Chef-Server 관련 정리

openssl 명령

openssl x509 -in file -noout -text

openssl x509 -noout -issuer -in file

인증서 찾기

sudo find -name '*.crt' | awk '{print "openssl x509 -noout -issuer -in " $1}' > ~/test.sh

chef-server 인증서 위치

/var/opt/chef-server/nginx/ca/test.org.crt

=> test.org.key 는 chef-client 복호화 할 때 사용

Https 복호화

Wireshark > Edit > Preferences > Protocols > SSL

IP Address : 70.7.56.XX

port : 443

Protocol : http

Key file /home/user/test.org.key

Private key 를 이용한 암호화

echo "test" | openssl rsautl -sign -inkey private.pem | openssl enc -base64 > file

이를 다시 복호화

cat fie | openssl enc -base64 -d | openssl rsautl -verify -inkey private.pem