SSL generation stuck permanently

Hi!

I’ve had this website for more than a year now and it was working properly. 2 months ago the SSL certificate expired and now I’m getting a “net::ERR_CERT_DATE_INVALID” error when I try to enter the website via the domain. If I use the auto generated long id that vercel provides, I can access the site without any problems.

When I go to the domains section of my project, I noticed the “Generating SSL Certificate” was stuck. I did a little research and found out that this may be a problem with how my DNS records are set.

A few days back I configured the DNS records in squarespace as the AI assistant and the vercel guides specified and now, on the domain section of the project I do get a note that states " Good news! Your DNS records are set up correctly, but it can take some time for them to propagate globally." Although I’m not entirely sure because the DNS checker tools online do show configuration problems.

I also tried transferring in my domain from squarespace. I got the transfer code, deleted the domain from vercel, but got an error stating I already had the domain even though I couldn’t find anywhere else on vercel.

The domain is whalecomm.io

I know something’s probably wrong with my DNS records but don’t know exactly what that is. I’d really appreciate any help you could provide. Thanks

The domain troubleshooting guide can help with most custom domain configuration issues. You might be able to use that guide to solve it before a human is available to help you. Then you can come back here and share the answer for bonus points.

You can also use v0 to narrow down the possibilities.

Hey there,

As you stated correctly, we don’t see any DNS record returning by your domain. Could you share more details about what DNS record you have set? Here is the expected value: Troubleshooting domains

2 Likes

Hi Swarnava, thank you for responding.

I checked the Troubleshoot guide but I’m still unsure as to what it is that I’m doing wrong.

I remembered I have another vercel account that used to host the website and realized it had the domain added as well (although the verification was pending). Since I probably had TXT DNS records that belonged to that old vercel account, I removed all the DNS records from squarespace, removed the domain from the old vercel account, removed and added the domain to the new vercel account and then finally added the DNS records that vercel asked for in squarespace to verify the domain property. This is what my Squarespace and Vercel accounts look like right now (attached). Thanks for any help/recommendations you may have.


It looks like Squarespace isn’t your DNS host at the moment, but Google Domains. Oh wait, is that because Squarespace purchased Google Domains?

Anyway, DNS records for the root and www subdomain seem to be set properly but are patchy. DNS changes usually take 24-48 hours to reflect across the internet, but can really depend on various factors as there are various parties in the network infrastructure.

I think waiting is your best bet or you might want to switch to a different DNS host that’s more performant.

1 Like

I looked up DNS records as Cloudflare, Google and Qua9 resolvers and none of them see it yet:

(base) ➜  ~ dig -t NS whalecomm.io +short @1.1.1.1
(base) ➜  ~ dig -t CNAME www.whalecomm.io +short @1.1.1.1
(base) ➜  ~ dig -t NS whalecomm.io +short @8.8.8.8
(base) ➜  ~ dig -t CNAME www.whalecomm.io +short @8.8.8.8
(base) ➜  ~ dig -t NS whalecomm.io +short @9.9.9.9
(base) ➜  ~ dig -t CNAME www.whalecomm.io +short @9.9.9.9

Waiting for the changes would be advised, but you can also contact Squarespace customer service to confirm if everything is okay in terms of their DNS zone.

1 Like

Appreciate you for jumping in, Aruns!

Thank you Aruns, I appreciate the help!

Right now it’s been 24 hrs since I made the changes. As you said, I still see some DNS records patchy. I’ll wait another 24 hours and see if something changes. Thanks!

1 Like

Hi everyone,

The SSL generation is still stuck and my site is still showing the same error message.

I do see that the DNS records are still not propagated worldwide, and this is most probably the cause. What I find kind of strange is that it’s been almost 3 days since the DNS records were set and in my experience they should’ve propagated fully by now. Maybe there’s something wrong with my setup?

Is there anything else that might be worth trying? Thanks in advance,

You need to contact Squarespace (or Google incase they still own it) to find more information on this. Since we don’t own the domain or Nameserver, we don’t have further evidence why the DNS is still not being propagated.

It’s probably a good idea to delegate DNS management to Vercel. Have you tried that?

2 Likes

Thank you both!

I just added the Vercel Nameservers in squarespace. To verify property Vercel is asking me to add a TXT DNS record.

This is probably a very basic question but I can’t seem to find where in Vercel I can manage the DNS records. I tried following this guide, but the domains section of my account is empty. I tried adding the domain but I get an error stating that it’s already in use by one of my projects (which it is, but I should see it in the general domains sections, shouldn’t I?). If I go to my project’s settings, I do see the domain, but there’s no section to manage the DNS records. Am I missing something?

Thanks in advance.





Unfortunately, I am not sure because I haven’t used Vercel DNS myself. I usually point to Vercel using A records and CNAME records, instead of deleting the full DNS management.

Hi everyone,

Just to let you know that the issue has been fixed.

After waiting for 24 hours with Vercel’s nameservers and not being able to verify property and add custom DNS records, I decided to roll back to Squarespace’s Nameservers. After I did, I changed the TTL response time from 4 hours to 30 minutes, other than that I didn’t change anything else.

For some reason this switch back to squarespace and/or TTL time adjustment made the magic and the SSL certificates were generated successfully. Now the web is up and running.

This is how it looks now:



Thank you for all the help and tips!

1 Like

Thanks for looping back, Abpal! See you around the community :slight_smile:

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.