Home / server / Questions / 1148778
Accepted
poppopretn
Asked: 2023-11-29 07:19:42 +0800 CST

AH02565: Certificate and private key from <cert> and <private key> do not match

  • 772

I'm trying to update some expired SSL certificates internally on some Ubuntu and Redhat servers. I have an internal certificate authority for this (ADCS). These are the steps I'm taking:

  1. Generate CSR + private key using openssl

openssl req -out file.csr -newkey rsa:2048 -nodes -keyout file.key -config req.conf

  1. Submit CSR to Internal Active Directory Certificate Authority

  2. I'm given back a certificate in base64 format.

  3. I use this certificate and the private key on the web server. Everything works fine when I do this on an Ubuntu web server running lighttpd. I update the certificate/key and restart lighttpd, it works.

I replicate these exact steps but this time for a Redhat 7/8 server running Httpd and I get the following error: AH02565: Certificate and private key from and do not match

I've probably generated a new private key/csr five or six times now hoping the result would be different :D

What am I doing wrong here?

AH00558: httpd: Could not reliably determine the server's fully qualified domain name, using 127.0.0.1. Set the 'ServerName' directive globally to suppress this message
VirtualHost configuration:
*:443                  127.0.0.1 (/etc/httpd/conf.d/ssl.conf:39)
ServerRoot: "/etc/httpd"
Main DocumentRoot: "/var/www/html"
Main ErrorLog: "/etc/httpd/logs/error_log"
Mutex watchdog-callback: using_defaults
Mutex proxy-balancer-shm: using_defaults
Mutex rewrite-map: using_defaults
Mutex ssl-stapling-refresh: using_defaults
Mutex authdigest-client: using_defaults
Mutex lua-ivm-shm: using_defaults
Mutex ssl-stapling: using_defaults
Mutex proxy: using_defaults
Mutex authn-socache: using_defaults
Mutex ssl-cache: using_defaults
Mutex default: dir="/etc/httpd/run/" mechanism=default
Mutex cache-socache: using_defaults
Mutex authdigest-opaque: using_defaults
PidFile: "/etc/httpd/run/httpd.pid"
Define: DUMP_VHOSTS
Define: DUMP_RUN_CFG
User: name="apache" id=48
Group: name="apache" id=48
ssl

1 Answers

  1. Best Answer

    For whatever reason, it works after I rename the cert and key and move them both to another directory up one level. I'm not sure why since the file contents, owner of the file, and file permissions were the same. Oh well.

    • 0