為XAMPP Apache安裝SSL證書

Question

我使用openssl CLI生成了server.key ，然后從中生成了server.csr 。 然后我將server.csr提交給了公司（這是內部的），他們給了我一個文本文件，我將其重命名為server.crt

我按照本指南安裝了XAMPP的Apache的SSL證書

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR193

基本上，我使用以下內容編輯了httpd-ssl.conf文件：

SSLCertificateFile "conf/ssl.crt/server.crt"

SSLCertificateKeyFile "conf/ssl.key/server.key"

SSLCACertificatePath "conf/ssl.crt/"
SSLCACertificateFile "conf/ssl.crt/server.crt"

當我重新啟動Apache服務器時，它失敗並出現錯誤：

[Thu May 08 14:14:48.014710 2014] [ssl:warn] [pid 1924:tid 272] AH01906: RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 08 14:14:48.016664 2014] [ssl:warn] [pid 1924:tid 272] AH01907: RSA server certificate is not a leaf certificate (BasicConstraints: pathlen == 2 > 0 !?)
[Thu May 08 14:14:48.016664 2014] [ssl:warn] [pid 1924:tid 272] AH01909: RSA certificate configured for www.myservername.com:443 does NOT include an ID which matches the server name
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] AH02238: Unable to configure RSA server private key
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] SSL Library Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] AH02311: Fatal error initialising mod_ssl, exiting. See C:/xampp/apache/logs/error.log for more information

有人知道為什么嗎？ 如何解決這個問題？

這是我的系統信息

Windows NT LGLAC046 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

Apache/2.4.4 (Win32) OpenSSL/0.9.8y PHP/5.4.19 

OPENSSL_CONF    C:/xampp/apache/bin/openssl.cnf 

SSL Version     OpenSSL/0.9.8y 

Answer 1

我使用openssl CLI生成了server.csr，然后從中生成了server.key
您應該首先生成一個私鑰：

openssl genrsa -des3 -out server.key 1024

然后生成一個csr：

openssl req-新-key server.key -out server.csr

如果您要申請新證書，則將CSR發送到CA。 聽起來您擁有的是CA證書，而不是服務器證書。