SSL key doesn't match certificate

[CNRTechnologies]

Hello,

The certificate was working fine and has been for the last few months until today, I tried to make a few changes and it won't let me because it said the key doesn't match the certificate.

I tried everything, reissuing the cert, I do not have the option to download it as nginx, I just download it as crt and key and then convert it to pem using openssl.

For some reason, no matter what I do, I can't get 3CX to accept the key and crt, even though they match, they work on other platforms, I am not sure what I'm missing here.

 

[NickD_3CX]

Hi!

Could you please tell me where you are trying to use this certificate?
Is it for the Teams integration?
Have a look through this doc to see the most common pitfalls with the Teams integration:
https://www.3cx.com/docs/microsoft-teams-integration-faqs/

Give particular attention to the fact that the Cert can't be a wildcard one.

Can you also send a screenshot of the error message you are getting?

 

[CNRTechnologies]

Hello,

Correct it's in teams integration and I followed the faqs tried out any outstanding solutions as far as documented in the "Before you post" section on the forum but nothing in there I've gotten to work. We do use a supported SSL certificate as well, we're using a Comodo SSL Certificate and it worked in the past too until I decided to start adding some users accordingly. We have other tenants where it works fine on, but I cannot seem to get it to function on this specific one.

The provider we've gotten the Comodo SSL Cert through does not have the nginx option either, it has just the manual files or pkcs7, so any methods on conversion that are guaranteed to work, that would help.

 

[NickD_3CX]

Your best bet is to use OpenSSL (if you search, you can find it for Windows as well).

With a short Google search I found this command but I haven't tried it myself:

openssl pkcs7 -print_certs -in certificate.p7b -out certificate.cer

Another very common "issue" though here is that the Intermediate Certs aren't coming after the CA Cert in order in the file as it is mentioned here:
https://www.3cx.com/docs/microsoft-teams-integration-faqs/#h.uos0mgcmlxo5

You can cross-references the order of the certificates from here:
https://www.sslshopper.com/certificate-decoder.html
(Just test each cert section at a time, not all together)