Error certificates generate by Digicert on NginxHow do I Install Intermediate Certificates (in AWS)?Problems...

PTIJ: Who was the sixth set of priestly clothes for?

How to educate team mate to take screenshots for bugs with out unwanted stuff

Do Paladin Auras of Differing Oaths Stack?

Is there a way to make cleveref distinguish two environments with the same counter?

Why restrict private health insurance?

Either of .... (Plural/Singular)

Was it really inappropriate to write a pull request for the company I interviewed with?

Finding the minimum value of a function without using Calculus

Is there a logarithm base for which the logarithm becomes an identity function?

Would those living in a "perfect society" not understand satire

Converting from "matrix" data into "coordinate" data

Is divide-by-zero a security vulnerability?

Are these two graphs isomorphic? Why/Why not?

Is this Paypal Github SDK reference really a dangerous site?

Movie: boy escapes the real world and goes to a fantasy world with big furry trolls

Why do we say 'Pairwise Disjoint', rather than 'Disjoint'?

What can I do if someone tampers with my SSH public key?

What is the purpose of a disclaimer like "this is not legal advice"?

Strange opamp's output impedance in spice

I reported the illegal activity of my boss to his boss. My boss found out. Now I am being punished. What should I do?

Trocar background-image com delay via jQuery

What should I do when a paper is published similar to my PhD thesis without citation?

Is it appropriate to ask a former professor to order a book for me through an inter-library loan?

Logistic regression BIC: what's the right N?



Error certificates generate by Digicert on Nginx


How do I Install Intermediate Certificates (in AWS)?Problems installing SSL certificate on nginx with intermediate keyHow to set systemd service dependencies?Nginx/Apache: set HSTS only if X-Forwarded-Proto is httpsOCSP validation - unable to get local issuer certificateNginX + WordPress + SSL + non-www + W3TC vhost config file questionsPort 443 set up SSL on Nginx + Ubuntu + EC2Nginx + ssl not respondingnginx (reverse proxy + ssl): shifting conf-lines destroys configurationssl files: Nginx works but Nodejs https module does not?













0















I add a domain name and some subdomain buy with 1&1 and my web server is on debian with NGinx.



I begin to configure a website with a subdomain. Without the SSL, it works but now, I try to add the SSL. I generated it via the 1&1 interface which use Digicert and I follow these instructions: https://knowledge.digicert.com/solution/SO17664.html



So, after the certificate bundle, I configure my nginx file for my subdomain to use the SSL:



server {
listen 443 ssl;
listen [::]:443 ssl;
keepalive_timeout 70;

ssl on;
ssl_certificate /etc/ssl/certs/_.my_domain.ca_ssl_certificate_complete.pem;
ssl_certificate_key /etc/ssl/certs/_.my_domain.ca_private_key.key;

server_name subdomain.mydomain.ca;
root /var/www/Mysoft;
index index.php;

location / {
try_files $uri /index.php;
fastcgi_pass unix:/run/php/php7.2-fpm.sock;
include fastcgi.conf;
}

}



Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/ssl/certs/_.my_domain.ca_private_key.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)



Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: configuration file /etc/nginx/nginx.conf test failed



Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: nginx.service: control process exited, code=exited status=1



Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: Failed to start A high performance web server and a reverse proxy server.




I don't know if a configuration is missing or if the problem come from the fact my certificate and my intermediate certificate have the extension .cer instead of .crt When I done my research for my error, I find .cer files seem be equivalent to .crt (just a different extension). I tried to inverse certificate and intermediate certificate in the bundle without success, use only the certificate with the intermediate certificate, same problem.



Like I have never configure a certificate before, I'm a little bit lost.



Thank you.









share







New contributor




Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

























    0















    I add a domain name and some subdomain buy with 1&1 and my web server is on debian with NGinx.



    I begin to configure a website with a subdomain. Without the SSL, it works but now, I try to add the SSL. I generated it via the 1&1 interface which use Digicert and I follow these instructions: https://knowledge.digicert.com/solution/SO17664.html



    So, after the certificate bundle, I configure my nginx file for my subdomain to use the SSL:



    server {
    listen 443 ssl;
    listen [::]:443 ssl;
    keepalive_timeout 70;

    ssl on;
    ssl_certificate /etc/ssl/certs/_.my_domain.ca_ssl_certificate_complete.pem;
    ssl_certificate_key /etc/ssl/certs/_.my_domain.ca_private_key.key;

    server_name subdomain.mydomain.ca;
    root /var/www/Mysoft;
    index index.php;

    location / {
    try_files $uri /index.php;
    fastcgi_pass unix:/run/php/php7.2-fpm.sock;
    include fastcgi.conf;
    }

    }



    Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/ssl/certs/_.my_domain.ca_private_key.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)



    Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: configuration file /etc/nginx/nginx.conf test failed



    Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: nginx.service: control process exited, code=exited status=1



    Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: Failed to start A high performance web server and a reverse proxy server.




