初めてのSSL証明書作成（CoreSSL）と、Apacheに組み込んでSSLチェックツールで「A」とるまでのながれ ref: https://qiita.com/murachi1208/items/fb8e7adc54250008c699

file0.txt

# openssl md5 /bin/* > rand.dat
# openssl genrsa -rand rand.dat -out server.key 2048

file1.txt

# openssl req -new -sha256 -key server.key -out server.csr
Country Name (2 letter code) [XX]:JP
State or Province Name (full name) []:都道府県名
Locality Name (eg, city) [Default City]:市区町村名
Organization Name (eg, company) [Default Company Ltd]:組織名
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) []:コモンネーム
Email Address []:

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

file2.txt

# mkdir -p /etc/httpd/conf/ssl/crt
# cd /etc/httpd/conf/ssl/crt
# cp server.key  my.domain.key
# vi my.domain.crt  ←　CERT(SSL証明書)の内容を貼り付ける
# vi my.domain.inter.crt　←　中間証明書の内容を貼り付ける

file3.txt

  SSLEngine on
  SSLCertificateKeyFile /etc/httpd/conf/ssl/crt/my.domain.key
  SSLCertificateFile    /etc/httpd/conf/ssl/crt/my.domain.crt
  SSLCACertificateFile  /etc/httpd/conf/ssl/crt/my.domain.inter.crt

file4.txt

$  curl -kvI https://どめいん

file5.txt

  SSLEngine on
  SSLProtocol all -SSLv2 -SSLv3
  SSLHonorCipherOrder ON
  SSLCipherSuite EECDH+HIGH:EDH+HIGH:HIGH:MEDIUM:+3DES:!ADH:!RC4:!MD5:!aNULL:!eNULL:!SSLv2:!LOW:!EXP:!PSK:!SRP:!DSS:!KRB5

file6.txt

$  openssl s_client -connect localhost:443 -showcerts  < /dev/null