CAA record globalsign

General
1

Hi everyone,

I’m a shopify user, today I woke up with this alert on my account:

Your domain doesn’t permit GlobalSign to provision SSL certificates
Open your domain provider’s DNS settings for example website and add a CAA record for GlobalSign.

So I contacted Shopify to see what its about and they told me to contact cloudflare. Here is what they said:

It would be best to contact your provider about this and ask why you need to add CAA because in shopify we don’t require that.

It’s strange because my site has been working fine since I started it a several months ago. So what changed? I haven’t changed anything. So what happened?

Thanks

4

I saw this yesterday as well.

So far, I have logged into Cloudflare and changed our “A” records it was set to 23.227.38.71 but we followed this guide from Shopify linked in the error message…

and pointed it to 23.227.38.65 as advised… I’m not sure how to get the CA records for GlobalSign as that seems liked a paid feature,and the error message " Your domain doesn’t permit GlobalSign to provision SSL certificates

Open your domain provider’s DNS settings for (domain) and add a CAA record for GlobalSign.

Note: DNS updates can require up to 48 hours to take effect. Learn more about common domain errors has not gone away, however, it may take 2 days to update…

1 Like
5

Normally you should not need to add CAA records. The are some situations where you may.

You can add CAA records on any plan.

1 Like
6

So, you are a shopify user too and got the error? Interesting, I’m glad I’m not the only one who has it. Mines went away a bit after I added the CAA record. But I’m not sure if I need it or not. Shopify keeps saying I do not.

7

Thanks for this, appreciate it!

1 Like
8

Would you check back here to let us know if that worked?

9

What is the CAA info that is needed for Globalsign to be added to Shopify?

10

I don’t know that you need to make any change in Shopify. You publish CAA records in your DNS.

If you don’t know what to put in your CAA record, you might try creating one with the CAA Record Helper from SSLMate.

2 Likes
11

The error went away after I added the record. And yes I used sslmate to help me. Shopify keeps insisting though that I shouldn’t need the CAA record so I just removed it to see if the error will come back. If it does I’ll just re-add the record.

1 Like
12

Use the link epic network provided, it’s the site I used.

2 Likes
13

Thanks everyone! I’ve made the two CAA enries from our domain, so name=@,and under content added the two websites… Let’s see if this works to resolve the " Your domain doesn’t permit GlobalSign to provision SSL certificates" error!

2 Likes
14

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.