Milvus TLS 설정 가이드: 암호화 및 인증 적용하기

이 글에서는 Milvus에서 TLS(전송 계층 보안)을 활성화하여 보안을 강화하는 방법을 단계별로 설명드리겠습니다. TLS를 적용하면 전송 중인 데이터를 암호화해 네트워크 보안을 크게 개선할 수 있습니다. 이번 설정을 통해 클라이언트-서버 간 암호화 통신을 구현하고, 보안 설정을 활성화하여 비밀번호 없이 로그인하는 것을 방지하는 환경을 구축해 보겠습니다.


1. 필수 파일 및 폴더 생성하기

먼저, 인증서 생성을 위해 필요한 폴더와 파일을 생성하겠습니다.

mkdir cert && cd cert
touch openssl.cnf gen.sh

 

2. 각 파일 구성

2.1 openssl.cnf 파일 작성

openssl.cnf 파일은 Milvus 공식 TLS 설정 가이드를 참고하여 작성합니다.

해당 파일에는 인증서 생성 시 필요한 설정들이 포함되어 있습니다.

하지만 그냥 그대로 생성을 하면 tls 인증 오류가 발생하여 추가 내용을 작성했습니다.

2.1.1 [v3_req] 코드 추가

변경전 

변경 후 

 

이전에 해당 내용없이 진행을 했는데 지속적으로 인증서 관련 에러가 발생하였습니다.

DNS.1에는 localhost

IP.1 은 루프백 주소

IP.2 은 Milvus 서버의 아이피 주소를 넣으면됩니다.

2.2 gen.sh 파일 작성

gen.sh 파일은 인증서를 자동으로 생성하기 위한 스크립트입니다.

다음 코드를 복사해서 gen.sh 파일에 작성합니다.

#!/bin/bash

Country="KR"
State="Seoul"
Location="Seoul"
Organization="milvus"
Organizational="milvus"
CommonName="localhost"

echo "generate ca.key"
openssl genrsa -out ca.key 2048

echo "generate ca.pem"
openssl req -new -x509 -key ca.key -out ca.pem -days 3650 -subj "/C=$Country/ST=$State/L=$Location/O=$Organization/OU=$Organizational/CN=$CommonName"

echo "generate server SAN certificate"
openssl genpkey -algorithm RSA -out server.key
openssl req -new -nodes -key server.key -out server.csr -days 3650 -subj "/C=$Country/O=$Organization/OU=$Organizational/CN=$CommonName" -config ./openssl.cnf -extensions v3_req
openssl x509 -req -days 3650 -in server.csr -out server.pem -CA ca.pem -CAkey ca.key -CAcreateserial -extfile ./openssl.cnf -extensions v3_req

echo "generate client SAN certificate"
openssl genpkey -algorithm RSA -out client.key
openssl req -new -nodes -key client.key -out client.csr -days 3650 -subj "/C=$Country/O=$Organization/OU=$Organizational/CN=$CommonName" -config ./openssl.cnf -extensions v3_req
openssl x509 -req -days 3650 -in client.csr -out client.pem -CA ca.pem -CAkey ca.key -CAcreateserial -extfile ./openssl.cnf -extensions v3_req

이 스크립트는 서버 및 클라이언트 인증서를 생성하며, 유효 기간은 10년으로 설정됩니다.

 

3. 스크립트 실행 및 파일 정리

다음으로 스크립트에 실행 권한을 부여하고 실행하여 인증서를 생성합니다.

chmod +x gen.sh
./gen.sh

 

SSL 키 생성하는 모습

 

정상적으로 생성된 모습

 

실제로 사용할 SSL 인증키 목록 입니다.

  1. server.pem
  2. server.key
  3. client.pem
  4. client.key
  5. ca.pem

이제 tls 폴더를 생성하고 필요한 인증서를 정리합니다.

mkdir tls
find . -maxdepth 1 -type f ! -name "gen.sh" ! -name "openssl.cnf" -exec mv {} tls/ \;

 

tls 폴더로 이동 후 파일 권한을 상승 시킵니다.

cd tls
chmod 755 *

4. TLS 설정 적용하기

Milvus의 TLS 설정을 적용하려면 Milvus가 설치된 경로로 생성된 tls 폴더를 복사합니다.

cp -R /root/milvus/cert/tls /root/milvus/standalone/

 

5. 보안 설정 적용 (user.yaml 수정)

Milvus의 보안을 강화하기 위해 user.yaml 파일을 수정합니다.

 

vim user.yaml

 

아래 내용을 추가합니다:

 

# Extra config to override default milvus.yaml
common:
  security:
    authorizationEnabled: true
    tlsMode: 2

proxy:
  http:
    port: 8080
  • authorizationEnabled: 인증이 필요한 경우 true로 설정하여 비밀번호 없이 로그인할 수 없도록 합니다.
  • tlsMode: 1은 단방향 TLS, 2는 양방향 TLS를 의미합니다. 양방향 TLS를 위해 tlsMode2로 설정했습니다.
  • proxy 포트(8080)는 다른 보안 포트와 충돌하지 않도록 변경합니다.

6. Milvus 시작 스크립트 수정

마지막으로, standalone_embed.sh 파일을 수정하여 TLS 인증서 경로를 추가합니다.

vim standalone_embed.sh

 

원본 사진

 

tls 경로를 넣어 수정한 사진

TLS 경로를 설정한 후 스크립트를 저장하고 Milvus를 재시작합니다.

