayon-64953fd588797832160093-3"><span class="crayon-i">ssl_key</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span><span class="crayon-h">&lt;</span>/<span class="crayon-i">path</span>/<span class="crayon-st">to</span>/<span class="crayon-i">key_without_passpharse</span><span class="crayon-sy">.</span><span class="crayon-e">pem</span></div><div class="crayon-line crayon-striped-line" id="crayon-64953fd588797832160093-4"><span class="crayon-i">ssl_ca</span><span class="crayon-h"> </span>=<span class="crayon-h"> </span><span class="crayon-h">&lt;</span>/<span class="crayon-i">path</span>/<span class="crayon-st">to</span>/<span class="crayon-i">ca</span><span class="crayon-sy">.</span><span class="crayon-i">pem</span></div></div></td>
					</tr>
				</table>
			</div>
		</div>

<p> </p>

Blogブログ

Articles

Contact Us