Lets encrypt cert managed by opalstack not persisting

ttavoy

What could explain the following;
Edit site, choose auto lets encrypt and encrypt all ... two sliders turn green; click on "update site" and wait a minute for system to settle;

Go back in to "edit site" and check sliders still green ... yes.

But checking again after half an hour ... slidrrs gone back to red!

sean

ttavoy there should be a message posted at https://my.opalstack.com/logs/ with the reason. If not then please email support and we'll have a look.

ttavoy

Yes there is this: "Lets Encrypt failed to generate a certificate for your site: xx. The site is served by a CDN which failed to serve the HTTP challenge." No kidding.

sean

ttavoy if you are using Cloudflare then please ensure the following settings there:

Under "SSL/TLS > Overview", set the SSL mode to "Full (strict)".
Under "SSL/TLS > Edge Certificates", set "Always Use HTTPS" to OFF. It needs to be off in order for SSL provisioning via HTTP to work on our end.

If you're using some other CDN then check for similar settings there.