Heroku ssl 证书未与自定义域切换答案

【问题标题】：Heroku ssl certficate not switched with custom domainHeroku ssl 证书未与自定义域切换
【发布时间】：2016-05-24 16:11:29
【问题描述】：

我有一个 Heroku 应用程序 (whatever-app-11123)，我想通过 ssl (https://myapp.co) 使用自定义域。我已经购买了证书并遵循了 heroku 提供的所有说明。奇怪的是，https://whatever-app-11123 显示的是 myapp.co 证书，https://myapp.co 显示的是 *.herokuapp.com 证书。

我需要反过来：带有 myapp.co 证书的 myapp.co。

关于如何实现这一点的任何提示？

不同命令的结果：

herok:证书

Endpoint                           Common Name(s)                            Expires               Trusted
---------------------------------  ----------------------------------------  --------------------  -------
whatever-app-11123.herokuapp.com  myapp.co, www.myapp.co  2017-02-12 23:59 UTC  True

curl -kvI https://www.myapp.co

* Adding handle: conn: 0x7fbd03804000
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x7fbd03804000) send_pipe: 1, recv_pipe: 0
* About to connect() to www.myapp.co port 443 (#0)
*   Trying 46.132.168.142...
* Connected to www.myapp.co (46.132.168.142) port 443 (#0)
* TLS 1.2 connection using TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
* Server certificate: *.herokuapp.com
* Server certificate: DigiCert SHA2 High Assurance Server CA
* Server certificate: DigiCert High Assurance EV Root CA
> HEAD / HTTP/1.1
> User-Agent: curl/7.30.0
> Host: www.myapp.co
> Accept: */*
> 
< HTTP/1.1 302 Found
HTTP/1.1 302 Found
* Server Cowboy is not blacklisted

< 
* Connection #0 to host www.myapp.co left intact

【问题讨论】：

标签： ssl heroku

【解决方案1】：

答案如下：检查您的 DNS 重定向。确保它是 CNAME 类型，并且大部分（我做错了什么）重定向应该是：

www.myapp.co -> whatever-app-11123.herokuapp.com 
myapp.co -> whatever-app-11123.herokuapp.com

而不是

www.myapp.co -> myapp.co
myapp.co -> whatever-app-11123.herokuapp.com

【讨论】：