# nginx ssl certificate issue key values mismatch

I am have been trying to setup an ssl certificate for a few days now, I am buying it from Namecheap.com and I am buying a rapid ssl wildcard certificate I am doing the following:

1. Generate a csr - openssl req -newkey rsa:2048 -nodes -keyout server.key -out server.csr
2. I then wait to recieve an email to download the .crt file
3. Get the intermediate certificate and save it intermediatecert.crt
4. I then cat intermediatecert.crt >> sslcertificate.crt
5. I then add the following lines to my nginx virtual host file

ssl_certificate /etc/ssl/sslcertificate.crt;

ssl_certificate_key /etc/ssl/server.key;

6. I then restart my server and get the following error

[emerg]: SSL_CTX_use_PrivateKey_file("/etc/ssl/server.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)


Does anyone have any ideas ?

FIXED

I fixed this by not reissuing it via namecheap and went straight to rapidssl to reissue and upload my csr.

• You notice that you configured the key file as /etc/ssl/server.key, but your error message says /etc/nginx/ssl/server.key? I'd check the config again to make sure there are no stray SSL options that you may have left from earlier, and that you're hitting the right vhost. – cjc Jul 16 '12 at 12:47
• sorry it was a copy and paste error when I was writing the question. – Oliver Bayes-Shelton Jul 16 '12 at 12:48
• can you verify that your key actually matches the cert? kb.wisc.edu/middleware/page.php?id=4064 (basically, compare the modulus of the key and cert) – cjc Jul 16 '12 at 13:03
• I ran into the same issue with namecheap. It worked perfectly after re-issued through rapidssl. Thanks! – Sanketh Katta Jan 18 '13 at 20:15
• I also had to reissue through geotrust for it to work - after reissuing 3 times through namecheap thinking it was my fault. – user163271 Mar 6 '13 at 20:46