./standalone_embed.sh restart

이제 TLS 암호화 및 인증 기능이 적용된 Milvus가 정상적으로 실행됩니다.

이 설정을 통해 Milvus는 안전하게 데이터를 전송하며, 비밀번호 없이 로그인을 허용하지 않도록 설정되었습니다.

TLS 모드는 양방향 인증을 적용하여 클라이언트와 서버 간에 상호 인증을 수행합니다.

이를 통해 Milvus 클러스터의 보안을 크게 강화할 수 있습니다.

 


Attu 암호화 및 인증 적용 후 로그인 하기

이제 milvus보안 적용이 되었으니 attu도 해당 인증키를 가지고 적용을 해야합니다.

 

docker run -d \
  -p 8000:3000 \
  -v /root/milvus/standalone/tls:/app/tls \
  -e ATTU_LOG_LEVEL=info  \
  -e ROOT_CERT_PATH=/app/tls/ca.pem \
  -e PRIVATE_KEY_PATH=/app/tls/client.key \
  -e CERT_CHAIN_PATH=/app/tls/client.pem \
  -e SERVER_NAME=localhost \
  -e MILVUS_URL=211.216.167.220:19530 \
  --name attu \
  zilliz/attu:dev

-v 옵션 : 이전에 tls 폴더 경로를 넣으면 됩니다.

-e SERVER_NAME: locahost를 적으면 됩니다.

-e MILVUS_URL: milvus 주소를 넣으면 됩니다.

이후에 실행을 하면 됩니다.

 

만약에 attu에서 milvus로 tls가 정상적으로 되는지 확인하고 싶으시면 아래 코드를 사용하세요

1. docker attu 접속

docker exec -it attu /bin/bash

 

2. 업데이트 및 openssl 설치

apt-get update
apt-get install -y openssl

 

3. 테스트

cd tls
openssl s_client -connect 211.216.167.220:19530 -CAfile ca.pem

아래와 같이 뜨면 추가 인증서를 요구하고 있는겁니다.

더보기

openssl s_client -connect 211.216.167.220:19530 -CAfile ca.pem CONNECTED(00000003) Can't use SSL_get_servername depth=1 C = KR, ST = Seoul, L = Seoul, O = milvus, OU = milvus, CN = localhost verify return:1 depth=0 C = KR, O = milvus, OU = milvus, CN = localhost verify return:1 --- Certificate chain 0 s:C = KR, O = milvus, OU = milvus, CN = localhost i:C = KR, ST = Seoul, L = Seoul, O = milvus, OU = milvus, CN = localhost a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Oct 24 12:32:20 2024 GMT; NotAfter: Oct 22 12:32:20 2034 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIDsDCCApigAwIBAgIUUWAZbXXU1qO8HD30l6NLPkz9fnEwDQYJKoZIhvcNAQEL BQAwYzELMAkGA1UEBhMCS1IxDjAMBgNVBAgMBVNlb3VsMQ4wDAYDVQQHDAVTZW91 bDEPMA0GA1UECgwGbWlsdnVzMQ8wDQYDVQQLDAZtaWx2dXMxEjAQBgNVBAMMCWxv Y2FsaG9zdDAeFw0yNDEwMjQxMjMyMjBaFw0zNDEwMjIxMjMyMjBaMEMxCzAJBgNV BAYTAktSMQ8wDQYDVQQKDAZtaWx2dXMxDzANBgNVBAsMBm1pbHZ1czESMBAGA1UE AwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynXu WAUZiGycEgLALcI0cVwxqiwAMOTZPoTbx1wu9gF80x2KobmZWi3LsX3MWcTKTJZH nVQWiIyd7OA1z0MKndhEX8HNMYYGe2C2+Yzz44NrLUSUW6KX2UcIuAi3Io0vwbBA nZj51SRwQE0oocMTrrTS+CwHr1paDfPce6dtjtLrSPOPCiZMV2G/+m6h8ZcVv6bb Q8Reap7ZQvnVUf+OnPhFphrVBru6bR93HBE+HbyFt+t75BtyoT4LTt9wicbqe8Js VyhXBmVLxqCVDJ3KfZWDaZvTOfYDy9cUdcPD1RBBBPAg92568bs8WCknIOooQFtJ A+W3UTbQzw4NfZJCZwIDAQABo3wwejAJBgNVHRMEAjAAMAsGA1UdDwQEAwIF4DAg BgNVHREEGTAXgglsb2NhbGhvc3SHBH8AAAGHBNPYp9wwHQYDVR0OBBYEFNwsS6Rc wSd3atnh6gX7Z/agdBB4MB8GA1UdIwQYMBaAFB/gtL3ByG8U527ZxBbz+tfN2yj7 MA0GCSqGSIb3DQEBCwUAA4IBAQCw/g8jgL5Nrdt+OkheIQfqzSsY7Wbc9MhviNxV a2YvUas7+GWNfpNUhzqPsaPJbbmGfectlkMaCktU/BS8SonEx8G8luyZ0M2yMPeE ppC93WJw/mwCyejIpeNPU9BOFjE4SMPk1284F8pWDmbBy5d+dTUqeIyScsa+zA6V ZkPZSGK9ui0Gprzke4UfNfUwyJYwp9xLl8X5hkLnYCZbcLdxXZZ0izEdPrioNOqn fyFsmcpgwEiDuzWqksmXzl1NuB2ZAIoiWKBUpjO9HAGBITNYPnYKiIbLncBAv96K HG4h+oVQDKbfcskBOhMyNCzxzX/8MTsaFHWeiiQ+CwYbfpeV -----END CERTIFICATE----- subject=C = KR, O = milvus, OU = milvus, CN = localhost issuer=C = KR, ST = Seoul, L = Seoul, O = milvus, OU = milvus, CN = localhost --- Acceptable client certificate CA names C = KR, ST = Seoul, L = Seoul, O = milvus, OU = milvus, CN = localhost Requested Signature Algorithms: RSA-PSS+SHA256:ECDSA+SHA256:Ed25519:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA384:ECDSA+SHA512:RSA+SHA1:ECDSA+SHA1 Shared Requested Signature Algorithms: RSA-PSS+SHA256:ECDSA+SHA256:Ed25519:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA384:ECDSA+SHA512 Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 1664 bytes and written 391 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- 40672C64D4750000:error:0A00045C:SSL routines:ssl3_read_bytes:tlsv13 alert certificate required:../ssl/record/rec_layer_s3.c:1605:SSL alert number 116

