Q.SSL証明書を使用してhttpsで通信を行うための手順（GlassFish版）

C:\PE4J\Apache24\bin\openssl.exe genrsa -des3 -out server.key 2048
※ コマンドのオプション（鍵の長さ: server.key 2048 等）は必要に応じて変更してください。

SET OPENSSL_CONF=C:\PE4J\Apache24\conf\openssl.cnf
C:\PE4J\Apache24\bin\openssl.exe req -new -key server.key -out server.csr

C:\wk>SET OPENSSL_CONF=C:\PE4J\Apache24\conf\openssl.cnf

C:\wk>C:\PE4J\Apache24\bin\openssl.exe req -new -key server.key -out server.csr
Enter pass phrase for server.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:JP
State or Province Name (full name) [Some-State]:Tokyo
Locality Name (eg, city) []:Chiyoda-ku
Organization Name (eg, company) [Internet Widgits Pty Ltd]: D-CIRCLE INC
Organizational Unit Name (eg, section) []:System Division
Common Name (e.g. server FQDN or YOUR name) []:aaa.bbb.co.jp
Email Address []:※ 何も入力せずにEnterキー押下

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:※ 何も入力せずにEnterキー押下
An optional company name []:※ 何も入力せずにEnterキー押下

C:\PE4J\Apache24\bin\openssl.exe rsa -in server.key.bk -out server.key

#LoadModule socache_shmcb_module modules/mod_socache_shmcb.so
↓
LoadModule socache_shmcb_module modules/mod_socache_shmcb.so

#LoadModule ssl_module modules/mod_ssl.so
↓
LoadModule ssl_module modules/mod_ssl.so

#Include conf/extra/httpd-ssl.conf
↓
Include conf/extra/httpd-ssl.conf

DocumentRoot "${SRVROOT}/htdocs"
↓
#DocumentRoot "${SRVROOT}/htdocs"

ServerName www.example.com:443
↓
ServerName (アクセスするホスト名):443
※ (アクセスするホスト名)は、CSR作成時に指定したCommon Nameと同じものを指定してください。

ErrorLog "${SRVROOT}/logs/error.log"
TransferLog "${SRVROOT}/logs/access.log"
↓
#ErrorLog "${SRVROOT}/logs/error.log"
#TransferLog "${SRVROOT}/logs/access.log"

#SSLCACertificateFile "${SRVROOT}/conf/ssl.crt/ca-bundle.crt"
の下に
SSLCACertificateFile "C:/PE4J/Apache24/conf/intermediate.crt"
を追加。

CustomLog "${SRVROOT}/logs/ssl_request.log" \
　　　　　"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
↓
#CustomLog "${SRVROOT}/logs/ssl_request.log" \
#　　　　　"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"

LogFormat "%h\t%{X-Forwarded-For}i\t%l\t%u\t%{%Y-%m-%d %H:%M:%S}t\t\"%r\"\t%>s\t%b\t\"%{User-Agent}i\"\t\"%{JSESSIONID}C\"\t%T" pedebug
ErrorLog "|C:/PE4J/Apache24/bin/rotatelogs.exe logs/ssl-error.%Y-%m-%d.log 86400 540"
CustomLog "|C:/PE4J/Apache24/bin/rotatelogs.exe logs/ssl-access.%Y-%m-%d.log 86400 540" pedebug

※ GlassFish の Java プロセスが１つの場合
JkMount /pe4j/* pe4j-1
※ GlassFish の Java プロセスが２つの場合
JkMount /pe4j/* pe4j-lb

#LoadModule rewrite_module modules/mod_rewrite.so
↓
LoadModule rewrite_module modules/mod_rewrite.so

RewriteEngine On
RewriteCond %{HTTP_HOST} !=localhost
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R,L]