Re: [cobalt-users] Externally signed SSL certificate

[Mark Engelhardt <marke@xxxxxxxxxxxxxxxxxxxxxxxx>]

I believe Equifax and verisign will do up a new cert for free within about
the first week.  

I would as them for a no charge replacement they will need a new csr from
you.

Mark

on 12/17/00 10:42 PM, Alfredo at alfredo@xxxxxxxxxxxxxxx wrote:

>> 
>> I just received a externally signed SSL certificate and tried to put it on
>> my RaQ 3. When I try to activate it, tha RaQ says something like "The
>> private key doesn't match the certificate".
>> 
>> Maybe it wasn't a good idea to play with the certificates after submitting
>> the CSR to the CA. I found the private key in the file system of the RaQ.
> 
> How did you "play" with them? The authorizing agent only "signs" the
> cert you sent. If you changed it, it's just not the same cert. If you
> changed the key and have no copy of the existing one (the one that
> was there when you generated the cert you sent for authorization)
> then I don't think there's a way out for you.
> 
> I could be wrong and hope I am but Raq does not make backups for keys
> that I know of.
> 
> Lesson for the future: ALWAYS make your own backups of ssl documents
> and download them to your own machine or some other secure machine.
> SSL installation can be quirky on the Raq sometimes and you need to
> have those backups just in case.
> 
> Alfredo