위 접은글과 같이 뜨면 아래의 명령어를 사용하여 추가 인증서를 넣으면 되겠습니다.

openssl s_client -connect 211.216.167.220:19530 -CAfile ca.pem -cert client.pem -key client.key
더보기

ert client.pem -key client.key CONNECTED(00000003) Can't use SSL_get_servername depth=1 C = KR, ST = Seoul, L = Seoul, O = milvus, OU = milvus, CN = localhost verify return:1 depth=0 C = KR, O = milvus, OU = milvus, CN = localhost verify return:1 --- Certificate chain 0 s:C = KR, O = milvus, OU = milvus, CN = localhost i:C = KR, ST = Seoul, L = Seoul, O = milvus, OU = milvus, CN = localhost a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256 v:NotBefore: Oct 24 12:32:20 2024 GMT; NotAfter: Oct 22 12:32:20 2034 GMT --- Server certificate -----BEGIN CERTIFICATE----- MIIDsDCCApigAwIBAgIUUWAZbXXU1qO8HD30l6NLPkz9fnEwDQYJKoZIhvcNAQEL BQAwYzELMAkGA1UEBhMCS1IxDjAMBgNVBAgMBVNlb3VsMQ4wDAYDVQQHDAVTZW91 bDEPMA0GA1UECgwGbWlsdnVzMQ8wDQYDVQQLDAZtaWx2dXMxEjAQBgNVBAMMCWxv Y2FsaG9zdDAeFw0yNDEwMjQxMjMyMjBaFw0zNDEwMjIxMjMyMjBaMEMxCzAJBgNV BAYTAktSMQ8wDQYDVQQKDAZtaWx2dXMxDzANBgNVBAsMBm1pbHZ1czESMBAGA1UE AwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynXu WAUZiGycEgLALcI0cVwxqiwAMOTZPoTbx1wu9gF80x2KobmZWi3LsX3MWcTKTJZH nVQWiIyd7OA1z0MKndhEX8HNMYYGe2C2+Yzz44NrLUSUW6KX2UcIuAi3Io0vwbBA nZj51SRwQE0oocMTrrTS+CwHr1paDfPce6dtjtLrSPOPCiZMV2G/+m6h8ZcVv6bb Q8Reap7ZQvnVUf+OnPhFphrVBru6bR93HBE+HbyFt+t75BtyoT4LTt9wicbqe8Js VyhXBmVLxqCVDJ3KfZWDaZvTOfYDy9cUdcPD1RBBBPAg92568bs8WCknIOooQFtJ A+W3UTbQzw4NfZJCZwIDAQABo3wwejAJBgNVHRMEAjAAMAsGA1UdDwQEAwIF4DAg BgNVHREEGTAXgglsb2NhbGhvc3SHBH8AAAGHBNPYp9wwHQYDVR0OBBYEFNwsS6Rc wSd3atnh6gX7Z/agdBB4MB8GA1UdIwQYMBaAFB/gtL3ByG8U527ZxBbz+tfN2yj7 MA0GCSqGSIb3DQEBCwUAA4IBAQCw/g8jgL5Nrdt+OkheIQfqzSsY7Wbc9MhviNxV a2YvUas7+GWNfpNUhzqPsaPJbbmGfectlkMaCktU/BS8SonEx8G8luyZ0M2yMPeE ppC93WJw/mwCyejIpeNPU9BOFjE4SMPk1284F8pWDmbBy5d+dTUqeIyScsa+zA6V ZkPZSGK9ui0Gprzke4UfNfUwyJYwp9xLl8X5hkLnYCZbcLdxXZZ0izEdPrioNOqn fyFsmcpgwEiDuzWqksmXzl1NuB2ZAIoiWKBUpjO9HAGBITNYPnYKiIbLncBAv96K HG4h+oVQDKbfcskBOhMyNCzxzX/8MTsaFHWeiiQ+CwYbfpeV -----END CERTIFICATE----- subject=C = KR, O = milvus, OU = milvus, CN = localhost issuer=C = KR, ST = Seoul, L = Seoul, O = milvus, OU = milvus, CN = localhost --- Acceptable client certificate CA names C = KR, ST = Seoul, L = Seoul, O = milvus, OU = milvus, CN = localhost Requested Signature Algorithms: RSA-PSS+SHA256:ECDSA+SHA256:Ed25519:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA384:ECDSA+SHA512:RSA+SHA1:ECDSA+SHA1 Shared Requested Signature Algorithms: RSA-PSS+SHA256:ECDSA+SHA256:Ed25519:RSA-PSS+SHA384:RSA-PSS+SHA512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA384:ECDSA+SHA512 Peer signing digest: SHA256 Peer signature type: RSA-PSS Server Temp Key: X25519, 253 bits --- SSL handshake has read 1664 bytes and written 2574 bytes Verification: OK --- New, TLSv1.3, Cipher is