Windows XP keeps using the snakeoil certificate that Ubuntu shipped with, despite the fact that it has never been used in any virtual host ever.
The certificate is located at
I'm not sure where the key is. The only one I see that seems plausible is at
I think the CA certificat is at
but I'm just not sure.
So far I've tried various openssl commands, such as
openssl ca -keyfile /etc/ssl/private/ssl-cert-snakeoil.key \ -revoke /etc/ssl/certs/ssl-cert-snakeoil.pem \ -cert /etc/ssl/certs/ca-certificates.crt
The output from that one was
Using configuration from /usr/lib/ssl/openssl.cnf CA certificate and CA private key do not match 14805:error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch:x509_cmp.c:406:
I'm all out of ideas. Any help is greatly appreciated.
Here is what happened:
I bought a certificate from GeoTrust, installed it, activated the new virtualhost using that certificate, and restarted apache2. At no point in the lifetime of this server has any other certificate ever been used to secure web traffic, let alone the snakeoil certificate. Windows Vista and up, as well as OSX and all Linux distributions that I've tested use the correct certificate. Windows XP uses the snakeoil certificate (in IE. No other browsers on that VM). Here are some screenshots: