dfxagent 사설 인증서를 통한 https 통신 기능 테스트 중

src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle-leaf-ext.cnf

@@ -0,0 +1,16 @@
+[ v3_server ]
+basicConstraints = critical, CA:false
+keyUsage = critical, digitalSignature, keyEncipherment
+extendedKeyUsage = serverAuth, clientAuth
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = agent-tuf-a15-defree-oracle
+IP.1  = 192.168.0.41
+IP.2  = 172.22.1.4
+IP.3  = 127.0.0.1
+IP.4  = ::1
+#도메인이 있는 경우에는 해당 도메인을 DNS.x에 기입
+#도메인이 없는 경우에는 사용할 IP를 hosts 파일에 기술하고 해당 hostname을 DNS.x에 기입

src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle-req.cnf

@@ -0,0 +1,25 @@
+[ req ]
+default_bits       = 2048
+prompt             = no
+default_md         = sha256
+distinguished_name = dn
+req_extensions     = req_ext
+
+[ dn ]
+C  = KR
+O  = KDN
+OU = DFX
+CN = agent-tuf-a15-defree-oracle
+#CN에 해당하는 값은 settings.json의 myHostId 값 기재 (mTLS에 따른 클라이언트 검증의 확인 문자로 사용함)
+
+[ req_ext ]
+subjectAltName = @alt_names
+
+[ alt_names ]
+DNS.1 = agent-tuf-a15-defree-oracle
+IP.1  = 192.168.0.41
+IP.2  = 172.22.1.4
+IP.3  = 127.0.0.1
+IP.4  = ::1
+#도메인이 있는 경우에는 해당 도메인을 DNS.x에 기입
+#도메인이 없는 경우에는 사용할 IP를 hosts 파일에 기술하고 해당 hostname을 DNS.x에 기입

src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.crt

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----
+MIIE3TCCAsWgAwIBAgIUdxabf8i0ErEOGJuXHDWwV95e5cgwDQYJKoZIhvcNAQEL
+BQAwRTELMAkGA1UEBhMCS1IxEDAOBgNVBAoMB0JTTS1MQUIxJDAiBgNVBAMMG0JT
+TS1MQUIgS0ROIEludGVybWVkaWF0ZSBDQTAeFw0yNjAxMDYwNDMwMDVaFw0yODA0
+MTAwNDMwMDVaME8xCzAJBgNVBAYTAktSMQwwCgYDVQQKDANLRE4xDDAKBgNVBAsM
+A0RGWDEkMCIGA1UEAwwbYWdlbnQtdHVmLWExNS1kZWZyZWUtb3JhY2xlMIIBIjAN
+BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vwP9CeO0EWH8ks18v7K66iTYmoJ
+HVhtkmtdtog1kXyyc7aeZleLA6JxDPLFMlvkUMkhuxo/9wmAx9OK34bm7heAEbR+
+rpFsH68ZwqT2Ijc3Vaye4k67Xtsmn5x3dC26FZUJ7LDwomLMnU57ff4OuRAyBQjP
+XWVUhPplPGNCs7EJ/V+Io67vy45kjONUsTq9RoNSFoSoB+cW8psC5UadtC35zlMS
+KlhSq/KFwQ+ep/4thppOdJhxRwih74iPQEq3g72fseKHDAfjdOf+NkJQwtw3lYyf
+F5/wqFyRbh5oH2NRuDZRlxkokUoq9cmsvRQeO3NomdA39OEKIwgL79L9zwIDAQAB
+o4G6MIG3MAwGA1UdEwEB/wQCMAAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
+CCsGAQUFBwMBBggrBgEFBQcDAjAdBgNVHQ4EFgQUOO8kN+2wOmnrGqs/IQGvWZFw
+B3AwHwYDVR0jBBgwFoAUPJGm63CYcyhCpjem8tfTQ/sICA8wOAYDVR0RBDEwL4IJ
+bG9jYWxob3N0hwTAqAAphwSsFgEEhwR/AAABhxAAAAAAAAAAAAAAAAAAAAABMA0G
+CSqGSIb3DQEBCwUAA4ICAQCUMkrL3wv1e8bdutv0mSjkLJaII+xJ4I5v/x5W3Rza
+KFlWZ6FPbjo+Qd0SIKoFOwJsIOgmlzDH6AMgnK/nkHFfOMulsblHNWRg1EHSQrfm
+95QQfR1xuRwt4GpfZP/UpZYiHEzVD0uOlWwKI8t//bTkM3bHFqUrQ5lg17ofgU4V
+DuALOYlvL1SgECfwmeMXA/0P2OotrSKBvp5QRegLtdUSBPI9mdMpqNco8aRyRiAz
+1+x1tdcsOMJ1uN4a4F7dkVRJveAyviFNu34YRbmvpU1ZukXd5gMXag7smZB2byPK
+2lsYIcIMtT3A+AuzLsB4aDN3iZdi+Ml4k6WLnSq2vAdNcS8w7OMq+4xha7fUkqng
+uX6w5zNY/C1sWNPNz9qwR0aomm2iFHEpLPj/J/DIehnhRiWhNbdaDuCkjl2DHwdD
+JMXrkzqV4CyK3s6V+WePGQEb+qjhZGD9fmhGxce9L7doLw/NWiRYfIj+9RoSqrU3
+x4WuimjSSU43PbKm1ckxbZZ405V3U27fDIB3hDIscoVXt0N65r7Mce897mSPVxGY
+Hv8NxBb80+5gRNRGANzi+4CHRTqJKf1ASGYVTQd5mpWJ7YT8fW/n2Z6jclGZIOnW
+uMySE/sKvK3M/RY0sEG7Cn+QQbIAcwGwUQdEIbvIcvyQB+cKIEb9iSu7GGaqKBZY
+yg==
+-----END CERTIFICATE-----

src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.csr

@@ -0,0 +1,18 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

src/certificate/pki/leaf-dfxagent-tuf-a15-defree-oracle/dfxagent-tuf-a15-defree-oracle.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

src/certificate/pki/root/rootca-kdn.srl

@@ -0,0 +1 @@
+2C186D8B20C08A0185D0DBBD740B7A480044E78A