[BlueOnyx:25403] Re: SSL import

Michael Stauber mstauber at blueonyx.it
Wed Apr 27 11:17:13 -05 2022


Hi Lee,

> Got the CSR processed and the cert issued by DigiCert including the intermediate CA which has uploaded fine.  The old 'doesn't recognise the file' appeared, renamed extension to .txt and then recognises - however the import will not complete, giving the "imported certificate does not match the private key" line.
> 
> I've edited the renamed txt file and placed the cert request string at the start, again to no avail.  Every time, the same error.

It works best of the uploaded file(s) have the ending *.txt. However, 
"imported certificate does not match the private key" indicates a tricky 
problem indeed:

When you make a CSR request, then the CSR is generated using the private 
key /home/sites/site.name/wwwroot/certs/key that is present when the CSR 
is being generated.

The cert that you then receive from the certification authority will 
only work with the private key that was present during the CSR request.

For an unknown reason the cert you received does not match the key that 
you still have in /home/sites/site.name/wwwroot/certs/key

See if you have a backup of the original key somewhere. If you have no 
copy of the original key, then you can unfortunately not use the cert 
that you received.

-- 
With best regards

Michael Stauber



More information about the Blueonyx mailing list