user3858526
user3858526

Reputation: 43

Heroku, DNSSimple, and SSL: web app is still not secure

I'm trying to implement HTTPS on a custom domain for a Heroku application, but it returns an error stating that the connection is not secure - similar to the one seen here [link].

I purchased a certificate from DNSSimple. After setting up the SSL endpoint on Heroku, heroku certs returns:

Endpoint: foo.herokussl.com
Common Names: www.mydomain.com, mydomain.com
Trusted: True

On my DNSimple advanced editor for my domain, I have the following ALIAS and CNAME records:

ALIAS   mydomain.com        3600        another-name.herokuapp.com  
CNAME   www.mydomain.com    3600        another-name.herokuapp.com

I'm not sure why the connection to the custom domain is still not secure. Am I overlooking something?

Upvotes: 3

Views: 637

Answers (1)

John Beynon
John Beynon

Reputation: 37507

If your app is in the US region you should be using foo.herokussl.com as your ALIAS and CNAME values and not herokuapp.com addresses.

Upvotes: 2

Related Questions