Universal SSL Pending Validation (Error)

Website, Application, Performance Security
1

What is the name of the domain?

gatekeeper.org.ru

What is the error number?

Error number not specified

What is the error message?

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

What is the issue you’re encountering

The site does not open, error ERR_SSL_VERSION_OR_CIPHER_MISMATCH. In the Edge Certificates section, the universal certificate cannot be obtained. Permanent error Universal SSL Pending Validation (Error).

What steps have you taken to resolve the issue?

  • Disable/Enable Universal SSL with an hour wait between actions
  • Remove domain from cloudflare.com and recreate

Was the site working with SSL prior to adding it to Cloudflare?

Yes

What is the current SSL/TLS setting?

Full (strict)

What are the steps to reproduce the issue?

The problem appeared on its own, there were no problems with certificates before

2

You need to get delegation of name servers changed in the parent registry, through your domain registrar.

ns51.cloudns.net
ns52.cloudns.net
ns53.cloudns.net
ns54.cloudns.net

is still the name servers in the parent registry for that domain.

2 Likes
3

Changed to aarav.ns.cloudflare.com, adele.ns.cloudflare.com according to the instructions. The error “Pending Validation (Error)” remains.

Снимок экрана_20240810_054936
Снимок экрана_20240810_0549361045×476 47.1 KB

4

Are you still seeing the same error?

What do you see (Certificate Authority, et al), when you expand the view from the above screenshot?

7

2024-08-11 03.07.10 dash.cloudflare.com 491fde7ba1a13
2024-08-11 03.07.10 dash.cloudflare.com 491fde7ba1a131665×4708 586 KB

The error remains. I made a screenshot to be more informative.

8

This may not be correct, but the problem was solved with the following API command:

curl -X PATCH "https://api.cloudflare.com/client/v4/zones/{Zone ID}/ssl/universal/settings" -H "X-Auth-Email: {you_email}" -H "X-Auth-Key: {Global API Key}" -H "Content-Type: application/json" --data '{"certificate_authority":"lets_encrypt"}'

So, in essence, I changed digicert to lets_encrypt. Thus the problem was solved.

9

Now, this is likely due to the selection of DigiCert as a Certificate Authority.

They are not (currently) issuing certificates for certain TLD’s, including “.RU”.

Edit:

Seems like you beat me to it…

Happy to hear it has been resolved now!

1 Like
10

Thanks for your help

1 Like
11

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.