[Resolved] GnuTLS error uploading purchased SSL cert

[cparliament]

GnuTLS error -60: The certificate and the given key do not match.

FileZilla Server 1.7.3 x86_64-W64-MINGW32 running on MS Server 2016 Standard

Error received while attempting to load purchased SSL certificate. Verified cert (x509) and key (rsa) via OpenSSL; matched. Created CSR generation command on Digicert CSR creator, and manually; running OpenSSL on Windows. Created/re-keyed cert from RapidSSL 3 times (new CSR each time), same error. Using "Configuration/Protocol Settings/FTP and FTP over TLS (FTPS) menu option, choosing "Use an upload x.509 certificate". Using upload certificate/key from file, no password used, errors on "Upload". Have added root and intermediate CA files to server OS and rebooted, same error. Suggestions?

[botg]

In case the certificate file also contains intermediate certificates, make sure the leaf certificate issued to you comes first in the file.

[cparliament]

This direct issues was resolved. The certificate method was not very intuitive, but I finally tried using the file option and manually adding the local file path and file name; this worked. So, it looks like the method of using "upload certificate" may not work correctly on Windows. What was confusing about the other option was there was no file dialogue available (like in the upload certificate option) or any indication to enter a local file path/file name.

In the end, I can now make a ftpes connection from my source applicaton. However, it does fail, but that is a discussion of another thread after a little more testing-before-posting.

From my point of view, please considered this "resolved" and close.

[boco]

Marked as resolved. Closed on request.