Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
SSL certificate working on one server, not working on another one
7 views
Skip to first unread message
del...@gmail.com
Feb 26, 2013, 5:29:15 AM2/26/13
to
Hi,
I have run into a very bizarre problem. I am currently transferring an Apache web server to a new machine.
My SSL certificate is not working on the new server. The error log says:
SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
which tells me that the private key and the certificate do not match. I could confirm this by running
openssl x509 -noout -modulus -in ssl.crt | openssl md5
openssl rsa -noout -modulus -in ssl.key | openssl md5
and indeed, they don't match.
Now here comes the weird part. On the old server, it works with the exact same files. Apache does not log any errors and I am able to connect myself through HTTPS without problems. The certificate is shown as valid in my browser.
What's going on here? I seem not to have the correct private key for the certificate, so how is the old server able to work anyway? I have checked the configuration, paths and file contents multiple times.
Old System: CentOS 5.7, Apache 2.2.21, mod_gnutls, GnuTLS 2.10.1
New System: OpenSUSE 12.1, Apache 2.2.21, mod_ssl, OpenSSL 1.0.0e
Best regards,
Julian
I have run into a very bizarre problem. I am currently transferring an Apache web server to a new machine.
My SSL certificate is not working on the new server. The error log says:
SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
which tells me that the private key and the certificate do not match. I could confirm this by running
openssl x509 -noout -modulus -in ssl.crt | openssl md5
openssl rsa -noout -modulus -in ssl.key | openssl md5
and indeed, they don't match.
Now here comes the weird part. On the old server, it works with the exact same files. Apache does not log any errors and I am able to connect myself through HTTPS without problems. The certificate is shown as valid in my browser.
What's going on here? I seem not to have the correct private key for the certificate, so how is the old server able to work anyway? I have checked the configuration, paths and file contents multiple times.
Old System: CentOS 5.7, Apache 2.2.21, mod_gnutls, GnuTLS 2.10.1
New System: OpenSUSE 12.1, Apache 2.2.21, mod_ssl, OpenSSL 1.0.0e
Best regards,
Julian
0 new messages