SSL do not work for me

[pppplus]

Hi,

Big problem with SSL

1. I generate CSR
2. I try to paste CSR + Certificate

I have always the same answer :

Unable to find key

If I paste only CSR, I have :

Unable to find certificate
Unable to find key

If I paste only certificate, I have :

Unable to find key

So, the key appears to be not present on the server.
How to verify ? Where is the key in the server ?

Thanks for your help

 

[pppplus]

Ok, I miss something, I do it again.

1. I request CSR and send it to geotrust

-----BEGIN CERTIFICATE REQUEST-----
MIIDAjCCAeoCAQAwgZcxCzAJBgNVBAYTAkZSMQwwCgYDVQQIEwNibm8xDzANBgNV
...
wG+7vHPnbz9gNB5YOG/jbMozJkjWyAC3Y3gKyoUPufX4OG43TZvXsKKFYgX/s+dB
bCjmguna
-----END CERTIFICATE REQUEST-----

2. They send ---- Begin Certificate ---
3. I past their Certificate in CA zone, and check it

-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIDAKWWMA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVT
...
zz+fwb7x80pTr3Khm06sPh7G1t5wKflcXhHaNDS02g8/nm2yNqrMM4ycoF1BzONg
zE+qKw==
-----END CERTIFICATE-----

4. I past their Certificate under ---- BEGIN RSA PRIVATE KEY ---

-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIDAKWWMA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVT
...
zz+fwb7x80pTr3Khm06sPh7G1t5wKflcXhHaNDS02g8/nm2yNqrMM4ycoF1BzONg
zE+qKw==
-----END CERTIFICATE-----
-----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEAwZdk6A+Hqi+7q1n58BQFoavPSvk0jM2zX3HDWiZj7Zvfk3BF
T5e37+uQ3S5KiCj0YDP+PryIFAfJYdTDfPxK2l+BZ2nbh53kNNpd3q3BPhpZgiMW

...
pZPduWaNrLBNAKH3OGQhrTtwc5m2iAN1oXq1O56eLy1+fvpiwXfqMof821y/yPig
iKWVTUNN8ppZX3MK5Rc1ffRZsmEp7rg3Zec+5yE6+5gP0g0YJB6yzg==
-----END RSA PRIVATE KEY-----

When I register, no error, that's perfect.

But no !

When open the link : https://www.gsmchinois.com/
Always the same alert !

Have you an idea about my problem ?
Do you need more informations ?

 

[zEitEr]

Suppose, you need to paste a CA Root Certificate

 

[pppplus]

Thanks for your reply.
Sorry, I do not understand what you mean.

 

[zEitEr]

Open SSL page for your domain in Directadmin, scroll down and find "Click Here to paste a CA Root Certificate" => A page "Certificate Authority SSL Certificate" will be opened => Click "Use a CA Cert" and paste CA Root Certificate from geotrust => Click "Save".

 

[pppplus]

Is it not what I've done here ?

3. I past their Certificate in CA zone, and check it

-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIDAKWWMA0GCSqGSIb3DQEBBQUAMGExCzAJBgNVBAYTAlVT
...
zz+fwb7x80pTr3Khm06sPh7G1t5wKflcXhHaNDS02g8/nm2yNqrMM4ycoF1BzONg
zE+qKw==
-----END CERTIFICATE-----

It is the certificate geotrust send after CSR

 

[zEitEr]

Perhaps, I was not enough careful while reading. Thus, perhaphs, you might need to consult with geotrust.

My browser could not verify your SSL Sertificate. It could not find and trust issuer.

ERROR: cannot verify www.gsmchinois.com's certificate, issued by `/C=FR/ST=bno/L=france/O=gsmchinois/OU=gsmchinois/CN=www.gsmchinois.com/[email protected]':
Self-signed certificate encountered.

Is it a self-signed certificate?

 

[pppplus]

no, it is not

but it appears you find Self-signed certificate.

I do it again, but not sure CSR will be the same, so I have to request new certificate...

 

[zEitEr]

Did you restart Apache? Perhaps there was an error and apache did not restart.

 

[pppplus]

My client forgot to valid the certificate in the email !!!! So I can wait and wait...

Grrrr, I have to do it again. Thanks for your help.
I will come back with news, when all is done a new time.

 

[pppplus]

So stupid...

My client does not validate email, and gives me an old certificate... And affirms it was the last one.

So I do it again, and it works in 3 mn !


Step 3 is not necessary.

It is just necessary to past certificate, just after RSA key (it's what I've done the first time, like the other times)

So next time, I give my client the process to follow, and it will do it itself...

 

[zEitEr]

That's good news. I confirm, that's working, my Opera accepted and verified certificate.