SSL no CNAME found

Previously I was able to use SSL without any problems for I think 2 years and I did not change any information about Cloudflare and Infinity Free records for SSL but now I am having a problem that I cannot request it. I have tried deleting records in Cloudflare and clearing all cache and also tried deleting SSL request to request again several times and now it has been waiting for more than 3 days. Now I don’t know what to do.

Maybe this is better for you?

This was likely caused by using CloudFlare

5 Likes

Sure, I’ve actually been using Full (strict) for a long time now. At first I thought it was Cloudflare’s SSL, so I switched to Flexible and tried, but it still didn’t work, so I went back to Full (strict) again.

Sure, I’ve actually been using Full (strict) for a long time now. At first I thought it was Cloudflare’s SSL, so I switched to Flexible and tried, but it still didn’t work, so I went back to Full (strict) again.

Read again

5 Likes

Full (Strict) is not what is recommended here.

What is recommended is Full (without strict).

5 Likes

No problem, I can set it to Full + Purge Everything and delete the certificate request first, then request again in 1-3 hours and I will come back and tell you again.

If you have read the article you’ll know the point to use full is that you can then profit from the generic self signed ssl the hosting platform gives without needing to request a ssl from let’s encrypt or whatsoever.

You don’t need to wait 1-3 hours. Your site should work right away.

6 Likes

The problem here is that Cloudflare provisions hidden TXT records on their end to be able to obtain their own SSL certificates. These are the SSL certificates used to secure the connection between your visitors and Cloudflare.

Changing the SSL mode only controls if the connection between Cloudflare and our servers is encrypted. It’s completely unrelated to the issue you’re having. Using Full Strict SSL works fine, provided that you have a valid SSL certificate on your hosting account. But Cloudflare is making that part complicated.

I think that these are your options:

  • Switch from Full Strict mode to regular Full mode, and delete the currently installed certificate. The connection between Cloudflare and our servers will be encrypted using a self-signed certificate from us.
  • Wait for Cloudflare to remove the TXT records on their end so you can obtain your SSL certificate from us. My guess is that it might take a few days, but that’s just a guess.
  • Contact Cloudflare for further assistance. They are overruling your own DNS records, after all.

In any case, there is nothing we can do to fix this from our end.

7 Likes

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.