如何在Heroku上添加新的https證書

我在Heroku上添加新的SSL證書時遇到問題。我在Ruby on Rails上的應用程序。我有entrust.crt，root.txt和chain.txt文件如何在Heroku上添加新的https證書

我有以下問題。

heroku證書：add public.pem private.key -a myapp 解決信任鏈......失敗！沒有鑰匙發現證書的簽名。

heroku certs：add public.pem private.key -a myapp --bypass 將SSL端點添加到myapp ...失敗！密鑰不匹配的PEM證書

請幫我生成PEM證書

我跟着https://devcenter.heroku.com/articles/ssl-endpoint但不能配置請幫我配置。

請給我按照步驟來配置。

entrustcert.crt

----- BEGIN CERTIFICATE ----- MIIFTTCCBDWgAwIBAgIETCI5YjANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UE BhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5l bnRydXN0Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEf MB0GA1UECxMWKGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50 cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xNDAyMjUy MzIwMTFaFw0xNTAyMjYwMzUxMzBaMIGYMQswCQYDVQQGEwJVUzETMBEGA1UE CBMKQ2FsaWZvcm5pYTERMA8GA1UEBxMIQmVya2VsZXkxIjAgBgNVBAoTGVN0 cmF0ZWdlbiBDb25zdWx0aW5nLCBMT EMxFTATBgNVBAsTDERPRSBEYXRhYmFz ZTEmMCQGA1UEAxMdd3d3LmVuZXJneXN0b3JhZ2VleGNoYW5nZS5vcmcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Sa0aHnPzJyjxPyJSbvzQ 19qslKTePKhK3ZkHqQ53KWsdiHDRahY + r1ptEU4IT9ljIuvBc5Ecr1/CSCAN 4iz4JAzWE3pTKR5AroyrYbsUT + ryXjHQn/IxUXfTMS/mjp2IqvXCHut0AqfE YLDTLruxEUtrBUjrIxuBDPPcdxwYQIwrGAcYTMZiEajAuGRsbGBt1EcEqYAp WoMC0mWXWwLc6BG + 9UEKt0ODbhqbX5qUMFxgJJJ5Fhyljl0lmXoSrPqvCeT8 rp9xlfPWETQUyopS0k5QCFT04/I + ofdNyqVcl + JKuTn5nbpCLyY2xtB0nARX + zjqtHUKNbw7eCjLo3bbAgMBAAGjggGCMIIBfjALBgNVHQ8EBAMCBaAwEwYD VR0lBAwwCgYIKwYBBQUHAwEwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2Ny bC5lbnRydXN0Lm5ldC9sZXZlbDFjLmNybDBkBggrBgEFBQcBAQRYMFYwIwYI KwYBBQ UHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MC8GCCsGAQUFBzAC hiNodHRwOi8vYWlhLmVudHJ1c3QubmV0LzIwNDgtbDFjLmNlcjBKBgNVHSAE QzBBMDUGCSqGSIb2fQdLAjAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVu dHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwKAYDVR0RBCEwH4Idd3d3LmVuZXJn eXN0b3JhZ2VleGNoYW5nZS5vcmcwHwYDVR0jBBgwFoAUHvGriQb4SQ8BM3fu FHruGXyTKE0wHQYDVR0OBBYEFCHpp0QMIP/UVRk6bRpQPr2i/40MMAkGA1Ud EwQCMAAwDQYJKoZIhvcNAQEFBQADggEBAAyPC3Iyz9zW4xpgClXx2do14V7/ 1fQrZnE9NKaaULOleENSR80JTPK7dcwpxIfMKLKrDokaN0WUFPZbqyB71jGU SlcULTRzUeaKKTi5dZuSjY/Qf6AqGwkfMGasno/Z + dIWskCcjMU4T9uUxhJt MPIYbO3ZLJHdWv1oRK4NDCfYTslWhDqBtuWMhj2ruzZNuuqJ7p + sTjF11mwh hxnk1UBlvSZ1vGqFGrcyLykQuadwFJiEUhaa2p5fQEXS1TwkmOWUyq7WiXl/ v5n8NJb/TkW5JdEE8x6MEvagq6 + ichlB2nYOcfJKK5xsMRqokssZ9y6YOhrj 的Zn/5OwQPuBnCvSk = ----- END CERTIFICATE -----

