[Modules] GnuTls: Base64 unexpected header error

Simon Josefsson simon at josefsson.org
Wed May 20 10:26:35 EDT 2009

gnd at itchybit.org writes:

>> It seems it is a PKCS #8 key. You can convert it to a format that
>> mod_gnutls should be able to read
>> using certtool -k.
> I tried to convert the key with:
> certtool --generate-privkey --infile xxx_real.key --outfile key.pem
> and its working, insofar as apache will start up, but the website is not
> working because of:
> An error occurred during a connection to www.mobivita.com.
> Peer's certificate has an invalid signature.
> (Error code: sec_error_bad_signature)
> (this is what firefox tells me).
> Maybe i did not convert the key correctly ?

That command generates a new key, it does not convert your existing key.
So signature failures is expected.  Try:

certtool -k < oldkey.pem > newkey.pem


More information about the Modules mailing list