Your connection is not private error on Android device

[Lukas Tribus]

On Mon, 14 Nov 2022 at 21:33, James Read <jamesread5737 at gmail.com> wrote:
>> For nginx you need the base64 encoding, which is:
>>
>> https://ssl-ccp.secureserver.net/repository/sfig2.crt.pem
>>
>
> I tried adding that certificate but sudo nginx -t now returns the following error:
>
> nginx: [emerg] SSL_CTX_use_PrivateKey("/etc/ssl/private/wottot.com.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)
> nginx: configuration file /etc/nginx/nginx.conf test failed

The intermediate certificate does not replace your own certificate. It
replaces the unrelated root certificates.

http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_certificate

> the primary certificate comes first, then the intermediate certificates

So the file needs to contain first your certificate and then the
intermediate one.


Lukas