Well, I don’t have origin certificates, for that I’m using flexible. I also enabled flexible for a lot of clients, this is the first time I’m getting this issue.
I have disabled universal SSL, waited 5 mins and re enabled it, now dig TXT _acme-challenge.bleif.com.ar lists the correct records and keys, but still pendoing txt validation
Did something changed in CF in the past month? Is still possible to get flexible SSL enc? (without SSL on origin)
Thanks @sandro ! I already know that, but I can’t get the origin to get SSL protected, so my only choice for many clients is to get flexible CF enc. In this case, it’s stuck in validating TXT records, that, as far as I can tell, are already present.
Why can’t you get a certificate? They are literally available everywhere.
The issue is that you keep all your clients’ sites insecure because you force them onto HTTP. Do they know about that? Configuring a certificate is a matter of seconds, so you should really fix that first.
Please focus in the current issue, ¿can you help me to get Pending Validation (TXT) working? If no, thanks a lot for your suggestions.
I really appreciate your time as a MVP, but currently I need this particular issue fixed, which, by the way, is the first time I face this in 10 years working with CF services.
But that is the current issue. You want your site on HTTPS, right? With your settings it isn’t and that’s what you need to fix. That starts with the server certificate and once that works, we can check anything else. Hence it is important to first fix that.
On the other, if you do not need SSL, switch the encryption mode to Off and you should not run into validation issues, as SSL won’t be required any more.
Well, in this specific client the hosting CP allows me to manually install certificates, but here in argentina that’s very rare. Most of the hosting providers sells you the SLL cert and don’t allow you to manually install your own cert.
Yes, some hosts do that, but in that case it’s best to switch host as a host should always provide you with the ability to confgure your own certificate and most hosts do that.
As for the issue, can you verify if you may have to restart something, as it still seems to show an invalid certificate.
Well, this is basic shared hosting, so no access to almost anything, only a Control Panel and that’s all. After installing the cert, the hosting CP told me that the cert was successfully installed, and that’s all I can do from this end