TLS_AES_128_GCM_SHA256 Server public key is 2048 bit Secure Renegotiation IS NOT supported Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) --- --- Post-Handshake New Session Ticket arrived: SSL-Session: Protocol : TLSv1.3 Cipher : TLS_AES_128_GCM_SHA256 Session-ID: 44F94C5ADFB15C7E8BC62CEC510E4CA4E1A7F609B0ABFA85FF62820D68F2C6D0 Session-ID-ctx: Resumption PSK: 346B65CC2A08832A1606182AAA20AFC8E0406E4E3FD636C48DFC3CA1113B8DE7 PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 604800 (seconds) TLS session ticket: 0000 - 08 1a db 35 9c 15 85 93-05 80 0c 47 87 70 1f cc ...5.......G.p.. 0010 - 23 da 7b 3e 19 b9 36 d9-db a7 0f 41 cc 7b 81 c4 #.{>..6....A.{.. 0020 - b3 ca d7 16 5d dc e3 c1-12 b4 92 93 1f 74 87 fb ....]........t.. 0030 - 35 89 25 b2 f3 3c 12 7c-2b 5a a1 9c d2 e3 e3 a3 5.%..<.|+Z...... 0040 - 1e 6f e5 16 2f e5 79 c0-68 be 5d 05 ee 32 af c3 .o../.y.h.]..2.. 0050 - 17 1a 16 1e ac ce 08 21-7c 50 81 ec 5a 78 6b 53 .......!|P..ZxkS 0060 - 36 9f e2 98 de a6 f8 81-fa 6d 20 3f d1 21 75 5e 6........m ?.!u^ 0070 - 98 5a 15 c2 a3 c2 d0 fc-41 37 38 ee 3e 99 9b 40 .Z......A78.>..@ 0080 - 9d 94 e5 b9 09 cd 77 b7-6d 7e f7 d2 b7 46 0e c0 ......w.m~...F.. 0090 - f7 be 1a cb 41 de 2e 0e-7a d6 28 bf fb 1c 3d 58 ....A...z.(...=X 00a0 - 59 9b 50 27 7a 0f 29 3e-de e3 bd ad d8 c0 c9 1a Y.P'z.)>........ 00b0 - cf 71 c5 b0 ef 41 ba ad-f2 57 c5 ad b3 f7 57 5f .q...A...W....W_ 00c0 - a9 aa 8e 68 83 5e 62 6b-6b 0c ff 9c 3a 89 90 01 ...h.^bkk...:... 00d0 - e1 7b b3 ee f0 85 62 de-d9 8d 09 06 c6 7f c2 29 .{....b........) 00e0 - 51 c2 8c 8b 4f 24 cd 90-a5 77 83 1a 19 c5 de 0f Q...O$...w...... 00f0 - 00 f7 05 22 da 7b 03 3c-18 55 36 95 d0 2d bd 52 ...".{.<.U6..-.R 0100 - f1 cd ff 4e 47 65 80 80-55 9c 28 37 37 c7 f1 4f ...NGe..U.(77..O 0110 - 9c ff be 29 63 bd 68 f3-9f 56 aa b2 1e 5c d1 a5 ...)c.h..V...\.. 0120 - d2 a3 40 a2 d6 8d eb e5-69 35 50 20 57 84 78 43 ..@.....i5P W.xC 0130 - fb db 41 7f a3 10 68 72-86 09 e1 5e ae 3f ef d0 ..A...hr...^.?.. 0140 - 9b 1c 52 04 65 e1 3d 42-eb ce 5a 29 9a 85 a7 05 ..R.e.=B..Z).... 0150 - ec 87 e8 a4 26 2a 51 9a-d0 9a a9 66 c9 2b fc 29 ....&*Q....f.+.) 0160 - 0c d4 82 60 24 3f 3b a6-1d 30 7e dd f1 d9 14 ca ...$?;..0~..... 0170 - 0a be 6f 2f 8a 00 4e ee-96 7d e4 6c d3 c5 91 2a ..o/..N..}.l...* 0180 - 06 e2 bf f7 c0 24 1f 36-70 12 78 9b 18 ec 32 31 .....$.6p.x...21 0190 - 62 d4 fc 55 ef 90 49 b1-e4 1a 36 75 34 65 1f da b..U..I...6u4e.. 01a0 - b5 c0 de 45 77 be 47 79-4d df 4b f5 96 c9 7a fa ...Ew.GyM.K...z. 01b0 - a4 dd 0f 93 73 47 3e 2b-0c b4 1b 44 52 99 62 f1 ....sG>+...DR.b. 01c0 - 1b 64 4d 37 1b 65 95 ed-7c c9 ad 79 19 05 fc e4 .dM7.e..|..y.... 01d0 - 06 02 58 9b 77 c0 86 f6-ac 89 c1 04 9c 6f bc 45 ..X.w........o.E 01e0 - dc a9 cb ea c5 6c 82 cf-38 5f ed 0a f1 c8 8b 90 .....l..8_...... 01f0 - db 8d ab e2 b1 35 4b 56-96 f8 82 13 f5 f2 29 e3 .....5KV......). 