EPKI 설치방법

1. epki 모듈 설치파일 복사
setup_LINUX.sh
libepkiapi_javaV2.0.2.0_Linux_2.6_64bit.tar.gz
라이센스파일

2. chmod +x setup_LINUX.sh 실행권한

3. ./setup_LINUX.sh "libepkiapi_javaV2.0.2.0_Linux_2.6_64bit.tar.gz"
[****@homewas2 temp]$ ./setup_LINUX.sh "libepkiapi_javaV2.0.2.0_Linux_2.6_64bit.tar.gz"
libepki_jni.so
libepkiapi.so
libepkix.so
LicenseUtil
epkiapi.jar
conf/
conf/epkiapi.conf
conf/cainfo.conf
svrconf
[****@homewas2 temp]$

4. epkiapi.ar 경로설정
export CLASSPATH=".:/home/*****/gpki/epki/epkiapi.jar"
echo $CLASSPATH
export LD_LIBRARY_PATH="/home/*****/gpki/epki"
echo $LD_LIBRARY_PATH

5. lib 경로설정
[****@homewas2 epki]$ ./svrconf
./svrconf: error while loading shared libraries: libldap-2.2.so.7: cannot open shared object file: No such file or directory
[****@homewas2 epki]$ ln -s /usr/lib64/libldap
libldap-2.4.so.2 libldap.so libldap_r-2.4.so.2 libldap_r.so
[****@homewas2 epki]$ ln -s /usr/lib64/libldap.so libldap-2.2.so.7
(현재 시스템에 있는 라이버리로 경로 링크설정함)
[****@homewas2 epki]$ ./svrconf
./svrconf: error while loading shared libraries: liblber-2.2.so.7: cannot open shared object file: No such file or directory
[****@homewas2 epki]$ ln -s /usr/lib64/liblber
liblber-2.4.so.2 liblber.so
[****@homewas2 epki]$ ln -s /usr/lib64/liblber.so liblber-2.2.so.7
[****@homewas2 epki]$ ./svrconf
./svrconf: error while loading shared libraries: libstdc++.so.5: cannot open shared object file: No such file or directory
!libstdc++.so.5 =>5버전이 반드시 설치되야함.
(구글에서 파일 찾아야함) (파일첨부됨)
[root@homewas2 temp]# rpm -Uvh compat-libstdc++-8-3.3.4.2.x86_64.rpm
寃쎄퀬: compat-libstdc++-8-3.3.4.2.x86_64.rpm: Header V3 DSA/SHA1 Signature, key ID 4f2a6fd2: NOKEY
以€鍮?以?.. ########################################### [100%]
1:compat-libstdc++ ########################################### [100%]
[root@homewas2 temp]#
[****@homewas2 epki]$ ./svrconf
==============================================================================
Input the path of server's sign certificate
------------------------------------------------------------------------------
===>이메세지가 나와야 이상없이 설치됨.

6. 서버 인증서 복사
epki 폴더 밑에 certificate/class1 생성 후 인증서 복사
/home/****/gpki/epki/certificate/class1

7. 라이센스 파일 복사
/home/****/gpki/epki/conf/epkiapi.lic

8. 인증서 설정
[****@homewas2 epki]$ ./svrconf
==============================================================================
Input the path of server's sign certificate
------------------------------------------------------------------------------
ENTER: /home/****/gpki/epki/certificate/class1/SVR7800000014_sig.cer
==============================================================================
Input password (input ENGLISH keypad only)
------------------------------------------------------------------------------
ENTER: ********
Server certificate configuration complete...
Press enter key.
[****@homewas2 epki]$

9. 서버인증서 정상등록확인
./conf ->server.conf
[SERVER]
signCert=/home/****/gpki/epki/certificate/class1/SVR*******0000_sig.cer
signKey=/home/****/gpki/epki/certificate/class1/SVR*******000000_sig.key
kmCert=/home/****/gpki/epki/certificate/class1/SVR*************00000000_env.cer
kmKey=/home/*******/gpki/epki/certificate/class1/SVR******000000_env.key
encPasswd=************************
확인

10. 샘플페이지 실행
* CTL 에러 발생 시
./conf/cainfo.conf
[LDAP_INFO1]
DN = cn=GPKIRootCA =>DN = cn=GPKIRootCA1
CTL = cn=GPKIRootCA =>CTL = cn=GPKIRootCA1
* 접속이 원활하지 않을때
OCSP_SERVER = http://gva.gpki.go.kr:8080
URL = ldap://cen.dir.go.kr:389
==>8080 포트 및 389 포트가 와스에서 열려있어야 된다.