为XAMPP安装SSL证书

Question

我使用server.key CLI生成了openssl，然后用它生成了server.csr。然后我向我的公司提交了server.csr (这都是内部的)，他们给了我一个文本文件，我把它重命名为server.crt。

我按照本指南为XAMPP的Apache安装SSL证书

https://knowledge.verisign.com/support/ssl-certificates-support/index?page=content&actp=CROSSLINK&id=AR193

基本上，我用以下内容编辑了httpd-ssl.conf文件：

SSLCertificateFile "conf/ssl.crt/server.crt"

SSLCertificateKeyFile "conf/ssl.key/server.key"

SSLCACertificatePath "conf/ssl.crt/"
SSLCACertificateFile "conf/ssl.crt/server.crt"

当我重新启动Apache服务器时，它失败了，并产生了错误：

[Thu May 08 14:14:48.014710 2014] [ssl:warn] [pid 1924:tid 272] AH01906: RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu May 08 14:14:48.016664 2014] [ssl:warn] [pid 1924:tid 272] AH01907: RSA server certificate is not a leaf certificate (BasicConstraints: pathlen == 2 > 0 !?)
[Thu May 08 14:14:48.016664 2014] [ssl:warn] [pid 1924:tid 272] AH01909: RSA certificate configured for www.myservername.com:443 does NOT include an ID which matches the server name
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] AH02238: Unable to configure RSA server private key
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] SSL Library Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch
[Thu May 08 14:14:48.016664 2014] [ssl:emerg] [pid 1924:tid 272] AH02311: Fatal error initialising mod_ssl, exiting. See C:/xampp/apache/logs/error.log for more information

，有人知道为什么吗？如何解决这个问题？

这是我的系统信息

Windows NT LGLAC046 6.1 build 7600 (Windows Server 2008 R2 Enterprise Edition) i586 

Apache/2.4.4 (Win32) OpenSSL/0.9.8y PHP/5.4.19 

OPENSSL_CONF    C:/xampp/apache/bin/openssl.cnf 

SSL Version     OpenSSL/0.9.8y 

Answer 1

我使用openssl生成了server.csr，然后根据它生成了server.key。

您应该首先生成一个私钥：

openssl genrsa -des3 -out server.key 1024

然后生成一个csr：

openssl req -new -key server.key -out server.csr

如果您请求一个新的证书，那么您将CSR发送到CA。听起来，您拥有的是CA证书，而不是服务器证书。