substrakt / letsencrypt-heroku

Make any Heroku application secure in just a couple of minutes.
https://substrakt.com/heroku-ssl-me-weve-come-a-long-way/
MIT License
524 stars 19 forks source link

Does not work with Free Dynos on Heroku #38

Closed OrkoHunter closed 7 years ago

OrkoHunter commented 7 years ago

Hello,

As the README states, "Heroku has started giving out free SSL options", I'm not sure if that's correct.

2017-01-01T12:46:14.004441+00:00 app[worker.1]: ---> Provisioning Heroku application with new certificate
2017-01-01T12:46:14.099025+00:00 app[worker.1]: ---> Uploading new certificate
2017-01-01T12:46:14.205924+00:00 app[worker.1]: ----> Error: {"id":"invalid_params","message":"You need to be running on either Hobby or Professional dynos to be able to use SNI SSL."}

Here is the log from my letsencrypt-heroku when I tried to run it for my app.

maxehmookau commented 7 years ago

Ah, I see. Perhaps an issue of proper wording.

The reason I mentioned this is that an SSL endpoint used to cost $20/mo on Heroku additional to any charges for the SSL certificate itself paid to whichever CA you chose.

The SSL certificate and the endpoint itself are technically free. But Heroku does have a restriction that the app must use Hobby dynos ($7/dyno/mo) or professional dynos ($25-500/dyno/mo)

There's nothing that can be done about this. It's simply a restriction of the Heroku platform. That said, you'd be more than welcome to submit a PR to make this restriction clearer in the README. Or lobby Heroku to make it available in the free tier, but I wouldn't like to guarantee how successful that would be.

niksumeiko commented 7 years ago

I'm using Heroku free dyno for our staging/testing app, before it's promoted to production running on professional dyno. Therefore, it feels like it would be helpful to have simulate absolutely equal environment for staging app. Disappointed, Heroku add this limitation.

maxehmookau commented 7 years ago

I'm not Heroku. This is a 3rd party tool which is no longer supported. Your beef is with Heroku.

prameshbajra commented 7 years ago

Ahh!! After tiresome 2 hours of trying to add SSL Certifs to Free Dynos I came to this page. How sad 🤕 . God Bless Devs 😋
and thank you @maxehmookau for clearing things out. Really helped.

shivakumars commented 5 years ago

Ahh!! After tiresome 2 hours of trying to add SSL Certifs to Free Dynos I came to this page. How sad 🤕 . God Bless Devs 😋 and thank you @maxehmookau for clearing things out. Really helped.

Me too :man_facepalming:

prameshbajra commented 5 years ago

Ahh!! After tiresome 2 hours of trying to add SSL Certifs to Free Dynos I came to this page. How sad face_with_head_bandage . God Bless Devs yum and thank you @maxehmookau for clearing things out. Really helped.

Me too

SEDLIFE

rajmondx commented 3 years ago

This is probably why heroku doesnt support HTTP/2 (most implementations of HTTP/2 are end-to-end so they require you to provide a ssl at the beginning which doesnt allow Heroku to manage the SSLs anymore but on the other hand it provides more security for our apps).