Trouble with Heroku SSL Endpoint

问题:

I am trying to add an SSL cert to Heroku. The cert was purchased from Network Solutions. I went through all of the steps and created a .csr file, uploaded that file to NetworkSolutions, downloaded their bundle of .crt files (MYSITE.crt, AddTrustExternalCARoot.crt, NetworkSolutionsDVServerCA.crt) and then combined the site cert & the intermediate certificate (AddTrustExternalCARoot.crt) bundles. When I try and add the final.crt file I produce to Heroku I get:

!    Expires at can't be blank
!    Pem is invalid

Using Preview I can clearly see that "Not Valid After" is set so I am not really sure what is going on here.

For what its worth I also tried combining NetworkSolutionsDVServerCA.crt with MYSITE.CRT & also combining all 3. All with no luck.

This kind of thing isn't my strong point (I am sure you can tell) so its very possible I am missing something but if you have any ideas on what it might be I would appreciate it.

Thanks

回答1:

I faced the same problem today.

Below are the steps I followed to fix it.

1. Combine the certificate files in the below order (from the site certificate to root certificate) into a .crt or .pem file. Lets assume you name it Mysite_combined.crt.

   MySite.crt, NetworkSolutionsDVServerCA.crt, AddTrustExternalCARoot.crt

2. Open Mysite_combined.crt the content of the file will look like

   -----BEGIN CERTIFICATE-----
   ..
   -----END CERTIFICATE----------BEGIN CERTIFICATE-----
   ..
   -----END CERTIFICATE----------BEGIN CERTIFICATE-----
   

Now, Insert line feed between each certificate. Make sure there is no white space or blank line in the edited file. The content should now look like

-----BEGIN CERTIFICATE-----
..
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
..
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----

1. Now add the certificate to Heroku using the command

   heroku certs:add Mysite_combined.crt Mysite.key

Note: Since Network solution certificate does not have a pass code, you can ignore the steps to remove pass code in heroku site. If you use a key which has pass code refer to this article which details how to setup the SSL for heroku. You should do the step 2 above in any case.

回答2:

Its likely their was an error in cat'ing your cert together with the intermediate. You should look to see that there was not a missing line break, or extra line breaks that may have caused the error.

回答3:

I had this problem as well and in my case it turned out to be the order of the arguments. Apparently the heroku utility expects the .crt file to precede the .key file.

In other words:heroku certs:add server.crt server.key

回答4:

When I got this error, I had to add a newline at the end of my site.crt before running this command:

$ cat site.crt ca_bundle.pem > final.crt