CNAME directed to another redirected domain get an SSL handshake failed error

What is the name of the domain?

greenio_gaelduez_com

What is the issue you’re encountering

I migrated my podcast website to a new subdomain. This new subdomain is redirected thanks to a CNAME to the website hosted by my podcast provider. Everything works fine. However when I tried to add a CNAME from my old podcast website to my new website, I have a SSL handshake failed error.

What feature, service or problem is this related to?

DNS records

Being a new member I couldn’t add all the information because of the 4 links maximum in a post (and error message are transformed in link which I didn’t know…)
I tried the following things:
Unproxy the CNAME record → same error
Add a redirect rule in Cloudflare (static 301) → different error

And just to make it clear I’m trying to get the following chain of redirect using CNAME (during the migration period):
greenio_gaelduez_com → podcast_greenio_tech → domains.castplus.fm

Cloudflare is the registar for both gaelduez_com and greenio_tech. And the SSL setup on gaelduez_com is using automatic SSL/TLS (which is the encryption mode following Cloudflare’s recommendation)

CNAMEs don’t redirect, they just point at DNS records. You either need to make sure that the server and SSL certificate at the origin answer for the hostnames you are sending, or set up a Redirect Rule on Cloudflare to redirect properly from one hostname to another.

1 Like

Thank you sjr for the clarification.
Actually, I got an answer from my podcast host explaining the DNS error:
“The reason you get the SSL error for your .com redirect is because DNS rules require that every subdomain is covered by an SSL certificate on the terminating server. And there is no such SSL certificate on our server as we can only have one custom domain/subdomain per podcast. This DNS rule is in place to ensure someone couldn’t just set up their own domai/subdomain and point it to your web-based content without your permission, so it’s not something we can avoid.”
I followed your advice and I deleted the CNAME and set up a redirect rule on Cloudflare. But I still have the same SSL error…

greenio.gaelduez.com doesn’t have a DNS record…
https://cf.sjr.dev/tools/check?a68039f5653c41bb823ef85983d0d7cc#dns

If it is just to be redirected, create a proxied AAAA record pointing to 100::

Thanks a lot sjr!
I apology for wasting your time because I thuoght I had created the A and AAAA records and I didn’t.
The redirect works fine now.
Once again thanks a lot for your help.
Have a nice day

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.