SAN付きの自己証明書を作成する

1
2
3
4
5

Windows 10 Professional
WSL2 - (Ubuntu22.04 LTS)
Docker desktop 4.19.0 (106363)
Docker version 23.0.5
Docker Compose version v2.17.3

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

.
├── compose.yml
└── nginx
    ├── conf
    │   └── certs
    │       ├── san.txt
    │       ├── server.crt
    │       ├── server.csr
    │       └── server.key
    ├── conf.d
    │   ├── default.conf
    │   └── ssl.conf
    └── html
        └── index.html

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

services:
  nginx: 
    image: nginx:1.25.1
    volumes:
      - ./nginx/conf.d:/etc/nginx/conf.d
      - ./nginx/conf/certs:/etc/nginx/certs
      - ./nginx/html:/usr/share/nginx/html:ro
    ports:
     - "80:80"
     - "443:443"

1

<p>Hello,World</p>

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15

server {
    listen       80;
    listen  [::]:80;
    server_name  localhost;

    location / {
        root   /usr/share/nginx/html;
        index  index.html index.htm;
    }

    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }
}

 1
 2
 3
 4
 5
 6
 7
 8
 9
10

server {
    listen 443 ssl;
    server_name localhost;
    ssl_certificate /etc/nginx/certs/server.crt;
    ssl_certificate_key /etc/nginx/certs/server.key;

    location / {
        root   /usr/share/nginx/html;
    }
}

1

subjectAltName = DNS:localhost, IP:127.0.0.1

1

openssl genrsa -out server.key 2048

1

openssl req -out server.csr -key server.key -new

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12

Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:Tokyo
Locality Name (eg, city) []:
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:localhost
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

1

openssl x509 -req -days 3650 -signkey server.key -in server.csr -out server.crt -extfile san.txt

1

openssl x509 -text -in server.crt -noout

1
2
3

        X509v3 extensions:
            X509v3 Subject Alternative Name: 
                DNS:localhost, IP Address:127.0.0.1

1

docker compose up -d