Error certificates generate by Digicert on NginxHow do I Install Intermediate Certificates (in AWS)?Problems...
PTIJ: Who was the sixth set of priestly clothes for?
How to educate team mate to take screenshots for bugs with out unwanted stuff
Do Paladin Auras of Differing Oaths Stack?
Is there a way to make cleveref distinguish two environments with the same counter?
Why restrict private health insurance?
Either of .... (Plural/Singular)
Was it really inappropriate to write a pull request for the company I interviewed with?
Finding the minimum value of a function without using Calculus
Is there a logarithm base for which the logarithm becomes an identity function?
Would those living in a "perfect society" not understand satire
Converting from "matrix" data into "coordinate" data
Is divide-by-zero a security vulnerability?
Are these two graphs isomorphic? Why/Why not?
Is this Paypal Github SDK reference really a dangerous site?
Movie: boy escapes the real world and goes to a fantasy world with big furry trolls
Why do we say 'Pairwise Disjoint', rather than 'Disjoint'?
What can I do if someone tampers with my SSH public key?
What is the purpose of a disclaimer like "this is not legal advice"?
Strange opamp's output impedance in spice
I reported the illegal activity of my boss to his boss. My boss found out. Now I am being punished. What should I do?
Trocar background-image com delay via jQuery
What should I do when a paper is published similar to my PhD thesis without citation?
Is it appropriate to ask a former professor to order a book for me through an inter-library loan?
Logistic regression BIC: what's the right N?
Error certificates generate by Digicert on Nginx
How do I Install Intermediate Certificates (in AWS)?Problems installing SSL certificate on nginx with intermediate keyHow to set systemd service dependencies?Nginx/Apache: set HSTS only if X-Forwarded-Proto is httpsOCSP validation - unable to get local issuer certificateNginX + WordPress + SSL + non-www + W3TC vhost config file questionsPort 443 set up SSL on Nginx + Ubuntu + EC2Nginx + ssl not respondingnginx (reverse proxy + ssl): shifting conf-lines destroys configurationssl files: Nginx works but Nodejs https module does not?
I add a domain name and some subdomain buy with 1&1 and my web server is on debian with NGinx.
I begin to configure a website with a subdomain. Without the SSL, it works but now, I try to add the SSL. I generated it via the 1&1 interface which use Digicert and I follow these instructions: https://knowledge.digicert.com/solution/SO17664.html
So, after the certificate bundle, I configure my nginx file for my subdomain to use the SSL:
server {
listen 443 ssl;
listen [::]:443 ssl;
keepalive_timeout 70;
ssl on;
ssl_certificate /etc/ssl/certs/_.my_domain.ca_ssl_certificate_complete.pem;
ssl_certificate_key /etc/ssl/certs/_.my_domain.ca_private_key.key;
server_name subdomain.mydomain.ca;
root /var/www/Mysoft;
index index.php;
location / {
try_files $uri /index.php;
fastcgi_pass unix:/run/php/php7.2-fpm.sock;
include fastcgi.conf;
}
}
Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/ssl/certs/_.my_domain.ca_private_key.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: configuration file /etc/nginx/nginx.conf test failed
Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: nginx.service: control process exited, code=exited status=1
Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: Failed to start A high performance web server and a reverse proxy server.
I don't know if a configuration is missing or if the problem come from the fact my certificate and my intermediate certificate have the extension .cer instead of .crt When I done my research for my error, I find .cer files seem be equivalent to .crt (just a different extension). I tried to inverse certificate and intermediate certificate in the bundle without success, use only the certificate with the intermediate certificate, same problem.
Like I have never configure a certificate before, I'm a little bit lost.
Thank you.
nginx ssl
New contributor
add a comment |
I add a domain name and some subdomain buy with 1&1 and my web server is on debian with NGinx.
I begin to configure a website with a subdomain. Without the SSL, it works but now, I try to add the SSL. I generated it via the 1&1 interface which use Digicert and I follow these instructions: https://knowledge.digicert.com/solution/SO17664.html
So, after the certificate bundle, I configure my nginx file for my subdomain to use the SSL:
server {
listen 443 ssl;
listen [::]:443 ssl;
keepalive_timeout 70;
ssl on;
ssl_certificate /etc/ssl/certs/_.my_domain.ca_ssl_certificate_complete.pem;
ssl_certificate_key /etc/ssl/certs/_.my_domain.ca_private_key.key;
server_name subdomain.mydomain.ca;
root /var/www/Mysoft;
index index.php;
location / {
try_files $uri /index.php;
fastcgi_pass unix:/run/php/php7.2-fpm.sock;
include fastcgi.conf;
}
}
Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/ssl/certs/_.my_domain.ca_private_key.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: configuration file /etc/nginx/nginx.conf test failed
Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: nginx.service: control process exited, code=exited status=1
Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: Failed to start A high performance web server and a reverse proxy server.
