DNS subdomain and SSL configuration

Support
1

Hello,

I have a domain from OVH ste-eulalie-nouveau-souffle.fr
i have succeeded to setup OVH and www.ste-eulalie-nouveau-souffle.fr works.

But, i don’t understand why :

  • i have “SSL not secured” by using httpS with “www” sub domain
  • i have “invalid response ERR_SSL_PROTOCOL_ERROR” by using httpS without “www” sub domain
  • i have “this site can’t provide secure connection” by using http without “www” sub domain
  • i have “redirect to https://www.ste-eulalie-nouveau-souffle.fr/” by using http with “www” sub domain

i have followed the netlify doc “secure-domains-with-https” and check other topics in support forum like “SSL configuration with OVH”

this DNS record is set :
ste-eulalie-nouveau-souffle.fr 3600 IN CAA 0 issue letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/54403714

can you help me please?

3

I’ve routed this request to our helpdesk, we’ll follow up via email.

2 Likes
4

I’m following this guide [Support Guide] Troubleshooting SSL certificate errors

I’ll let you know :slight_smile:

5

ok so

  • first, following “troubelshooting step 1” and this topic, Need help with SSL Server 99.83.190.102
    ==> it seems that i have to set only one A record with 75.2.60.5 and remove the other one 99.83.190.102

  • second, following “troubleshooting step 2”,
    - A record is ok with DNSChecker.org
    - CNAME not resolved… but i have registered this record in OVH : www IN CNAME darling-puffpuff-1ab743.netlify.app.
    - CAA Record is OK with DNS Checker

  • following “troubleshooting step 3”, no AAAA records identified in OVH

maybe i need to wait ??? TTL is usually set at 3600 second by default…

6

I’ve followed up directly via email!

7

Everything seems to be OK on my phone now :slight_smile: have you change something more than on my side?

8

"It looks like the issue is with how SSL and redirection are configured for both the root domain and the www subdomain. From what you’ve described, it seems SSL is only properly set up on https://www.ste-eulalie-nouveau-souffle.fr/, but not on the root domain (without www).

Make sure that both versions (with and without www) are added as custom domains in Netlify, and that SSL is enabled for both. Netlify typically issues SSL certificates for both domains if they’re properly configured. Also, double-check your DNS records at OVH the root domain (ste-eulalie-nouveau-souffle.fr) should have an A record or CNAME pointing to Netlify.

Finally, in Netlify settings, enable automatic HTTPS redirects and consider setting one domain as the primary (e.g., www) to force consistent redirects."

Hope this helps had a similar issue recently and this solved it for me."

9

everythings works, thank you.

so it would mean that my issue was to set up 2 ip as A records. It’s the only thing i have changed since yesterday night.
For who wants to know, you have to use 75.2.60.5 only. Be careful, my misconfiguration was suggested by Copilot sourced from the netlify forum in the topic with other IP :sweat_smile:

thx
best regards

10

Yes, we followed up with the details via email.