updated in https://gist.github.com/joncode/46ca26a497ee7b9f477a
####Step 1 $ openssl genrsa -des3 -out host.key 2048 you will be asked for a passphrase - very important to store this ####Step 2 $ openssl req -new -key host.key -out host.csr
####Step 3 You will be asked the following questions Here are example responses:
Country Name (2 letter code) [AU]:US
State or Province Name (full name)
Locality Name (eg, city) []:San Francisco
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Your Company Name
Organizational Unit Name (eg, section) []:*.yourdomain.com
Common Name (eg, YOUR name) []:*.yourdomain.com
Email Address []:[email protected]
Please enter the following ‘extra’ attributes to be sent with your certificate request
A challenge password []:
An optional company name []:
It is very important you don’t mistype anything here, as you can’t change this information without buying a new SSL certificate. ‘Organizational Unit Name’ and ‘Common Name’ must be the hostname you are using on Heroku. I highly recommend using the ‘secure.yourdomain.com’ host, as you will need to set a separate CNAME DNS record to route your secure traffic.
It is very important you don’t mistype anything here, as you can’t change this information without buying a new SSL certificate. ‘Organizational Unit Name’ and ‘Common Name’ must be the hostname you are using on Heroku. I highly recommend using the ‘secure.yourdomain.com’ host, as you will need to set a separate CNAME DNS record to route your secure traffic.