为XAMPP Apache安装SSL证书

Question

我server.key使用opensslCLI 生成,然后server.csr从中生成.然后我提交server.csr给了我的公司(这是全部内部),他们给了我一个我重命名的文本文件server.crt

我按照本指南为XAMPP的Apache安装了SSL Cert

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR193

基本上我编辑了httpd-ssl.conf下面的文件:

SSLCertificateFile "conf/ssl.crt/server.crt"

SSLCertificateKeyFile "conf/ssl.key/server.key"

SSLCACertificatePath "conf/ssl.crt/"
SSLCACertificateFile "conf/ssl.crt/server.crt"

当我重新启动我的Apache服务器时,它失败并发出错误:

[Thu May 08 14:14:48.014710 2014] [ssl:warn] [pid 1924:tid 272] AH01906: RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 08 14:14:48.016664 2014] [ssl:warn] [pid 1924:tid 272] AH01907: RSA server certificate is not a leaf certificate (BasicConstraints: pathlen == 2 > 0 !?)
[Thu May 08 14:14:48.016664 2014] [ssl:warn] [pid 1924:tid 272] AH01909: RSA certificate configured for www.myservername.com:443 does NOT include an ID which matches the server name
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] AH02238: Unable to configure RSA server private key
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] SSL Library Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] AH02311: Fatal error initialising mod_ssl, exiting. See C:/xampp/apache/logs/error.log for more information

谁知道为什么？如何解决这个问题？

这是我的系统信息

Windows NT LGLAC046 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

Apache/2.4.4 (Win32) OpenSSL/0.9.8y PHP/5.4.19 

OPENSSL_CONF    C:/xampp/apache/bin/openssl.cnf 

SSL Version     OpenSSL/0.9.8y 

Answer 1

我使用openssl CLI生成了server.csr,然后生成了server.key,
你应该首先生成一个私钥:

openssl genrsa -des3 -out server.key 1024

然后生成一个csr:

openssl req -new -key server.key -out server.csr

如果您要申请新证书,则将CSR发送给CA. 听起来你拥有的是CA证书,而不是服务器证书.