Welcome! Log In Create A New Profile


Certificate Error

Software Info
December 14, 2022 10:04PM
Hi All,
I would really appreciate some help with this sticky problem. I am
using nginx as a reverse proxy. I have version 1.20.1 running on
FreeBSD 13.1. Today I set up for a new domain. I got a wildcard
certificate for mydomain.com from GoDaddy. I put the paths in
nginx.conf but when I run nginx -t
I get the following error: nginx:
[emerg] SSL_CTX_use_PrivateKey("/usr/local/etc/nginx/ssl/domain.com.key")
failed (SSL: error:0B080074:x509 certificate
routines:X509_check_private_key:key values mismatch)
nginx: configuration file /usr/local/etc/nginx /nginx.conf test failed

When I ran the test below to check the Public and Private keys, I get
back the same checksum so I guess the Certs must be ok.
# openssl rsa -modulus -in domain.com.key -noout | md5sum
# openssl x509 -modulus -in domain.com.crt -noout | md5sum

This is the relevant section in my nginx.conf
server {
if ($country_access = no) {
return 403;
listen 443 ssl http2;
server_tokens off;
more_clear_headers Server;
server_name this.domain.com;
ssl_certificate ssl/gd_bundle-g2-g1.crt;
ssl_certificate_key ssl/domain.com.key;
ssl_dhparam ssl/dhparams.pem;
ssl_ecdh_curve secp384r1;
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate ssl/domain.com.crt;
resolver valid=300s;
resolver_timeout 10s;
ssl_protocols TLSv1.3 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 1h;
ssl_session_tickets off;
add_header Strict-Transport-Security
"max-age=31536000;includeSubDomains" always;
access_log /var/log/nginx/access.log main;
log_not_found on;
nginx mailing list
Subject Author Posted

Certificate Error

Software Info December 14, 2022 10:04PM

Re: Certificate Error

gariac December 14, 2022 10:56PM

Re: Certificate Error

Maxim Dounin December 14, 2022 11:34PM

Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 327
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready