DNS Certification Authority Authorization (CAA) is SSL security policy which allows a domain name owner to betoken which Certificate Authorities (CAs) are permitted to upshot certificates. If You run the SSL Labs Analyzer on your domain name, and yous will get a DNS CAA Issue. This consequence will decrease your SSL certificate trust and also yous can meet a negative impact on your site. So If You want to make DNS CAA event & desire to A+ written report that only read this uncomplicated article.
Certificate Authority Authorization (CAA) is a mode for your domain to whitelist the CAs you lot are really using so yous tin minimize your take chances from safety vulnerabilities inward all the others.
After solving this effect
- Increase SSL trusted degree
- SSL volition operate perfectly
- Traffic as well increase
Before the commencement, yous should exam your site SSL. To discover out your site take or not DNS CAA effect, simply function a exam hither:
https://www.ssllabs.com/ssltest/analyze.html?d=domain.com&latest
if your site has the DNS CAA problem and then it volition demonstrate similar this:
How to make DNS CAA consequence
DNS CAA effect is real easy to solve. Just You postulate to add a CAA Entry inward your domain DNS. But earlier, You must know near your SSL certificate provider. nosotros got our SSL certificates free from Letsencrypt.
The weblog yous currently read is hosted on DigitalOcean. together with the domain is from Godaddy
So, I’ll explain to y'all how to enable your CAA DNS setting based on these prerequisites. The process is the same for any other SSL seller as well as DNS service.
Read More for SSL( https) errors together with how to solve it
How To Setup SSL And HTTPS inward WordPress Blog or Site
Step one — Find CAA Record Creation Page
Goto your domain bring up provider, log inwards to the site too goto to DNS direction together with create a CAA tape
Step two — Create CAA Record
→Letsencrypt SSL User
If you are using Letsencrypt. then yous should come in this tape type
- HOSTNAME
To utilise this record to the entire domain, type. @ - Value
Here, Enter the value of the CAs you would similar to enable for letsencrypt letsencrypt.org ( Note: For the Certificate Authority, y'all enter the domain like comodoca.org as well as Tag will live issuewild ) - TAG
Type Issue if yous desire to enable Wildcard certificates for this domain - FLAGS
We’ll have the default of 0. - TTL (SECONDS)
Leave a default of 1 hr or 3600
See The screenshot below:
and so click on Save as well as yous are done.
Now you lot tin can cheque your
Cloudflare SSL user
Cloudflare SSL user no call for to add together whatsoever type of DNS CAA value because it is automobile assault your domain bring up.
Conclusion
In this tutorial, you lot can easily cook your DNS CAA issues as well as likewise it will aid to increment y'all ssllab examination rating. So If you accept more than outcome with SSL certificate only comment hither I will endeavour to solve your job. Please share too comment. hope it volition assist y'all.
Comments
Post a Comment