Site is enforcing HSTS but it is disabled in the SSL/TLS edge certificates tab

What is the name of the domain?

arczenpulse.app

What is the error message?

SEC_ERROR_UNKNOWN_ISSUER

What is the issue you’re encountering

Trying to access my domain that I attached Proxmox to (internal IP) but encountered an error stating that HSTS is enforced and that I cannot access my website. I was trying to add LetsEncrypt certs to proxmox, but this is in the way.

What steps have you taken to resolve the issue?

I fully realize that you might not be able to access the site, since this is for me and not out on the Internet.

Was the site working with SSL prior to adding it to Cloudflare?

No

What is the current SSL/TLS setting?

Full

What are the steps to reproduce the issue?

Add A record tied to IP, set to DNS only, no proxy.
Try to access site (this is for proxmox, but I am unsure if it is only contained to that, or it affects other records), so https://mynewdomain:8006.
Get an error stating that the site is enforced by HSTS. BUt the SSL/TLS section has it disabled, or was never enabled to begin with.

Screenshot of the error

.app is on the HSTS preload list so HTTPS is enforced by the browser.
https://hstspreload.org/api/v2/status?domain=app

2 Likes

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.