0200 - c8 0c 91 43 05 a0 c5 c2-7f 9f 3c c3 8c 80 44 fc ...C......<...D. 0210 - 87 16 e0 b2 98 e8 cc d6-2c d4 9a c1 a6 ee ee d2 ........,....... 0220 - a3 13 ae cf 54 01 be fd-fb 64 d1 45 c3 51 de 4a ....T....d.E.Q.J 0230 - 23 a2 e7 8e c1 08 af 95-ab 2a 2d c0 60 09 b0 bd #........*-.... 0240 - 20 1f 85 52 d2 bd 40 f7-ce f8 70 83 4f f8 43 ab ..R..@...p.O.C. 0250 - 39 b7 08 85 d5 3b 33 51-f3 ab 35 03 43 28 40 21 9....;3Q..5.C(@! 0260 - dc 77 3c ab 8c ec 8f 47-c5 f8 dc 64 3f eb 7f 58 .w<....G...d?..X 0270 - 2c 0b d4 89 2b 9e fd e4-df 16 7d 2a cf e0 89 d0 ,...+.....}*.... 0280 - a7 ca 71 87 19 ec ec d4-87 1b 3a 2e df ba 6f 4c ..q.......:...oL 0290 - af 05 67 e8 6e 50 38 68-50 15 c9 be 84 37 24 78 ..g.nP8hP....7$x 02a0 - 9c d2 12 aa 6a b5 41 23-86 c2 46 9f 35 e3 26 bd ....j.A#..F.5.&. 02b0 - f0 81 ca 51 95 73 f8 1f-8e 69 61 73 07 30 de 00 ...Q.s...ias.0.. 02c0 - b4 c6 e5 32 8c 71 d4 46-fb b3 41 5f 12 1a 86 88 ...2.q.F..A_.... 02d0 - 6f dc 8b 5d 51 d4 07 ca-00 da c2 12 c6 ba ad 4d o..]Q..........M 02e0 - 22 09 d1 17 b7 91 37 25-7a f5 17 06 03 37 e9 47 ".....7%z....7.G 02f0 - 09 47 5c 5a 5b 81 fb 67-39 94 bd 0c 64 d9 86 02 .G\Z[..g9...d... 0300 - ae 38 4d ab 75 13 4a 59-b0 2d c9 27 5f 28 01 d0 .8M.u.JY.-.'_(.. 0310 - 9e cb 61 c6 c0 24 1b f0-99 83 b6 6e 6b 52 c3 4b ..a..$.....nkR.K 0320 - d8 c1 f9 23 5e bf e3 31-af c3 b6 82 dd 18 3d eb ...#^..1......=. 0330 - 74 20 ed 97 3b 9c d2 34-1f 1c f3 cf 2c f2 d4 5d t ..;..4....,..] 0340 - a6 be 2d ad c0 a9 fd 91-68 36 8e fc 4d 54 fb f2 ..-.....h6..MT.. 0350 - 06 c6 e1 cc 54 bc f1 93-d6 b2 cc 2d 76 ac 86 f2 ....T......-v... 0360 - 7f a5 85 24 f9 83 0f c8-de f1 0d f3 01 7a 82 9c ...$.........z.. 0370 - 18 e9 6f 1e 8c ef 64 88-dc 4a bf 6e 7a 2d 84 10 ..o...d..J.nz-.. 0380 - d6 53 0f 8e 1b 9c d5 92-e7 f3 f4 66 85 08 59 df .S.........f..Y. 0390 - 30 95 69 11 8e a0 fc 0c-c8 f0 ef a4 7a 60 d3 e0 0.i.........z.. 03a0 - 29 18 a4 fb 42 f9 fd 7f-b9 36 1e 1c 8d 83 49 de )...B....6....I. 03b0 - 10 1e 11 9f bc 6c d1 64-50 06 c8 d5 d5 d6 4e df .....l.dP.....N. 03c0 - 0c 53 9c c2 1b a8 8c 16-0e 6e e6 d7 fb 5c bd fd .S.......n...\.. 03d0 - eb 88 c5 19 29 92 fb e3-7d 21 38 a8 74 b8 25 48 ....)...}!8.t.%H 03e0 - 04 5e f7 63 a7 55 3f e3-bd 8f 5e ab 50 0b 39 60 .^.c.U?...^.P.9 03f0 - e9 d7 ce a8 e9 6e a7 01-6e 49 93 f7 e9 b0 3b 68 .....n..nI....;h 0400 - 6b 8c 99 01 30 d2 03 69-98 ad 74 cb 80 dc 92 fe k...0..i..t..... 0410 - cb a2 53 2c 42 83 82 bd-55 2b cb 16 25 e1 3d 25 ..S,B...U+..%.=% 0420 - b2 a7 8d 2d 58 b5 ce d9-f6 e3 35 cf 2d 58 9c 87 ...-X.....5.-X.. 0430 - 50 14 26 03 71 ff 08 5c-73 f2 79 57 5f c3 45 3d P.&.q..\s.yW_.E= 0440 - d0 59 bf 7c d0 5c e9 e4-91 c9 1d 55 f3 15 79 06 .Y.|.\.....U..y. 0450 - ea b7 b7 d0 bd 90 ef 10-32 82 aa c2 5b e7 70 b5 ........2...[.p. 0460 - 20 29 5b 42 a5 4c 57 69-9d 08 b6 9a f1 63 3d 2e )[B.LWi.....c=. 