httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Øyvind Lode <oyv...@lode.is>
Subject RE: [users@httpd] Trouble installing renewed SSL certificate
Date Fri, 25 Oct 2013 11:25:58 GMT
Hi Harald.

No.

I just received the new certificate from Comodo.

I assume they used the original csr file which I have stored somewhere :)

I thought I documented what I did to set up the cert but can't for the life of me find it
now.

So I probably just need to create a new private key but memory does not serve me well right
now haha

I'm starting to believe that receiving a renewed cert is actually like receiving a cert in
the first place and should be installed like a completely new cert.

If you know of a good article on how to install a ssl cert including creating a new private
key and ca-bundle please let me know.

It's very much appreciated.

-----Original Message-----
From: Harald Stendal [mailto:harald.stendal@gmail.com] 
Sent: 25. oktober 2013 13:09
To: users@httpd.apache.org
Subject: Re: [users@httpd] Trouble installing renewed SSL certificate

Øyvind,

It sounds like the configured private key does not match your new certificate.

did you create a new private key and CSR when you ordered the new certificate?

Harald

On 10/25/2013 12:59 PM, Øyvind Lode wrote:
> Hi list!
>
> The ssl cert on my apache server have expired.
>
> It is actually a server at work - a important one as well so I'm a bit stressed at the
moment.
>
> The cert is renewed and I have received the cert files.
>
> I'm now trying to install them but I can't get it to work.
>
> I thought it was as simple as just copying the new crt file to the server and restart
apache but apache start fails.
>
> I see this in the log:
>
> 509 certificate routines:X509_check_private_key:key values mismatch
>
> Server: Apache 2.2.22 on Ubuntu 12.04.
>
> How does one install a renewed ssl cert?
>
> Do I need to create a new private key and ca-bundle?
>
> Please point me in the right direction.
>
> Thanks
>
> Øyvind
>
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message