CB Response: Receiving Message 'key values mismatch' When Attempting to Create Custom Certificate for Web UI

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Following message written to the '/var/log/cb/nginx/startup.log' file when attempting to create custom certificate for CB Response Console (Web UI):

nginx: [emerg] SSL_CTX_use_PrivateKey_file("/etc/cb/certs/servername-key.pem") failed (SSL: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch)

 

Environment

• CB Response Server: All Versions
• CB Response Console

Cause

• Original .pem and .key files do not match
• iptables may need to be reloaded

Resolution

1. Confirm .pem and .key files match
2. Reload iptables with following command:

   #service iptables reload