CODEWITHSUNDEEP
sslherokussl-certificate
Pramod Solanky
Pramod Solanky

Reputation: 1690

How do we avoid extra intermediate certificates from herokuapp

After searching for several hours I'm finally posting a question.

I have my ssl certificate uploaded to heroku with the SSL addon.Everything works fine and have no issues with the certificates.

However, when I visit http://www.digicert.com/help/index.htm?host=mydomain.com, I see 2 additional certs which I never uploaded onto heroku. I suspect they are the default certs found on heroku.com. I later on removed my certs from the server to check if they are really the default one's and to my surprise, I was right.

Now, the question is How do I remove the additional certs from the heroku?

Has anyone experienced this issue before ?

Thanks in advance

Upvotes: 2

Views: 567

Answers (1)

kch
kch

Reputation: 79552

You can upload the correct chain from your local system and bypass the Heroku client's chain completion with:

$ heroku certs:update crt-file key-file --bypass

(or certs:add for new endpoints.)

The trick is the --bypass flag.

Update: this is fixed on Heroku's end now. --bypass should generally no longer be required.

Upvotes: 3

Related Questions