Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 28th February 2011, 19:40
avalox avalox is offline
Junior Member
 
Join Date: Feb 2011
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default some (nginx) SSL Questions

Hi,

my name is Sebastian, i am from Germany and i am new on howtoforge.com.

I now would like to ask for some help.

Some of my friends gave me a new SSL Cert for his Domain.

The are 4 files in the Archive he gave me:

UTNaddTrustServerCA.crt
AddtrustExternalCARoot.crt
domain.crt
domain.key

normaly i only have 2 files. The Cert and the Key file. Is it possible to merge the 3 crt files into 1 file to use it in my nginx Loadbalancer?

I tried to just copy / paste all 3 files into one, but that gave me an nginx error:

[emerg]: SSL_CTX_use_PrivateKey_file("/etc/nginx/ssl/domain.key") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)

Second question:

let us say i have one virtual host with servername = test.example.com and serveralias = bla.example.com. Is it possible to configure one ssl cert for test.example.com and different one for bla.example.com in one virtual host?

i would say no.

Thanks and best regards
Sebastian
Reply With Quote
Sponsored Links
  #2  
Old 1st March 2011, 16:33
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,739 Times in 2,574 Posts
Default

Quote:
Originally Posted by avalox View Post
Is it possible to merge the 3 crt files into 1 file to use it in my nginx Loadbalancer?
Generally yes. There's an example on http://nginx.groups.wuyasea.com/arti...ate-on-nginx/2

Quote:
Originally Posted by avalox View Post
Second question:

let us say i have one virtual host with servername = test.example.com and serveralias = bla.example.com. Is it possible to configure one ssl cert for test.example.com and different one for bla.example.com in one virtual host?

i would say no.
The problem is that you need one IP address per SSL vhost, so you cannot do this in one virtual host.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 1st March 2011, 23:16
avalox avalox is offline
Junior Member
 
Join Date: Feb 2011
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default

thanks for your answer. i will try it.

best regards
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Creating a SSL certificate - Quick guide SamTzu Tips/Tricks/Mods 22 4th January 2011 13:38
Questions: Multisite (Drupal), Forwarding, SSL, ISPConfig tester321 Installation/Configuration 10 5th April 2010 22:32
A few nginx questions JACOBKELL Server Operation 0 15th July 2009 15:45
SSL for virtual hosts on one certificate rbartz Tips/Tricks/Mods 8 20th November 2007 17:59
2 Questions (1 SSL Related and 1 dns forward related) phamels Installation/Configuration 11 4th January 2006 01:33


All times are GMT +2. The time now is 20:26.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.