Adding CAA record

I would like to Creat CAA record. but they require to turn off the universal SSL. according to the https://support.cloudflare.com/hc/en-us/articles/115000310792-Configuring-CAA-Records-

keep in mind that I added let’s certificate on the AWS instance it self.
should i really need to cancel the universal SSL in order to creat CAA record. I am thinking to just add it while the universal SSL active. some suggestion says that but no sure
do you have thought if i need to cancel the universal SSL or not ?

I’m not seeing that in that doc

2 Likes

I am sorry , here we go, check this link where it says to turn off the unvirseal ssl in order to configure CAA

It’s not worded beautifully, but it means that you don’t need to add records for the Universal SSL feature, they will do them automatically when needed. Simply add your required ones and it will work.

1 Like

Hi matteo
When I Checked in ssllabs.com
I found there is missing CCA.
Now I am thinking to add CAA record while ssl universal Is active.
Is it advised?

1 Like

For sure, CAA records that Cloudflare needs are added only after you add one CAA record (the report one usually is the first one to add).

2 Likes

I will do soon and update the results back

2 Likes