Usually not.  Do the two have the same DNS name?
Can the "new" server correctly decrypt the private
key (if it is pass-phrase encrypted)?

I guess to go much further we should know what kind
of server software is in use.  If it is apache,
what does the log file say at at startup?

You can ensure the cert and key match by comparing
the modulus (and exponent :-) fields from:

openssl x509 -noout -text -in <certificatefile>
openssl rsa  -noout -text -in <privatekeyfile>

If the private key is encrypted with a passphrase,
you will need to give it for the "openssl rsa" call.

Grant wrote:

I generated a CSR and private key on my old (current)
server, and I'm having trouble getting the certificate
and key to not error on my new server.  Do the CSR and
private key need to be generated from the server they
will be installed on?

--

Charles B. (Ben) Cranston
mailto:[EMAIL PROTECTED]
http://www.wam.umd.edu/~zben

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to