Hello, > Okay, I did everything you told me to do. First of all, the crt is a > test crt and has been all along. That's how Verisign works these days. > They give you a test cert until you pay them money. > > When I displayed the key, then converted it to pem format and displayed > the converted key, they looked pretty much the same to me. I've included > them below. > > The instructions that I'm following < > http://trac.lighttpd.net/trac/wiki/Docs%3ASSL > state I should cat the > crt and the key into a pem file: > $ cat host.key host.crt > host.pem > > I tried that with the old key (since they looked identical and since the > new one was a pem file already) and got this error from the server: You should cat real PEM encoded cert and key. PEM encoded private key has the following structure: -----BEGIN RSA PRIVATE KEY----- header (sometimes) and base64 data -----END RSA PRIVATE KEY-----
PEM encoded cert has the following structure: -----BEGIN CERTIFICATE----- base64 data -----END CERTIFICATE----- and this two files you should put in one file. Best regards, -- Marek Marcola <[EMAIL PROTECTED]> ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]