Question

Setting Domains in App platform with Vercel

I have my DNS management in Vercel. I have another app that i want to serve. I want to serve in subdomain. I have my app in app platform. I added CNAME record to vercel pointing to Digital Ocean App platform app domain name. After TTL( 60) i added domain to app in digitalocean. But i always get ERR_SSL_VERSION_OR_CIPHER_MISMATCH. I checked other questions and online nothing good comes out. Is there a solution for this problem?

Show comments

Submit an answer
Answer a question...

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

I added CNAME to vercel. I can see it is already propagated. It is already in the dns tool you sent. When i add domain to the digitalocean it stuck at configuring and giving ERR_SSL_VERSION_OR_CIPHER_MISMATCH still. So not proper solution from Digital Ocean

alexdo
Site Moderator
Site Moderator badge
January 3, 2023

Hello @friendlybluegreenshrimp

This error usually indicates an issue with the SSL Certificate. Are you using Cloudflare for SSL protection?

Also, DNS changes might take a few good hours in order to fully update, due to DNS cache and general DNS propagation time.

You can use our DNS tool to check if the DNS is configured properly.

https://www.digitalocean.com/community/tools/dns

Regards

Bobby Iliev
Site Moderator
Site Moderator badge
January 3, 2023

Hi there,

There has been a similar question here:

https://www.digitalocean.com/community/questions/my-custom-domain-is-showing-ssl-mismatch-error

This can happen when the CNAME isn’t yet configured before adding it to app. Our TLS certificate issuer caches the NXDOMAIN (not found) DNS record, and the TLS certificate issuing is delayed. Normally it resolves automatically once the NXDOMAIN cache expires in about 30 minutes.

Let me know how it goes!

Best,

Bobby