godaddy chained certs issue

[Igor Sysoev]

On Mon, Jun 16, 2008 at 01:50:24PM -0700, Cliff Wells wrote:

> I'm having an issue getting a Godaddy chained cert working.  It works fine under Apache.
> 
> Apache config:
> 
> SSLCertificateFile /etc/certs/domain.com.crt
> SSLCertificateKeyFile /etc/certs/domain.com.key
> SSLCertificateChainFile /etc/certs/sf_intermediate_bundle.crt
> 
> 
> To prepare the certs for use with Nginx, I used the following:
> 
> $ cat domain.com.crt sf_intermediate_bundle.crt > domain.com-combined.crt
> 
> (I've also tried reversing the order of the files).
> 
> Nginx config:
> 
> ssl_certificate          /etc/certs/domain.com-combined.crt;
> ssl_certificate_key      /etc/certs/domain.com.key;
> 
> 
> Upon starting Nginx I get the following:
> 
> Starting nginx: 2008/06/16 13:40:17 [emerg] 8586#0: SSL_CTX_use_PrivateKey_file("/etc/certs/www.lazulijewelry.com.key") failed 
> (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
> 
> Any suggestions?

Looking in Google, I have found these relevant pages:

https://www.thawte.com/ssl-digital-certificates/technical-support/ssl/apache.html#error2
http://openvpn.net/archive/openvpn-users/2005-03/msg00517.html


-- 
Igor Sysoev
http://sysoev.ru/en/