From 793a3eaeda02975491df297c971c0f51b4429fe0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Tue, 7 Aug 2018 23:47:09 +0200 Subject: [PATCH 1/2] Document expected delay on CNAME change The SSL certificate issuing takes about one hour in this case according to comment in #2652. --- docs/alternate_domains.rst | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/alternate_domains.rst b/docs/alternate_domains.rst index 63f88b98d4c..62a97118f30 100644 --- a/docs/alternate_domains.rst +++ b/docs/alternate_domains.rst @@ -53,6 +53,8 @@ This service is generously provided by Cloudflare. they do not yet allow us to acquire SSL certificates for those domains. Simply point the CNAME to ``readthedocs.io``. + If you change the CNAME, the SSL certificate issuance can take about one hour. + .. important:: Due to a limitation, a domain cannot be proxied on Cloudflare From 748248470ab45757a278ec91fdcce37ed66fdb3e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Fri, 10 Aug 2018 14:54:24 +0200 Subject: [PATCH 2/2] Document CAA setup for CNAME domain SSL --- docs/alternate_domains.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/alternate_domains.rst b/docs/alternate_domains.rst index 62a97118f30..1ff9ea7e6ae 100644 --- a/docs/alternate_domains.rst +++ b/docs/alternate_domains.rst @@ -46,6 +46,10 @@ By default, when you setup a custom domain to host documentation at Read the Doc we will attempt to provision a domain validated SSL certificate for the domain. This service is generously provided by Cloudflare. +If your domain has configred CAA records, please do not forget to include +Cloudflare CAA entries, see their `Certification Authority Authorization (CAA) +FAQ `_. + .. note:: Some older setups configured a CNAME record pointing to ``readthedocs.org``