Heroku ssl: endpoint with GlobalSign ExtendedSSL

Question

I signed up for GlobalSign ExtendedSSL.

I just can't figure out how to add this to the ssl:endpoint addon.

When I signed up for ExtendedSSL, I had to generate a CSR certificate that has the following files:

• private-key.key
• www.domain.com_csr.pem

Once the sign was completed, GlobalSign gave me the following:

• SSL Certificate
• ExtendedSSL Intermediate Certificate
• Extended Validation Certificate

I combined the SSL certificate, the ExtendedSSL intermediate certificate, and the advanced verification certificate. server.crt. And I copied private-key.key to server.key

When I try to add it to add, I get:

 $ heroku certs:add server.crt server.key --app myapp Resolving trust chain... failed ! No valid, non-passphrase-protected keys given. 

Does anyone know what I did wrong?

Answer 1

I have found the answer.

The private key is password protected. You cannot add passwords to the hero. You can remove the password by doing:

 openssl rsa -in private-key.key -out private-key-new.key 

And then run:

 heroku certs:add server.crt private-key-new.key --app myapp