Heroku SSL错误：密钥与PEM证书不匹配 [英] Heroku SSL error: key doesn't match PEM certificate

问题描述

我试图使用Heroku在这里建议的说明生成自签名证书： http： //www.akadia.com/services/ssh_test_certificate.html

这会创建sever.key和server.crt。

然后，我尝试使用以下命令将它们添加到heroku中：

heroku ssl：add server.crt server.key，我得到以下错误

找不到域名。确保域名mycorrectdomain.heroku.com已添加到您的Heroku应用程序中/ Key与PEM证书不匹配

以下是server.crt文件的内容：

  ----- BEGIN CERTIFICATE ----- 
 MIICvTCCAiYCCQDyHGnBdtovbzANBgkqhkiG9w0BAQUFADCBojELMAkGA1UEBhMC 
 VVMxCzAJBgNVBAgMAkNBMRIwEAYDVQQHDAlQYWxvIEFsdG8xEzARBgNVBAoMClR1 
 dG9yQ2xvdWQxETAPBgNVBAsMCFNvZnR3YXJlMSMwIQYDVQQDDBp0ZXN0LXR1dG9y 
 Y2xvdWQuaGVyb2t1LmNvbTElMCMGCSqGSIb3DQEJARYWYmxhaXJAbXl0dXRvcmNs 
 b3VkLmNvbTAeFw0xMTA4MDMxNzQ4NDdaFw0xMjA4MDIxNzQ4NDdaMIGiMQswCQYD 
 VQQGEwJVUzELMAkGA1UECAwCQ0ExEjAQBgNVBAcMCVBhbG8gQWx0bzETMBEGA1UE 
 CgwKVHV0b3JDbG91ZDERMA8GA1UECwwIU29mdHdhcmUxIzAhBgNVBAMMGnRlc3Qt 
 dHV0b3JjbG91ZC5oZXJva3UuY29tMSUwIwYJKoZIhvcNAQkBFhZibGFpckBteXR1 
 dG9yY2xvdWQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqWEjXRDo0 
 CBzoIqnpzPN6Ussf476JDX + 9uCkpaSyR6Oxarjpc55lw + Mnb9UNiBWPS6JJ / Hq2c 
 CgkGD9uu11OXRCRvsZeyJjd2YT1B + XZsXrKZVj2C2dj1r6DXzAV2G5EwWJD klaH3 
 x1uA + muPt7NZ4Dz2WNv9FMyicTTCdMhWlwIDAQABMA0GCSqGSIb3DQEBBQUAA4GB 
 AJYAgjiHyUxyeFRR2nJ3CLanjNtkzVz + Dk7pdu / p0P35YpYhE95q76xgcOFasWe2 
 + pUwxTjtQvhc0BRHjohSjiF8 + ZFLRfsPq9kmh55AFzDj7V8dzUek4yVyZRtcIdNQ 
 Gx8I5g8vJClLnHbYQlaCupVIxVZqnp7SKeeshduCsJ / 8 
 ----- END CERTIFICATE ----- 
  

有什么想法吗？

解决方案为了防止其他人得到这个错误 - 我得到了同样的错误，为我的应用程序设置了测试主机名SSL证书。

答案是：我没有添加证书首先使用的域名 - 它没有在Heroku SSL文档中说明这一点。因此，在添加证书之前：

  heroku域名：add secure.mydomain.com 
  

然后您可以添加证书：

  heroku ssl：添加ssl.crt ssl.key 
  

I am trying to generate a self-signed certificate using the instructions that Heroku suggests here: http://www.akadia.com/services/ssh_test_certificate.html

This creates sever.key and server.crt.

I then try to add them to heroku using the following command:

heroku ssl:add server.crt server.key and I get the following error

Domain name not found. Make sure the domain mycorrectdomain.heroku.com is added to your Heroku app / Key doesn't match the PEM certificate

Here is the contents of the server.crt file:

-----BEGIN CERTIFICATE-----
MIICvTCCAiYCCQDyHGnBdtovbzANBgkqhkiG9w0BAQUFADCBojELMAkGA1UEBhMC
VVMxCzAJBgNVBAgMAkNBMRIwEAYDVQQHDAlQYWxvIEFsdG8xEzARBgNVBAoMClR1
dG9yQ2xvdWQxETAPBgNVBAsMCFNvZnR3YXJlMSMwIQYDVQQDDBp0ZXN0LXR1dG9y
Y2xvdWQuaGVyb2t1LmNvbTElMCMGCSqGSIb3DQEJARYWYmxhaXJAbXl0dXRvcmNs
b3VkLmNvbTAeFw0xMTA4MDMxNzQ4NDdaFw0xMjA4MDIxNzQ4NDdaMIGiMQswCQYD
VQQGEwJVUzELMAkGA1UECAwCQ0ExEjAQBgNVBAcMCVBhbG8gQWx0bzETMBEGA1UE
CgwKVHV0b3JDbG91ZDERMA8GA1UECwwIU29mdHdhcmUxIzAhBgNVBAMMGnRlc3Qt
dHV0b3JjbG91ZC5oZXJva3UuY29tMSUwIwYJKoZIhvcNAQkBFhZibGFpckBteXR1
dG9yY2xvdWQuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqWEjXRDo0
CBzoIqnpzPN6Ussf476JDX+9uCkpaSyR6Oxarjpc55lw+Mnb9UNiBWPS6JJ/Hq2c
CgkGD9uu11OXRCRvsZeyJjd2YT1B+XZsXrKZVj2C2dj1r6DXzAV2G5EwWJDklaH3
x1uA+muPt7NZ4Dz2WNv9FMyicTTCdMhWlwIDAQABMA0GCSqGSIb3DQEBBQUAA4GB
AJYAgjiHyUxyeFRR2nJ3CLanjNtkzVz+Dk7pdu/p0P35YpYhE95q76xgcOFasWe2
+pUwxTjtQvhc0BRHjohSjiF8+ZFLRfsPq9kmh55AFzDj7V8dzUek4yVyZRtcIdNQ
Gx8I5g8vJClLnHbYQlaCupVIxVZqnp7SKeeshduCsJ/8
-----END CERTIFICATE-----

Any ideas?

解决方案

Just in case others are getting this error - I was getting the same error setting up a test hostname SSL certificate for my app.

The answer was that I had not added the domain name the certificate was for first - it does not explicity say this in the Heroku SSL docs. So before adding the cert do:

heroku domains:add secure.mydomain.com

and then you can add the certificate:

heroku ssl:add ssl.crt ssl.key

这篇关于Heroku SSL错误：密钥与PEM证书不匹配的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！