I don't know if a configuration is missing or if the problem come from the fact my certificate and my intermediate certificate have the extension .cer instead of .crt When I done my research for my error, I find .cer files seem be equivalent to .crt (just a different extension). I tried to inverse certificate and intermediate certificate in the bundle without success, use only the certificate with the intermediate certificate, same problem.
Like I have never configure a certificate before, I'm a little bit lost.
Thank you.
nginx ssl
New contributor
add a comment |
I add a domain name and some subdomain buy with 1&1 and my web server is on debian with NGinx.
I begin to configure a website with a subdomain. Without the SSL, it works but now, I try to add the SSL. I generated it via the 1&1 interface which use Digicert and I follow these instructions: https://knowledge.digicert.com/solution/SO17664.html
So, after the certificate bundle, I configure my nginx file for my subdomain to use the SSL:
server {
listen 443 ssl;
listen [::]:443 ssl;
keepalive_timeout 70;
ssl on;
ssl_certificate /etc/ssl/certs/_.my_domain.ca_ssl_certificate_complete.pem;
ssl_certificate_key /etc/ssl/certs/_.my_domain.ca_private_key.key;
server_name subdomain.mydomain.ca;
root /var/www/Mysoft;
index index.php;
location / {
try_files $uri /index.php;
fastcgi_pass unix:/run/php/php7.2-fpm.sock;
include fastcgi.conf;
}
}
Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/ssl/certs/_.my_domain.ca_private_key.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: configuration file /etc/nginx/nginx.conf test failed
Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: nginx.service: control process exited, code=exited status=1
Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: Failed to start A high performance web server and a reverse proxy server.
I don't know if a configuration is missing or if the problem come from the fact my certificate and my intermediate certificate have the extension .cer instead of .crt When I done my research for my error, I find .cer files seem be equivalent to .crt (just a different extension). I tried to inverse certificate and intermediate certificate in the bundle without success, use only the certificate with the intermediate certificate, same problem.
Like I have never configure a certificate before, I'm a little bit lost.
Thank you.
nginx ssl
New contributor
I add a domain name and some subdomain buy with 1&1 and my web server is on debian with NGinx.
I begin to configure a website with a subdomain. Without the SSL, it works but now, I try to add the SSL. I generated it via the 1&1 interface which use Digicert and I follow these instructions: https://knowledge.digicert.com/solution/SO17664.html
So, after the certificate bundle, I configure my nginx file for my subdomain to use the SSL:
server {
listen 443 ssl;
listen [::]:443 ssl;
keepalive_timeout 70;
ssl on;
ssl_certificate /etc/ssl/certs/_.my_domain.ca_ssl_certificate_complete.pem;
ssl_certificate_key /etc/ssl/certs/_.my_domain.ca_private_key.key;
server_name subdomain.mydomain.ca;
root /var/www/Mysoft;
index index.php;
location / {
try_files $uri /index.php;
fastcgi_pass unix:/run/php/php7.2-fpm.sock;
include fastcgi.conf;
}
}
Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/ssl/certs/_.my_domain.ca_private_key.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
Mar 09 23:35:03 vps97652.vps.ovh.ca nginx[15092]: nginx: configuration file /etc/nginx/nginx.conf test failed
Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: nginx.service: control process exited, code=exited status=1
Mar 09 23:35:03 vps97652.vps.ovh.ca systemd[1]: Failed to start A high performance web server and a reverse proxy server.
I don't know if a configuration is missing or if the problem come from the fact my certificate and my intermediate certificate have the extension .cer instead of .crt When I done my research for my error, I find .cer files seem be equivalent to .crt (just a different extension). I tried to inverse certificate and intermediate certificate in the bundle without success, use only the certificate with the intermediate certificate, same problem.
Like I have never configure a certificate before, I'm a little bit lost.
Thank you.
nginx ssl
nginx ssl
New contributor
New contributor
New contributor
asked 8 mins ago
Claire DClaire D
1011
1011
New contributor
New contributor
add a comment |
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Claire D is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f957572%2ferror-certificates-generate-by-digicert-on-nginx%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Claire D is a new contributor. Be nice, and check out our Code of Conduct.
Claire D is a new contributor. Be nice, and check out our Code of Conduct.
Claire D is a new contributor. Be nice, and check out our Code of Conduct.
Claire D is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f957572%2ferror-certificates-generate-by-digicert-on-nginx%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown