Solved 3CX does not start after installation with intermediate-certificate

[Nico Döller]

Hello,

We have the following Problem and hope to get help from this nice community as soon as possible.

Our certificate expired a few days ago as we simply forgot to renew it.
With a bit of worktime this is easy to fix.

BUT! Here comes our problem:

As we had some problems with snom-phones we noticed that we didnt install the intermediate-certificates with our old configuration.
With having to replace the certificates anyway we wanted to install the bundle with the intermediate-certificates included.
As soon as we install the PBX with our key and the bundle it does not start anymore (due to the nginx server not accepting the key).

Does anybody have experience with that kind of problem or ssl certificates in general?

Help would much be appreciated!

Best regards,

Nico Döller

 

[cobaltit]

You'd likely be better off on the Nginx forums as this seems to be a issue specific to Nginx. But no, everyone single one of my customers except for one (and they are switching in about a month) use the 3CX FQDN so I've zero experience doing what you are trying to do (as far as 3CX) and plan on keeping it that way. But Nginx is pretty popular so some googling should find you the answer pretty quickly, or even your certificate provider might have a guide.

 

[saint_]

What are the error messages in /var/log/nginx (access and error) ?

 

[Nico Döller]

What are the error messages in /var/log/nginx (access and error) ?

I´ve attached a screenshot with the error message.

 

[Alphabetic]

Have you made a .pem with your certificates?

See step 2.

https://www.digicert.com/csr-ssl-installation/nginx-openssl.htm

 

[saint_]

In a SSL Certificate, you need both a certificate and the private key which goes with it. They always come together.

Check also https://www.3cx.com/docs/self-hosted-instances-ssh/ on the top of what @kieferschild recommended. Maybe reading both pages can help.

 

[StefanW]

Intermediates and certs need to be concatenated into one file, however, the error states that the private key does not match the certificate at all.

https://www.google.com/search?q=ngi...0l3j69i64l3.2583j0j7&sourceid=chrome&ie=UTF-8

 

[Nico Döller]

Thank you all for the Help.

We solved the Problem be re-merging our Intermediates and the certificates in a different order.
(As apperently nginx needs that)