My website is not running due to SSL support

The browser is showing following message:

alfajr.edu.pk uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH

Project Id : b6cc4be2-8e74-4e70-9c8e-5f284f0ff582

can you show us what you have in the domains of the service and show us what DNS settings you have in your domain provider

sure

and the domains in railway?

missing tick sign on alfajr.edu.pk

the no tick is normal, your app now runs behind a proxy, there's no way for railway to validate the DNS settings, this however should not matter
how long ago did you add the domain to railway?

It was running correctly from the previous two days, on this morning it is showing me this error

very odd, I will flag the team to see if they can rerun the cert gen for you, in the mean time, update us if anything changes please

OK thanks for your support

Thread has been flagged to Railway team by @Brody.

Any update on this issue?
???
Anyone to help?
??

This is a community-driven help channel
Be patient, or upgrade you account to Pro and get the email support.

OK

@rayofbytes - hey could you trigger a cert regen?

Did you change any of your DNS settings? You don't have a valid CNAME record

I get cloudflare ip's when I dig the domain, they're using the proxy so that's normal, is their cname they used not valid?

there's no cname at all
oh it's CF

yeah that's normal as far as I'm aware

could you try toggling the orange cloud on and off again?

ok let me check
you mean proxy status off and dns only
?

correct

I ve changed it to dns only

now try again
it should just re-kick the process after you toggle the proxy

ve changed it to proxy again

it'll continue working 🙂

we'll see about that in 90 days

still not working

that'd likely be your browser cache

let me check after clearing my browser cache
not working
after clearing browser cache, with incognito, on my mobile , on edge , showing the message of insecure connection
I have only Cname record on my cloudflare , should I include A record to work it properly or only cname is ok?

do not use any A records, railway only provides cnames

ok

this is my domain server

your DNS settings are fine, let's just wait to hear back from ray

Thanks

what's your SSL setting in CF? Is it set to full?
https://docs.railway.app/deploy/exposing-your-app#provider-specific-instructions

It is set to full (strict), let me check

you want to set it to just full

ok let me change it

changed

Did you make any additional changes? It appeared to work for me after you turned proxying off.
If it's still not working, try starting the process again:
- Remove domain from your Railway service
- Remove domain from Cloudflare
- Add custom domain on Railway
- Follow instructions, add domain to CF -> turn off orange cloud
- Clear browser cache

Ok, I have not changed anything, let me turned off the proxying and then test it and if it not works then I will follow your instructions
It is working fine after turning the proxy off on cloudflare
Thank you very much for the help sir

My website is running ok now but if I want to set email with google workspace, the railway app show me these messages on my domain as shown in the figures , is it ok to set the google workspace email with these settings?

I'm not sure what this has to do with your email?

My website is running with proxy settings off on cloudflare but if I on the proxy, website stops running thats why I am thinking about email cname settings, lets c what happend when I set my emails

alright let me know how that goes

Yes of course