Skip to content

Latest commit

 

History

History
49 lines (38 loc) · 1.74 KB

readme.md

File metadata and controls

49 lines (38 loc) · 1.74 KB

Add the ClearDB SSL Certs to your ENV Variables instead of including them in the project.

Usage:

  1. Download the ClearDB SSL Certificates (ClearDB CA Certificate, Client Certificate, Client Private Key)

  2. Remove the client PK certificate password:

    openssl rsa -in cleardb_id-key.pem -out cleardb_id-key-no-password.pem

  3. Delete cleardb_id-key.pem just for ensure you will not use this cert:

    rm cleardb_id-key.pem

  4. Place the certs inside the vars in Heroku:

    heroku config:set CLEARDB_SSL_CA_CERT="$(cat cleardb-ca.pem)"
heroku config:set CLEARDB_SSL_CLI_CERT="$(cat cleardb_id-cert.pem)"       # Replace cleardb_id with your cleard id.
heroku config:set CLEARDB_SSL_KEY="$(cat cleardb_id-key-no-password.pem)" # Replace cleardb_id with your cleard id.

  5. Add the following params to Heroku $DATABASE_URL: Do not replace the cleardb with your id here

    • sslca=cleardb-ca-cert.pem
    • sslcert=cleardb-cert.pem
    • sslkey=cleardb-key.pem

    If your DATABASE_URL is:

    mysql2://1234567890:1234567890@us-cdbr-east-00.cleardb.net/heroku_1234567890?reconnect=true

    It should stay: Again: Do NOT replace the cleardb with your id here

    mysql2://1234567890:1234567890@us-cdbr-east-00.cleardb.net/heroku_1234567890?reconnect=true&sslca=cleardb-ca-cert.pem&sslcert=cleardb-cert.pem&sslkey=cleardb-key.pem

    You can do this just by running:

    heroku config:set DATABASE_URL="$(heroku config:get DATABASE_URL)&sslca=cleardb-ca-cert.pem&sslcert=cleardb-cert.pem&sslkey=cleardb-key.pem"

  6. Delete the certs you downloaded and created.

  7. Add https://github.com/tagview/heroku-cleardb-env2ssl-buildpack to your .buildpacks

  8. Deploy the app to heroku.