SSL issues at HAProxy
SSL issues at HAProxy
- 主页
- 后台控制中心
- Community Forum
- Services
- SSL Certificate
- SSL issues at HAProxy
- Community Forum
- SSL issues at HAProxy
Topic: SSL issues at HAProxy
Hi, I have tried concatening the private key, the intermediate cert, and the 2017 cert into a pen from the ones I received from you but still not working at my HAProxy. Please help.
'bind 0.0.0.0:443' : inconsistencies between private key and certificate loaded from PEM file.
'bind 0.0.0.0:443' : inconsistencies between private key and certificate loaded from PEM file.
Reply with quote |Report
[quote=LIANG WONG]Hi, I have tried concatening the private key, the intermediate cert, and the 2017 cert into a pen from the ones I received from you but still not working at my HAProxy. Please help.
'bind 0.0.0.0:443' : inconsistencies between private key and certificate loaded from PEM file.[/quote]Below is the format of the PEM file. I think you may have got the order of the certificate, intermediate certificate and root certificate wrong. I recommend you first put just the private key and certificate into the PEM file and see how that goes. Then add in the intermediate at the end and verify.
-----BEGIN RSA PRIVATE KEY-----
(Your Private Key: domainname.key)
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
(Your Primary SSL certificate: domainname.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Intermediate certificate: intermediate1.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Root certificate: root.crt)
-----END CERTIFICATE-----
'bind 0.0.0.0:443' : inconsistencies between private key and certificate loaded from PEM file.[/quote]Below is the format of the PEM file. I think you may have got the order of the certificate, intermediate certificate and root certificate wrong. I recommend you first put just the private key and certificate into the PEM file and see how that goes. Then add in the intermediate at the end and verify.
-----BEGIN RSA PRIVATE KEY-----
(Your Private Key: domainname.key)
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
(Your Primary SSL certificate: domainname.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Intermediate certificate: intermediate1.crt)
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
(Your Root certificate: root.crt)
-----END CERTIFICATE-----
Reply with quote |Report
Concatenating the certs in below order works for me.
1) Root Cert
2) Intermediate Cert
3) Private Key
Thanks.
1) Root Cert
2) Intermediate Cert
3) Private Key
Thanks.
Reply with quote |Report
| Author | Topic: SSL issues at HAProxy |
|---|---|
|
LIANG WONG Joined: 2017/5/18 |
2017年5月19日星期五 下午2:58
Hi, I have tried concatening the private key, the intermediate cert, and the 2017 cert into a pen from the ones I received from you but still not working at my HAProxy. Please help.
'bind 0.0.0.0:443' : inconsistencies between private key and certificate loaded from PEM file. |
|
CobyDeCock Joined: 2017/3/23 |
2017年5月21日星期日 下午1:11
[quote=LIANG WONG]Hi, I have tried concatening the private key, the intermediate cert, and the 2017 cert into a pen from the ones I received from you but still not working at my HAProxy. Please help.
'bind 0.0.0.0:443' : inconsistencies between private key and certificate loaded from PEM file.[/quote]Below is the format of the PEM file. I think you may have got the order of the certificate, intermediate certificate and root certificate wrong. I recommend you first put just the private key and certificate into the PEM file and see how that goes. Then add in the intermediate at the end and verify. -----BEGIN RSA PRIVATE KEY----- (Your Private Key: domainname.key) -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- (Your Primary SSL certificate: domainname.crt) -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- (Your Intermediate certificate: intermediate1.crt) -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- (Your Root certificate: root.crt) -----END CERTIFICATE----- |
|
clewlb Joined: 2017/5/18 |
2017年5月21日星期日 下午7:56
Concatenating the certs in below order works for me.
1) Root Cert 2) Intermediate Cert 3) Private Key Thanks. |
2026年6月13日星期六 上午8:28
