Universal SSL: Be just a bit more patient

by Matthew Prince.

Universal SSL

It turns out it takes a while to deploy SSL certificates for 2 million websites. :-) Even longer when you get a flood of new sign ups. While we'd hoped to have the deployment complete within 24 hours of the announcement, it now looks like it's going to take a bit longer. We now expect that the full deployment will be complete about 48 hours from now (0700 UTC). Beyond that, nothing about the plan for Universal SSL has changed and hundreds of thousands of sites are already active.

Errors you may see

In order to get through the highest priority sites first, we've prioritized provisioning the sites with the most traffic.

While you wait for your site to get provisioned, you may see a certificate mismatch error if you try and visit it over HTTPS. (Rest assured, there are no errors if you visit over HTTP.) The errors over HTTPS are expected and normal during the provisioning process. Examples of what these error looks like in various browsers (Chrome, Safari, Firefox, and Internet Explorer) are below:

Chrome

Safari

Firefox

Internet Explorer

Tracking our progress

To give you a sense of our progress provisioning Universal SSL for your sites, we've updated the alert that you see when you login to CloudFlare to show what sites have been enabled and what sites are still pending. It now looks like this:

Login alert

When the Universal SSL provisioning process is complete, we will also email all our customers. Again, at the current rate, we expect to be finished by Thursday, October 2 at 0700 UTC.

When it's working…

We apologize for the delay. We're getting new sites provisioned as quickly as we can. If you want to see what it looks like when it's working correctly, check out one of the following:

Note that on the latter of these examples you may see a mixed content warning. We expect site owners will clean these issues up by using protocol-relative URLs now that they have HTTPs support. Going forward, we also have some ideas about how we can help automatically resolve mixed content issues.

Thank you for your patience.

comments powered by Disqus