Cloudflare Developers•3y ago

Your Universal? On a new domain you just added?

CChaika Your Universal? On a new domain you just added?

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

Yep

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

usually its instant

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

like as soon as nameservers propagate

Aiden [Switched to @aidendotgg]•2/15/23, 7:34 PM

but i've seen major delay recently

ChaikaOP•2/15/23, 7:36 PM

I've never had it take more then ~30 mins or so for me, although you're certainly not the first to have issues with it taking a bit. CF says it can take "up to 24 hours", and the recommendation I usually see is just to turn it off, wait a few mins, and turn it back on
https://community.cloudflare.com/t/community-tip-best-practices-for-certificate-provisioning/44230
What is the domain?

CChaika I've never had it take more then ~30 mins or so for me, although you're certainl...

Aiden [Switched to @aidendotgg]•2/15/23, 7:39 PM

Probably not the best idea to send the domain here as its vulgar and kind of offensive

. I'll try what you said and turn it off for a bit and then turn it back on

ChaikaOP•2/15/23, 7:42 PM

I would just double check there's nothing wrong with it. Make sure your dnssec is valid (or don't have any, just make sure you don't see Bogus) https://dnsviz.net/, dig via 1.1.1.1 dig yourdomain.tld @1.1.1.1dig yourdomain.tld @1.1.1.1 and see if it resolves without dnssec/etc errors, no domain status codes like clientHoldclientHold that may be preventing dns resolution, whois yourdomain.tldwhois yourdomain.tld, just basic sanity checks

Aiden [Switched to @aidendotgg]•2/15/23, 7:44 PM

https://owner.singed.host/files/ⓣⓤⓔⓒⓒⓒⓝⓚⓕⓗ‎

Size: 9.52 KB | Upload: #27417

AAiden [Switched to @aidendotgg]https://owner.singed.host/files/ⓣⓤⓔⓒⓒⓒⓝⓚⓕⓗ‎

ChaikaOP•2/15/23, 7:45 PM

Those look fine, no dnssec problems either?

DDeleted User How to fix this?

ChaikaOP•2/15/23, 7:46 PM

Looks like you have TLS Decryption on within Zero Trust, used to inspect https traffic. You can either disable it, or install Cloudflare's root certs
https://developers.cloudflare.com/cloudflare-one/policies/filtering/http-policies/tls-decryption/

CChaika Those look fine, no dnssec problems either?

Aiden [Switched to @aidendotgg]•2/15/23, 7:47 PM

https://owner.singed.host/files/ⓛⓙⓖⓩⓩⓡⓤⓒⓨⓚ‎

Size: 11.12 KB | Upload: #27419

ChaikaOP•2/15/23, 7:48 PM

You have broken DNSSEC looks like

ChaikaOP•2/15/23, 7:48 PM

Probably had it enabled at your old DNS Host and didn't disable it when transferring

ChaikaOP•2/15/23, 7:49 PM

@skrrrtt
https://developers.cloudflare.com/dns/additional-options/dnssec/
You can disable it at your Registrar. After you disable it, you can re-enable it with Cloudflare's DNSSEC Settings (see the guide above), or keep it disabled.

Usually it's recommended you disable it before switching nameservers, switch over, wait for propagation, and then set it up, but that ship has already sailed

DDeleted User When I'm connected with this can I also connect to the Server I have also in the...

ChaikaOP•2/15/23, 7:52 PM

You can use/setup WARP Private Networking via a CF Tunnel
https://developers.cloudflare.com/cloudflare-one/tutorials/warp-to-tunnel/
or there was a beta for each device connected to WARP being able to communicate with each other, but I'm not sure what happened to that. That would require your server being connected to WARP too though, Private Networking would probably be a better fit if you want to connect to a Server

CChaika @skrrrtt <https://developers.cloudflare.com/dns/additional-options/dnssec/> You...

Aiden [Switched to @aidendotgg]•2/15/23, 7:52 PM

Yeah I don't own the domain it was a domain that someone was trying to add to my service. For some reason he bought it today and it had DNSSEC enabled but his other domains didn't https://owner.singed.host/files/ⓓⓝⓨⓑⓙⓨⓞⓧⓖⓓ‎

Size: 7.55 KB | Upload: #27421

Aiden [Switched to @aidendotgg]•2/15/23, 7:52 PM

weird, but thanks for the help

AAiden [Switched to @aidendotgg]Yeah I don't own the domain it was a domain that someone was trying to add to my...

ChaikaOP•2/15/23, 7:53 PM

That is strange, that's porkbun right? Never had an issue like that before with them.
Anyway that explains your Universal SSL problem, fix that, wait a bit (potentially could toggle on/off universal ssl to get it to retry faster), and it should issue without any problem

CChaika That is strange, that's porkbun right? Never had an issue like that before with ...

Aiden [Switched to @aidendotgg]•2/15/23, 7:56 PM

Yeah I have 80+ domains on porkbun and haven't had that ever happen to me dead

AAiden [Switched to @aidendotgg]Yeah I have 80+ domains on porkbun and haven't had that ever happen to me <:dead...

dave•2/15/23, 8:22 PM

80+?!

Ddave 80+?!

Aiden [Switched to @aidendotgg]•2/15/23, 8:25 PM

Yeah it’s for the sharex file hosting service I run. I usually only pay for first year registration besides a select few that are too good to let expire.

Aiden [Switched to @aidendotgg]•2/15/23, 8:25 PM

So it’s not that expensive I guess

Aiden [Switched to @aidendotgg]•2/15/23, 8:26 PM

I have about 260 domains on my cloudflare account

Aiden [Switched to @aidendotgg]•2/15/23, 8:26 PM

dave•2/15/23, 8:27 PM

dear lord

dave•2/15/23, 8:27 PM

I have 28, but 26 of those are purely to avoid domain squatters.

Ddave I have 28, but 26 of those are purely to avoid domain squatters.

Aiden [Switched to @aidendotgg]•2/15/23, 8:28 PM

Wdym by that?