    I don't know if a configuration is missing or if the problem come from the fact my certificate and my intermediate certificate have the extension .cer instead of .crt When I done my research for my error, I find .cer files seem be equivalent to .crt (just a different extension). I tried to inverse certificate and intermediate certificate in the bundle without success, use only the certificate with the intermediate certificate, same problem.



    Like I have never configure a certificate before, I'm a little bit lost.



    Thank you.









    share







    New contributor




    Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.























      0












      0








      0








      I add a domain name and some subdomain buy with 1&1 and my web server is on debian with NGinx.



      I begin to configure a website with a subdomain. Without the SSL, it works but now, I try to add the SSL. I generated it via the 1&1 interface which use Digicert and I follow these instructions: https://knowledge.digicert.com/solution/SO17664.html



      So, after the certificate bundle, I configure my nginx file for my subdomain to use the SSL:



      server {
      listen 443 ssl;
      listen [::]:443 ssl;
      keepalive_timeout 70;

      ssl on;
      ssl_certificate /etc/ssl/certs/_.my_domain.ca_ssl_certificate_complete.pem;
      ssl_certificate_key /etc/ssl/certs/_.my_domain.ca_private_key.key;

      server_name subdomain.mydomain.ca;
      root /var/www/Mysoft;
      index index.php;

      location / {
      try_files $uri /index.php;
      fastcgi_pass unix:/run/php/php7.2-fpm.sock;
      include fastcgi.conf;
      }

      }



      Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/ssl/certs/_.my_domain.ca_private_key.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)



      Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: configuration file /etc/nginx/nginx.conf test failed



      Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: nginx.service: control process exited, code=exited status=1



      Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: Failed to start A high performance web server and a reverse proxy server.




      I don't know if a configuration is missing or if the problem come from the fact my certificate and my intermediate certificate have the extension .cer instead of .crt When I done my research for my error, I find .cer files seem be equivalent to .crt (just a different extension). I tried to inverse certificate and intermediate certificate in the bundle without success, use only the certificate with the intermediate certificate, same problem.



      Like I have never configure a certificate before, I'm a little bit lost.



      Thank you.









      share







      New contributor




      Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.












      I add a domain name and some subdomain buy with 1&1 and my web server is on debian with NGinx.



      I begin to configure a website with a subdomain. Without the SSL, it works but now, I try to add the SSL. I generated it via the 1&1 interface which use Digicert and I follow these instructions: https://knowledge.digicert.com/solution/SO17664.html



      So, after the certificate bundle, I configure my nginx file for my subdomain to use the SSL:



      server {
      listen 443 ssl;
      listen [::]:443 ssl;
      keepalive_timeout 70;

      ssl on;
      ssl_certificate /etc/ssl/certs/_.my_domain.ca_ssl_certificate_complete.pem;
      ssl_certificate_key /etc/ssl/certs/_.my_domain.ca_private_key.key;

      server_name subdomain.mydomain.ca;
      root /var/www/Mysoft;
      index index.php;

      location / {
      try_files $uri /index.php;
      fastcgi_pass unix:/run/php/php7.2-fpm.sock;
      include fastcgi.conf;
      }

      }



      Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/ssl/certs/_.my_domain.ca_private_key.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)



      Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: configuration file /etc/nginx/nginx.conf test failed



      Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: nginx.service: control process exited, code=exited status=1



      Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: Failed to start A high performance web server and a reverse proxy server.




      I don't know if a configuration is missing or if the problem come from the fact my certificate and my intermediate certificate have the extension .cer instead of .crt When I done my research for my error, I find .cer files seem be equivalent to .crt (just a different extension). I tried to inverse certificate and intermediate certificate in the bundle without success, use only the certificate with the intermediate certificate, same problem.



      Like I have never configure a certificate before, I'm a little bit lost.



      Thank you.







      nginx ssl





      share







      New contributor




      Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.










      share







      New contributor




      Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.








      share



      share






      New contributor




      Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      asked 8 mins ago









      Claire DClaire D

      1011




      1011




      New contributor




      Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





      New contributor





      Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






      Claire D is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






















          0






          active

          oldest

          votes











          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "2"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });






          Claire D is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f957572%2ferror-certificates-generate-by-digicert-on-nginx%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          Claire D is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          Claire D is a new contributor. Be nice, and check out our Code of Conduct.













          Claire D is a new contributor. Be nice, and check out our Code of Conduct.












          Claire D is a new contributor. Be nice, and check out our Code of Conduct.
















          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f957572%2ferror-certificates-generate-by-digicert-on-nginx%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

          Список ссавців Італії Природоохоронні статуси | Список |...

          Українські прізвища Зміст Історичні відомості |...