ERR_SSL_VERSION_OR_CIPHER_MISMATCH - Edge Certificate pending validation | Cloudflare Developers | Page 1

tiny whale Oct 9, 2024, 10:17 AM

#

You possibly need to disable or reconfigure DNSSEC on both sides

alpine narwhal Oct 9, 2024, 11:39 AM

#

Alright, I just configured DNSSEC on Porkbun. I copied values from Cloudfare

#

How long should I wait? I disabled and enabled the Uniersal SSL once now

#

Okay the dashboard says

DNSSEC is pending while we wait for the DS to be added to your registrar. This usually takes ten minutes, but can take up to an hour.
I'll keep posted

alpine narwhal Oct 9, 2024, 1:52 PM

#

Doesn't help.

#

It's still pending validation

#

Should I wait longer?

#

This is my current DNS records

tiny whale Oct 9, 2024, 1:59 PM

#

the zone is in Active state right?

alpine narwhal Oct 9, 2024, 2:00 PM

#

Meaning the domain? Yes

#

It's on Porkbun.

alpine narwhal Oct 10, 2024, 6:42 AM

#

I modified all the settings. Nothing is working. Sad. 😢

alpine narwhal Oct 10, 2024, 5:22 PM

#

So I repeated the process again

Removed the cloudflare
Added the domain again
Updated the nameserver

Again same issue

#

storm vapor Oct 10, 2024, 5:24 PM

#

alpine narwhal So I repeated the process again 1. Removed the cloudflare 2. Added the domain ag...

Show your DNS Records in cf (bluring anything sensitive), it looks like you've got a wildcard cname or something

alpine narwhal Oct 10, 2024, 5:25 PM

#

#

Sadly, I don't have any wildcard record

oblique valveBOT Oct 10, 2024, 5:26 PM

#

DNS over Discord: A records

blah.blah.softinttech.org A @1.1.1.3 +noall +answer

NAME                      | TTL  | DATA          
--------------------------+------+---------------
blah.blah.softinttech.org | 300s | 172.67.137.140
blah.blah.softinttech.org | 300s | 104.21.62.168

storm vapor Oct 10, 2024, 5:26 PM

#

you've got one somewhere somehow

#

at the bottom of the dns records page, what does it say your Cloudflare nameservers are?

alpine narwhal Oct 10, 2024, 5:27 PM

#

This.

storm vapor Oct 10, 2024, 5:35 PM

#

alpine narwhal This.

Cool, so it looks like it just doesn't care about your dns settings at all. Your domain is spelled right, right? supposed to be softinttech.org misspelled w/ two t's and not softintech.org?

alpine narwhal Oct 10, 2024, 5:36 PM

#

two t is correct

#

soft int tech .org

storm vapor Oct 10, 2024, 5:38 PM

#

Thanks for confirming, this is something that would have to be escalated to support then, looks like there's a ghost dns zone overriding/it just doesn't care about yours and neither of us see anything obviously wrong with your setup. Trying to see the best way to go about that

alpine narwhal Oct 10, 2024, 6:28 PM

#

storm vapor Thanks for confirming, this is something that would have to be escalated to supp...

Cool. Looking forward!

alpine narwhal Oct 10, 2024, 7:51 PM

#

Strangely the API also doesn't return the ghost record.

storm vapor Oct 11, 2024, 1:05 AM

#

this was escalated and they reached out on the community thread asking you to make a registrar ticket to be escalated as they think it's related to that (and also a record on your apex as another thing to try)

alpine narwhal Oct 11, 2024, 3:11 AM

#

Thank you. Case ID: 01227438

#

and how to setup the apex?

alpine narwhal Oct 11, 2024, 5:02 AM

#

So they just closed the ticket, Because I'm on a free plan

oblique valveBOT Oct 11, 2024, 5:24 AM

#

DNS over Discord: A records

softinttech.org A @1.1.1.1 +noall +answer

NAME            | TTL  | DATA          
----------------+------+---------------
softinttech.org | 300s | 172.67.137.140
softinttech.org | 300s | 104.21.62.168

old night Oct 11, 2024, 5:37 AM

#

@alpine narwhal do you have an ssl certificate at the endpoint?

alpine narwhal Oct 11, 2024, 5:42 AM

#

old night <@511747787810013185> do you have an ssl certificate at the endpoint?

Yes. I have let's encrypt

old night Oct 11, 2024, 5:56 AM

#

alpine narwhal Yes. I have let's encrypt

i would double check and make sure it's actually issued and current. I had this error before and based on my research it was due to the endpoint ssl cert not being issued yet.

alpine narwhal Oct 11, 2024, 6:05 AM

#

Thanks David. Let me double check

alpine narwhal Oct 11, 2024, 6:58 AM

#

Hi @old night Yes. I removed the cloudflare and double checked. The subdomains has own SSL certificates.
The moment I turn ON cloudflare, the error comes back again

old night Oct 11, 2024, 8:23 AM

#

Ssl is set to full (strict)?

tiny whale Oct 11, 2024, 8:32 AM

#

the ssl setting won't matter for this error (though it should always be full strict regardless), the error happens because there's no edge certificate issued and there not being one issued is a cloudflare issue which is why chaika escalated it. i can only assume the ticket being closed was a mistake and I've already mentioned that on the escalation for someone to correct

old night Oct 11, 2024, 8:39 AM

#

Oh. I was mistaken. I couldn't /didn't see the whole error massage. Thanks for clarifying

tiny whale Oct 11, 2024, 8:47 AM

#

no worries

alpine narwhal Oct 11, 2024, 9:26 AM

#

Thank you

oblique valveBOT Oct 16, 2024, 9:46 AM

#

DNS over Discord: A records

softinttech.org A @1.1.1.1 +noall +answer

NAME            | TTL  | DATA          
----------------+------+---------------
softinttech.org | 300s | 104.21.62.168 
softinttech.org | 300s | 172.67.137.140

#

DNS over Discord: A records

db.softinttech.org A @1.1.1.1 +noall +answer

NAME               | TTL  | DATA          
-------------------+------+---------------
db.softinttech.org | 300s | 104.21.62.168 
db.softinttech.org | 300s | 172.67.137.140

alpine narwhal Oct 20, 2024, 4:25 AM

#

Case ID: 01227438

Cloudflare support is super slow. Things I did so far

Moved the domain name back to porkbun
Paused and Resume cloudflare
Turned of Proxy for 24 hours and enabled it
Disabled DNSEC for 24 hours and enabled it
Disabled Universal Certificate for 24 hours and enabled it
Even if the orange cloud is off, DNS checkers not showing the IP (Meaning Cloudflare is not resolving the DNS too)

Can I upgrade to Pro plan for better support? I'm losing business due to this issue

spark jackal Oct 20, 2024, 7:58 AM

#

alpine narwhal Case ID: 01227438 Cloudflare support is super slow. Things I did so far - Move...

Haved try turning off TLSv1.3 and HSTS? Or Or temporarily disable “Automatic HTTPS Rewrites” and then use HTTP to access it until a new edge certificate is enacted?

#ERR_SSL_VERSION_OR_CIPHER_MISMATCH - Edge Certificate pending validation