如何在Heroku上添加新的https证书

Question

I have problem in adding new SSL certificate on Heroku. 我在Heroku上添加新的SSL证书时遇到问题。 my app on Ruby on Rails. 我在Ruby on Rails上的应用程序。 I have entrust.crt,root.txt and chain.txt file 我有entrust.crt，root.txt和chain.txt文件

I have following problem. 我有以下问题。

heroku certs:add public.pem private.key -a myapp Resolving trust chain... failed ! heroku证书：添加public.pem private.key -a myapp解决信任链......失败了！ No key found that signs the certificate. 没有钥匙发现签署证书。

heroku certs:add public.pem private.key -a myapp --bypass Adding SSL Endpoint to myapp... failed ! heroku证书：添加public.pem private.key -a myapp --bypass将SSL端点添加到myapp ...失败！ Key doesn't match the PEM certificate 密钥与PEM证书不匹配

Please help me to generate PEM certificate 请帮我生成PEM证书

I follow https://devcenter.heroku.com/articles/ssl-endpoint but not able to configure please help me to configure. 我按照https://devcenter.heroku.com/articles/ssl-endpoint但无法配置请帮我配置。

please give me steps to follow to configure. 请给我一些步骤来配置。

entrustcert.crt entrustcert.crt

L1Cchain.txt L1Cchain.txt

L1Croot.txt L1Croot.txt

Answer 1

It sounds like you did not include the signing certificate chain properly in your public.pem certificate. 听起来您没有在public.pem证书中正确包含签名证书链。 This certificate must contain your host SSL certificate, and a full chain of certificates back to the root certificate. 此证书必须包含主机SSL证书，以及返回根证书的完整证书链。

If you have the certificate and the certificate authorization chain, you must combine these into a single heroku.pem certificate file like so: 如果您拥有证书和证书授权链，则必须将它们组合到单个heroku.pem证书文件中，如下所示：

-----BEGIN CERTIFICATE----- 
(Your Primary SSL certificate: your_domain_name.crt) 
-----END CERTIFICATE----- 
-----BEGIN CERTIFICATE----- 
(Your Intermediate certificate: DigiCertCA.crt) 
-----END CERTIFICATE----- 
-----BEGIN CERTIFICATE----- 
(Your Root certificate: TrustedRoot.crt) 
-----END CERTIFICATE-----

You will need to combine these certificate entries in the single file, in the exact order above. 您需要按照上面的确切顺序在单个文件中组合这些证书条目。

In your case, that should be: 在你的情况下，应该是：

If you're having trouble with the formatting, here is a gist of the file contents: https://gist.github.com/wpeterson/3220e0be105a3cbe4eef 如果您在格式化方面遇到问题，请参阅以下文件内容： https ： //gist.github.com/wpeterson/3220e0be105a3cbe4eef

Answer 2

I had this problem and it turned out I was downloading an old cert from Comodo. 我遇到了这个问题，事实证明我正在从Comodo下载一个旧证书。 When I downloaded the correct cert it worked fine. 当我下载正确的证书时它工作正常。

Also, I was able to use this command to include all the intermediary certs and not have to combine them into 1 file: 此外，我能够使用此命令包含所有中间证书，而不必将它们合并为1个文件：

heroku certs:update *.crt server.key -a my-app

如何在Heroku上添加新的https证书

问题描述

2 个解决方案

解决方案1
2 已采纳 2014-02-28 16:06:21

解决方案2
0 2016-03-29 07:11:46

如何在Heroku上添加新的https证书

问题描述

2 个解决方案

解决方案1 2 已采纳 2014-02-28 16:06:21

解决方案2 0 2016-03-29 07:11:46

解决方案1
2 已采纳 2014-02-28 16:06:21

解决方案2
0 2016-03-29 07:11:46