0470 - ec cc cf 01 43 cc 5f a8-aa 56 06 99 44 85 b4 4a ....C._..V..D..J 0480 - 62 04 b0 a2 97 08 ec 8a-bd a2 20 7f e2 28 08 e9 b......... ..(.. 0490 - 50 25 4f 7c 2a 5a 7d 70-ae d0 92 fd fd 17 00 2e P%O|*Z}p........ 04a0 - 5e 75 da a7 d9 50 ff ed-10 44 f2 9f b8 9c 24 af ^u...P...D....$. 04b0 - 71 d8 9e 7f 5c 1e d7 a1-73 40 9f 7f 55 d0 c8 d2 q...\...s@..U... 04c0 - 04 39 fb 57 1f 94 c2 61-ab 7a da e3 42 5a 41 52 .9.W...a.z..BZAR 04d0 - 13 02 06 79 f6 8f d5 15-0b 12 42 ed 60 a7 58 92 ...y......B..X. 04e0 - bb 98 bf 28 21 cb 21 06-7a aa 5c aa 6d b1 ee 82 ...(!.!.z.\.m... 04f0 - 53 3f a9 d9 f3 cc 13 e7-61 57 e6 75 2a 18 c5 36 S?......aW.u*..6 0500 - 24 ff 9f 78 30 96 5c 87-b4 1d d4 92 18 0a d7 3e $..x0.\........> 0510 - 9c 43 e0 29 15 fc 5f 6c-77 66 d6 c3 48 2d 4c 2a .C.).._lwf..H-L* 0520 - fd 8d 73 da df 9d ad c4-3f 11 29 9e d5 8a e0 fc ..s.....?.)..... 0530 - 0e cf 03 94 df 8b 60 37-b3 8f 41 eb bd ad b9 c8 ......7..A..... 0540 - 8e ea 14 13 40 75 b6 6f-4f c3 fc f2 3e d7 0e 1a ....@u.oO...>... 0550 - be 16 43 ac 83 66 86 a8-11 92 8a 29 7d 4a 45 f0 ..C..f.....)}JE. 0560 - ed 47 97 75 dd 66 d3 c3-f8 1e 5b 38 a2 e4 46 5a .G.u.f....[8..FZ 0570 - 2d 65 3c c6 82 ee ad 75-cd 54 5a 64 14 74 7b 4d -e<....u.TZd.t{M 0580 - 5b 1b a6 0f 92 ae ae 48-e3 6e 96 4d a6 9d c4 eb [......H.n.M.... 0590 - 40 22 9e ea fb 21 ec ad-c1 6b 2b 10 1f ee de b3 @"...!...k+..... 05a0 - e5 f7 dc 03 2d 75 4f 43-b9 1c ad d5 a5 93 e4 da ....-uOC........ 05b0 - 9e 8c 85 e7 6f aa 49 66-71 00 f7 6b 8a e7 87 50 ....o.Ifq..k...P 05c0 - b6 b2 a2 fa 11 ae 02 f8-d2 70 55 c9 b5 8c 0a f1 .........pU..... 05d0 - 3b 9e 59 8d 83 b5 1f 50-b4 77 fe 4a 3c d8 2e 0e ;.Y....P.w.J<... 05e0 - 86 df 14 a1 a7 9d 63 83-38 c1 95 c4 86 c6 4d 39 ......c.8.....M9 05f0 - e5 82 fb 05 dc e7 ff 4e-94 e8 47 a5 e5 e6 9c 5d .......N..G....] 0600 - 88 63 11 b1 5c a0 40 f9-00 86 a2 86 5d 03 a8 3c .c..\.@.....]..< 0610 - 0b fa ff 95 22 65 f6 f1-65 7a af b1 47 cd a9 76 ...."e..ez..G..v 0620 - 0b b5 8d 98 4b d8 8f 94-15 27 c3 30 d0 2d aa 7b ....K....'.0.-.{ 0630 - 03 28 f9 55 1a a6 cb 22-3e f7 ec 0c 9d 2b 66 2d .(.U...">....+f- 0640 - e6 a4 ac d3 da f5 17 76-c7 ea 13 8a 97 63 7a ee .......v.....cz. 0650 - 71 41 f2 14 da 8d df ac-db 6e be f1 3d e4 6a 07 qA.......n..=.j. 0660 - 7a ba b3 b0 52 0a 69 7f-70 38 dc 68 30 c8 1f f9 z...R.i.p8.h0... 0670 - 98 5c d7 33 02 8c 7b 5e-7c f1 24 67 ad df bb 91 .\.3..{^|.$g.... 0680 - 86 e4 39 21 7e e3 ab 71-11 c3 da d5 6c 5f a0 2c ..9!~..q....l_., 0690 - c4 3f 28 cc 05 f9 3e ac-ae f5 d6 6c 9d e1 16 49 .?(...>....l...I 06a0 - 1e c9 00 cf d2 2c 6b ff-6b 83 59 3b 24 b8 31 50 .....,k.k.Y;$.1P 06b0 - f8 51 13 b3 b1 da 60 a8-14 99 04 89 d6 77 48 b3 .Q..........wH. 06c0 - 27 81 5a f8 8c 83 4b aa-bb 8d b4 5c 9c b1 dc 88 '.Z...K....\.... 06d0 - c7 7b 5c f1 8c 7a 03 84-c7 25 f4 ab 59 bf a1 86 .{\..z...