On 23/06/10 09:10, Mark Rogers wrote:
I have a site with a cheapie SSL certificate from 123-Reg. It has been working for the past couple of years but they've just sent me a new certificate which is crashing Apache when I try to install it.
Fixed it myself.
123-Reg helpfully email you the new certificate at renewal time, but they don't email you the key, nor do they tell you to update it in the certificate email. I can see why emailing it would be insecure, but if you only replace one then (obviously) it breaks. I say obviously, although I obviously didn't work it out myself instantly. Generally speaking, though, if you have a new padlock then it's not much use without a new key.....