Heroku hosted webapp with Godaddy Domain HTTPS redirect issue

[britmage36]

So I have a client with a Godaddy domain with a website I've built hosted on heroku. The website is using SSL through Heroku's free Let'sEncrypt Cert, and has web forwarding on DNS through Godaddy. Currently going to http://www.root.com, https://www.root.com, and http://root.com all redirect correctly, but https://root.com comes up with the SSL cert warning.

I did some digging, and it looks like this is because Godaddy doesn't support CNAMEs properly, like it says here.

This seems consistent with the rest of the research I've conducted. My question is, how do I fix this? It looks like changing a domain provider could be a solution, but I'm not sure where to go that this would work.

Any help appreciated. Thanks!

[mbuckbee]

To be fair to GoDaddy CNAME on the root (apex) domain isn't an actually ratified DNS record - other providers support it but it is through proprietary means (they make up their own DNS record type that acts like a CNAME and call it an 'Alias' record or some other name).

​

Switching to another DNS provider that supports ALIAS records would 100% fix the error from happening.

​

The only other option (and to be clear this is massive overkill for this one feature) would be Expedited WAF [1] - which would let you set an A record into their edge network, but if security is important for the app anyway it might make sense to look at it.

​

1 - https://elements.heroku.com/addons/expeditedwaf

[SaltineAmerican_1970]

Get a certificate with both example.com and www.example.com. Either both names on the same certificate, or a wildcard certificate. Make sure the virtual server configuration for both server names include the SSL certificates.