HTTPS (SSL)

[yuvaldim]

HTTPS (SSL)

[yuvaldim]

https://devcenter.heroku.com/articles/ssl-certificate-self
says:
"Though the certificate implements full encryption, visitors to your site will see a browser warning indicating that the certificate should not be trusted." which seemed a bit ridicules since it was worse than not having ssl at all simply as it brings into attention security issues. With that - self security was out of the question.

Submitted a request with ssl.com
The certificate is granted for free for 90 days which is a LOT of time in our case. In 90 days we'll already sell petabytes of storage!

CSR generation was done according to: http://www.hosting.com/support/ssl/generate-a-csr-on-a-linux-server/

[yuvaldim]

@guymguym you fooled me!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

yuvald@yuvald-VirtualBox:~/workspace/noobaa$ heroku addons:add ssl:endpoint
Adding ssl:endpoint on noobaa-node... failed
! You do not have permission to provision paid resources for noobaa-node.
! Only the app owner, [email protected], can do that.

[yuvaldim]

created the pem file manually as it wasn't provided by ssl.com:

cat www_noobaa_com.crt SSLcomAddTrustSSLCA.crt AddTrustExternalCARoot.crt > noobaa.pem

based on the following guides:
http://www.digicert.com/ssl-support/pem-ssl-creation.htm
and
https://support.ssl.com/Knowledgebase/Article/View/16/0/how-do-i-make-my-own-bundle-file-from-crt-files

[yuvaldim]

https://devcenter.heroku.com/articles/ssl-endpoint

[yuvaldim]

Done.