L1Cchain。TXT

----- BEGIN CERTIFICATE ----- MIIE9TCCA92gAwIBAgIETA6MOTANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChML RW50cnVzdC5uZXQxQDA + BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBp bmNvcnAuIGJ5IHJlZi4gKGxpbWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5 IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNVBAMTKkVudHJ1c3QubmV0IENlcnRp ZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw0xMTExMTExNTQwNDBaFw0yMTEx MTIwMjUxMTdaMIGxMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5j LjE5MDcGA1UECxMwd3d3LmVudHJ1c3QubmV0L3JwYSBpcyBpbmNvcnBvcmF0ZWQg YnkgcmVmZXJlbmNlMR8wHQYDVQQLExYoYykgMjAwOSBFbnRydXN0LCBJbmMuMS4w LAYDVQQDEyVFbnRydXN0IENlcnRpZmljYXRpb2 4gQXV0aG9yaXR5IC0gTDFDMIIB IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6MtPJ7eBdoTwhGNnY7jf8dL flqfs/9iq3PIKGu6EGSChxPNVxj/KM7A5g4GkVApg9Hywyrb2NtOBMwA64u2lty8 qvpSdwTB2xnkrpz9PIsD7028GgNl + cGxP3KG8jiqGa4QiHgo2nXDPQKCApy5wWV3 diRMmPdtMTj72/7bNwJ2oRiXpszeIAlJNiRpQvbkN2LxWW2pPO00nKOO29w61/CK B + 8u2NWTWnrtCElo4kHjWpDBhlX8UUOd4LLEZ7TLMjEl8FSfS9Fv29Td/K9ebHiQ ld7KOki5eTybGdZ1BaD5iNfB6KUJ5BoV3IcjqrJ1jGMlh9j4PabCzGb/pWZoVQID AQABo4IBDjCCAQowDgYDVR0PAQH/BAQDAgEGMBIGA1UdEwEB/wQIMAYBAf8CAQAw MwYIKwYBBQUHAQEEJzAlMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0 Lm5ldDAyBgNVHR8EKzApMCegJaAjhiFodHRwOi8vY3JsLmVudHJ1c3QubmV0LzIw NDhjYS5jcmwwOwYDVR0gBDQwMjAwBgRVHSAAMCgwJgYIKwYBBQUHAgEWGmh0dHA6 Ly93d3cuZW50cnVzdC5uZXQvcnBhMB0GA1UdDgQWBBQe8auJBvhJDwEzd + 4Ueu4Z fJMoTTAfBgNVHSMEGDAWgBRV5IHREYC + 2Im5CKMx + aEkCRa5cDANBgkqhkiG9w0B AQUFAAOCAQEAQJqHfojUzCanS/p4SiDV + aI2IbvuW6BPRI3PqvmXF5aEqchnm7vm EN551lZqpHgUSdl87TBeaeptJEZaiDQ9JifPaUGEHATaGTgu24lBOX5lH51aOszh DEw3oc5gk6i1jMo/uitdTBuBiXrKNjCc/4Tj/jrx93lxybXTMwPKd86wuinSNF1z /6T98iW4NUV5eh + Xrsm + CmiEmXQ5qE56JvXN3iXiN4VlB6fKxQW3EzgNLfBtGc7e mWEn7kVuxzn/9sWL4Mt8ih7VegcxKlJcOlAZOKlE + jyoz + 95nWrZ5S6hjyko1 + YQ wfsm5p9GJKaxB825DOgNghYAHZaS/KYIoA == ----- END CERTIFICATE -----

