[SOLVED] Problem with server certificates. Error 0B080074

[aborrero]

Hi there.

In my server I get this error message when starting:

Cannot load private key file /etc/ssl/private/whatever.key: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

I generated the key and the cert from a PKCS12 file, using openssl

Any idea?

Regards.

[janjust]

the certificate used and the private key /etc/ssl/private/whatever.key do not belong to each other - you can also specify the pkcs12 file directly using

Code: Select all

pkcs12 </path/to/pkcs12/file>

[aborrero]

Hi.

The .crt and .key files are extracted from the pkcs12 file using openssl. I don't see anything bad with that.

Using pkcs12 file prompt for a password everytime I start the server. If there is a way to remove the password from a pkcs12 file i will look for.

[aborrero]

SOLVED!

It was a bad use of openssl.

To get key file:
openssl pkcs12 -in file.p12 -out file.key -clcerts -nodes
[...prompt for password...]

To get crt file:
openssl pkcs12 -in file.p12 -out file.crt -nocerts -nodes
[...prompt for password...]

[janjust]

Excellent!

BTW, you can remove the password from a PKCS12 file using

Code: Select all

openssl pkcs12 -in <p12file> -nodes -out <newp12file>