Hi Ahmed here . After the domain ceritifcate is updated automatically by cloudflare today some of ou

Hi Ahmed here .
After the domain ceritifcate is updated automatically by cloudflare today some of our clients are not able to access our domain saying the certificate was not issued by trusted authority does anyone what can be the issue

Ahmed QadeerOP•3/2/24, 6:58 PM

This is the error they are getting

Isaac McFadyen•3/2/24, 7:00 PM

This is an incredibly old system and is likely due to the fact that Cloudflare issues certificates compatible with modern hardware using services such as Google Trust Services and Lets Encrypt.

Isaac McFadyen•3/2/24, 7:01 PM

I expect that OS to be so old that the certificate that is issued by Cloudflare is just not usable with that OS at all.

AAhmed Qadeer Hi Ahmed here . After the domain ceritifcate is updated automatically by cloudfl...

Hello, I’m Allie!•3/2/24, 7:02 PM

Hey, just removed your screenshot, since it appears to have included some personal information that you may not wish to share

Ahmed QadeerOP•3/2/24, 7:04 PM

sorry

Ahmed QadeerOP•3/2/24, 7:13 PM

Ahmed QadeerOP•3/2/24, 7:13 PM

this is the certificate info when i hit from browser

Ahmed QadeerOP•3/2/24, 7:14 PM

its successfully validated on chrome

Ahmed QadeerOP•3/2/24, 7:14 PM

but not from ibm websphere

Erisa•3/2/24, 7:15 PM

https://developers.cloudflare.com/ssl/reference/browser-compatibility/

Cloudflare Docs

Browser compatibility · Cloudflare SSL/TLS docs

Review information about browser compatibility for the different Cloudflare SSL/TLS offerings.

Unsmart•3/2/24, 7:15 PM

damn ibm websphere is older than me

Erisa•3/2/24, 7:16 PM

You may need to issue an Advanced Cert from a different CA or upload a Custom Cert, both are paid features. The free Universal SSL is not designed to support old clients

EErisa You may need to issue an Advanced Cert from a different CA or upload a Custom Ce...

Ahmed QadeerOP•3/2/24, 7:18 PM

okay i can do that but is it possible that it was working from some years and suddenly gets updated and stops working on them

Erisa•3/2/24, 7:19 PM

It was probably using digicert before, which was deprecated

Erisa•3/2/24, 7:20 PM

https://developers.cloudflare.com/ssl/reference/migration-guides/digicert-update/

Cloudflare Docs

DigiCert update · Cloudflare SSL/TLS docs

In the latter half of 2023, Cloudflare will begin deprecating DigiCert as a Certificate Authority available for a variety of certificates:

Ahmed QadeerOP•3/2/24, 7:24 PM

okay great thanks let me check it

Ahmed QadeerOP•3/2/24, 7:40 PM

i have changed the advanced certificate from lets encrypt to google

Ahmed QadeerOP•3/2/24, 7:40 PM

lets see if it works

Erisa•3/2/24, 9:55 PM

Just the 1,200/5min global rate limit https://developers.cloudflare.com/fundamentals/api/reference/limits/

Erisa•3/2/24, 9:56 PM

Enterprise customers can also contact Cloudflare Support to raise the limit to a higher value.

on that doc

Erisa•3/2/24, 9:57 PM

You can specify more than one URL in each request but if youre hitting the global ratelimit with that maxed out then yeah there's not really anything you can do

Erisa•3/2/24, 10:17 PM

¯\_(ツ)_/¯

Chaos_02•3/3/24, 1:06 AM

Hey, is this the correct discord to help me debug some web-service that won't work anymore with proxy on the DNS record enabled?

chientrm.com•3/3/24, 2:40 AM

when I

fetch

fetch

inside my SvelteKit to another endpoint of the same app on Pages, why does CF add pviate=Set-Cookiepviate=Set-Cookie to my api response headers tho

chientrm.com•3/3/24, 2:40 AM

Walshy•3/3/24, 2:43 AM

That's not Cf

WWalshy That's not Cf

chientrm.com•3/3/24, 2:44 AM

I fetch the same api endpoint from browser, the response is without private=Set-Cookieprivate=Set-Cookie, also I don't have part in SvelteKit app that setCookie anywhere

Walshy•3/3/24, 2:44 AM

Doesn't mean it's CF :p

Walshy•3/3/24, 2:45 AM

From a quick look from Google, it's Svelte

Trying to find the actual code though

Walshy•3/3/24, 2:48 AM

Ok so

SvelteKit's CF adapter imports and uses worktopworktop

https://github.com/sveltejs/kit/blob/main/packages/adapter-cloudflare/src/worker.js#L68
worktopworktop adds this here: https://github.com/lukeed/worktop/blob/master/src/cache.ts#L23

Walshy•3/3/24, 2:48 AM

Either way, CF wouldn't cache if there's a Set-Cookie here, so it seems to be doing the same effect just differently.

WWalshy Either way, CF wouldn't cache if there's a Set-Cookie here, so it seems to be do...

chientrm.com•3/3/24, 2:49 AM

the

cf-cache-status

cf-cache-status

was HITHIT but I think the private=Set-Cookieprivate=Set-Cookie cost me another request to PagesPages

chientrm.com•3/3/24, 2:50 AM

according to the code

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

if (isGET && isCacheable(res)) {
  if (res.headers.has('Set-Cookie')) {
    res = new Response(res.body, res);
    res.headers.append('Cache-Control', 'private=Set-Cookie');
  }
}

It only add private=Set-Cookieprivate=Set-Cookie when there is a

Set-Cookie

Set-Cookie

header

Walshy•3/3/24, 2:51 AM

Yup, you sure you ain't getting one back?

Walshy•3/3/24, 2:51 AM

I can't see it being removed but I'm guessing it is being?

WWalshy Yup, you sure you ain't getting one back?

chientrm.com•3/3/24, 2:53 AM

uhm, I can't tell, there was a request to my

/api

/api

endpoint, I added some

console.log()

console.log()

in there.
The first request there was some logslogs but after that there is none

So that there was a request to that

/api

/api

but I can't tell if it was cached response or not

WWalshy Yup, you sure you ain't getting one back?

chientrm.com•3/3/24, 2:54 AM

I'm sure there was no cookies.setcookies.set anywhere else from my authentication endpoint

Walshy•3/3/24, 2:54 AM

If you curl the endpoint yourself, get any cookies?

Walshy•3/3/24, 2:54 AM

I'm wondering if it's a good old __cf_bm

WWalshy If you curl the endpoint yourself, get any cookies?

chientrm.com•3/3/24, 2:57 AM

this is when I

curl

curl

directly from terminal

Walshy•3/3/24, 2:57 AM

No set-cookie?

WWalshy No set-cookie?

chientrm.com•3/3/24, 2:57 AM

absolutely not

Walshy•3/3/24, 2:58 AM

I'm gonna say @James broke something

MattIPv4•3/3/24, 2:58 AM

Sounds right

Hi Ahmed here . After the domain ceritifcate is updated automatically by cloudflare today some of ou

Similar Threads

Similar Threads

Similar Threads