Has anyone received this error while working with ...
# developersm
Malavica Sridhar
03/31/2022, 4:03 PMHas anyone received this error while working with Heroku and was able to resolve. cc: @Siddartha Kopparapu
Copy code
<https://next-auth.js.org/errors#client_fetch_error> request to <https://www.example.com/api/auth/session> failed, reason: Hostname/IP does not match certificate's altnames: Host: <http://www.example.com|www.example.com>. is not in the cert's altnames: DNS:*.<http://herokuapp.com|herokuapp.com>z
zomars
03/31/2022, 4:06 PMI think @Agusti can know more
m
Malavica Sridhar
03/31/2022, 4:08 PM@Agusti can you help? This is preventing our users from logging in 😩
a
Agusti
03/31/2022, 4:21 PMHey there, have never run cal on heroku but seems like a missing .env var.
Agusti
03/31/2022, 4:23 PMNextauth url should be http://yourdomain:port . Do you have a domain setup or an aliad from heroku
Agusti
03/31/2022, 4:23 PMWell https*
s
Siddartha Kopparapu
03/31/2022, 4:24 PMyes we have setup domain
a
Agusti
03/31/2022, 4:24 PMExample.com is a placeholder domain. Thats why the ssl call fails Im guessing
s
Siddartha Kopparapu
03/31/2022, 4:24 PMNo we just masked our domain here
Siddartha Kopparapu
03/31/2022, 4:24 PMwe are getting error with our domain only
a
Agusti
03/31/2022, 4:24 PMLet me check the env vars
Agusti
03/31/2022, 4:25 PMhttps://github.com/calcom/cal.com/blob/main/.env.example
# Required for Vercel hosting - set NEXTAUTH_URL to equal your BASE_URL
# NEXTAUTH_URL='http://localhost:3000'
NEXTAUTH_URL=
Agusti
03/31/2022, 4:25 PMTry setting NEXTAUTH_URL=https://yourdomain.com
m
Malavica Sridhar
03/31/2022, 4:25 PM@Siddartha Kopparapu
a
Agusti
03/31/2022, 4:25 PMIn the heroku admin panel for env vars, and restarting the service
s
Siddartha Kopparapu
03/31/2022, 4:26 PMThat is already done @Agusti
a
Agusti
03/31/2022, 4:26 PMIt's possible a reset is required for the env var to pick? Otherwise not sure why it's calling to example.com
Agusti
03/31/2022, 4:27 PMIt's possible that is set as your hostname somewhere in heroku? Again has been a while last time I deployed in heroku sorry!
Agusti
03/31/2022, 4:27 PMSorry
s
Siddartha Kopparapu
03/31/2022, 4:27 PMmessage: "request to https://www.mynorthstarre.com/api/auth/session failed, reason: Hostname/IP does not match certificate's altnames: Host: www.mynorthstarre.com. is not in the cert's altnames: DNS:*.herokuapp.com" is the error we are getting
a
Agusti
03/31/2022, 4:27 PMdid you change example.com
Agusti
03/31/2022, 4:27 PMOkay gotcha now
Agusti
03/31/2022, 4:27 PMI think what you're missing is a SSL certificate issued to your domain
Agusti
03/31/2022, 4:27 PMInstead of re-using the ones from heroku, which are only authorized in heroku subdomains
Agusti
03/31/2022, 4:28 PMLet's encrypt acme is usually the go to way for this, not sure with heroku how that would go https://letsencrypt.org/docs/client-options/
Agusti
03/31/2022, 4:29 PMm
Malavica Sridhar
03/31/2022, 4:36 PMthanks agusti! have you done this with a google domain before? we are unable to download the google domain certificate .crt and .key for the manual uplaod
Malavica Sridhar
03/31/2022, 4:46 PMany chance you can hop on a video call? i know this isn't your job but we're really blocked right now and need someone to help us get past
a
Agusti
03/31/2022, 4:56 PMHey malavica, not really never used google domains. So usually I know how to do this on a VPS only. I think if you're running in heroku your options are
a) if you're on a free dyno, use heroku subdomain
b) on a paid dyno, use heroku ssl manager.