Installing GoDaddy SSL Certificate on FileZilla Server

[jaygee]

Good Morning

Has anybody installed an SSL certificate provided by GoDaddy to FileZilla server? If so, please could you advise on the correct procedure?

When I try to apply the certificate provided by GoDaddy, I get an alert that states 'Could not load key file'.

I would greatly appreciate the advice of anyone who has done this previously.

[boco]

Checklist

-Is it in PEM format?
-Does it contain the complete keychain? FileZilla Server doesn't use the Windows cert store, so you need to include everything including the root cert.
-Is the private key there?

[friday328]

I appear to be in the same situation. Thanks for the checklist. I'm attempting to figure out what on the list I am missing...

My starting point:
- I created my CSR from an SSL VPN appliance. It produced a private key file with extension .key (server.key).
- I have a GoDaddy wildcard certificate with extension .crt (server.crt).
- I also have the GoDaddy intermediate certificates (gd_bundle.crt).

Checklist:

- Is it in PEM format?
According to this link, .key appears to be a valid PEM format.

- Does it contain the complete keychain?
I am able to get FTPS working with the Filezilla self-signed cert. In this case, I notice that only a single file (certificate.crt) is being reference for both "Private key file:" and "Certificate file:", and that file appears to contain both the private key ("-----BEGIN RSA PRIVATE KEY-----") and the cert ("-----BEGIN CERTIFICATE-----"). So I attempted to combine the text from server.key, server.crt, and gd_bundle.crt into a single file (GoDaddyKeyAndCerts.crt). But I still get the error 'Could not load key file.' It seems likely that this is where I'm doing something wrong, but I'm not sure what.

- Is the private key there?
I have also tried specifying 'C:\<path>\server.key' and 'C:\<path>\server.crt' for 'Private key file:" and 'Certificate file:", respectively. This also returns 'Could not load key file.'

Thanks for any help you can provide!

[botg]

According to this link, .key appears to be a valid PEM format.

I hope you didn't upload your key file there. If you did, consider your key as compromised. Revoke your certificate, throw away the key and start over.

[botg]

I've created a test build of FileZilla Server that includes additional diagnostics: https://filezilla-project.org/codesquid ... _debug.exe

It'll tell in more detail why it cannot load the key file.

[friday328]

Thankfully, I knew better than to upload my key. But thanks for the warning.

Turns out my problem was the key password. Once I entered it correctly everything worked as expected.

Thank you!