Subscribe to receive notifications of new posts:

Universal SSL: Be just a bit more patient

2014-09-30

2 min read
Universal SSL

It turns out it takes a while to deploy SSL certificates for 2 million websites. :-) Even longer when you get a flood of new sign ups. While we'd hoped to have the deployment complete within 24 hours of the announcement, it now looks like it's going to take a bit longer. We now expect that the full deployment will be complete about 48 hours from now (0700 UTC). Beyond that, nothing about the plan for Universal SSL has changed and hundreds of thousands of sites are already active.

Errors you may see

In order to get through the highest priority sites first, we've prioritized provisioning the sites with the most traffic.

While you wait for your site to get provisioned, you may see a certificate mismatch error if you try and visit it over HTTPS. (Rest assured, there are no errors if you visit over HTTP.) The errors over HTTPS are expected and normal during the provisioning process. Examples of what these error looks like in various browsers (Chrome, Safari, Firefox, and Internet Explorer) are below:

Chrome
Safari
Firefox
Internet Explorer

Tracking our progress

To give you a sense of our progress provisioning Universal SSL for your sites, we've updated the alert that you see when you login to CloudFlare to show what sites have been enabled and what sites are still pending. It now looks like this:

Login alert

When the Universal SSL provisioning process is complete, we will also email all our customers. Again, at the current rate, we expect to be finished by Thursday, October 2 at 0700 UTC.

When it's working…

We apologize for the delay. We're getting new sites provisioned as quickly as we can. If you want to see what it looks like when it's working correctly, check out one of the following:

Note that on the latter of these examples you may see a mixed content warning. We expect site owners will clean these issues up by using protocol-relative URLs now that they have HTTPs support. Going forward, we also have some ideas about how we can help automatically resolve mixed content issues.

Thank you for your patience.

Cloudflare's connectivity cloud protects entire corporate networks, helps customers build Internet-scale applications efficiently, accelerates any website or Internet application, wards off DDoS attacks, keeps hackers at bay, and can help you on your journey to Zero Trust.

Visit 1.1.1.1 from any device to get started with our free app that makes your Internet faster and safer.

To learn more about our mission to help build a better Internet, start here. If you're looking for a new career direction, check out our open positions.
Universal SSLSSLSecurity

Follow on X

Matthew Prince|@eastdakota
Cloudflare|@cloudflare

Related posts

September 19, 2024 2:00 PM

How Cloudflare is helping domain owners with the upcoming Entrust CA distrust by Chrome and Mozilla

Chrome and Mozilla will stop trusting Entrust’s public TLS certificates issued after November 2024 due to concerns about Entrust’s compliance with security standards. In response, Entrust is partnering with SSL.com to continue providing trusted certificates. Cloudflare will support SSL.com as a CA, simplifying certificate management for customers using Entrust by automating issuance and renewals....