%..Y... 06e0 - 50 77 21 db 2a 9f 4d e7-7d 05 8f c6 5a 24 08 53 Pw!.*.M.}...Z$.S 06f0 - 50 37 34 39 24 c9 70 68-06 db c3 c1 2c 40 b3 cc P749$.ph....,@.. 0700 - 79 d6 ec 13 52 33 35 05-d9 68 42 2d 01 c2 e8 58 y...R35..hB-...X 0710 - 12 4c bf db b9 1a cb 06-a0 23 ff d9 6c da 22 c6 .L.......#..l.". 0720 - 1b de 2f 4c 1e ce e6 8c-34 fe 21 3b c1 a7 bc 92 ../L....4.!;.... 0730 - 52 66 5d 44 2a 1b bd 1f-28 55 56 29 5a c7 79 fb Rf]D*...(UV)Z.y. 0740 - 80 fc a3 1f 63 24 9b 11-3f a3 e3 f5 b3 c8 1d f5 ....c$..?....... 0750 - 3b 7d a6 a7 53 d4 a9 a6-53 f0 37 49 03 01 52 c7 ;}..S...S.7I..R. 0760 - 37 e9 f8 44 6d 63 de 2f-0b e0 72 a4 89 01 88 83 7..Dmc./..r..... 0770 - d0 d2 95 1d 0d 2e ec a0-61 db 3b 7c ff 0b d7 b0 ........a.;|.... 0780 - e7 42 a5 1f e3 1d 3c 24-b5 37 f0 5a cf 2c 32 13 .B....<$.7.Z.,2. 0790 - 40 82 df f3 f6 c9 fd 56-9c f3 c8 a8 aa da 5c 7b @......V......\{ 07a0 - b0 df a9 97 c3 08 92 87-94 11 a8 18 24 3a c5 f3 ............$:.. 07b0 - c3 82 86 54 97 70 7a e0-9f 1e 6a 69 21 40 44 9f ...T.pz...ji!@D. 07c0 - 4a cd 05 14 59 98 41 ff-35 a5 5a 2e d5 12 3d b3 J...Y.A.5.Z...=. 07d0 - 18 50 a3 70 bb 2c 00 ec-cd 7d 64 f1 e4 97 83 89 .P.p.,...}d..... 07e0 - f9 d9 ac 6e 31 11 eb 3b-80 35 f5 4d 51 dc 3c 7b ...n1..;.5.MQ.<{ 07f0 - 91 76 a4 e1 29 df 3e d0-cf 17 bd b3 f5 7a cd 07 .v..).>......z.. 0800 - 4f d6 a7 3f 25 12 f7 51-80 73 4c aa cf d0 5b a9 O..?%..Q.sL...[. 0810 - 93 0e bd 52 24 a9 2d 5a-ea e9 9c ec 9b 21 e9 b6 ...R$.-Z.....!.. 0820 - f9 71 9c 88 44 8e d9 16-89 46 03 aa 73 51 bc 1f .q..D....F..sQ.. 0830 - 29 9e fd b4 70 b6 60 db-2b d8 00 64 86 c6 87 88 )...p..+..d.... 0840 - 75 a0 36 d4 ee 01 fb 1f-7d c8 95 44 67 b8 9f 84 u.6.....}..Dg... 0850 - 20 17 3c f6 55 8a 48 1c-4d 3d b2 7e d7 cf 4f 40 .<.U.H.M=.~..O@ 0860 - 4f 2c eb 63 60 44 c6 db-0c 51 3a 67 b6 67 3c 4c O,.cD...Q:g.g<L 0870 - 19 47 a1 db 04 d2 5c f9-2c 68 87 74 1d 9c db bf .G....\.,h.t.... 0880 - 56 dc b6 28 7d e7 c6 e4-15 36 1e dc 1d f4 74 19 V..(}....6....t. 0890 - 1b ee f5 65 a4 cb f5 7b-11 ad 0e a5 a7 1a 17 33 ...e...{.......3 08a0 - 2f ab 84 76 c8 aa 5d ea-4a 29 27 2c e6 5c c0 90 /..v..].J)',.\.. 08b0 - c2 37 26 20 e9 48 77 cd-2e c9 91 7f 5b cf 30 33 .7& .Hw.....[.03 08c0 - cb fe d0 21 03 41 80 9b-8a dd 11 19 f2 6b 0c 69 ...!.A.......k.i 08d0 - 1b 61 f1 ce 8f 15 8e 16-b6 39 17 d6 fb af 35 df .a.......9....5. 08e0 - 4e a1 d7 44 13 43 c2 8f-f1 95 bc a5 73 c2 28 0b N..D.C......s.(. 08f0 - 08 6a ab 5a bf 20 0c e2-d0 d5 7b a8 74 ce c7 0c .j.Z. ....{.t... 0900 - 34 72 18 55 a9 54 0d 6c-46 42 d8 f7 53 08 dd 01 4r.U.T.lFB..S... 0910 - f5 00 e5 96 8a 4d ed 27-aa 50 b8 fc b2 0e 66 bc .....M.'.P....f. 0920 - 4a be f4 d0 b9 25 30 37-42 f7 b8 cd a2 2b 2f 34 J....%07B....+/4 0930 - 9e 4e 5b 25 c2 70 78 d1-31 e4 7b fb 82 74 03 1f .N[%.px.1.