L1Croot。TXT

----- BEGIN CERTIFICATE ----- MIIEKjCCAxKgAwIBAgIEOGPe + DANBgkqhkiG9w0BAQUFADCBtDEUMBIGA1UEChMLRW50cnVzdC5u ZXQxQDA + BgNVBAsUN3d3dy5lbnRydXN0Lm5ldC9DUFNfMjA0OCBpbmNvcnAuIGJ5IHJlZi4gKGxp bWl0cyBsaWFiLikxJTAjBgNVBAsTHChjKSAxOTk5IEVudHJ1c3QubmV0IExpbWl0ZWQxMzAxBgNV BAMTKkVudHJ1c3QubmV0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5ICgyMDQ4KTAeFw05OTEyMjQx NzUwNTFaFw0yOTA3MjQxNDE1MTJaMIG0MRQwEgYDVQQKEwtFbnRydXN0Lm5ldDFAMD4GA1UECxQ3 d3d3LmVudHJ1c3QubmV0L0NQU18yMDQ4IGluY29ycC4gYnkgcmVmLiAobGltaXRzIGxpYWIuKTEl MCMGA1UECxMcKGMpIDE5OTkgRW50cnVzdC5uZXQgTGltaXRlZDEzMDEGA1UEAxMqRW50cnVzdC5u ZXQgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgKDIwNDgpMIIBIjA NBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEArU1LqRKGsuqjIAcVFmQqK0vRvwtKTY7tgHalZ7d4QMBzQshowNtTK91euHaYNZOL Gp18EzoOH1u3Hs/lJBQesYGpjX24zGtLA/ECDNyrpUAkAH90lKGdCCmziAv1h3edVc3kw37XamSr hRSGlVuXMlBvPci6Zgzj/L24ScF2iUkZ/cCovYmjZy/Gn7xxGWC4LeksyZB2ZnuU4q941mVTXTzW nLLPKQP5L6RQstRIzgUyVYr9smRMDuSYB3Xbf9 + 5CFVghTAp + XtIpGmG4zU/HoZdenoVve8AjhUi VBcAkCaTvA5JaJG/+ EfTnZVCwQ5N328mz8MYIWJmQ3DW1cAH4QIDAQABo0IwQDAOBgNVHQ8BAf8E BAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUVeSB0RGAvtiJuQijMfmhJAkWuXAwDQYJ KoZIhvcNAQEFBQADggEBADubj1abMOdTmXx6eadNl9cZlZD7Bh/KM3xGY4 + WZiT6QBshJ8rmcnPy T/4xmf3IDExoU8aAghOY + rat2l098c5u9hURlIIM7j + VrxGrD9cv3h8Dj1csHsm7mhpElesYT6Yf zX1XEC + bBAlahLVu2B064dae0Wx5XnkcFMXj0EyTO2U87d89vqbllRrDtRnDvV5bu/8j72 gZyxKT J1wDLW8w0B62GqzeWvfRqqgnpv55gcR5mTNXuhKwqeBCbJPKVt7 + bYQLCIt + jerXmCHG8 + c8eS9e nNFMFY3h7CI3zJpDC5fcgJCNs2ebb0gIFVbPv/ErfF6adulZkMV8gzURZVE = ----- END CERTIFICATE -----

來源

2014-02-28 jayesh

這聽起來像你沒有正確地在您的public.pem證書的簽名證書鏈。此證書必須包含您的主機SSL證書以及完整的證書鏈，並將其鏈接回根證書。

如果你有證書和證書授權鏈，你必須結合這些成像這樣一個heroku.pem證書文件：

-----BEGIN CERTIFICATE----- 
(Your Primary SSL certificate: your_domain_name.crt) 
-----END CERTIFICATE----- 
-----BEGIN CERTIFICATE----- 
(Your Intermediate certificate: DigiCertCA.crt) 
-----END CERTIFICATE----- 
-----BEGIN CERTIFICATE----- 
(Your Root certificate: TrustedRoot.crt) 
-----END CERTIFICATE-----

您將需要這些證書項的單獨文件中結合，在上面的確切順序。

在你的情況，應該是：

如果您遇到了麻煩格式，這裏是該文件內容的要點：https://gist.github.com/wpeterson/3220e0be105a3cbe4eef

來源

2014-02-28 16:06:21 Winfield

我使用OpenSSL創建genrsa -des3退房手續服務器server.key文件。 pass.key 2048 openssl rsa -in server.pass.key -out server.key然後根據你的描述順序生成heroku.pem文件這個錯誤是來自heroku certs：add heroku.pem server.key -a energystorageexchange --bypass 添加SSL端點到energystorageexchange ...失敗！密鑰與PEM證書不匹配 – jayesh

您已經生成了私鑰（'server.key'），但沒有生成證書。 SSL證書必須由證書頒發機構頒發。您的DNS提供商可能會出售它們。當您頒發SSL證書時，您將獲得證書，密鑰和簽名證書鏈到根。 – Winfield

我已委託它提供的SSL證書entrustcert.crt L1Cchain.txt和L1Croot.txt – jayesh

我有這個問題，它原來我從Comodo下載了一箇舊的證書。當我下載正確的證書時，它工作正常。

而且，我能使用此命令包含所有的中介證書，並沒有將它們組合成1個文件：

heroku certs:update *.crt server.key -a my-app

來源

2016-03-29 07:11:46 Josh

如何在Heroku上添加新的https證書

回答

相關問題