Universal SSL certificate still isn't validated after 48 hours.

Hi there,

I've recently connected my domain (on squarespace) to cloudflare, my universal SSL certificate still isn't validated after 48 hours.

My site gives the error "ERR_SSL_VERSION_OR_CIPHER_MISMATCH" and I think this is why.

Hope someone can help me out.

Greetings,
mm6683.

˞˞˞#6683 Hi there, I've recently connected my domain (on squarespace) to cloudflare, my ...

Chaika•12/29/23, 1:22 AM

Hey

That error is related to your universal ssl not being issued.

What's your domain name?

˞˞#6683OP•12/29/23, 1:22 AM

midascloud.net

˞˞˞#6683 midascloud.net

Chaika•12/29/23, 1:25 AM

DNSSEC is enabled/configured at your Registrar, Squarespace, with an invalid configuration.

; EDE: 9 (DNSKEY Missing): (no SEP matching the DS found for midascloud.net.)

https://dnsviz.net/d/midascloud.net/dnssec/

You’ll want to either outright disable DNSSEC, or update your DNSSEC configuration with the information Cloudflare gives you:
https://developers.cloudflare.com/dns/additional-options/dnssec/

These changes to your DNSSEC Configuration can be done at your Registrar, Squarespace

DNSSEC · Cloudflare DNS docs

DNS Security Extensions (DNSSEC) adds an extra layer of authentication to DNS, ensuring requests are not routed to a spoofed domain.

˞˞#6683OP•12/29/23, 1:26 AM

Thank you, will do that.

Chaika•12/29/23, 1:27 AM

Once you get DNSSEC fixed Cloudflare should eventually retry and succeed issuing the ssl cert. You could also disable Universal SSL under SSL → Edge Certifications, wait a few minutes, re-enable to try to speed it up, otherwise Cloudflare backs off/waits longer with each failure so it may take a bit for it to retry again.

CChaika DNSSEC is enabled/configured at your Registrar, Squarespace, with an invalid con...

˞˞#6683OP•12/29/23, 1:31 AM

so the algorithm is set incorrectly (now set to PRIVATEOID) what does it need to be?

˞˞˞#6683 so the algorithm is set incorrectly (now set to PRIVATEOID) what does it need to...

Chaika•12/29/23, 1:33 AM

ECDSA / Algo 13

In the dashboard, under DNS -> Settings, you can click "DS Record" drop down to see the information you're supposed to set

˞˞#6683OP•12/29/23, 1:33 AM

Chaika•12/29/23, 2:02 AM

Nice, looks like you fixed your dnssec config and it's working and secure now. I would disable universal ssl for a few minutes and re-enable like I said as well to give issuance a kick/so that it tries again sooner, might still be a bit though since you just fixed it

CChaika Nice, looks like you fixed your dnssec config and it's working and secure now. I...

˞˞#6683OP•12/29/23, 1:05 PM

just tried to load my website, it works, and my ssl cert. is active, thx for the help

Universal SSL certificate still isn't validated after 48 hours.

Similar Threads

Similar Threads

Similar Threads