ght-acme.sh

ght-acme.sh copied to clipboard

I am fairly new to this, and I am trying to get out of paying ssl fees from heroku, and I stumbled upon this. I looked up how to do it but it was all self signed and it wouldnt generate a .pem. Thank you

Sorry for answering late, I was on holiday. I am hoping that my answer is still useful. The simplest way is to generate the server key instead of generating the csr. It is the same as the creation of the account key:

# umask 0177
# openssl genrsa -out server.key 4096
# umask 0022

Then just provide to the program the key via the -k option for the sign action and provide also the list of your domain name(s).

Sorry for the later answer, there is a second way. You may use the gen-csr.sh utility as well. I just updated it, fixing some bugs.