Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have Nginx server with the SSL. I'm trying to submit a SSL certificate. After I restart Nginx I'm getting the error:

SSL_CTX_use_PrivateKey_file(".../example.com.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)

I found this solution. But, I'm not using of any bundles.

Any ideas on what is the issue here?

share|improve this question
    
exactly the same situation as nginx.org/en/docs/http/configuring_https_servers.html#chains but I'dont have any chain files... –  Dmitry T Apr 5 '12 at 1:34
    
What files do you have? Is this a new cert? Can you clarify what you've done so far? –  Shane Madden Apr 5 '12 at 1:43

1 Answer 1

cat star_domain_name.crt ca.pem > star_domain_name.pem

ca.pem -> root cert of your ssl provider


    ssl on;
    ssl_certificate /etc/nginx/ssl_certs/star_domain_name.pem;
    ssl_certificate_key /etc/nginx/ssl_certs/star_domain_name.key;

    ssl_session_timeout 5m;

    ssl_protocols SSLv2 SSLv3 TLSv1;
    ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
    ssl_prefer_server_ciphers on;
share|improve this answer
    
Note, the order matters here: you have to create the PEM using the domain's crt first, followed by the intermediate CA PEM. –  Sean Apr 2 '13 at 17:24

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.