{..t.. 0940 - 5a 5e db e3 a5 aa e7 c1-08 c4 64 70 72 cd 83 65 Z^........dpr..e 0950 - 23 cb 16 a6 4e 40 97 d1-aa 90 cc b4 76 87 a3 c2 #...N@......v... 0960 - de f9 5e 91 72 fc 13 7d-9c 83 e3 bb 05 df 37 3c ..^.r..}......7< 0970 - 93 01 c7 6c 8b 34 58 4a-9b 01 a5 5d ce 37 cf cf ...l.4XJ...].7.. 0980 - 2f a6 ee b1 42 62 28 fa-7d b1 c2 50 bd 2c ac 2b /...Bb(.}..P.,.+ 0990 - 70 0f 0b aa a3 9d 10 4f-a7 5e b1 5b e7 5c bf 0c p......O.^.[.\.. 09a0 - 77 6d 0c d8 50 0d 13 24-cb 67 89 67 dc b1 22 50 wm..P..$.g.g.."P 09b0 - 48 dd 22 2d 3a cf 5a 36-eb 83 cf e0 e3 2f db d7 H."-:.Z6...../.. 09c0 - 4a 2b 38 5a 7e 63 3a e3-b5 40 7f ac 9b 8c c8 26 J+8Z~c:..@.....& 09d0 - fe cf 30 54 b1 bb 68 21-49 73 9a 75 49 4e a9 84 ..0T..h!Is.uIN.. 09e0 - 21 fc c2 3a 00 49 bf e3-3d ee 1d 93 34 2b 4d d4 !..:.I..=...4+M. 09f0 - 3c e9 6f 31 43 ac 2d 13-42 0d c9 3f 5c b7 10 d9 <.o1C.-.B..?\... 0a00 - e0 bc 0f 32 36 be e6 6a-9a 11 64 7a 61 d6 c7 50 ...26..j..dza..P 0a10 - 3b e5 21 cb 7b 91 1d 65-a8 6c 6c ba 3e 86 ff 77 ;.!.{..e.ll.>..w 0a20 - 0d b0 77 6a 32 cc 5f 67-b5 cd 44 9b 1d eb ce 17 ..wj2._g..D..... 0a30 - 14 b2 af 60 c1 94 ec 34-cd d8 dd 69 72 5c 58 90 ......4...ir\X. 0a40 - 4e 38 e2 d1 44 83 f1 f0-77 f4 91 8b 32 58 80 61 N8..D...w...2X.a 0a50 - a8 e0 ec ea 5b 0f 84 97-6d 54 f9 e3 9c 12 15 72 ....[...mT.....r 0a60 - 3b 49 cc 8c 79 f3 e4 1e-9e e1 9e 57 8e 14 6e c9 ;I..y......W..n. 0a70 - 19 0e 85 18 21 c6 a2 6b-ef 42 8b 6d 39 e3 d3 34 ....!..k.B.m9..4 0a80 - 8e 15 e0 30 80 7d d3 dd-9a a2 40 51 b8 ec 6c 94 ...0.}....@Q..l. 0a90 - 46 74 04 c9 ec e2 ab fe-4d 12 b4 2d 89 4c bd 7f Ft......M..-.L.. 0aa0 - fb 77 61 06 f9 87 ba ef-76 e0 a6 41 b0 7c cc d3 .wa.....v..A.|.. 0ab0 - df 49 6e 35 bd d1 4d 02-9d 8b 4f 5e 02 16 8a af .In5..M...O^.... 0ac0 - 6b 3f 7b f0 76 39 94 f3-32 cb 3e ab 2f 57 70 74 k?{.v9..2.>./Wpt 0ad0 - fb 0e 91 c0 a7 3c 9c 0e-65 7e e9 2a 74 73 59 c7 .....<..e~.*tsY. 0ae0 - 62 de 77 67 4e 89 52 a7-fe ec b3 91 47 2c f2 8f b.wgN.R.....G,.. 0af0 - 74 29 a5 97 49 aa bd 57-56 bf fa f2 46 27 06 fd t)..I..WV...F'.. 0b00 - e8 9c 4b 93 e0 b3 68 ef-0b b3 38 2e d8 4a 09 0f ..K...h...8..J.. 0b10 - d0 2a 3a 0d 47 f6 91 e5-76 9b b2 ad bc 66 95 94 .*:.G...v....f.. 0b20 - a3 01 13 29 10 59 5f e6-c7 3c a0 f8 bf 1b 0a f8 ...).Y_..<...... 0b30 - b9 11 19 3e 3f 2c 0e cd-98 d6 bb 92 61 4b 88 3a ...>?,......aK.: 0b40 - 7d c6 56 c7 41 c7 9f 0d-f3 55 8e eb c8 66 71 ea }.V.A....U...fq. 0b50 - 80 af df c2 9a 9e cb 17-b5 ce 49 e6 84 a8 30 3c ..........I...0< 0b60 - 78 43 6a 2f a9 eb c4 32-5d 8d 67 80 1b e1 fb 9a xCj/...2].g..... 0b70 - a0 a7 84 eb 15 07 52 04-9c 82 84 e6 0f d1 72 d2 ......R.......r. 0b80 - fa 54 54 .TT Start Time: 1729773525 Timeout : 7200 (sec) Verify return code: 0 (ok) Extended master secret: no Max Early Data: 0 --- read R BLOCK

이렇게 뜨면 정상적으로 tls 인증이 완료된것 입니다.

 

이제 attu 페이지에 접속 후 

 

계정 비밀번호 등 입력을 하시면 정상적으로 로그인이 되는것을 보실 수 있습니다.

 

다음에는 docker-compose를 이용하여 적용하는 부분을 가져오겠습니다.