I couldn’t find any documentation on the web that directly covers getting a Comodo Enterprise EliteSSL working on Heroku, so here’s a quick guide.
After ordering your SSL cert, generating your CSR (guide here), and submitting it to Comodo, you’ll eventually receive your certificate after all the validation processes (listing in Yellow Pages, automated callback, etc.) has gone through – www_yoursite_com.crt
Now, you need to create a certificate chain to get it working on Heroku. Just adding your certificate you received won’t throw any errors, but it will say SSL certificate is self signed and browsers will complain. To create the certificate chain, you need Root and Intermediate certificates from Comodo. The download page is here. To save you a bit of time, download the Root certificate here and Intermediate certificate here. Once you’ve downloaded those certificates, you should have 3 files to work with: www_yourdomain_com.crt, COMODOHigh-AssuranceSecureServerCA.crt and AddTrustExternalCARoot.crt
To create a chain, simply cat them all into one file:
cat www_yourdomain_com.crt COMODOHigh-AssuranceSecureServerCA.crt AddTrustExternalCARoot.crt > certificate_chain.pem
You should then be able to add or update your certificate on Heroku (I’m assuming you already have your Heroku Toolbelt and account set up on your dev machine.)
heroku certs:update certificate_chain.crt your_private_key.key
The .key file is the file you generated when you generated your CSR. Hope this saves somebody some headaches.
Ps. If you’re adding a Comodo EV certificate, the process is more or less the same – check out this informative blogpost.
