Installing GoDaddy SSL Certificate on FileZilla Server

Need help with FileZilla Server? Something does not work as expected? In this forum you may find an answer.

Moderator: Project members

Post Reply
Message
Author
jaygee
500 Command not understood
Posts: 1
Joined: 2012-12-12 09:39
First name: Jay
Last name: Gee

Installing GoDaddy SSL Certificate on FileZilla Server

#1 Post by jaygee » 2012-12-12 10:23

Good Morning

Has anybody installed an SSL certificate provided by GoDaddy to FileZilla server? If so, please could you advise on the correct procedure?

When I try to apply the certificate provided by GoDaddy, I get an alert that states 'Could not load key file'.

I would greatly appreciate the advice of anyone who has done this previously.

User avatar
boco
Contributor
Posts: 24434
Joined: 2006-05-01 03:28
Location: Germany

Re: Installing GoDaddy SSL Certificate on FileZilla Server

#2 Post by boco » 2012-12-12 15:49

Checklist

-Is it in PEM format?
-Does it contain the complete keychain? FileZilla Server doesn't use the Windows cert store, so you need to include everything including the root cert.
-Is the private key there?
### BEGIN SIGNATURE BLOCK ###
No support requests per PM! You will NOT get any reply!!!
FTP connection problems? Do yourself a favor and read Network Configuration.
All FileZilla products fully support IPv6. http://worldipv6launch.org
### END SIGNATURE BLOCK ###

friday328
500 Syntax error
Posts: 13
Joined: 2014-03-28 22:06

Re: Installing GoDaddy SSL Certificate on FileZilla Server

#3 Post by friday328 » 2014-03-28 22:27

I appear to be in the same situation. Thanks for the checklist. I'm attempting to figure out what on the list I am missing...

My starting point:
- I created my CSR from an SSL VPN appliance. It produced a private key file with extension .key (server.key).
- I have a GoDaddy wildcard certificate with extension .crt (server.crt).
- I also have the GoDaddy intermediate certificates (gd_bundle.crt).

Checklist:

- Is it in PEM format?
According to this link, .key appears to be a valid PEM format.

- Does it contain the complete keychain?
I am able to get FTPS working with the Filezilla self-signed cert. In this case, I notice that only a single file (certificate.crt) is being reference for both "Private key file:" and "Certificate file:", and that file appears to contain both the private key ("-----BEGIN RSA PRIVATE KEY-----") and the cert ("-----BEGIN CERTIFICATE-----"). So I attempted to combine the text from server.key, server.crt, and gd_bundle.crt into a single file (GoDaddyKeyAndCerts.crt). But I still get the error 'Could not load key file.' It seems likely that this is where I'm doing something wrong, but I'm not sure what.

- Is the private key there?
I have also tried specifying 'C:\<path>\server.key' and 'C:\<path>\server.crt' for 'Private key file:" and 'Certificate file:", respectively. This also returns 'Could not load key file.'

Thanks for any help you can provide!

User avatar
botg
Site Admin
Posts: 32089
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Installing GoDaddy SSL Certificate on FileZilla Server

#4 Post by botg » 2014-03-29 07:25

According to this link, .key appears to be a valid PEM format.
I hope you didn't upload your key file there. If you did, consider your key as compromised. Revoke your certificate, throw away the key and start over.

User avatar
botg
Site Admin
Posts: 32089
Joined: 2004-02-23 20:49
First name: Tim
Last name: Kosse
Contact:

Re: Installing GoDaddy SSL Certificate on FileZilla Server

#5 Post by botg » 2014-03-29 07:44

I've created a test build of FileZilla Server that includes additional diagnostics: https://filezilla-project.org/codesquid ... _debug.exe

It'll tell in more detail why it cannot load the key file.

friday328
500 Syntax error
Posts: 13
Joined: 2014-03-28 22:06

Re: Installing GoDaddy SSL Certificate on FileZilla Server

#6 Post by friday328 » 2014-03-31 17:01

Thankfully, I knew better than to upload my key. But thanks for the warning.

Turns out my problem was the key password. Once I entered it correctly everything worked as expected.

Thank you!

Post Reply