SSL Certificate Renewal Not working
Hi, cloudflare has been sending me multiple emails for the past 2 weeks that look like this one.
and each time I click on the link and approve the certificate renewal.
today I opened my site and to my surprise I was unable to access it as it looks like this on firefox.
not sure what I am supposed to do now
Solution:Jump to solution
As there's no certificate yet, can you try to enable/disable Universal SSL once?
16 Replies
I have universal ssl on btw
update: I am getting the following error in this page:
CAA records block issuance. Please remove all CAA records or add records for this authority (sectigo.com)
_acme-challenge.yusuf.fyi. 300 IN NS ns1.vercel-dns.com.
_acme-challenge.yusuf.fyi. 300 IN NS ns2.vercel-dns.com.
;; Received 104 bytes from 2803:f800:50::6ca2:c0a8#53(jamie.ns.cloudflare.com) in 6 ms
You have delegated the acme-challenge away from Cloudflare, so Cloudflare can't provision certificates anymore.
I found this in my cloudflare dns page, what should I change them to?\
Delete them.
alright I deleted them
and re-approved the certificate from my email
I assume I need to wait a little bit for dns records to update
This means Vercel will no longer be able to provision wildcard certificates, but they really shouldn't need to.
But keep this in mind if you're getting problems on their end.
sure, I'll keep this issue open until the site is back up
Cloudflare tries to provision a new certificate every 4 hours, so it might take a bit.
that's okay, thanks for letting me know.
Solution
As there's no certificate yet, can you try to enable/disable Universal SSL once?
I'll do that, I also wanna mention that a bunch of new certificates appeared after I removed the acme challenge thing
That seems a bit like a bug
There shouldn't be that many backup certificates^^
and the blue one at the top appeared after disabling and re-enabling Universal SSL
Website seems to be working now.
indeed :)
thanks for the help and for coming back to check hours later
Imma close this now