Installing SSL certificate Key mismatch

S

ssgill

Verified User
Joined
May 9, 2012
Messages
178
Hi, i have EV certificate and trying to install but getting key mismatch error. I have new key and certificate, tested the key on https://www.sslshopper.com/ key matcher and it passes, but when i use the same on directadmin panel "Paste a pre-generated certificate and key" getting error key is invalid.
Key starts with
-----BEGIN PRIVATE KEY-----

Any suggestions, thanks
 
You should have 3 (min) files.

1759861777875.png


contents of each file go in different places. Try putting:

private.key -> Key
certificate.crt -> Certificate
ca_bundle.crt -> SSL CA CERTIFICATE



1759861753738.png

That's how i've done it
 
ssgill said:
Thanks, this worked. So easy if they just add a note or make another text box at bottom for adding bundle. Thanks again
Click to expand...
No worries, Glad it worked. 👌 EV Certs are bleedin' expensive so you want them to work! 😁 I'm about to buy an OV cert for my company site so will have to do same.
 
Well this did not worked, bundle got saved and got message site will be secured in few minutes. Tested now still showing old certificate and getting same error "Key invalid" if i try to update. I have tested key and crt in different places, key was saved during certificate request generation.
Might have to install manually.
 
I thought you said you'd solved it? Sorry it never worked.

If you have to install them manually, the keys are in the /usr/local/directadmin/data/users/[username]/domains or wherever your setup has put them. You can usually find them by looking in your /usr/local/directadmin/data/users/[username]/httpd.conf file.


1759869697152.png



I would backup [domain].cacert, [domain].cert , [domain].cert.combined & [domain].key then add your new SSL keys and certs

Restart Directadmin and HTTPd and you should be good, Browser caches sometimes take a while to refresh and fetch new certificates so maybe clear your browsers cache and then test the new cert.

Hope this helps!
 
Hi, thanks for your time. Before i start manual setup just want to know if ECC certificate can be installed on server. This is what i get when i test key on server, with rsa command i get error

openssl rsa -in www_domainbital_com.key -check
140654369625408:error:0607907F:digital envelope routines:EVP_PKEY_get0_RSA:expecting an rsa key:../crypto/evp/p_lib.c:474:
Click to expand...

openssl ec -in www_domainbital_com.key -check
read EC key
EC Key valid.
writing EC key
Click to expand...
Thanks
 
Backup existing keys (Just in case) and install the EC certificates. They should be fine. Looks like openssl above is happy with your key so I don't see why they won't work. I have EC certs on my servers

1759946069391.png
 
I've just installed another OV SSL for my main DA server today, to protect my main domain.

I created the CSR with the tool in DA's SSL section, and copied the combined CSR and KEY to a private file. I gave the CSR to the CA to validate, check me and my company out, and 2 days later I get a fully working OV SSL Cert.

I put the Key I generated in the key section, the <domain>.crt in the Certificate section and they gave me a CAOV crt file to put in the CA section. Clicked save and that was that.

No issues, no errors, no dramas. And I totally believe this was down to a correct key/CSR bundle being created by DirectAdmin so the resulting key/CRTs were compatible. So satisfying seeing the company name in the cert! 😁🤣
 
Thanks all for your input, i had to reissue certificate with new key and that worked. I guess directadmin didn't liked the first key. Thanks again
 
You must log in or register to reply here.
Back
Top